On a repository using the path-filtering-orb and dependabot, when a change occurs on main dependabot will update it's open PR's by rebasing and force pushing.
The CIRCLE_SHA1 that is then passed to the build contains a SHA that no longer exists (wiped out by the force push) and the checkout then fails with a fatal: reference is not a tree: SHA.
This slight change wraps the checkout in a try block and falls back on checking out HEAD~1 should that happen.
NOTE: This will only really catch single commit force pushes. It's possible you could use main instead of HEAD~1 to handle more than 1 commit, but that would result in more things being built. This was a very specific edge case for working with dependabot.
On a repository using the
path-filtering-orband dependabot, when a change occurs onmaindependabot will update it's open PR's by rebasing and force pushing.The
CIRCLE_SHA1that is then passed to the build contains a SHA that no longer exists (wiped out by the force push) and the checkout then fails with afatal: reference is not a tree: SHA.This slight change wraps the checkout in a try block and falls back on checking out
HEAD~1should that happen.NOTE: This will only really catch single commit force pushes. It's possible you could use
maininstead ofHEAD~1to handle more than 1 commit, but that would result in more things being built. This was a very specific edge case for working with dependabot.