Skip to content

Issues: dependabot/dependabot-core

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

1,172 Open 2,506 Closed
1,172 Open 2,506 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

NPM security update job doesn't pick minimal version when it's a transitive dependency L: dart:pub Dart packages via pub L: javascript
#11152 opened Dec 18, 2024 by ryanbrandenburg
NuGet dependency solver doesn't correctly handle a minimum version that doesn't exist. L: go:modules Golang modules
#11150 opened Dec 18, 2024 by brettfo
One specific GitHub Action is never updated L: github:actions GitHub Actions T: bug 🐞 Something isn't working
#11149 opened Dec 18, 2024 by baynezy
1 task done
Support private go-registry in dependabot.yml L: go:modules Golang modules T: feature-request Requests for new features
#11148 opened Dec 18, 2024 by RobinDinkel
1 task done
Private Packages and run with Actions: Use GITHUB_TOKEN with packages read scope L: java:maven Maven packages via Maven T: feature-request Requests for new features
#11146 opened Dec 17, 2024 by hfhbd
1 task done
NuGet dependency solver incorrectly assumes the same package version as the transitive dependency. L: dotnet:nuget NuGet packages via nuget or dotnet
#11140 opened Dec 17, 2024 by brettfo
Version number of all NuGet Dependency is 0 L: dotnet:nuget NuGet packages via nuget or dotnet T: bug 🐞 Something isn't working
#11138 opened Dec 16, 2024 by samtrion
1 task done
1
Dependabot removing opencv-python dependency from poetry.lock file L: github:actions GitHub Actions L: python T: bug 🐞 Something isn't working
#11136 opened Dec 16, 2024 by onuralpszr
1 task done
Dependabot fails to update root pnpm-lock.yaml when splitting updates by directory in pnpm workspaces L: javascript T: bug 🐞 Something isn't working
#11135 opened Dec 16, 2024 by vluoto
1 task done
Issue with Terraform builtin providers L: github:actions GitHub Actions L: go:modules Golang modules L: terraform Terraform packages T: bug 🐞 Something isn't working
#11130 opened Dec 14, 2024 by BostjanBozic
1 task done
1
Convert GitHub Actions that are using immutable version tags and that are pinned to SHA's to the semver value L: github:actions GitHub Actions T: feature-request Requests for new features
#11128 opened Dec 13, 2024 by jeffwidman
1 task done
Dependabot claims that it does not support PNPM v9.11.0 L: javascript T: bug 🐞 Something isn't working
#11124 opened Dec 13, 2024 by yeikel
1 task done
9
Nuget indirect dependencies causes errors in dependabot and a false positive PR L: dotnet:nuget NuGet packages via nuget or dotnet L: go:modules Golang modules L: python T: bug 🐞 Something isn't working
#11106 opened Dec 12, 2024 by mikeKuester
1 task done
1
Support cloudbuild.yaml files for google cloudbuild L: go:modules Golang modules T: feature-request Requests for new features
#11105 opened Dec 12, 2024 by nate-selzer
1 task done
NuGet updater needs to pull all transitive packages to determine if update possible
#11103 opened Dec 11, 2024 by brettfo
NuGet updater is missing an opportunity to report dependency update not possible if source has to package in packages.config scenario
#11102 opened Dec 11, 2024 by brettfo
NuGet dependency discovery is missing an opportunity to report dependency_file_not_found
#11101 opened Dec 11, 2024 by brettfo
NuGet with packages.config has issues when MSBuild Pkg variables are used.
#11100 opened Dec 11, 2024 by brettfo
[Grouped updates] Incorrect "Skipping <dependency> as it has already been handled by a previous group" L: github:actions GitHub Actions L: go:modules Golang modules L: rust:cargo Rust crates via cargo T: bug 🐞 Something isn't working
#11093 opened Dec 10, 2024 by edmorley
1 task done
Have influence on the NODEJS version the dependabot action is taking place T: feature-request Requests for new features
#11069 opened Dec 6, 2024 by maapteh
1 task done
Version suffix should be respected L: dart:pub Dart packages via pub L: java:maven Maven packages via Maven T: bug 🐞 Something isn't working
#11068 opened Dec 6, 2024 by yeikel
1 task done
Dependabot keeps creating PRs even when disabled and commented out L: java:maven Maven packages via Maven T: bug 🐞 Something isn't working
#11057 opened Dec 5, 2024 by jsattler
1 task done
3
Go tidy not run in grouped go.mod updates L: go:modules Golang modules T: bug 🐞 Something isn't working
#11046 opened Dec 3, 2024 by ivanvc
1 task done
Dependabot ignores constraints in .yml and package.json, creating PRs for minor version updates L: javascript T: bug 🐞 Something isn't working
#11045 opened Dec 3, 2024 by lakshmimsft
1 task done
1
Lock file update fails if project is windows specific L: dotnet:nuget NuGet packages via nuget or dotnet T: bug 🐞 Something isn't working
#11036 opened Dec 2, 2024 by na1307
1 task done
1
1
ProTip! Mix and match filters to narrow down what you’re looking for.