dependabot / dependabot/dependabot-core

PNPM dependabot timeout

Open
#8,008 14 comments 11 reactions 0 assignees View on GitHub
L: javascript:pnpm T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Package ecosystem

npm (PNPM)

### Package manager version

pnpm `8.7.4`

### Language version

Node.js `18.17.1`

### Manifest location and content before the Dependabot update

```
▶ ls -1 **/package.json
apps-scripts/analytics-settings/package.json
apps-scripts/campaign-matrix/package.json
apps-scripts/input-tracking/package.json
apps-scripts/ppc-tools/package.json
apps-scripts/product-analysis/package.json
apps-scripts/restock-analytics/package.json
apps-scripts/returns/package.json
apps/artelo/api/package.json
apps/artelo/client/package.json
apps/artelo/landing/package.json
apps/artelo/package.json
apps/artelo/sls-api/package.json
apps/ecominate/api/package.json
apps/ecominate/client/package.json
apps/ecominate/landing/package.json
apps/ecominate/package.json
apps/ppc/client/package.json
apps/ppc/package.json
package.json
packages/artelo/database/package.json
packages/artelo/integrations/package.json
packages/artelo/process-image/package.json
packages/artelo/product-catalog/package.json
packages/artelo/types/package.json
packages/artelo/utils/package.json
packages/ecominate/database/package.json
packages/ecominate/integrations/package.json
packages/ecominate/shared-ui/package.json
packages/ecominate/types/package.json
packages/ecominate/utils/package.json
packages/ppc/database/package.json
packages/ppc/integrations/package.json
packages/ppc/types/package.json
packages/riptech/apps-script-utils/package.json
packages/riptech/aws/package.json
packages/riptech/emailer/package.json
packages/riptech/google/package.json
packages/riptech/logger/package.json
packages/riptech/minimal-ui/package.json
packages/riptech/shared-ui/package.json
packages/riptech/stripe/package.json
packages/riptech/test-utils/package.json
packages/riptech/utils/package.json
switch/package.json
tools/docker/package.json
tools/eslint/package.json
tools/jest-config/package.json
tools/lcov-merger/package.json
tools/tsconfig/package.json
```

### dependabot.yml content

```yaml
version: 2
updates:
- package-ecosystem: 'npm'
directory: '/'
schedule:
interval: 'weekly'
day: 'monday'
time: '05:00'
timezone: 'America/New_York'
open-pull-requests-limit: 10
target-branch: 'develop'
versioning-strategy: 'increase'
labels:
- 'dependencies'
groups:
all-dependencies:
patterns:
- '*'
ignore:
- dependency-name: '@types/node'
```

### Updated dependency

_No response_

### What you expected to see, versus what you actually saw

A PR. Got a timeout instead

### Native package manager behavior

_No response_

### Images of the diff or a link to the PR, issue, or logs

_No response_

### Smallest manifest that reproduces the issue

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the root dependabot.yml and the listed package.json manifests, then review the issue's comment thread for timeout details or prior investigation. Determine whether the PNPM update can complete and create the expected PR; the missing dependency, logs, and reproduction make the completion criteria uncertain.

Written by the indexing model from the issue text.

Assessment

Tech stack
node.js
Domain
devtools
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.