🐛 Fix: DependabotAlert dependency relationship missing inconclusive (#287)

yanyongyu · web-flow · commit ddd07e9bb319 · 2026-03-22T16:22:26.000+08:00
diff --git a/githubkit/versions/ghec_v2022_11_28/models/group_0412.py b/githubkit/versions/ghec_v2022_11_28/models/group_0412.py
@@ -36,11 +36,11 @@ class DependabotAlertPropDependency(GitHubModel):
     scope: Missing[Union[None, Literal["development", "runtime"]]] = Field(
         default=UNSET, description="The execution scope of the vulnerable dependency."
     )
-    relationship: Missing[Union[None, Literal["unknown", "direct", "transitive"]]] = (
-        Field(
-            default=UNSET,
-            description='The vulnerable dependency\'s relationship to your project.\n\n> [!NOTE]\n> We are rolling out support for dependency relationship across ecosystems. This value will be "unknown" for all dependencies in unsupported ecosystems.\n',
-        )
+    relationship: Missing[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ] = Field(
+        default=UNSET,
+        description='The vulnerable dependency\'s relationship to your project.\n\n> [!NOTE]\n> We are rolling out support for dependency relationship across ecosystems. This value will be "unknown" for all dependencies in unsupported ecosystems.\n',
     )
 
 
diff --git a/githubkit/versions/ghec_v2022_11_28/types/group_0412.py b/githubkit/versions/ghec_v2022_11_28/types/group_0412.py
@@ -27,7 +27,9 @@ class DependabotAlertPropDependencyType(TypedDict):
     package: NotRequired[DependabotAlertPackageType]
     manifest_path: NotRequired[str]
     scope: NotRequired[Union[None, Literal["development", "runtime"]]]
-    relationship: NotRequired[Union[None, Literal["unknown", "direct", "transitive"]]]
+    relationship: NotRequired[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ]
 
 
 class DependabotAlertPropDependencyTypeForResponse(TypedDict):
@@ -39,7 +41,9 @@ class DependabotAlertPropDependencyTypeForResponse(TypedDict):
     package: NotRequired[DependabotAlertPackageTypeForResponse]
     manifest_path: NotRequired[str]
     scope: NotRequired[Union[None, Literal["development", "runtime"]]]
-    relationship: NotRequired[Union[None, Literal["unknown", "direct", "transitive"]]]
+    relationship: NotRequired[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ]
 
 
 __all__ = (
diff --git a/githubkit/versions/ghec_v2026_03_10/models/group_0410.py b/githubkit/versions/ghec_v2026_03_10/models/group_0410.py
@@ -36,11 +36,11 @@ class DependabotAlertPropDependency(GitHubModel):
     scope: Missing[Union[None, Literal["development", "runtime"]]] = Field(
         default=UNSET, description="The execution scope of the vulnerable dependency."
     )
-    relationship: Missing[Union[None, Literal["unknown", "direct", "transitive"]]] = (
-        Field(
-            default=UNSET,
-            description='The vulnerable dependency\'s relationship to your project.\n\n> [!NOTE]\n> We are rolling out support for dependency relationship across ecosystems. This value will be "unknown" for all dependencies in unsupported ecosystems.\n',
-        )
+    relationship: Missing[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ] = Field(
+        default=UNSET,
+        description='The vulnerable dependency\'s relationship to your project.\n\n> [!NOTE]\n> We are rolling out support for dependency relationship across ecosystems. This value will be "unknown" for all dependencies in unsupported ecosystems.\n',
     )
 
 
diff --git a/githubkit/versions/ghec_v2026_03_10/types/group_0410.py b/githubkit/versions/ghec_v2026_03_10/types/group_0410.py
@@ -27,7 +27,9 @@ class DependabotAlertPropDependencyType(TypedDict):
     package: NotRequired[DependabotAlertPackageType]
     manifest_path: NotRequired[str]
     scope: NotRequired[Union[None, Literal["development", "runtime"]]]
-    relationship: NotRequired[Union[None, Literal["unknown", "direct", "transitive"]]]
+    relationship: NotRequired[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ]
 
 
 class DependabotAlertPropDependencyTypeForResponse(TypedDict):
@@ -39,7 +41,9 @@ class DependabotAlertPropDependencyTypeForResponse(TypedDict):
     package: NotRequired[DependabotAlertPackageTypeForResponse]
     manifest_path: NotRequired[str]
     scope: NotRequired[Union[None, Literal["development", "runtime"]]]
-    relationship: NotRequired[Union[None, Literal["unknown", "direct", "transitive"]]]
+    relationship: NotRequired[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ]
 
