dependabot / dependabot/dependabot-core
PNPM dependabot timeout
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Package ecosystem
npm (PNPM)
### Package manager version
pnpm `8.7.4`
### Language version
Node.js `18.17.1`
### Manifest location and content before the Dependabot update
```
▶ ls -1 **/package.json
apps-scripts/analytics-settings/package.json
apps-scripts/campaign-matrix/package.json
apps-scripts/input-tracking/package.json
apps-scripts/ppc-tools/package.json
apps-scripts/product-analysis/package.json
apps-scripts/restock-analytics/package.json
apps-scripts/returns/package.json
apps/artelo/api/package.json
apps/artelo/client/package.json
apps/artelo/landing/package.json
apps/artelo/package.json
apps/artelo/sls-api/package.json
apps/ecominate/api/package.json
apps/ecominate/client/package.json
apps/ecominate/landing/package.json
apps/ecominate/package.json
apps/ppc/client/package.json
apps/ppc/package.json
package.json
packages/artelo/database/package.json
packages/artelo/integrations/package.json
packages/artelo/process-image/package.json
packages/artelo/product-catalog/package.json
packages/artelo/types/package.json
packages/artelo/utils/package.json
packages/ecominate/database/package.json
packages/ecominate/integrations/package.json
packages/ecominate/shared-ui/package.json
packages/ecominate/types/package.json
packages/ecominate/utils/package.json
packages/ppc/database/package.json
packages/ppc/integrations/package.json
packages/ppc/types/package.json
packages/riptech/apps-script-utils/package.json
packages/riptech/aws/package.json
packages/riptech/emailer/package.json
packages/riptech/google/package.json
packages/riptech/logger/package.json
packages/riptech/minimal-ui/package.json
packages/riptech/shared-ui/package.json
packages/riptech/stripe/package.json
packages/riptech/test-utils/package.json
packages/riptech/utils/package.json
switch/package.json
tools/docker/package.json
tools/eslint/package.json
tools/jest-config/package.json
tools/lcov-merger/package.json
tools/tsconfig/package.json
```
### dependabot.yml content
```yaml
version: 2
updates:
- package-ecosystem: 'npm'
directory: '/'
schedule:
interval: 'weekly'
day: 'monday'
time: '05:00'
timezone: 'America/New_York'
open-pull-requests-limit: 10
target-branch: 'develop'
versioning-strategy: 'increase'
labels:
- 'dependencies'
groups:
all-dependencies:
patterns:
- '*'
ignore:
- dependency-name: '@types/node'
```
### Updated dependency
_No response_
### What you expected to see, versus what you actually saw
A PR. Got a timeout instead
### Native package manager behavior
_No response_
### Images of the diff or a link to the PR, issue, or logs
_No response_
### Smallest manifest that reproduces the issue
_No response_
Contributor guide
Research direction
Start with the root dependabot.yml and the listed package.json manifests, then review the issue's comment thread for timeout details or prior investigation. Determine whether the PNPM update can complete and create the expected PR; the missing dependency, logs, and reproduction make the completion criteria uncertain.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- node.js
- Domain
- devtools
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100