dependabot / dependabot/dependabot-core

NuGet updater doesn't handle `<PackageReference>` nodes in `.props`/`.targets` files

Open
#9,136 1 comment 2 reactions 0 assignees View on GitHub
L: dotnet:nuget
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
155

Description

A `.props`/`.targets` file containing a `` node (e.g., `Directory.Build.targets`) is not updated when trying to process the relevant `.csproj` which doesn't have the node, but imports the `.props`/`.targets`.

Contributor guide

Open the contributing guide

Research direction

Locate the NuGet updater entry point and reproduce the case using a .csproj that imports a Directory.Build.targets or .props file containing a PackageReference node. Add regression coverage for the imported node, then verify that the relevant dependency is updated when the project itself has no PackageReference.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
build-system, tooling
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.