 
 __all__ = (
diff --git a/githubkit/versions/v2022_11_28/models/group_0339.py b/githubkit/versions/v2022_11_28/models/group_0339.py
@@ -36,11 +36,11 @@ class DependabotAlertPropDependency(GitHubModel):
     scope: Missing[Union[None, Literal["development", "runtime"]]] = Field(
         default=UNSET, description="The execution scope of the vulnerable dependency."
     )
-    relationship: Missing[Union[None, Literal["unknown", "direct", "transitive"]]] = (
-        Field(
-            default=UNSET,
-            description='The vulnerable dependency\'s relationship to your project.\n\n> [!NOTE]\n> We are rolling out support for dependency relationship across ecosystems. This value will be "unknown" for all dependencies in unsupported ecosystems.\n',
-        )
+    relationship: Missing[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ] = Field(
+        default=UNSET,
+        description='The vulnerable dependency\'s relationship to your project.\n\n> [!NOTE]\n> We are rolling out support for dependency relationship across ecosystems. This value will be "unknown" for all dependencies in unsupported ecosystems.\n',
     )
 
 
diff --git a/githubkit/versions/v2022_11_28/types/group_0339.py b/githubkit/versions/v2022_11_28/types/group_0339.py
@@ -27,7 +27,9 @@ class DependabotAlertPropDependencyType(TypedDict):
     package: NotRequired[DependabotAlertPackageType]
     manifest_path: NotRequired[str]
     scope: NotRequired[Union[None, Literal["development", "runtime"]]]
-    relationship: NotRequired[Union[None, Literal["unknown", "direct", "transitive"]]]
+    relationship: NotRequired[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ]
 
 
 class DependabotAlertPropDependencyTypeForResponse(TypedDict):
@@ -39,7 +41,9 @@ class DependabotAlertPropDependencyTypeForResponse(TypedDict):
     package: NotRequired[DependabotAlertPackageTypeForResponse]
     manifest_path: NotRequired[str]
     scope: NotRequired[Union[None, Literal["development", "runtime"]]]
-    relationship: NotRequired[Union[None, Literal["unknown", "direct", "transitive"]]]
+    relationship: NotRequired[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ]
 
 
 __all__ = (
diff --git a/githubkit/versions/v2026_03_10/models/group_0337.py b/githubkit/versions/v2026_03_10/models/group_0337.py
@@ -36,11 +36,11 @@ class DependabotAlertPropDependency(GitHubModel):
     scope: Missing[Union[None, Literal["development", "runtime"]]] = Field(
         default=UNSET, description="The execution scope of the vulnerable dependency."
     )
-    relationship: Missing[Union[None, Literal["unknown", "direct", "transitive"]]] = (
-        Field(
-            default=UNSET,
-            description='The vulnerable dependency\'s relationship to your project.\n\n> [!NOTE]\n> We are rolling out support for dependency relationship across ecosystems. This value will be "unknown" for all dependencies in unsupported ecosystems.\n',
-        )
+    relationship: Missing[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ] = Field(
+        default=UNSET,
+        description='The vulnerable dependency\'s relationship to your project.\n\n> [!NOTE]\n> We are rolling out support for dependency relationship across ecosystems. This value will be "unknown" for all dependencies in unsupported ecosystems.\n',
     )
 
 
diff --git a/githubkit/versions/v2026_03_10/types/group_0337.py b/githubkit/versions/v2026_03_10/types/group_0337.py
@@ -27,7 +27,9 @@ class DependabotAlertPropDependencyType(TypedDict):
     package: NotRequired[DependabotAlertPackageType]
     manifest_path: NotRequired[str]
     scope: NotRequired[Union[None, Literal["development", "runtime"]]]
-    relationship: NotRequired[Union[None, Literal["unknown", "direct", "transitive"]]]
+    relationship: NotRequired[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ]
 
 
 class DependabotAlertPropDependencyTypeForResponse(TypedDict):
@@ -39,7 +41,9 @@ class DependabotAlertPropDependencyTypeForResponse(TypedDict):
     package: NotRequired[DependabotAlertPackageTypeForResponse]
     manifest_path: NotRequired[str]
     scope: NotRequired[Union[None, Literal["development", "runtime"]]]
-    relationship: NotRequired[Union[None, Literal["unknown", "direct", "transitive"]]]
+    relationship: NotRequired[
+        Union[None, Literal["unknown", "direct", "transitive", "inconclusive"]]
+    ]
 
 
 __all__ = (
diff --git a/githubkit/versions/versions.lock b/githubkit/versions/versions.lock
@@ -166,6 +166,7 @@ source = "https://raw.githubusercontent.com/github/rest-api-description/d5aff63f
 "/webhooks/repository-dispatch-sample.collected/post" = {operationId = "repository-dispatch"}
 "/components/schemas/webhooks_answer/properties/parent_id" = {type = ["integer", "null"]}
 "/components/schemas/dependabot-alert-with-repository/properties/dependency/properties/relationship/enum" = {"<add>" = ["inconclusive"]}
+"/components/schemas/dependabot-alert/properties/dependency/properties/relationship/enum" = {"<add>" = ["inconclusive"]}
 "/components/schemas/code-scanning-alert-classification/enum" = {"<add>" = ["documentation"]}
 
 [[overrides]]
diff --git a/pyproject.toml b/pyproject.toml
@@ -619,6 +619,11 @@ source = "descriptions-next/ghec/ghec.2026-03-10.json"
 "/components/schemas/dependabot-alert-with-repository/properties/dependency/properties/relationship/enum" = { "<add>" = [
   "inconclusive",
 ] }
+# https://github.com/yanyongyu/githubkit/issues/284
+# https://github.com/github/rest-api-description/issues/6108
+"/components/schemas/dependabot-alert/properties/dependency/properties/relationship/enum" = { "<add>" = [
+  "inconclusive",
+] }
 # https://github.com/github/rest-api-description/issues/4728
 "/components/schemas/code-scanning-alert-classification/enum" = { "<add>" = [
   "documentation",
