`dependabot` fails to update some dependencies

Open
#417 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
38/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Quiet
Tech stack
github-actions, python
Domain
ci-cd, devops

Research direction

Start with the linked Dependabot job logs and compare how updates are handled for mypy-requirements, requirements, and dev-requirements. Review the related issues and upstream Dependabot issue #13879; done means identifying a workable fix or confirmed workaround that creates updates for the affected dependency files.

Written by the indexing model from the issue text.

Description

I noticed that dependabot only updates aiohttp for mypy-requirements and not for requirements and dev-requirements:

  • #362
  • #409
  • #413

Because of this we had to update it manually in the past for the other files:

  • #291
  • #292
  • #328
  • #416

By at the dependabot logs it seems to notice that both requirements and dev-requirements need an update but fails to create a PR, even though the job is completed successfully (despite the errors in the log).

This seems related to the following upstream issue:

The issue doesn't seem to include any workaround, so until we find one or the issue is fixed upstream we will have to keep updating aiohttp (and possibly other deps) manually.

Dominant language
Python
Stars
61
Forks
48
Avg merge
1h 22m
Merged PRs (30d)
4

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from python/release-tools

All issues in python/release-tools

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.