dependabot-core icon indicating copy to clipboard operation
dependabot-core copied to clipboard

Dependabot NPM runs on Github actions times out consistently for one repo

Open broksonic21 opened this issue 8 months ago • 0 comments

Is there an existing issue for this?

  • [x] I have searched the existing issues

Package ecosystem

npm

Package manager version

npm 11.4.2

Language version

node 22.16.0

Manifest location and content before the Dependabot update

/package.json - private repo

dependabot.yml content

Not using cooldown or beta, but am using groups in dependabot.yml

Updated dependency

n/a

What you expected to see, versus what you actually saw

For the past 2 weeks, our dependabot runs for npm on this one repo (and only this one repo), which is a private repo, are timing out with errors after the run dependabot step runs for 54ish minutes. This has been happening in every run for 2+ weeks, but hadn't happened before this.

Image

Note: the actual steps only take 3 minutes, then it just hangs for 51 more minutes

Start of logs:

Image

End of logs:

Image

12:30 - 12:27 is 3 minutes, not 54 like this step is taking

We only see this on this one repository.

Native package manager behavior

n/a

Images of the diff or a link to the PR, issue, or logs

n/a

Smallest manifest that reproduces the issue

n/a - it's only in this one private repository

broksonic21 avatar Jun 17 '25 20:06 broksonic21