Dependabot tries to update more dependencies than declared

[mauroservienti]

Is there an existing issue for this?

• I have searched the existing issues

Package ecosystem

Nuget

Package manager version

No response

Language version

C#

Manifest location and content before the Dependabot update

As you can see from this dependabot PR, the updated dependencies are way more than what they should be. it should only be updating xunit.runner.visualstudio and not all the other dependencies.

dependabot.yml content

version: 2
updates:
- package-ecosystem: nuget
  directory: "/"
  schedule:
    interval: daily
  open-pull-requests-limit: 10
  target-branch: master
- package-ecosystem: github-actions
  directory: "/"
  schedule:
    interval: daily
  open-pull-requests-limit: 10
  target-branch: master

Updated dependency

xunit.runner.visualstudio from 2.5.7 to 2.8.0, but it's happening for all dependencies

What you expected to see, versus what you actually saw

Only the mentioned dependency is updated, and not all of the dependencies in the project.

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

No response

Smallest manifest that reproduces the issue

No response

[mauroservienti]

It continues to happen, here is a PR raised about 1 hour ago: ServiceComposer/ServiceComposer.AspNetCore#687