Issues

• fix(core): a bare Dart version is exact to pub and a caret range to this tree, so a pubspec pin is never reported

  getkono/dependable#149 · Filter by author justin13888 opened on Sep 6, 2026

• fix(tui): the package lookup compares untranslated versions on both sides, so a non-semver ecosystem is misread

  getkono/dependable#148 · Filter by author justin13888 opened on Sep 6, 2026

• fix(core): a Gradle strictly version is classified Normal, so plain fix advances a forced version

  getkono/dependable#147 · Filter by author justin13888 opened on Sep 6, 2026

• docs(fetch): check_path's doc comment is orphaned onto fetch_versions

  getkono/dependable#146 · Filter by author justin13888 opened on Sep 6, 2026

• test(cli): nothing stops a new PackageSource variant reaching the "unknown" token

  getkono/dependable#145 · Filter by author justin13888 opened on Sep 6, 2026

• fix(fetch): a registry URL carrying credentials is printed verbatim in error output

  getkono/dependable#144 · Filter by author justin13888 opened on Sep 6, 2026

• fix(fetch): registry_root() cannot name a per-scope npm registry, so a reported root can name a host that was never asked

  getkono/dependable#143 · Filter by author justin13888 opened on Sep 6, 2026

• check: certify a run over the ecosystems that did answer, rather than all-or-nothing

  getkono/dependable#142 · Filter by author justin13888 opened on Sep 6, 2026

• fix(core): a POM inheriting its <groupId> names itself by bare artifactId, so no dependency on it can match

  getkono/dependable#140 · Filter by author justin13888 opened on Sep 6, 2026

• fix(core): a POM's <dependencyManagement> and <build><plugins> are excluded in silence

  getkono/dependable#139 · Filter by author justin13888 opened on Sep 6, 2026

• feat(core): a nested workspace's crate is indistinguishable from a governed member

  getkono/dependable#138 · Filter by author justin13888 opened on Sep 6, 2026

• fix(core): a nested overrides.<parent>["."] entry — the parent's own pin — is silently dropped

  getkono/dependable#136 · Filter by author justin13888 opened on Sep 6, 2026

• refactor(cli): PolicySource::Unreadable is unreachable and its doc describes removed behaviour

  getkono/dependable#134 · Filter by author justin13888 opened on Sep 6, 2026

• fix(core): two json_scan correctness nits — decoded span offsets, and a dropped escape after a lone surrogate

  getkono/dependable#135 · Filter by author justin13888 opened on Sep 6, 2026

• fix(core): pixi [dependencies] are conda packages checked against PyPI

  getkono/dependable#133 · Filter by author justin13888 opened on Sep 6, 2026

• refactor(core): WalkOptions and Tree gained public fields without #[non_exhaustive]

  getkono/dependable#132 · Filter by author justin13888 opened on Sep 6, 2026

• test(fetch): the UnreadableLockfile fallback has no test at any level

  getkono/dependable#131 · Filter by author justin13888 opened on Sep 6, 2026

• ci: nothing builds --no-default-features, the configuration #99 had to repair

  getkono/dependable#130 · Filter by author justin13888 opened on Sep 6, 2026

• fix(core): scan_strings recurses without a depth bound, against its own contract

  getkono/dependable#129 · Filter by author justin13888 opened on Sep 6, 2026

• fix(cli): an explicitly named --config that does not exist yields defaults in silence

  getkono/dependable#128 · Filter by author justin13888 opened on Sep 6, 2026

• fix(cli): DEPENDABLE_FAIL_ON with an unrecognised value silently disarms the gate

  getkono/dependable#127 · Filter by author justin13888 opened on Sep 6, 2026

• fix(fetch): the disk cache key misses npm per-scope registries and JSR

  getkono/dependable#126 · Filter by author justin13888 opened on Sep 6, 2026

• fix(core): a bare PEP 440 prefix wildcard widens to a caret range

  getkono/dependable#125 · Filter by author justin13888 opened on Sep 6, 2026

• test(core): ALL_KINDS can silently omit a ManifestKind variant while the suite stays green

  getkono/dependable#124 · Filter by author justin13888 opened on Sep 6, 2026

• test(fetch): no heterogeneous workspace descriptor reaches the public walk, the self branch, or the cache key

  getkono/dependable#123 · Filter by author justin13888 opened on Sep 6, 2026