Dependabot not updating all required packages.lock.json files from referencing projects

[Tsingis]

Is there an existing issue for this?

• I have searched the existing issues

Package ecosystem

nuget

Package manager version

No response

Language version

.NET 9

Manifest location and content before the Dependabot update

https://github.com/Tsingis/bitcoin-web-api/pull/175/files

dependabot.yml content

version: 2
updates:
  - package-ecosystem: "nuget"
    directory: "/"
    schedule:
      interval: "weekly"
      day: "wednesday"
      time: "21:00"
      timezone: "Europe/Helsinki"
    target-branch: "master"
    groups:
      asp:
        patterns:
          - "Asp.Versioning.*"
      microsoft:
        patterns:
          - "Microsoft.AspNetCore.*"
          - "Microsoft.Extensions.*"
      serilog:
        patterns:
          - "Serilog*"

Updated dependency

Swashbuckle.AspNetCore.SwaggerUI from 8.1.1 to 8.1.2

What you expected to see, versus what you actually saw

Expecting to update packages.lock.json from integration tests project aswell when it has project reference to api project due WebApplicationFactory usage

Native package manager behavior

dotnet build generates the required missing packages.lock.json file for integration tests project.

See example required changes: Tsingis/bitcoin-web-api@7019784

Images of the diff or a link to the PR, issue, or logs

Tsingis/bitcoin-web-api#175

Smallest manifest that reproduces the issue

No response