dependabot / dependabot/dependabot-core

ERROR <job_1081810948> Alias parsing was not enabled. To enable it, pass `aliases: true` to `Psych::load` or `Psych::safe_load`.

Open
#12,906 0 comments 5 reactions 0 assignees View on GitHub
L: elm L: helm L: ruby:bundler T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [x] I have searched the existing issues

### Package ecosystem

helm

### Package manager version

_No response_

### Language version

_No response_

### Manifest location and content before the Dependabot update

_No response_

### dependabot.yml content

version: 2
updates:
- package-ecosystem: "helm"
registries: "*"
directories:
- "/charts/my-chart"
schedule:
interval: "daily"

### Updated dependency

_No response_

### What you expected to see, versus what you actually saw

This probably connected to this fix: https://github.com/dependabot/dependabot-core/pull/9759
But needs to be updated also in this place: https://github.com/dependabot/dependabot-core/blob/c10b08b24851e62030400b1fb0bc047f2ee85938/helm/lib/dependabot/helm/file_updater/chart_updater.rb#L29

**Expected:** Pull request with new version was created

**Actually:**
```
updater | 2025/08/22 08:39:38 INFO Process PID: 1341 completed with status: pid 1341 exit 0
updater | 2025/08/22 08:39:38 INFO Total execution time: 1.77 seconds
updater | 2025/08/22 08:39:39 INFO Highest valid OCI tag for core-chart is 2.0.5
2025/08/22 08:39:39 INFO Latest version is 2.0.5
updater | 2025/08/22 08:39:39 INFO Requirements to unlock own
updater | 2025/08/22 08:39:39 INFO Requirements update strategy
updater | 2025/08/22 08:39:39 INFO Updating score-chart from 2.0.1 to 2.0.5
proxy | 2025/08/22 08:39:39 [056] POST /update_jobs/1081810948/record_update_job_unknown_error
proxy | 2025/08/22 08:39:39 [056] 204 /update_jobs/1081810948/record_update_job_unknown_error
proxy | 2025/08/22 08:39:39 [058] POST /update_jobs/1081810948/record_update_job_error
proxy | 2025/08/22 08:39:39 [058] 204 /update_jobs/1081810948/record_update_job_error
proxy | 2025/08/22 08:39:39 [060] POST /update_jobs/1081810948/increment_metric
proxy | 2025/08/22 08:39:39 [060] 204 /update_jobs/1081810948/increment_metric
proxy | 2025/08/22 08:39:39 [062] POST /update_jobs/1081810948/record_update_job_unknown_error
proxy | 2025/08/22 08:39:39 [062] 204 /update_jobs/1081810948/record_update_job_unknown_error
updater | 2025/08/22 08:39:39 ERROR Error processing core-chart (Psych::AliasesNotEnabled)
2025/08/22 08:39:39 ERROR Alias parsing was not enabled. To enable it, pass `aliases: true` to `Psych::load` or `Psych::safe_load`.
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:432:in 'Psych::Visitors::NoAliasRuby#visit_Psych_Nodes_Alias'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:30:in 'Psych::Visitors::Visitor#visit'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:6:in 'Psych::Visitors::Visitor#accept'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:35:in 'Psych::Visitors::ToRuby#accept'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:347:in 'block in Psych::Visitors::ToRuby#revive_hash'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:345:in 'Array#each'
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:345:in 'Enumerable#each_slice'
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:345:in 'Psych::Visitors::ToRuby#revive_hash'
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:169:in 'Psych::Visitors::ToRuby#visit_Psych_Nodes_Mapping'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:30:in 'Psych::Visitors::Visitor#visit'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:6:in 'Psych::Visitors::Visitor#accept'
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:35:in 'Psych::Visitors::ToRuby#accept'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:340:in 'block in Psych::Visitors::ToRuby#register_empty'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:340:in 'Array#each'
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:340:in 'Psych::Visitors::ToRuby#register_empty'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:148:in 'Psych::Visitors::ToRuby#visit_Psych_Nodes_Sequence'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:30:in 'Psych::Visitors::Visitor#visit'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:6:in 'Psych::Visitors::Visitor#accept'
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:35:in 'Psych::Visitors::ToRuby#accept'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:347:in 'block in Psych::Visitors::ToRuby#revive_hash'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:345:in 'Array#each'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:345:in 'Enumerable#each_slice'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:345:in 'Psych::Visitors::ToRuby#revive_hash'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:169:in 'Psych::Visitors::ToRuby#visit_Psych_Nodes_Mapping'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:30:in 'Psych::Visitors::Visitor#visit'
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:6:in 'Psych::Visitors::Visitor#accept'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:35:in 'Psych::Visitors::ToRuby#accept'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:320:in 'Psych::Visitors::ToRuby#visit_Psych_Nodes_Document'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:30:in 'Psych::Visitors::Visitor#visit'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/visitor.rb:6:in 'Psych::Visitors::Visitor#accept'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych/visitors/to_ruby.rb:35:in 'Psych::Visitors::ToRuby#accept'
2025/08/22 08:39:39 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/psych-5.1.2/lib/psych.rb:334:in 'Psych.safe_load'
updater | 2025/08/22 08:39:39 ERROR /home/dependabot/helm/lib/dependabot/helm/file_updater/chart_updater.rb:29:in 'Dependabot::Helm::FileUpdater::ChartUpdater#updated_chart_yaml_content'
```

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

_No response_

### Smallest manifest that reproduces the issue

```yaml
apiVersion: v2
name: my-chart
description: My chart
type: application
version: 0.1.0
appVersion: 1.0.0

dependencies:
- &core-chart
name: core-chart
version: 2.0.1
repository: "oci://ghcr.io/my-org/charts"
alias: my-chart
condition: my-chart.enabled
- <<: *core-chart
alias: oidc-mock
condition: oidc-mock.enabled
- <<: *core-chart
alias: mountebank
condition: mountebank.enabled
```

Contributor guide

Open the contributing guide

Research direction

Start with helm/lib/dependabot/helm/file_updater/chart_updater.rb:29 and compare it with the referenced fix in pull request 9759. Reproduce the failure using the smallest manifest in the issue, then verify that a chart containing YAML aliases can be updated and produces the expected new-version pull request.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, ruby
Domain
tooling
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.