Julia: dependabot only updates top-level `Project.toml` if workspaces have different compat specifiers

[giordano]

Is there an existing issue for this?

• I have searched the existing issues

Package ecosystem

julia

Package manager version

Pkg 1.12

Language version

Julia 1.12

Manifest location and content before the Dependabot update

• https://github.com/NumericalEarth/Breeze.jl/blob/dc41d3831092f60e29af9443152530bd7c80f9e8/Project.toml#L35
• https://github.com/NumericalEarth/Breeze.jl/blob/dc41d3831092f60e29af9443152530bd7c80f9e8/docs/Project.toml#L27
• https://github.com/NumericalEarth/Breeze.jl/blob/dc41d3831092f60e29af9443152530bd7c80f9e8/test/Project.toml#L29

Note that Oceananigans has compat 0.102.2 in Project.toml and 0.102 in docs/Project.toml and test/Project.toml.

dependabot.yml content

https://github.com/NumericalEarth/Breeze.jl/blob/dc41d3831092f60e29af9443152530bd7c80f9e8/.github/dependabot.yml

Updated dependency

Oceananigans, from v0.102 to v0.103

What you expected to see, versus what you actually saw

I was expecting NumericalEarth/Breeze.jl#362 to update all the compat bounds in all Project.toml files, but it updated only the top-level one.

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

Log of dependabot job which opened the update PR

Smallest manifest that reproduces the issue

No response

[IanButterworth]

Just adding that Breeze uses the workspaces shared environment setup, which I think is relevant.