dependabot / dependabot/dependabot-core

Ignores not being applied for Cargo

Open
#6,802 4 comments 0 reactions 0 assignees View on GitHub
F: dependency-ignores L: rust:cargo T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Package ecosystem

cargo

### Package manager version

cargo 1.67.1

### Language version

Rust 1.67.1

### Manifest location and content before the Dependabot update

https://github.com/apache/arrow-ballista-python/blob/main/Cargo.toml

### dependabot.yml content

https://github.com/apache/arrow-ballista-python/blob/main/.github/dependabot.yml

### Updated dependency

datafusion 18.0.0 -> 19.0.0

### What you expected to see, versus what you actually saw

It should have been ignored.

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

_No response_

### Smallest manifest that reproduces the issue

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the referenced Cargo.toml and .github/dependabot.yml files to identify the dependency and ignore rule. Then trace the Cargo update handling in dependabot-core and reproduce the datafusion 18.0.0 to 19.0.0 update. Done means the configured ignore is honored and a regression test covers this case.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
devtools, tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.