Dependabot updates transitive pip dependency in one file but not the other

[pamelafox]

Select Topic Area

Question

Body

Please see this dependabot PR:
https://github.com/collinmcneese/azure-search-openai-demo/pull/4/files#diff-7a3ce58e9448657fa8ab45e91f4cd0ad00ddb48e18e9fdca941aa56ac1b15c2d

Notice that azure-core is updated to 1.29.5 in one requirements.txt but not the other. I could not find any version constraints that would account for that difference, and when I checked the PR out locally and ran pip-compile --upgrade requirements.in in both the folders, it did update both to 1.29.5.

[carogalvin]

@pamelafox that is strange! Could you submit this (and the other post you made) as issues in the dependabot-core repo?

[pamelafox]

Sure, filed at dependabot/dependabot-core#8380

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