Alfred Mazimbe
Alfred Mazimbe
> Yes, that's correct. Currently Dependabot never updates the Bundler version, and that's what will create issues here. Dependabot will upgrade the lockfile to "v2 format" but will keep "BUNDLED...
I've had a call with @jurre regarding this PR and some of what I wrote earlier has turns out to be incorrect. To avoid confusion, I'll summarise the current state...
On hold awaiting input from product about how we would like to proceed.
> I am faced with the same issue as @na1307. I maintain a relatively big set of Java-based projects that are updated weekly by dependabot in grouped pull requests. As...
> Thanks for the quick response, @amazimbe! So, if I follow you and the linked description correctly, the fact the Mockito 5.0.0 release is added to my Dependabot PRs, is...
@smcvb here is the maven issue ticket: https://github.com/dependabot/dependabot-core/issues/10798. It's unrelated to this nuget issue.