payload: {"action":"created","issue":{"url":"https://api.github.com/repos/dependabot/feedback/issues/756","repository_url":"https://api.github.com/repos/dependabot/feedback","labels_url":"https://api.github.com/repos/dependabot/feedback/issues/756/labels{/name}","comments_url":"https://api.github.com/repos/dependabot/feedback/issues/756/comments","events_url":"https://api.github.com/repos/dependabot/feedback/issues/756/events","html_url":"https://github.com/dependabot/feedback/issues/756","id":518907237,"node_id":"MDU6SXNzdWU1MTg5MDcyMzc=","number":756,"title":"Notify endpoint does not appear to be opening PRs / enqueuing run of dependabot while 'Bump now' is working","user":{"login":"ajcann","id":10137494,"node_id":"MDQ6VXNlcjEwMTM3NDk0","avatar_url":"https://avatars2.githubusercontent.com/u/10137494?v=4","gravatar_id":"","url":"https://api.github.com/users/ajcann","html_url":"https://github.com/ajcann","followers_url":"https://api.github.com/users/ajcann/followers","following_url":"https://api.github.com/users/ajcann/following{/other_user}","gists_url":"https://api.github.com/users/ajcann/gists{/gist_id}","starred_url":"https://api.github.com/users/ajcann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ajcann/subscriptions","organizations_url":"https://api.github.com/users/ajcann/orgs","repos_url":"https://api.github.com/users/ajcann/repos","events_url":"https://api.github.com/users/ajcann/events{/privacy}","received_events_url":"https://api.github.com/users/ajcann/received_events","type":"User","site_admin":false},"labels":[{"id":916305138,"node_id":"MDU6TGFiZWw5MTYzMDUxMzg=","url":"https://api.github.com/repos/dependabot/feedback/labels/bug","name":"bug","color":"d73a4a","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2019-11-06T22:48:03Z","updated_at":"2019-11-07T10:40:04Z","closed_at":null,"author_association":"NONE","body":"Currently attempting to use: https://github.com/dependabot/api-docs#notify-dependabot-of-a-private-dependency-release to kick off PR generation to a private repo upon the release of a new docker image to a private docker registry (GCR). \r\n\r\nWhen I send:\r\n\r\n`curl --verbose -d '{\"name\":\"us.gcr.io/<gcr project name>/workflow-testing\", \"version\":\"9.0.2\", \"package-manager\":\"docker\"}' -H \"Content-Type: application/json\" -H \"Authorization: Personal <GitHub PAT with Repo Access>\" -X POST https://api.dependabot.com/release_notifications/private\r\n`\r\nI get a 204 response back (which I believe is expected) though no PR is opened. Selecting 'Bump now' does however pick up the change and open a PR.\r\n\r\nAm I missing something re: documentation?\r\n\r\nThank you!\r\n\r\nUpdate: I see that this issue is related to https://github.com/dependabot/feedback/issues/324 re: the docker image however I appear to be having the same issue with 'npm_and_yarn' package-manager for the same repo which is set to 'live'. I can manually hit 'Bump now\" and it picks up the update, however hitting the release_notifications/private endpoint does not seem to generate any PRs/dependabot runs.\r\n\r\n(I have emailed the specific private repo to dependabot-support@github.com)\r\n"},"comment":{"url":"https://api.github.com/repos/dependabot/feedback/issues/comments/551023552","html_url":"https://github.com/dependabot/feedback/issues/756#issuecomment-551023552","issue_url":"https://api.github.com/repos/dependabot/feedback/issues/756","id":551023552,"node_id":"MDEyOklzc3VlQ29tbWVudDU1MTAyMzU1Mg==","user":{"login":"feelepxyz","id":20165,"node_id":"MDQ6VXNlcjIwMTY1","avatar_url":"https://avatars1.githubusercontent.com/u/20165?v=4","gravatar_id":"","url":"https://api.github.com/users/feelepxyz","html_url":"https://github.com/feelepxyz","followers_url":"https://api.github.com/users/feelepxyz/followers","following_url":"https://api.github.com/users/feelepxyz/following{/other_user}","gists_url":"https://api.github.com/users/feelepxyz/gists{/gist_id}","starred_url":"https://api.github.com/users/feelepxyz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/feelepxyz/subscriptions","organizations_url":"https://api.github.com/users/feelepxyz/orgs","repos_url":"https://api.github.com/users/feelepxyz/repos","events_url":"https://api.github.com/users/feelepxyz/events{/privacy}","received_events_url":"https://api.github.com/users/feelepxyz/received_events","type":"User","site_admin":true},"created_at":"2019-11-07T10:40:04Z","updated_at":"2019-11-07T10:40:04Z","author_association":"MEMBER","body":"@ajcann just replied to your email! For reference, Dependabot currently parses Dockerfile dependency names without the prefixed host, so the name would be `<gcr project name>/workflow-testing` instead of `us.gcr.io/<gcr project name>/workflow-testing`. This dependency name has to match the one parsed by Dependabot for the update to work.\r\n\r\nI'll dig into this further as we might have some issues with it, especially if it's not working for npm and yarn which should have a 1-to-1 mapping between whats in your manifest and what Dependabot parses the name as."}}
other: {"actor":{"display_login":"feelepxyz"}}