Dependabot ignores version constraint for i386 Docker image

[atc0005]

Package ecosystem

• Docker

Package manager version

• N/A

Language version

• N/A

Manifest location and content prior to update

• https://github.com/atc0005/go-ci/blob/d1aeb7e2b0317eac35f3e8d15a7908f5ddf9e80a/stable/build/alpine-x86/Dockerfile

dependabot.yml content

• https://github.com/atc0005/go-ci/blob/d1aeb7e2b0317eac35f3e8d15a7908f5ddf9e80a/.github/dependabot.yml#L174-L200

Updated dependency

• Currently using i386/golang:1.17.9-alpine3.14 (set manually), Dependabot offers i386/golang:1.18.1-alpine3.14

What you expected to see, versus what you actually saw

• expected no offer of Dockerfile update as 1.17.9 is the latest Go 1.17 image at this time (docker: bump i386/golang from 1.17.9-alpine3.14 to 1.18.1-alpine3.14 in /stable/build/alpine-x86 atc0005/go-ci#608)
• expected an update from 1.17.8 to 1.17.9 instead of 1.17.8 to 1.18.1 as docker: bump i386/golang from 1.17.8-alpine3.14 to 1.18.1-alpine3.14 in /stable/build/alpine-x86 atc0005/go-ci#601 applied (which I later manually reversed once I realized that I merged an invalid PR)

Native package manager behavior

• N/A

Images of the diff or a link to the PR, issue or logs

Current PR:

• docker: bump i386/golang from 1.17.9-alpine3.14 to 1.18.1-alpine3.14 in /stable/build/alpine-x86 atc0005/go-ci#608

Previous PR:

• docker: bump i386/golang from 1.17.8-alpine3.14 to 1.18.1-alpine3.14 in /stable/build/alpine-x86 atc0005/go-ci#601

As noted earlier, the current PR is unexpected as the version constraint should be preventing 1.18 from being offered for all but the unstable Dockerfile (different directory path, different Dependabot config block). The prior PR was incorrect as the version constraint was expected to result in an offer of an update version update for the same series (1.17.x instead of 1.18.x).

[jakecoffman]

Try setting the dependency name to i386/golang in dependabot.yml:

    ignore:
      - dependency-name: "i386/golang"

[atc0005]

@jakecoffman: Try setting the dependency name to i386/golang in dependabot.yml:

    ignore:
      - dependency-name: "i386/golang"

Thanks for the help! The suggested changes appear to work as intended.

• Update dep name for stable/build/alpine-x86 atc0005/go-ci#610
• Lower version for i386/golang Docker image atc0005/go-ci#611
  • docker: bump i386/golang from 1.17.8-alpine3.14 to 1.17.9-alpine3.14 in /stable/build/alpine-x86 atc0005/go-ci#612