dependabot-core
dependabot-core copied to clipboard
Dependabot modifying dependency URLs causes Git clone error after upgrading to PNPM 9.4.0
Hi , I noticed that after upgrading to PNPM 9.4.0, Dependabot is modifying the dependency URLs from https://codeload.github.com/ to git+https://[email protected], which is causing the following error:
ERROR Command failed with exit code 128: /usr/bin/git clone [email protected]:CaoMeiYouRen/rss-parser.git /home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_1835_81cad7a39cafa01315f02c3d60683486
CaoMeiYouRen/rss-impact-server/pull/178
This seems to be related to the way PNPM handles Git dependencies. I would like to know if it is related to this change
Originally posted by @CaoMeiYouRen in https://github.com/dependabot/dependabot-core/issues/10073#issuecomment-2200627853