Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minor dependabot incompatibility #25

Open
frenchy64 opened this issue Mar 28, 2022 · 4 comments
Open

Minor dependabot incompatibility #25

frenchy64 opened this issue Mar 28, 2022 · 4 comments

Comments

@frenchy64
Copy link

Dependabot isn't finding the commit diffs between versions, not sure why: threatgrid/ctia#1225

Other deps have Changelog and Commits sections: threatgrid/ctia#1228

@frenchy64
Copy link
Author

My best guess at this point is that dependabot can't find the right git tags because they have a schema-generators- prefix.

@frenchy64
Copy link
Author

No, java.classpath works fine and has tags like that.

@gfredericks
Copy link
Contributor

What is the implication of this? (why is it a problem?)

@frenchy64
Copy link
Author

frenchy64 commented Apr 3, 2022

It's not a big deal, you just have to work a bit harder to find out the changes between the versions when bumping via dependabot.

eg., for bumping trapperkeeper from 3.1.0 to 3.2.0 it provides this link: puppetlabs/trapperkeeper@3.1.0...3.2.0

Compared to schema-generators, you get: https://github.com/plumatic/schema-generators/commits

I was hoping it was just a simple url typo or similar (for example, see this fix in test.check), but I really have no idea why this happens.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants