Closed janedbal closed 7 months ago
@janedbal I think this action: WyriHaximus/github-action-composer.lock-diff is not resolving the HEAD branch correctly and as far as I can see, it doesn't allow to customize it. Can you try with the action I created: https://github.com/marketplace/actions/composer-diff? It allows to customize the target and base branch, but I recommend leaving them at default settings. I'm using the same action in my other projects and they are working fine.
The issue is that above action resolves your base
branch as composer-dependency-analyser
which is not in the repository as you are submitting aa PR from your fork, so the branch does not exist. It should either leave that parameter empty, or set it to composer.lock
or HEAD:composer.lock
to simply take the content of the current local file.
Closing as it looks that it's not caused by this package. Please feel free to reopen this issue if needed.
Maybe the error message can be improved here?
@IonBazan Turned out the issue was in @janedbal using v1 which is indeed broken for PR's. v2 does not have that issue because it's using the checkout actions internally. Just added reasoning to my action's readme with the difference between yours and mine: https://github.com/WyriHaximus/github-action-composer.lock-diff?tab=readme-ov-file#reasoning
@WyriHaximus that explains a lot! Thanks for updating the readme and helping us with the issue. Let me know if you have any ideas or improvements for the action I created, feel free to propose PRs there too.
See job output: https://github.com/qossmic/deptrac/actions/runs/8007789467/job/21872726582?pr=1374
Maybe related to the fact that the newly added package in the PR has
composer.lock
committed and notexport-ignore
d in.gitattributes
, but I'm guessing here.