"Dependabot Support for Gradle Lockfiles" does not seem working

[dmikurube]

Select Topic Area

Question

Body

Hi,

https://github.com/orgs/community/discussions/164000 was a brilliant news for me, and looking forward to seeing a new update coming to my repo.

Finally, one came to my (just experimental) public repo. But, it seems like still failing due to a conflict with gradle.lockfile, and it does not update gradle.lockfile.

dmikurube/vertx-stream#23

Could anyone point what is wrong there?

[EyasuGet]

This happens because:

• gradle.lockfile enforces strict locked versions.
• The new version introduced by the update bot is not reflected in the lockfile.
• Gradle considers this a conflict and blocks the build.

---

How to Fix It

To manually resolve the lockfile conflict:

1. Pull the PR branch locally:

git fetch origin pull/23/head:update-pr
git checkout update-pr 

2. Regenerate the lockfile:

./gradlew dependencies --write-locks

3. Commit and push the updated gradle.lockfile:

git add gradle.lockfile
git commit -m "Update gradle.lockfile to match dependency changes"
git push

This is what i can find hope this solves your problem if this solves your problem dont forget to give thumbs up

[dmikurube]

I've submitted a fix for this issue by myself: dependabot/dependabot-core#12853