dependabot-core icon indicating copy to clipboard operation
dependabot-core copied to clipboard

Problem updating `rubygems` `oauth-tty` library (which hosted on GitLab)

Open ShockwaveNN opened this issue 3 years ago • 1 comments

Is there an existing issue for this?

  • [X] I have searched the existing issues

Package ecosystem

rubygems

Package manager version

2.3.21

Language version

3.1

Manifest location and content before the Dependabot update

# frozen_string_literal: true

Encoding.default_external = Encoding::UTF_8
Encoding.default_internal = Encoding::UTF_8

source 'https://rubygems.org'

gem 'oauth-tty'
# and some other unrelated 

dependabot.yml content

version: 2
updates:
  - package-ecosystem: bundler
    directory: "/"
    schedule:
      interval: daily
      time: "08:00"
      timezone: "Europe/Moscow"
    open-pull-requests-limit: 10
    allow:
      - dependency-type: direct
      - dependency-type: indirect

Updated dependency

No response

What you expected to see, versus what you actually saw

In logs of dependabot I see errors like this:

updater | INFO <job_454839622> Updating oauth-tty from 1.0.2 to 1.0.3
  proxy | 2022/09/08 07:35:52 [204] GET https://index.rubygems.org:443/versions
  proxy | 2022/09/08 07:35:52 [204] 304 https://index.rubygems.org:443/versions
  proxy | 2022/09/08 07:35:54 [206] GET https://api.github.com:443/repos/ONLYOFFICE-QA/testing-onlyoffice/commits?per_page=100
  proxy | 2022/09/08 07:35:54 [206] * authenticating github api request
  proxy | 2022/09/08 07:35:55 [206] 200 https://api.github.com:443/repos/ONLYOFFICE-QA/testing-onlyoffice/commits?per_page=100
  proxy | 2022/09/08 07:35:55 [208] GET https://rubygems.org:443/api/v1/gems/oauth-tty.json
  proxy | 2022/09/08 07:35:55 [208] 200 https://rubygems.org:443/api/v1/gems/oauth-tty.json
  proxy | 2022/09/08 07:35:55 [210] GET https://gitlab.com:443/api/v4/projects/oauth-xx%2Foauth-tty%2F-%2Ftree%2Fv1.0.3%2F/repository/tags?
  proxy | 2022/09/08 07:35:55 [210] 404 https://gitlab.com:443/api/v4/projects/oauth-xx%2Foauth-tty%2F-%2Ftree%2Fv1.0.3%2F/repository/tags?
  proxy | 2022/09/08 07:35:55 [212] GET https://gitlab.com:443/api/v4/projects/oauth-xx%2Foauth-tty%2F-%2Ftree%2Fv1.0.3%2F?
  proxy | 2022/09/08 07:35:55 [212] 404 https://gitlab.com:443/api/v4/projects/oauth-xx%2Foauth-tty%2F-%2Ftree%2Fv1.0.3%2F?
  proxy | 2022/09/08 07:35:55 [214] GET https://gitlab.com:443/oauth-xx/oauth-tty/-/tree/v1.0.3.git/info/refs?service=git-upload-pack
  proxy | 2022/09/08 07:35:56 [214] 500 https://gitlab.com:443/oauth-xx/oauth-tty/-/tree/v1.0.3.git/info/refs?service=git-upload-pack
  proxy | 2022/09/08 07:35:56 [217] GET https://gitlab.com:443/oauth-xx/oauth-tty/-/tree/v1.0.3/.git/info/refs?service=git-upload-pack
  proxy | 2022/09/08 07:35:56 [217] 302 https://gitlab.com:443/oauth-xx/oauth-tty/-/tree/v1.0.3/.git/info/refs?service=git-upload-pack
  proxy | 2022/09/08 07:35:56 [219] GET https://gitlab.com:443/oauth-xx/oauth-tty/-/tree/v1.0.3
  proxy | 2022/09/08 07:35:56 [219] 200 https://gitlab.com:443/oauth-xx/oauth-tty/-/tree/v1.0.3
updater | I, [2022-09-08T07:35:56.860150 #7]  INFO -- sentry: ** [Raven] Sending event f23936638f9848a69f12a4059867ebac to Sentry
  proxy | 2022/09/08 07:35:57 [221] POST https://sentry.io:443/api/1451818/store/
  proxy | 2022/09/08 07:35:57 [221] 200 https://sentry.io:443/api/1451818/store/
updater | ERROR <job_454839622> Error processing oauth-tty (RuntimeError)

This is probably because oauth-tty source hosted on gitlab

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

No response

Smallest manifest that reproduces the issue

No response

ShockwaveNN avatar Sep 08 '22 07:09 ShockwaveNN

Same problem from version_gem from same developers and seems same problem from gitlab

Any possible workarounds for this problem?

Judging by logs - problems on getting diff commits stage? Maybe skip this one somehow

ShockwaveNN avatar Sep 20 '22 13:09 ShockwaveNN

Hi, seems this issue is resolved and I got updates for both of those libraries

Can we close this issue? Is there any commit which fixed it?

ShockwaveNN avatar Oct 21 '22 17:10 ShockwaveNN

Yes, this was fixed by https://github.com/dependabot/dependabot-core/pull/5929, thanks for letting me know since I had not seen this ticket 👍.

deivid-rodriguez avatar Oct 21 '22 17:10 deivid-rodriguez

Yeah thanks for fixing it )

ShockwaveNN avatar Oct 21 '22 17:10 ShockwaveNN