dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.

Home Page:https://docs.github.com/en/code-security/dependabot

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

dependabot.yml contained invalid details on only one pr with the same .yml as the others and no changes

Liquidmasl opened this issue · comments

Is there an existing issue for this?

  • I have searched the existing issues

Package ecosystem

docker, pip, actions

Package manager version

No response

Language version

No response

Manifest location and content before the Dependabot update

No response

dependabot.yml content

version: 2

updates:

  # Maintain dependencies for GitHub Actions
  - package-ecosystem: "github-actions"
    # Workflow files stored in the default location of `.github/workflows`. (You don't need to specify `/.github/workflows` for `directory`. You can use `directory: "/"`.)
    directory: "/"
    schedule:
      interval: "weekly"
    ignore:
      - dependency-name: "*"
        update-types: [ "version-update:semver-patch" ]


  - package-ecosystem: "pip"
    directory:
      - "processing/intern_depend/cirq_logger"
      - "processing/intern_depend/config_loader"
      - "processing/intern_depend/flasker"
      - "processing/intern_depend/pointqloud"
      - "processing/intern_depend"
      - "processing/containers/exporter"
      - "processing/containers/preprocessor"
      - "processing/containers/segmentor"
      - "processing/containers/separator"
      - "processing/containers/vectoriser"
    schedule:
      interval: "weekly"
    ignore:
      - dependency-name: "*"
        update-types: [ "version-update:semver-patch" ]
    groups:
      patches:
        applies-to: version-updates
        patterns:
          - "*"
        update-types:
          - "patch"

      minor:
        applies-to: version-updates
        patterns:
          - "*"
        update-types:
          - "minor"



  - package-ecosystem: "docker"
    directory:
      - "processing/intern_depend"
      - "processing/containers/exporter"
      - "processing/containers/preprocessor"
      - "processing/containers/segmentor"
      - "processing/containers/separator"
      - "processing/containers/vectoriser"
    schedule:
      interval: "weekly"
    ignore:
      - dependency-name: "*"
        update-types: [ "version-update:semver-patch" ]


Updated dependency

No response

What you expected to see, versus what you actually saw

I would like the PR to clear, but i get:

Your .github/dependabot.yml contained invalid details
Dependabot encountered the following error when parsing your .github/dependabot.yml:

The property '#/updates/1/directory' of type array did not match the following type: string
The property '#/updates/2/directory' of type array did not match the following type: string
Please update the config file to conform with Dependabot's specification.

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

because its a private company repo and this is company time i can neither provide a minimal manifest (time) not the full diff of the PR.

But i can show this

image

There was no change on the dependabot.yml and it worked fine before, also there are mutliple other PRs open with the same exact yml and they also work fine.

rerunning the github action leads to the same result

Smallest manifest that reproduces the issue

No response