Public search query: dependabot opened a PR bumping a package to a version that already had