Found a bug in my software. Discovered it's a problem in one of my dependencies. Reported it.
They decided it was a bug in one of their dependencies. They reported it.
Less than a week after the initial report: Bug fixed, then bug fixed, then bug fixed.
I've never seen that before.