Skip to content

bug(github_action): updating the sha does not update the version comment #13037

@axel7083

Description

@axel7083

Is there an existing issue for this?

  • I have searched the existing issues

Package ecosystem

github_action

Package manager version

N/A

Language version

N/A

Manifest location and content before the Dependabot update

    uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d  # v3.29.5

dependabot.yml content

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"
      # check at 3am UTC
      time: "03:00"
    open-pull-requests-limit: 20

Updated dependency

No response

What you expected to see, versus what you actually saw

For the pull request chore(deps): bump github/codeql-action from 3.30.0 to 3.30.1

I got the following diff

- uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d  # v3.29.5
+ uses: github/codeql-action/upload-sarif@f1f6e5f6af878fb37288ce1c627459e94dbf7d01  # v3.29.5

But I expected, the following

- uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d  # v3.29.5
+ uses: github/codeql-action/upload-sarif@f1f6e5f6af878fb37288ce1c627459e94dbf7d01  # v3.30.1

The version comment is not updated.

Native package manager behavior

N/A

Images of the diff or a link to the PR, issue, or logs

podman-desktop/podman-desktop#13832

Smallest manifest that reproduces the issue

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "daily"

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions