[
https://issues.apache.org/jira/browse/CAMEL-20138?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17803204#comment-17803204
]
Aurélien Pupier edited comment on CAMEL-20138 at 1/4/24 3:06 PM:
-----------------------------------------------------------------
The local dependabot update finished (took 2 hours):
dependabot update --timeout 150m maven apache/camel
{noformat}
updater |
+------------------------------------------------------------------------------------------------------------------------------------+
updater | | Changes to
Dependabot Pull Requests |
updater |
+---------+--------------------------------------------------------------------------------------------------------------------------+
updater | | created | com.fasterxml.jackson:jackson-bom ( from 2.15.3 to 2.16.1
), com.fasterxml.jackson.core:jackson-databind ( from 2.15.... |
updater | | created | com.google.protobuf:protobuf-java ( from 3.23.4 to 3.25.1
), com.google.protobuf:protobuf-java-util ( from 3.23.4 to ... |
updater | | created | org.apache.derby:derby ( from 10.16.1.1 to 10.17.1.0 ),
org.apache.derby:derbytools ( from 10.16.1.1 to 10.17.1.0 ) |
updater | | created | org.apache.httpcomponents.client5:httpclient5 ( from
5.2.1 to 5.3 ) |
updater | | created | com.squareup.okhttp3:okhttp ( from 3.14.9 to 4.12.0 ),
com.squareup.okhttp3:mockwebserver ( from 3.14.9 to 4.12.0 ) |
updater | | created | org.eclipse.californium:californium-core ( from 2.8.0 to
3.10.0 ), org.eclipse.californium:element-connector-tcp-nett... |
updater | | created | org.eclipse.californium:scandium ( from 2.8.0 to 3.10.0
), org.eclipse.californium:element-connector ( from 2.8.0 to ... |
updater | | created | com.lmax:disruptor ( from 3.4.4 to 4.0.0 )
|
updater | | created | org.wildfly.security:wildfly-elytron ( from 1.20.4.Final
to 2.2.2.Final ) |
updater | | created | com.google.auth:google-auth-library-oauth2-http ( from
1.20.0 to 1.21.0 ) |
updater | | created | com.huaweicloud.sdk:huaweicloud-sdk-core ( from
3.1.75-patch to 3.1.76 ), com.huaweicloud.sdk:huaweicloud-sdk-frs ( f... |
updater | | created | org.jgroups:jgroups ( from 5.3.0.Final to 5.3.1.Final )
|
updater | | created | com.atlassian.sal:sal-api ( from 5.1.4 to 5.2.0 )
|
updater | | created | io.vertx:vertx-web-client ( from 4.4.6 to 4.5.1 ),
io.vertx:vertx-web ( from 4.4.6 to 4.5.1 ), io.vertx:vertx-auth-pr... |
updater | | created | org.apache.directory.server:apacheds-server-jndi ( from
2.0.0.AM26 to 2.0.0.AM27 ), org.apache.directory.server:apach... |
updater | | created | io.smallrye:smallrye-health ( from 4.0.4 to 4.1.0 )
|
updater | | created | io.nats:jnats ( from 2.17.1 to 2.17.2 )
|
updater | | created | io.opentelemetry:opentelemetry-semconv ( from
1.23.1-alpha to 1.30.1-alpha ) |
updater | | created | com.cloudbees.thirdparty:zendesk-java-client ( from
0.23.0 to 0.24.1 ) |
updater | | created | org.apache.camel.k:camel-k-crds ( from 2.1.0 to 2.2.0 )
|
updater |
+---------+--------------------------------------------------------------------------------------------------------------------------+
{noformat}
but despite it says it has created PR, I do not know where...
was (Author: apupier):
The local dependabot update finished (took 2 hours):
{noformat}
updater |
+------------------------------------------------------------------------------------------------------------------------------------+
updater | | Changes to
Dependabot Pull Requests |
updater |
+---------+--------------------------------------------------------------------------------------------------------------------------+
updater | | created | com.fasterxml.jackson:jackson-bom ( from 2.15.3 to 2.16.1
), com.fasterxml.jackson.core:jackson-databind ( from 2.15.... |
updater | | created | com.google.protobuf:protobuf-java ( from 3.23.4 to 3.25.1
), com.google.protobuf:protobuf-java-util ( from 3.23.4 to ... |
updater | | created | org.apache.derby:derby ( from 10.16.1.1 to 10.17.1.0 ),
org.apache.derby:derbytools ( from 10.16.1.1 to 10.17.1.0 ) |
updater | | created | org.apache.httpcomponents.client5:httpclient5 ( from
5.2.1 to 5.3 ) |
updater | | created | com.squareup.okhttp3:okhttp ( from 3.14.9 to 4.12.0 ),
com.squareup.okhttp3:mockwebserver ( from 3.14.9 to 4.12.0 ) |
updater | | created | org.eclipse.californium:californium-core ( from 2.8.0 to
3.10.0 ), org.eclipse.californium:element-connector-tcp-nett... |
updater | | created | org.eclipse.californium:scandium ( from 2.8.0 to 3.10.0
), org.eclipse.californium:element-connector ( from 2.8.0 to ... |
updater | | created | com.lmax:disruptor ( from 3.4.4 to 4.0.0 )
|
updater | | created | org.wildfly.security:wildfly-elytron ( from 1.20.4.Final
to 2.2.2.Final ) |
updater | | created | com.google.auth:google-auth-library-oauth2-http ( from
1.20.0 to 1.21.0 ) |
updater | | created | com.huaweicloud.sdk:huaweicloud-sdk-core ( from
3.1.75-patch to 3.1.76 ), com.huaweicloud.sdk:huaweicloud-sdk-frs ( f... |
updater | | created | org.jgroups:jgroups ( from 5.3.0.Final to 5.3.1.Final )
|
updater | | created | com.atlassian.sal:sal-api ( from 5.1.4 to 5.2.0 )
|
updater | | created | io.vertx:vertx-web-client ( from 4.4.6 to 4.5.1 ),
io.vertx:vertx-web ( from 4.4.6 to 4.5.1 ), io.vertx:vertx-auth-pr... |
updater | | created | org.apache.directory.server:apacheds-server-jndi ( from
2.0.0.AM26 to 2.0.0.AM27 ), org.apache.directory.server:apach... |
updater | | created | io.smallrye:smallrye-health ( from 4.0.4 to 4.1.0 )
|
updater | | created | io.nats:jnats ( from 2.17.1 to 2.17.2 )
|
updater | | created | io.opentelemetry:opentelemetry-semconv ( from
1.23.1-alpha to 1.30.1-alpha ) |
updater | | created | com.cloudbees.thirdparty:zendesk-java-client ( from
0.23.0 to 0.24.1 ) |
updater | | created | org.apache.camel.k:camel-k-crds ( from 2.1.0 to 2.2.0 )
|
updater |
+---------+--------------------------------------------------------------------------------------------------------------------------+
{noformat}
but despite it says it has created PR, I do not know where...
> Avoid time out during dependabot Check Update job
> -------------------------------------------------
>
> Key: CAMEL-20138
> URL: https://issues.apache.org/jira/browse/CAMEL-20138
> Project: Camel
> Issue Type: Task
> Components: build system
> Reporter: Aurélien Pupier
> Priority: Major
>
> The dependabot jobs are currently taking more than 45 minutes and are failing
> in timeout -(not a problem right now as it always has enough dependencies
> update to provide)-
> {noformat}
> proxy | 2023/11/21 06:29:21 proxy starting, commit:
> 6cffd6fae1b2f713f2d837bc45fe916f855c821d
> {noformat}
> {noformat}
> updater | time="2023-11-21T07:15:42Z" level=warning msg="timeout running job"
> error="waiting for updater: waiting for container: context deadline exceeded"
> job_id=752523002
> updater | 2023/11/21 07:15:42 Unsolicited response received on idle HTTP
> channel starting with "0\r\n"; err=<nil>
> updater | 2023/11/21 07:15:42 Unsolicited response received on idle HTTP
> channel starting with "0\r\n"; err=<nil>
> {noformat}
> [GitHub is suggesting to limit the number of dependencies to
> check|https://docs.github.com/en/code-security/dependabot/working-with-dependabot/troubleshooting-dependabot-errors#dependabot-timed-out-during-its-update]
> (but in our case we will miss the purpose of it)
> One point that i observed is that the Apache snapshot repository is checked.
> As far as I know it is usually a slow one and i do not think that we care
> about snapshots version. i think this could be the first point to try:
> removing the Apache Snapshots repo during this check
> {noformat}
> proxy | 2023/11/21 06:45:01 [390] HEAD
> https://repository.apache.org:443/snapshots/org/infinispan/infinispan-core/14.0.21.Final/infinispan-core-14.0.21.Final.test-jar
> {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
