CODEWITHSUNDEEP
dockergitlabgitlab-cidependabotdependabot-script
Kévin
Kévin

Reputation: 39

Dependabot on GitLab can not find file or directory error

I'm trying to integrate dependabot on a project that is on GitLab. I followed the official doc or even another doc.

https://gitlab.com/dependabot-gitlab/dependabot-standalone

https://kkurko.hashnode.dev/keep-your-dependencies-up-to-date-with-dependabot-on-gitlab#heading-create-github-personal-access-token

On both, I can launch a dependabot job but I still get the same error

[2024-04-26 09:03:30 +0000] INFO  -- [dep-update: XX/services/XX=>composer] Fetching configuration file .gitlab/dependabot.yml from branch master for project XX/services/XX
[2024-04-26 09:03:31 +0000] INFO  -- [dep-update: XX/services/XX=>composer] Fetching vulnerability data from GitHub advisory database
[2024-04-26 09:03:31 +0000] INFO  -- [dep-update: XX/services/XX=>composer]   fetching COMPOSER vulnerabilities
[2024-04-26 09:04:21 +0000] INFO  -- [dep-update: XX/services/XX=>composer]   fetched 6250 vulnerabilities
[2024-04-26 09:04:30 +0000] INFO  -- [dep-update: XX/services/XX=>composer] Processing dependency beberlei/doctrineextensions
[2024-04-26 09:04:30 +0000] ERROR -- [dep-update: XX/services/XX=>composer] No such file or directory - php
[2024-04-26 09:04:30 +0000] ERROR -- [dep-update: XX/services/XX=>composer] /usr/local/lib/ruby/3.1.0/open3.rb:222:in `spawn'

dependabot.yml

version: 2
updates:
  - package-ecosystem: composer
    directory: /
    commit-message:
      prefix: chore
    schedule:
      interval: daily
      time: '07:00'
      timezone: Europe/Paris
    open-pull-requests-limit: 1
    ignore:
      - dependency-name: symfony/* # Empêche de passer en Symfony 7
        versions: ['>=6.5']

The pipeline schedule configuration enter image description here

I don't understand this error.

Upvotes: 0

Views: 168

Answers (1)

jeffrey.d.m
jeffrey.d.m

Reputation: 867

This appears to be an issue with which docker image you are using. You may be using the core image, rather than the one specific to your use case.

From the docs:

Core image contains code for running web and worker containers. This image does not contain any package managers or language runtimes.

So what is the problem?

  • Don't use: docker.io/andrcuns/dependabot-gitlab:3.40.1-alpha.1
  • DO use: docker.io/andrcuns/dependabot-gitlab-composer:3.40.1-alpha.1

For a list of the available package manager images available, see the docs: https://dependabot-gitlab.gitlab.io/dependabot/guide/#updater

Upvotes: 0

Related Questions