Found a bug in my software. Discovered it's a problem in one of my dependencies. Reported it.

They decided it was a bug in one of their dependencies. They reported it.

Less than a week after the initial report: Bug fixed, then bug fixed, then bug fixed.

I've never seen that before.