-
Notifications
You must be signed in to change notification settings - Fork 38
Open
Description
Issue Description:
We are observing unexpected dependency updates in smoke tests despite having ignore conditions configured. This issue is not limited to npm but appears across multiple ecosystems.
Example Ignore Condition (Not Working as Expected):
ignore-conditions:
- dependency-name: get-intrinsic
source: tests/smoke.yaml
version-requirement: '>1.0.3'
Despite this, get-intrinsic@1.0.4 was still updated.
Expected Behavior:
Dependencies listed under ignore-conditions
should not be updated beyond the specified versions.
Areas to Investigate:
- Ignore condition processing across ecosystems
- Matching logic for dependencies
- Package manager behavior (NPM, Cargo, etc.)
- Potential caching issues
- Dependabot update pipeline handling
Next Steps:
- Reproduce the issue across multiple ecosystems.
- Validate how ignore conditions are applied.
- Identify and fix the root cause to prevent unwanted updates.
Impact: 🚨 Unexpected updates affect test stability across ecosystems.
Metadata
Metadata
Assignees
Labels
No labels