Skip to content

Dependabot declares a changed version constraint as a "bump" #12286

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
1 task done
austin-nl opened this issue May 20, 2025 · 0 comments
Open
1 task done

Dependabot declares a changed version constraint as a "bump" #12286

austin-nl opened this issue May 20, 2025 · 0 comments
Labels
L: docker Docker containers T: bug 🐞 Something isn't working

Comments

@austin-nl
Copy link

Is there an existing issue for this?

  • I have searched the existing issues

Package ecosystem

Docker

Package manager version

No response

Language version

No response

Manifest location and content before the Dependabot update

No response

dependabot.yml content

  - package-ecosystem: "docker"
    directory: "/"
    schedule:
      interval: "weekly"
    labels:
      - "dependencies"
      - "release/patch"
    groups:
      dependabot-patch-and-minor-docker:
        update-types:
        - "minor"
        - "patch"

Updated dependency

bump elixir from 1.18.3-otp-27-alpine to 1.18-otp-27-alpine in the dependabot-patch-and-minor-docker group

What you expected to see, versus what you actually saw

We are using the elixir Docker image at elixir:1.18.3-otp-27-alpine for one of our images, but Docker keeps opening incorrect upgrades which change the version constraint to be less specific than we have requested. (An example from one repo has been provided, but this is happening across multiple repos.)

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

No response

Smallest manifest that reproduces the issue

No response

@austin-nl austin-nl added the T: bug 🐞 Something isn't working label May 20, 2025
@github-actions github-actions bot added the L: docker Docker containers label May 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
L: docker Docker containers T: bug 🐞 Something isn't working
Projects
Status: No status
Development

No branches or pull requests

1 participant