Issues

• Terraform: Providers that don't have releases for all platforms cause dependabot to error

  L: terraformT: bug 🐞
  dependabot/dependabot-core#16629 · Filter by author foxmaltas-gds opened on Oct 19, 2026
  

• Terraform: private registry modules with uppercase names are not updated (module identifier is lowercased)

  L: opentofuL: ruby:bundlerL: terraform
  dependabot/dependabot-core#16622 · Filter by author cschindlbeck opened on Oct 19, 2026
  1

• Dependabot does not support npm lockfileVersion: 4 (npm 12+)

  L: javascriptT: bug 🐞
  dependabot/dependabot-core#16618 · Filter by author rlindner81 opened on Oct 19, 2026
  

• npm: file fetcher aborts with "engines.<key> must be a string" when package.json engines contains a nested object (e.g. cordovaDependencies)

  L: javascript
  dependabot/dependabot-core#16615 · Filter by author GitToTheHub opened on Oct 18, 2026
  

• pnpm: unreachable file: dependency is reported as security_update_not_possible instead of path_dependencies_not_reachable

  L: javascriptL: nix
  dependabot/dependabot-core#16601 · Filter by author kamatsuoka opened on Oct 15, 2026
  1

  

• Dependabot failes to recreate/rebase Pull Requests

  EcosystemsL: rust:cargosupport-escalationT: bug 🐞
  dependabot/dependabot-core#16596 · Filter by author anatawa12 opened on Oct 15, 2026

• uv: PEP 621 dependencies ignored when tool.poetry contains only build configuration

  L: github:actionsL: python:uvL: python
  dependabot/dependabot-core#16589 · Filter by author TimeToBuildBob opened on Oct 15, 2026

• uv: a package listed by name only in a dependency group turns its pin into "pkg*"

  L: python:uvL: python
  dependabot/dependabot-core#16580 · Filter by author HardMax71 opened on Oct 14, 2026

• Build broken by downgrading random indirect dependency

  L: rust:cargoT: bug 🐞
  dependabot/dependabot-core#16579 · Filter by author torokati44 opened on Oct 14, 2026
  

• Docker group patterns that include the registry host (mcr.microsoft.com/dotnet/*) never match

  L: dockerL: dotnet:dotnet-sdk
  dependabot/dependabot-core#16574 · Filter by author austindrenski opened on Oct 14, 2026
  

• Check CodeQL Language Support Before Creating Dependabot PRs

  T: feature-request
  dependabot/dependabot-core#16565 · Filter by author ymshinde opened on Oct 14, 2026

• Dependabot attempts to ignore non-existent "1.14.a" version of github.com/apollographql/apollo-ios and aborts

  L: swiftT: bug 🐞
  dependabot/dependabot-core#16564 · Filter by author sothebys-valdi opened on Oct 14, 2026
  

• Gradle release-date fallback accepts Last-Modified from non-2xx responses, so cooldown lets brand-new plugin versions through

  L: java:gradleT: bug 🐞
  dependabot/dependabot-core#16547 · Filter by author toomyem opened on Oct 13, 2026
  

• Composer: resolve dependency group members together so lockstep (self.version) packages can be updated

  L: php:composer
  dependabot/dependabot-core#16542 · Filter by author sjwebb opened on Oct 12, 2026

• go_modules: untagged nested module fails with dependency_file_not_resolvable since #15096

  L: github:actionsL: go:modules
  dependabot/dependabot-core#16539 · Filter by author heppu opened on Oct 12, 2026
  

• [gomod] Bumping one module deletes unrelated multi-module dependency requires from go.mod

  L: go:modulesT: bug 🐞
  dependabot/dependabot-core#16538 · Filter by author LarsArtmann opened on Oct 12, 2026
  

• uv: pretended version 0.0.0 for dynamic-version projects silently downgrades dependencies that depend on the project

  L: python:uvL: pythonT: bug 🐞
  dependabot/dependabot-core#16531 · Filter by author RonnyPfannschmidt opened on Oct 11, 2026
  

• pnpm grouped update does not update pnpm-workspace.yaml overrides, leaving direct dependency updates ineffective

  L: javascriptT: feature-request
  dependabot/dependabot-core#16529 · Filter by author nyaomaru opened on Oct 10, 2026
  2

• Grouped go_modules updates drop deletions of vendored files (regression from #16290)

  L: dockerL: github:actionsL: go:modulesL: javascriptL: ruby:bundler
  dependabot/dependabot-core#16527 · Filter by author huww98 opened on Oct 10, 2026
  2

• Python 3.15 support

  L: python:uvL: python
  dependabot/dependabot-core#16524 · Filter by author amnesiaof opened on Oct 10, 2026
  1

  

• Pipenv dependency in both [packages] and [dev-packages] is only updated in default lockfile section

  L: pythonT: bug 🐞
  dependabot/dependabot-core#16523 · Filter by author aoyako opened on Oct 10, 2026

• go_modules: go.work in a parent directory is not detected when the job directory is a workspace member (e.g. security updates)

  L: go:modules
  dependabot/dependabot-core#16519 · Filter by author koba1t opened on Oct 9, 2026
  

• go_modules: run go list -m all after workspace updates to stabilize committed go.work.sum on Go < 1.28

  L: dockerL: github:actionsL: go:modules
  dependabot/dependabot-core#16518 · Filter by author koba1t opened on Oct 9, 2026
  

• uv: resolution errors from uv >= 0.12.14 are no longer recognised (× No solution found regexes)

  L: javascriptL: python:uvL: python
  dependabot/dependabot-core#16510 · Filter by author wenceslas-sanchez opened on Oct 8, 2026
  

• Cooldown - exclude not working for github-actions ecosystem

  L: github:actionsT: bug 🐞
  dependabot/dependabot-core#16502 · Filter by author jrfnl opened on Oct 8, 2026