dependabot / dependabot/dependabot-core
NuGet updater doesn't handle `<PackageReference>` nodes in `.props`/`.targets` files
Open
L: dotnet:nuget
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 155
Description
A `.props`/`.targets` file containing a `` node (e.g., `Directory.Build.targets`) is not updated when trying to process the relevant `.csproj` which doesn't have the node, but imports the `.props`/`.targets`.
Contributor guide
Research direction
Locate the NuGet updater entry point and reproduce the case using a .csproj that imports a Directory.Build.targets or .props file containing a PackageReference node. Add regression coverage for the imported node, then verify that the relevant dependency is updated when the project itself has no PackageReference.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- build-system, tooling
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100