Skip to content

Dependabot crashes for some repositories that use uv.lock #594

@redeboer

Description

@redeboer

Since #566 (#565), uv.lock, GitHub Workflows, Manifest.toml, and .pre-commit-config.yaml (#592) are upgraded through Dependabot. This works well for some repositories that have committed uv.lock files (e.g. RUB-EP1/lite#13), but for many repositories with larger uv.lock files, Dependabot crashes without a clear cause. See e.g.:

For public repositories, pre-commit.ci eventually triggers the lock upgrade (e.g. ComPWA/qrules#330), but this does not work in private repositories (see this crash). This is a problem, since #566 has completely replaced the upgrade trigger from private repositories by Dependabot.

Two points:

Metadata

Metadata

Assignees

Labels

🐛 BugSomething isn't working

Type

No fields configured for Bug.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions