Dependabot keeps timing out #10309
Comments
github-actions
bot
added
L: git:submodules
|
I'm experiencing the same issue, the job is cancelled after 55 minutes. here is my |
|
The timeout is due to the github actions runner timing out. The question is, why dependabot takes such amount of time to finish the update... |
|
We have the same issue. In our case Dependabot stalls while trying to update NPM deps in our package.json only (all other Dependabot jobs run fine). In the logs we only see this at the end: After the line |
|
is there any progress with this? did someone found a workaround? I've tried different grouping config for different package managers, segment them so that there's not so much packages being updated in a single job, but no meaningful improvement. |
|
For our repository, I notice that there's a lot of time between each group item check: What's happening that could take 40s? That seems.to be the bottleneck resulting in our timeouts. |
|
My guess is that the group logic is doing something (like resetting some state) in between group items, which probably could be skipped when nothing is updated. At least, that way, groups with no updates would not act as a bottleneck? Note that our repository is a fairly big npm monorepo with a lockfile > 2MB. |
|
I'm also experiencing an odd issue with this that I posted in another project: tinglesoftware/dependabot-azure-devops#1477 At first I wasn't sure if this was just related to the Azure DevOps Dependabot extension and although in this case the immediate symptom is different because of the extension not using the OpenTelemetry collector, I imagine it's the same underlying issue. My log file will just show the same message repeat once every minute until the task times out: dependabot.yml I opted to remove the groups/grouping and unfortunately it's the same behavior as before. |
Is there an existing issue for this?
Package ecosystem
npm
Package manager version
No response
Language version
Node 18/20
Manifest location and content before the Dependabot update
package.json
dependabot.yml content
Updated dependency
No response
What you expected to see, versus what you actually saw
In my repo, https://github.com/tue-robotics/hero-display/, the dependabot run fails with a cancellation after 55min. This is consistent for all runs. (Todays run: https://github.com/tue-robotics/hero-display/actions/runs/10156215532/job/28084233111)
Native package manager behavior
No response
Images of the diff or a link to the PR, issue, or logs
Continuation of #9268
Smallest manifest that reproduces the issue
No response
The text was updated successfully, but these errors were encountered: