-
-
Notifications
You must be signed in to change notification settings - Fork 66
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Test for Nuget auth fix #927
Conversation
Pushed a new image. To test: - task: dependabot@1
inputs:
dockerImageTag: '1.25.2-pullrequest0927-0005'
// your other inputs here ... |
Hi,
then eventually
The strange thing here is, that the package is not contained in the private feed at all. We don't use any upstream but load public packages always directly from public source (nuget.org). Only our own packages are available from the private feed. So I totally don't get what it is doing at all... |
Will give it some tries over the weekend. |
I just tried but no luck for me neither
so 'same` as here #921 (comment) |
Gave it a test run a little while ago and my result is basically the same, that it doesn't work with private registries (Azure Artifacts in my case) Also... I tried comparing the logs between 1.24:
1.25.2-pullrequest0927-0005:
and shortly after failing with the following stacktrace:
|
01a6c74
to
a273205
Compare
Thanks @cyberblast @davesmits , @JensSchadron for reporting. I am also testing this and getting the same results. I will keep updating to the latest commit from the code repo to see if there are improvements about once a week. - task: dependabot@1
inputs:
dockerImageTag: '1.25.2-pullrequest0927-0011'
// your other inputs here ...
|
a273205
to
cb73865
Compare
Reports that the latest bits are working with private feeds but I still can't get it to work. Maybe someone else can? - task: dependabot@1
inputs:
dockerImageTag: '1.25.4-pullrequest0927-0002'
// your other inputs here ... |
The SSL error is at least gone.
|
I gave it a quick shot but seems to behave the same as before :( |
1509ed1
to
64204cf
Compare
Some more fixes have been put in. The new version for testing is - task: dependabot@1
inputs:
dockerImageTag: '1.25.4-pullrequest0927-0011'
// your other inputs here ... |
797a61e
to
9c01b59
Compare
As of today: - task: dependabot@1
inputs:
dockerImageTag: '1.26.1-pullrequest0927-0038'
// your other inputs (if any) go here ... |
Hey.
I also recognized, that it is downloading the whole https://api.nuget.org/v3-flatcontainer nuspecs for every dependabot task again and again :/ we are running ~ 90 dependabot tasks in our nightly pipe (one per repo) |
@cyberblast thanks for trying this one out. Unfortunately, the changes in the upstream repo are still ongoing. For the jobs you are running at night, I recommend using |
d8aa8e3
to
a0f7ad6
Compare
As of today: - task: dependabot@1
inputs:
dockerImageTag: '1.26.1-pullrequest0927-0043'
// your other inputs (if any) go here ... |
a0f7ad6
to
1182a70
Compare
As of today: - task: dependabot@1
inputs:
dockerImageTag: '1.26.4-pullrequest0927-0002'
// your other inputs (if any) go here ... |
Updated to the mentioned version, but the issue persists. |
I did the try now got this stacktrace (just lack of ruby knowledge to do something with it)
|
1182a70
to
90a8d01
Compare
As of today: - task: dependabot@1
inputs:
dockerImageTag: '1.27.2-pullrequest0927-0002'
// your other inputs (if any) go here ... This may still not work as we wait for dependabot/dependabot-core#8927 |
90a8d01
to
d5d124a
Compare
As of today: - task: dependabot@1
inputs:
dockerImageTag: '1.27.4-pullrequest0927-0002'
// your other inputs (if any) go here ... |
Worked for me |
oke found new minor issue; workitem linking is now broken |
Did the latest changes from dependabot-core #1090 make improvements to fixing the issue? |
Updated to the mentioned version, but the issue persists. |
Using latest image is easier. |
@mburumaxwell what do you mean with using latest image is easier? Seeing the branch is deleted not merged? |
I kept this branch/PR to test changes on dependabot-core's main that had not been released/tagged without merging. All of those changes have been released/tagged recently. So using |
Thanks! I am going to rmeove the 1.24 and upgrade again 💖 |
Please note that you may still want to continue using |
No description provided.