-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Description
Is there an existing issue for this?
- I have searched the existing issues
Package ecosystem
nuget
Package manager version
No response
Language version
net8.0
Manifest location and content before the Dependabot update
No response
dependabot.yml content
version: 2
registries: (...)
updates:
- package-ecosystem: "nuget"
directory: "/src"
registries:
- nuget-azure-devops
schedule:
interval: "weekly"
day: "monday"
time: "06:00"
timezone: "Europe/London"
groups:
nuget-dependencies:
patterns:
- "*"
labels:
- "nuget"
- "dependencies"
open-pull-requests-limit: 10
rebase-strategy: "auto"
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
- package-ecosystem: "docker"
directory: "/src"
schedule:
interval: "weekly"
day: "monday"
time: "06:00"
timezone: "Europe/London"
Updated dependency
No response
What you expected to see, versus what you actually saw
Recently our Dependabot pull requests have committed an obj/Debug/net8.0/WorkerExtensions/WorkerExtensions.csproj file, despite our .gitignore file containing both "obj" and "Debug" directories.
It seems like Dependabot is ignoring the .gitignore file? In the first PR this occurred in (which happened last week), I manually removed the file and then merged it in, thinking it was potentially some transient oddness. Today, the latest Dependabot PR for the repo included the file again. I don't think manually removing it each time is sustainable.
Dependabot recently upgraded our Microsoft.Azure.Functions.Worker.Sdk version to 2.0.7 and it seems this issue only started occurring after that.
Native package manager behavior
No response
Images of the diff or a link to the PR, issue, or logs
Smallest manifest that reproduces the issue
No response
Metadata
Metadata
Assignees
Labels
Type
Projects
Status