elastic / elastic/apm-agent-python

dependabot is failing

未关闭
#2,138 1 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
agent-python
主要语言
Python
星标
431
派生
239
平均合并
5 天 10 小时
30 天内合并 PR
7

描述

See [here](https://github.com/elastic/apm-agent-python/actions/runs/11248516257/job/31273784137#step:3:71)

```
Dependabot can't update vulnerable dependencies without a lockfile
The currently installed version can't be determined.

To resolve the issue add a supported lockfile (Pipfile.lock, pyproject.lock or poetry.lock).
```

and

```
proxy | 2024/10/09 04:59:47 [015] GET [https://pypi.org:443/simple/django/](https://pypi.org/simple/django/)
proxy | 2024/10/09 04:59:47 [015] 200 [https://pypi.org:443/simple/django/](https://pypi.org/simple/django/)
updater | 2024/10/09 04:59:47 INFO Filtered out 4 yanked versions
updater | 2024/10/09 04:59:47 INFO Latest version is 5.1.2
updater | 2024/10/09 04:59:47 INFO Dependabot can't update vulnerable dependencies for projects without a lockfile or pinned version requirement as the currently installed version of django isn't known.
proxy | 2024/10/09 04:59:48 [019] POST /update_jobs/898200968/record_update_job_error
proxy | 2024/10/09 04:59:48 [019] 204 /update_jobs/898200968/record_update_job_error
proxy | 2024/10/09 04:59:48 [021] PATCH /update_jobs/898200968/mark_as_processed
proxy | 2024/10/09 04:59:48 [021] 204 /update_jobs/898200968/mark_as_processed
updater | 2024/10/09 04:59:48 INFO Finished job processing
updater | 2024/10/09 04:59:48 INFO Results:
Dependabot encountered '1' error(s) during execution, please check the logs for more details.
+-------------------------------+
| Errors |
+-------------------------------+
| dependency_file_not_supported |
+-------------------------------+
Failure running container 2c5d1c36c565c[53](https://github.com/elastic/apm-agent-python/actions/runs/11248516257/job/31273784137#step:3:55)e22f55c108d9f5d3ce9ca87b269cfcdf12f92aa89569091d4
Cleaned up container 2c5d1c36c565c53e22f55c108d9f5d3ce9ca87b269cfcdf12f92aa89569091d4
proxy | 2024/10/09 04:59:48 Posting metrics to remote API endpoint
2024/10/09 04:59:48 0/9 calls cached (0%)
Error: Dependabot encountered an error performing the update

Error: The updater encountered one or more errors.
```

贡献指南

打开贡献指南

调研方向

从链接的 GitHub Actions 运行开始,检查 Dependabot 使用的依赖配置。确定受支持的锁定文件或固定版本要求是否合适,然后验证 Dependabot 能否识别已安装的 Django 版本并成功完成其更新任务。

由索引模型根据 Issue 内容生成。

评估

技术栈
github-actions, python
领域
ci-cd, devops
Issue 类型
缺陷
难度
3/5
预计耗时
1-2 天
活跃度
停滞
描述清晰度
基本清楚
新手友好度
25/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。