Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Dependabot ignores version constraint for i386 Docker image #609

Closed
atc0005 opened this issue Apr 19, 2022 · 2 comments
Closed

Dependabot ignores version constraint for i386 Docker image #609

atc0005 opened this issue Apr 19, 2022 · 2 comments
Assignees
Milestone

Comments

@atc0005
Copy link
Owner

atc0005 commented Apr 19, 2022

Currently using i386/golang:1.17.9-alpine3.14 (set manually), Dependabot offers i386/golang:1.18.1-alpine3.14

Current PR:

Previous PR:

Summary:

The current PR is unexpected as the version constraint should be preventing 1.18 from being offered for all but the unstable Dockerfile (different directory path, different Dependabot config block). The prior PR was incorrect as the version constraint was expected to result in an offer of an update version update for the same series (1.17.x instead of 1.18.x).

@atc0005 atc0005 added this to the Next Release milestone Apr 19, 2022
@atc0005 atc0005 self-assigned this Apr 19, 2022
@atc0005
Copy link
Owner Author

atc0005 commented Apr 19, 2022

Created local GH issue for reference using notes from:

atc0005 added a commit that referenced this issue Apr 19, 2022
Follow advice from Dependabot devs to use `i386/golang` dep
name instead of generic `golang` dependency name. This is
intended to fix dependency version constraints.

refs GH-609
atc0005 added a commit that referenced this issue Apr 19, 2022
Drop from 1.17.9 to 1.17.8 in order to test Dependabot
version constraints for updates.

refs GH-609
@atc0005
Copy link
Owner Author

atc0005 commented Apr 25, 2022

Resolved by #610, confirmed working by #611 and #612.

# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

No branches or pull requests

1 participant