GitHub Dependabot links to the wrong app-store-server-library repo
Hi, this is a bit of an odd one. I think it’s something you might be fix, but I’m really not sure where the misconfiguration is.
GitHub Dependabot links to the Swift repo instead of this one when it makes a PR on a repo that has the Python library as a dependency.
I’ve made a demo repo where you can see the issue here: https://github.com/WFT/demo-dependabot-app-store-lib-python/pull/2
Every link in that PR leads to the wrong repo.
The current 1.4.0 version of the Python library doesn’t exist in the Swift library, but when the same version number exists in both repos it will pull changelog items from the Swift repo too. This is problematic because the changelog items won’t correspond to what has actually changed in the Python library.
Hello @WFT, not seen this before, will ask around
@WFT Could you please open another reproducer, if possible, I've received word this may be fixed
Thanks for working on this @alexanderjordanbaker ! I had dependabot rebase that PR a few times & it didn't seem to change anything so I created a new repo with same contents and got the same results: https://github.com/WFT/demo-dependabot-app-store-lib-python-2/pull/1
So it doesn't seem fixed
Holding until confirming fix, need to have a release to update dependabot
https://github.com/WFT/demo-dependabot-app-store-lib-python-2/pull/2
Latest release seems to work 🎉
Thanks!