Skip to content

Add missing dependencies arg to readme example#419

Merged
jeffwidman merged 1 commit intomainfrom
add-missing-dependencies-arg
Apr 2, 2025
Merged

Add missing dependencies arg to readme example#419
jeffwidman merged 1 commit intomainfrom
add-missing-dependencies-arg

Conversation

@jeffwidman
Copy link
Member

@jeffwidman jeffwidman commented Apr 1, 2025

Without this, I get the following error:

updater | 2025/04/01 22:28:59 ERROR Passed `nil` into T.must
updater | 2025/04/01 22:28:59 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11952/lib/types/_types.rb:222:in `must'
updater | 2025/04/01 22:28:59 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_snapshot.rb:87:in `block in allowed_dependencies'
updater | 2025/04/01 22:28:59 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_snapshot.rb:87:in `select'
updater | 2025/04/01 22:28:59 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_snapshot.rb:87:in `allowed_dependencies'

This is because in Dependabot-Core, security updates are required to explicitly pass in the desired dependencies:
https://github.com/dependabot/dependabot-core/blob/c8681bf6c474567f471128fbe37383706a22c647/updater/lib/dependabot/dependency_snapshot.rb#L86-L87

@jeffwidman jeffwidman requested a review from a team as a code owner April 1, 2025 22:59
Without this, I get the following error:
```shell
updater | 2025/04/01 22:28:59 ERROR Passed `nil` into T.must
updater | 2025/04/01 22:28:59 ERROR /home/dependabot/dependabot-updater/vendor/ruby/3.3.0/gems/sorbet-runtime-0.5.11952/lib/types/_types.rb:222:in `must'
updater | 2025/04/01 22:28:59 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_snapshot.rb:87:in `block in allowed_dependencies'
updater | 2025/04/01 22:28:59 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_snapshot.rb:87:in `select'
updater | 2025/04/01 22:28:59 ERROR /home/dependabot/dependabot-updater/lib/dependabot/dependency_snapshot.rb:87:in `allowed_dependencies'
```

This is because in Dependabot-Core, if it's a security update, it's required to explicitly pass in the desired `dependencies`:
https://github.com/dependabot/dependabot-core/blob/c8681bf6c474567f471128fbe37383706a22c647/updater/lib/dependabot/dependency_snapshot.rb#L86-L87
@jeffwidman jeffwidman force-pushed the add-missing-dependencies-arg branch from 57346d8 to 7aa22c9 Compare April 1, 2025 23:02
@jeffwidman jeffwidman added this pull request to the merge queue Apr 2, 2025
Merged via the queue into main with commit 0645a6c Apr 2, 2025
76 checks passed
@jeffwidman jeffwidman deleted the add-missing-dependencies-arg branch April 2, 2025 17:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants