dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.55k stars 954 forks source link

[Question]: logs from containers? #10146

Open icholy opened 2 months ago

icholy commented 2 months ago

I'm encountering the following error:

{
  "data": {
    "error-type": "dependency_file_not_resolvable",
    "error-details": {
      "message": "Dependabot uses Node.js v20.13.0\n and NPM 10.5.2\n. Due to the engine-strict setting, the update will not succeed."
    }
  },
  "type": "record_update_job_error"
}

But my engines constraints are using:

{
    "node": ">=20",
    "npm": ">=9"
}

This error is emitted here:

https://github.com/dependabot/dependabot-core/blob/e5ec7e97941c48582272741b2255133049467803/npm_and_yarn/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb#L423-L427

Is there a way to for me to see the whole error_message from the linked snippet?

jeffwidman commented 2 weeks ago

This seems more like a dependabot-core question, even though you're running in the context of the dependabot/cli.

To see the logs and play around a bit more, you'll probably find one of these two sections helpful:

Essentially, you want to get into a Ruby shell so that not only can you see the linked snipped, you can actually see the call that :dependabot: is making to npm and then play around directly with that.

Let me know if you need more help... I don't have time to debug this, but if you're willing to put in the time to try to debug (and potentially put up a PR fixing any issues you find) then I'm more then willing to answer questions to unblock you.