Search results

GitHub Actions: SHA-pinned path-based action with no version tags does not update to latest branch commit

L: github:actionsGitHub ActionsGitHub Actions

T: feature-improvementRequests to improve existing featuresRequests to improve existing features

Status: Open.

#15577 In dependabot/dependabot-core;

· lorengordon opened on Jul 14, 2026

Swift: support updating revision: (commit SHA) pinned dependencies

L: swiftSwift packagesSwift packages

T: feature-requestRequests for new featuresRequests for new features

Status: Open.

#15576 In dependabot/dependabot-core;

· frugoman opened on Jul 14, 2026

Dependabot ignores update-types.Updates everything regardles of groups or allowed types

L: dotnet:nugetNuGet packages via nuget or dotnetNuGet packages via nuget or dotnet

T: bug 🐞Something isn't workingSomething isn't working

Status: Open.

#15575 In dependabot/dependabot-core;

· veliodanev opened on Jul 14, 2026

NuGet updater fails to write a version bump for a directly-referenced Central Package Management (CPM) dependency in a large, flat multi-project solution

L: dotnet:dotnet-sdk

L: dotnet:nugetNuGet packages via nuget or dotnetNuGet packages via nuget or dotnet

T: bug 🐞Something isn't workingSomething isn't working

Status: Open.

#15574 In dependabot/dependabot-core;

· honzamichna opened on Jul 14, 2026

Corepack install/activate for a pinned engines.npm version has no signature-verification fallback for private/re-signing registries (unlike npm/yarn/pnpm command execution)

L: javascript

T: bug 🐞Something isn't workingSomething isn't working

Status: Open.

#15567 In dependabot/dependabot-core;

· broksonic21 opened on Jul 13, 2026

@dependabot rebase & recreate comment stopped working since ~29 June 2026 while using private repo

L: javascript

T: bug 🐞Something isn't workingSomething isn't working

Status: Open.

#15566 In dependabot/dependabot-core;

· franklychilled opened on Jul 13, 2026

pip graph layer omits requirements.in referenced by paired requirements-dev.in

L: python

Status: Open.

#15565 In dependabot/dependabot-core;

· hiciefte opened on Jul 13, 2026

uv: grouped update rewrites the wrong similarly-named dependency line (pillow bump clobbered pillow-heif)

L: python:uv

T: bug 🐞Something isn't workingSomething isn't working

Status: Open.

#15558 In dependabot/dependabot-core;

· eilst opened on Jul 12, 2026

pip graph command: dependency_file_not_evaluatable on standard pip-tools layered layouts (-c/-r in requirements-dev.in) since #15521

L: python

T: bug 🐞Something isn't workingSomething isn't working

Status: Open.

#15556 In dependabot/dependabot-core;

· emiliolaraop93 opened on Jul 10, 2026

Improve logging for how cooldown release date is determined

cooldown

T: feature-requestRequests for new featuresRequests for new features

Status: Open.

#15553 In dependabot/dependabot-core;

· Marcono1234 opened on Jul 10, 2026

NuGet updater: Repair-FileCasing race condition causes intermittent failures when repo clone is slow

L: dotnet:nugetNuGet packages via nuget or dotnetNuGet packages via nuget or dotnet

L: git:submodulesGit submodulesGit submodules

Status: Open.

#15552 In dependabot/dependabot-core;

· alievense opened on Jul 10, 2026

Indirect dependencies not bumped in uv.lock

L: python

L: python:uv

T: bug 🐞Something isn't workingSomething isn't working

Status: Open.

#15551 In dependabot/dependabot-core;

· sisp opened on Jul 10, 2026