dependabot-core icon indicating copy to clipboard operation
dependabot-core copied to clipboard

Not picking up changelog from ktlint-gradle

Open ColtonIdle opened this issue 3 years ago • 1 comments

Dependabot doesn't seem to show release notes for the following project even though it contains them

https://github.com/JLLeitschuh/ktlint-gradle/releases

ColtonIdle avatar Oct 13 '20 18:10 ColtonIdle

I came here to report a completely unrelated issue. Funny to see that this was the top issue opened here. 😆

JLLeitschuh avatar Oct 13 '20 21:10 JLLeitschuh

👋 Hey there! Sorry for the glacially slow response... we've been a bit buried the past few years, and only just now starting to dig through some of our backlog.

This issue is pretty old, and we've pushed a lot of bugfixes since then... is this still a valid / reproducible issue?

Also, this is a package metadata issue... we definitely aren't perfect in our code paths for fetching metadata, but across the ecosystems we support what we've found is that reasonably frequently the problem is the underlying dependency getting bumped publishes wrong metadata.

Anyway, if you're still seeing this let us know, otherwise we should close this.

jeffwidman avatar Aug 25 '22 04:08 jeffwidman

This is still a valid issue, easily repro'd by grep'ing github for "bump JLLeitschuh / ktlint-gradle" and looking at PR's... for example:

  • https://github.com/AstroInc9/AstraIDE/pull/5

jeffwidman avatar Dec 22 '22 22:12 jeffwidman

Hope they added more folks to your team to support the great work you all are doing! =)

ColtonIdle avatar Dec 23 '22 02:12 ColtonIdle

I had a quick look at this and I see that we seem to be looking for the source repository at https://plugins.gradle.org/m2/org/jlleitschuh/gradle/ktlint/org.jlleitschuh.gradle.ktlint.gradle.plugin/11.0.0/org.jlleitschuh.gradle.ktlint.gradle.plugin-11.0.0.pom, but there's nothing about that in there. Do you know of any other plugins where the changelog is displayed fine? I do see the proper source repo at https://plugins.gradle.org/plugin/org.jlleitschuh.gradle.ktlint, but we should use something more consumable like a pom file.

deivid-rodriguez avatar Jan 12 '23 23:01 deivid-rodriguez