Grouped package update being assigned to multiple Dependabot groups #7939
Labels
F: grouped-updates 🎳
Relates to bumping more than one dependency in a single PR
T: bug 🐞
Something isn't working
Is there an existing issue for this?
Package ecosystem
Cargo
Package manager version
1.72
Language version
1.72
Manifest location and content before the Dependabot update
https://github.com/heroku/languages-github-actions/blob/e3c1fe2066215a6b20ace90150474351a885a716/Cargo.toml
https://github.com/heroku/languages-github-actions/blob/e3c1fe2066215a6b20ace90150474351a885a716/Cargo.lock
dependabot.yml content
Updated dependency
See: heroku/languages-github-actions#137
What you expected to see, versus what you actually saw
The Dependabot docs for the new grouped updates feature say:
However, we're seeing the
libcnb-data
andlibcnb-package
packages being assigned to both thelibcnb
andrust-dependencies
groups, even though they should be only seen in thelibcnb
group PR.libcnb group (correct):
heroku/languages-github-actions#120
rust-dependencies group (not correct, the libcnb packages shouldn't be in here):
heroku/languages-github-actions#137
Native package manager behavior
No response
Images of the diff or a link to the PR, issue, or logs
No response
Smallest manifest that reproduces the issue
No response
The text was updated successfully, but these errors were encountered: