dependabot doesn't seem to init submodules before resolving dependencies

[macklin-10x]

Package ecosystem
gomod

Manifest location and content prior to update
/go.mod
/some_submodule/go.mod
dependabot.yml content

version: 2

updates:
- package-ecosystem: gomod
  directory: "/"
  schedule:
    interval: weekly
  open-pull-requests-limit: 10

What you expected to see, versus what you actually saw
I expected Dependabot to resolve my dependencies inside a submodule. Instead, it appears to have not initialized the submodule, as when it attempts to find go.mod in the submodule via go mod replace directive, it fails to find it:

updater | ERROR <job_113688959> Error processing github.com/getsentry/sentry-go (Dependabot::DependabotError)
updater | ERROR <job_113688959> go: github.com/OurOrg/[email protected] (replaced by ./some_submodule): reading some_submodule/go.mod: open /some_submodule/go.mod: no such file or directory

To be clear, I am not trying to have Dependabot manage/update the version of the submodule. I just want Dependabot to manage the dependencies in the root go.mod file, but it is failing to resolve due to errors like the one shown above.

[spmason]

I'm also seeing this problem with a Java/Maven project. The old version of dependabot coped just fine..

[spmason]

Coming back to this, it seems dependabot does resolve submodules properly now, however I was still seeing 404s trying to access the submodule when I viewed the dependabot logs

Turns out I needed to give it access to my private repo in my org settings before it would work

I now have dependabot happily spamming me with dependency bump PRs after 6 months of tumbleweeds

[macklin-10x]

I'm still seeing the exact same type of error as before:

updater | ERROR <job_234105584> Error processing google.golang.org/api (Dependabot::DependabotError)
updater | ERROR <job_234105584> go: github.com/OurOrg/[email protected] (replaced by ./some_submodule): reading some_submodule/go.mod: open /some_submodule/go.mod: no such file or directory

[jakecoffman]

Sorry for the lack of communication here.

Submodule cloning for Go was recently added in #5982 so this should be working now!

Let us know if you are seeing any issues with it.