Issues

• uv: uv.toml is not fetched, so its settings (including required-version) are ignored

  L: python:uvL: python
  dependabot/dependabot-core#16849 · Filter by author gchai opened on Nov 6, 2026

• Maven: FileUpdater misses classified managed entries and adds a duplicate plain entry when a plain entry is listed first

  L: java:maven
  dependabot/dependabot-core#16842 · Filter by author v-kbukum1 opened on Nov 6, 2026
  

• GitHub Actions: Dependabot proposes a downgrade from a floating major tag to an older semver release

  L: git:submodulesL: github:actionsL: javascriptL: pythonL: rust:cargoT: bug 🐞
  dependabot/dependabot-core#16834 · Filter by author JoeyTeng opened on Nov 5, 2026
  1

  

• Support GitHub Skills Management (reopen of #14749)

  T: feature-request
  dependabot/dependabot-core#16828 · Filter by author eggplants opened on Nov 5, 2026

• npm: transitive updates pick a version inside the cooldown, then fail with NoChangeError

  L: github:actionsL: javascript
  dependabot/dependabot-core#16826 · Filter by author soakes opened on Nov 5, 2026
  

• npm updater replaces {{file}} placeholders in unrelated package.json scripts

  L: javascript
  dependabot/dependabot-core#16823 · Filter by author dawid-drelichowski opened on Nov 4, 2026

• Go workspace updates do not stub external local replacements consistently

  L: go:modules
  dependabot/dependabot-core#16821 · Filter by author ashtonian opened on Nov 4, 2026
  

• uv: .python-version ignored when pyenv's install --list lacks the version, though the image ships it

  L: javascriptL: python:uvL: python
  dependabot/dependabot-core#16820 · Filter by author allenap opened on Nov 4, 2026
  

• npm_and_yarn: misconfigured_tooling claims no yarn.lock when yarn.lock exists and packageManager is bun

  L: github:actionsL: javascript
  dependabot/dependabot-core#16813 · Filter by author ddelange opened on Nov 3, 2026
  

• NuGet: group with update-types [major] never finds updates (ignored update types are cumulative)

  L: dotnet:dotnet-sdkL: dotnet:nuget
  dependabot/dependabot-core#16807 · Filter by author gatlex opened on Nov 3, 2026
  

• Bazel: bazel_dep versions held in a constant are neither parsed nor updated

  L: bazelL: java:mavenT: bug 🐞
  dependabot/dependabot-core#16802 · Filter by author CHervaudBetclic opened on Nov 3, 2026
  

• npm_and_yarn: security updates for a yarn.lock with no package.json beside it fail every time with dependency_file_not_found

  L: github:actionsL: java:gradleL: javascript
  dependabot/dependabot-core#16798 · Filter by author konard opened on Nov 2, 2026
  

• Maven: bumping a plugin also rewrites a <version> with the same value inside that plugin's <configuration>

  L: github:actionsL: java:mavenL: ruby:bundler
  dependabot/dependabot-core#16797 · Filter by author konard opened on Nov 2, 2026
  1

  

• Composer: keep explicit config.platform lib-* versions as hard constraints (follow-up to #16713)

  L: php:composer
  dependabot/dependabot-core#16796 · Filter by author v-yesh opened on Nov 2, 2026
  

• NuGet: packages sharing a version property are updated but not listed in the PR

  L: dotnet:dotnet-sdkL: dotnet:nuget
  dependabot/dependabot-core#16793 · Filter by author JohnKrijgerNitea opened on Nov 2, 2026

• Grouped update PR is never refreshed with dependencies that become outdated after it was opened

  L: terraformT: bug 🐞
  dependabot/dependabot-core#16791 · Filter by author DuncSmith opened on Nov 2, 2026
  

• uv: private_source_authentication_failure for URL dependencies on GitHub release assets since uv 0.13

  L: python:uvL: python
  dependabot/dependabot-core#16790 · Filter by author tom42-otera opened on Nov 2, 2026
  

• Feature request: Nim support (nimble ecosystem and compiler version)

  L: github:actionsT: feature-request
  dependabot/dependabot-core#16787 · Filter by author zystem opened on Nov 1, 2026
  1

• pip: open pull requests are never closed or rebased after their update entry moves into a multi-ecosystem group / exclude-paths, although the default branch already has newer versions

  L: github:actionsL: python:uvL: pythonT: bug 🐞
  dependabot/dependabot-core#16783 · Filter by author konard opened on Nov 1, 2026
  

• Proactive Python 3.16 support: Test during Release Candidates (PEP 826) to maintain day-one reliability and user trust

  L: dockerL: python:uvL: pythonL: rust:cargoT: feature-request
  dependabot/dependabot-core#16781 · Filter by author janisto opened on Oct 31, 2026

• pnpm: support catalogs split across files with include (pnpm 12.15)

  L: javascriptT: feature-request
  dependabot/dependabot-core#16766 · Filter by author slorber opened on Oct 30, 2026

• GitHub Actions: update actions.lock when a referenced branch advances

  L: github:actionsL: rust:cargoL: rust:rust-toolchainT: feature-request
  dependabot/dependabot-core#16758 · Filter by author White-Green opened on Oct 29, 2026
  1

  

• pip: same package pinned twice with different casing in pyproject.toml, only the first pin is updated

  L: pythonL: ruby:bundlerT: bug 🐞
  dependabot/dependabot-core#16756 · Filter by author ikrommyd opened on Oct 28, 2026
  

• terraform-registry with replaces-base: true fails Dependabot YAML schema validation

  L: dotnet:nugetL: pythonL: terraformT: bug 🐞
  dependabot/dependabot-core#16751 · Filter by author legal90 opened on Oct 28, 2026
  

• pnpm: frozenLockfile: true in pnpm-workspace.yaml makes every lockfile update fail with ERR_PNPM_OUTDATED_LOCKFILE

  L: javascript
  dependabot/dependabot-core#16744 · Filter by author joh-klein opened on Oct 28, 2026