When a submodule receives a new commit before it is tagged, Dependabot may catch the commit and open a pull request. If this happens, the Dependabot Submodule Tag Alignment (DSTA) workflow will close the PR because it isn't aligned with a tag yet.
Connor / Impact
Because the PR is closed by the workflow, Dependabot will skip checking this submodule until a new commit is pushed to the submodule's repository—causing it to permanently miss the intermediate tagged version.
When a submodule receives a new commit before it is tagged, Dependabot may catch the commit and open a pull request. If this happens, the Dependabot Submodule Tag Alignment (DSTA) workflow will close the PR because it isn't aligned with a tag yet.
Connor / Impact
Because the PR is closed by the workflow, Dependabot will skip checking this submodule until a new commit is pushed to the submodule's repository—causing it to permanently miss the intermediate tagged version.