Open amureki opened 4 months ago
@abdulapopoola thank you for adding this to the project! I wonder if it is possible to get information on the process. Is there something to be done, can I help with moving this forward?
The issue here means that right now we cannot rely on dependabot to do the job it is supposed to do - update our dependencies.
Getting same error, seems to be related to NPM V10.
Dependabot can't resolve your JavaScript dependency files
Dependabot failed to update your dependencies because there was an error resolving your JavaScript dependency files.
Dependabot encountered the following error:
Dependabot uses Node.js v20.16.0 and NPM 10.8.1. Due to the engine-strict setting, the update will not succeed.
Curious since it's inside defined range of npm and node versions in package.json:
"engines": {
"node": ">=20.15.0",
"npm": ">=10.7.0"
},
From log
Dependabot encountered '3' error(s) during execution, please check the logs for more details.
+----------------------------------------------------------------+
| Dependencies failed to update |
+-------------------------------+--------------------------------+
| @fortawesome/fontawesome-free | dependency_file_not_resolvable |
| tailwindcss | dependency_file_not_resolvable |
| eslint-plugin-n | dependency_file_not_resolvable |
+-------------------------------+--------------------------------+
Failure running container a6c2610781485ad9fc036538ab247374a7a35622deaf45bfbd0c6ae61e469417
Cleaned up container a6c2610781485ad9fc036538ab247374a7a35622deaf45bfbd0c6ae61e469417
proxy | 2024/07/26 04:05:29 10/92 calls cached (10%)
proxy | 2024/07/26 04:05:29 Posting metrics to remote API endpoint
Error: Dependabot encountered an error performing the update
Error: The updater encountered one or more errors.
Found someone else with same problem: https://github.com/oaknational/Oak-Web-Application/pull/2484
updater | 2024/07/26 04:05:15 INFO <job_860834412> Checking if @fortawesome/fontawesome-free 6.5.2 needs updating
proxy | 2024/07/26 04:05:15 [083] GET https://registry.npmjs.org:443/@fortawesome%2Ffontawesome-free
proxy | 2024/07/26 04:05:15 [083] 200 https://registry.npmjs.org:443/@fortawesome%2Ffontawesome-free
proxy | 2024/07/26 04:05:15 [085] HEAD https://registry.npmjs.org:443/@fortawesome/fontawesome-free/-/fontawesome-free-6.6.0.tgz
proxy | 2024/07/26 04:05:15 [085] 200 https://registry.npmjs.org:443/@fortawesome/fontawesome-free/-/fontawesome-free-6.6.0.tgz
updater | 2024/07/26 04:05:15 INFO <job_860834412> Latest version is 6.6.0
proxy | 2024/07/26 04:05:15 [087] GET https://registry.npmjs.org:443/photobooth
proxy | 2024/07/26 04:05:15 [087] 200 https://registry.npmjs.org:443/photobooth
proxy | 2024/07/26 04:05:17 [089] GET https://registry.npmjs.org:443/@fortawesome%2ffontawesome-free
proxy | 2024/07/26 04:05:17 [089] 200 https://registry.npmjs.org:443/@fortawesome%2ffontawesome-free
proxy | 2024/07/26 04:05:17 [091] GET https://registry.npmjs.org:443/photobooth
2024/07/26 04:05:17 [091] 200 https://registry.npmjs.org:443/photobooth
updater | 2024/07/26 04:05:17 INFO <job_860834412> Requirements to unlock own
proxy | 2024/07/26 04:05:17 [093] GET https://registry.npmjs.org:443/photobooth
2024/07/26 04:05:17 [093] 200 https://registry.npmjs.org:443/photobooth
updater | 2024/07/26 04:05:17 INFO <job_860834412> Requirements update strategy bump_versions
updater | 2024/07/26 04:05:17 INFO <job_860834412> Updating @fortawesome/fontawesome-free from 6.5.2 to 6.6.0
proxy | 2024/07/26 04:05:18 [095] POST /update_jobs/860834412/record_update_job_error
proxy | 2024/07/26 04:05:18 [095] 204 /update_jobs/860834412/record_update_job_error
updater | 2024/07/26 04:05:18 INFO <job_860834412> Handled error whilst updating @fortawesome/fontawesome-free: dependency_file_not_resolvable {:message=>"Dependabot uses Node.js v20.16.0 and NPM 10.8.1. Due to the engine-strict setting, the update will not succeed."}
Where does https://registry.npmjs.org:443/photobooth
come from?
The repo is called photobooth
having trouble on... but it is not available via npmjs ... That's a different project.
Is there an existing issue for this?
Package ecosystem
npm
Package manager version
10.2.4
Language version
20.11.0
Manifest location and content before the Dependabot update
This is my
package.json
, located in the root project folder:dependabot.yml content
Updated dependency
No response
What you expected to see, versus what you actually saw
As of today, I see a list of outdated dependencies, while Dependabot states:
No PRs affected
. In dependabot logs I see the following:This started several months before, without me touching the dependency logic.
Native package manager behavior
Images of the diff or a link to the PR, issue, or logs
No response
Smallest manifest that reproduces the issue
No response