{"action":"created","issue":{"url":"https://api.github.com/repos/dependabot/dependabot-core/issues/641","repository_url":"https://api.github.com/repos/dependabot/dependabot-core","labels_url":"https://api.github.com/repos/dependabot/dependabot-core/issues/641/labels{/name}","comments_url":"https://api.github.com/repos/dependabot/dependabot-core/issues/641/comments","events_url":"https://api.github.com/repos/dependabot/dependabot-core/issues/641/events","html_url":"https://github.com/dependabot/dependabot-core/pull/641","id":351503107,"node_id":"MDExOlB1bGxSZXF1ZXN0MjA5MDc4NTgy","number":641,"title":".NET: Don't fetch ProjectReference paths","user":{"login":"greysteil","id":1144873,"node_id":"MDQ6VXNlcjExNDQ4NzM=","avatar_url":"https://avatars0.githubusercontent.com/u/1144873?v=4","gravatar_id":"","url":"https://api.github.com/users/greysteil","html_url":"https://github.com/greysteil","followers_url":"https://api.github.com/users/greysteil/followers","following_url":"https://api.github.com/users/greysteil/following{/other_user}","gists_url":"https://api.github.com/users/greysteil/gists{/gist_id}","starred_url":"https://api.github.com/users/greysteil/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/greysteil/subscriptions","organizations_url":"https://api.github.com/users/greysteil/orgs","repos_url":"https://api.github.com/users/greysteil/repos","events_url":"https://api.github.com/users/greysteil/events{/privacy}","received_events_url":"https://api.github.com/users/greysteil/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2018-08-17T08:27:09Z","updated_at":"2018-08-17T11:00:04Z","closed_at":null,"author_association":"MEMBER","pull_request":{"url":"https://api.github.com/repos/dependabot/dependabot-core/pulls/641","html_url":"https://github.com/dependabot/dependabot-core/pull/641","diff_url":"https://github.com/dependabot/dependabot-core/pull/641.diff","patch_url":"https://github.com/dependabot/dependabot-core/pull/641.patch"},"body":"Follow-up from the discussion on https://github.com/stryker-mutator/stryker-net/pull/82.\r\n\r\nIdea here is that `ProjectReference` declarations shouldn't be pulled in automatically. If a user wants Dependabot to operate on all of the projects in a `.NET` repo then those would be expected to be explicitly referenced in the `.sln` file.\r\n\r\n@simondel mentioned that when using Visual Studio to look at a `.csproj` you will only see packages related to that project, without any additional dependencies that are pulled in by projects pulled in with `ProjectReference`. Given that, I *think* this makes sense to me.\r\n\r\n@deinok, @RohanNagar, @simondel - would love your thoughts, as you know the space much better."},"comment":{"url":"https://api.github.com/repos/dependabot/dependabot-core/issues/comments/413831124","html_url":"https://github.com/dependabot/dependabot-core/pull/641#issuecomment-413831124","issue_url":"https://api.github.com/repos/dependabot/dependabot-core/issues/641","id":413831124,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMzgzMTEyNA==","user":{"login":"deinok","id":6586053,"node_id":"MDQ6VXNlcjY1ODYwNTM=","avatar_url":"https://avatars0.githubusercontent.com/u/6586053?v=4","gravatar_id":"","url":"https://api.github.com/users/deinok","html_url":"https://github.com/deinok","followers_url":"https://api.github.com/users/deinok/followers","following_url":"https://api.github.com/users/deinok/following{/other_user}","gists_url":"https://api.github.com/users/deinok/gists{/gist_id}","starred_url":"https://api.github.com/users/deinok/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deinok/subscriptions","organizations_url":"https://api.github.com/users/deinok/orgs","repos_url":"https://api.github.com/users/deinok/repos","events_url":"https://api.github.com/users/deinok/events{/privacy}","received_events_url":"https://api.github.com/users/deinok/received_events","type":"User","site_admin":false},"created_at":"2018-08-17T11:00:04Z","updated_at":"2018-08-17T11:00:04Z","author_association":"NONE","body":"@simondel Yes, with the fix that I have said, that should not be an issue, even if you reference 8 projects an 4 slns at the same time."}}
{"actor":{"display_login":"deinok"}}