-
-
Notifications
You must be signed in to change notification settings - Fork 1.7k
getsentry/fastify-otel - pnpm install/fetch not working in CI on dependabot PRs - error code 128 #16300
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
My guess is that it is somehow related to #16287 |
possibly related: dependabot/dependabot-core#10124 |
They're suggesting a workaround by adding a ssh key just for the purpose of pnpm being able to clone, but it's a bit hacky imho. |
Hi @jlowcs, thanks for bringing this up. Tricky one, seems to be a pnpm issue but we'll need to think of possible alternatives. That being said, we are not expecting to push many updates to that fork. It's also a temporary fork until our next major where we'll switch back to installing the upstream package. I know it's not satisfactory but my only suggestion for now is to fix the lockfile manually. |
After bumping Sentry to the latest version, it seems to have fixed the issue. The dependabot PRs are now passing the CI without issues. I don't know if it's the Sentry bump or if it's a change on dependabot's side that fixed it though. |
This will probably reappear the next time dependabot tries to update this. Thanks again for raising this, we're looking into just vendoring the instrumentation in directly. |
Hi, this has been resolved with |
Is there an existing issue for this?
How do you use Sentry?
Sentry Saas (sentry.io)
Which SDK are you using?
@sentry/browser
SDK Version
Framework Version
No response
Link to Sentry event
No response
Reproduction Example/SDK Setup
No response
Steps to Reproduce
A dependabot PR updated our pnpm lockfile, replacing
https://codeload.github.com
withgit+https://git@github.com
For instance,
became
This change is being applied on all dependabot PRs, even those that don't bump Sentry.
This results in our CI not passing anymore, both in CircleCI and in Github Actions:
This might be related to #16295.
Expected Result
pnpm i
should work on dependabot PRs.Actual Result
pnpm i
fails on dependabot PRs.The text was updated successfully, but these errors were encountered: