Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fetch-metadata action returns / for directory output #489

Open
navruzm opened this issue Jan 29, 2024 · 1 comment
Open

fetch-metadata action returns / for directory output #489

navruzm opened this issue Jan 29, 2024 · 1 comment
Labels
bug Something isn't working

Comments

@navruzm
Copy link

navruzm commented Jan 29, 2024

I am using the dependabot/fetch-metadata action (latest version) in my workflow to handle Dependabot pull requests. However, I am encountering an issue where the directory output is returning / for all directories.

PS: I'm using Dependabot with the group feature.

Here's the dependabot.yml configuration for the repository:

version: 2
updates:
  - package-ecosystem: "gomod"
    directory: "/v1/"
    schedule:
      interval: "daily"
    groups:
      all:
        patterns:
        - "*"

  - package-ecosystem: "gomod"
    directory: "/v2/"
    schedule:
      interval: "daily"
    groups:
      all:
        patterns:
        - "*"

Here's an example of the outputs returned by the dependabot/fetch-metadata action:

Run dependabot/fetch-metadata@v1
  with:
    github-token: ***
    skip-commit-verification: false
    skip-verification: false
Parsing Dependabot metadata
Outputting metadata for 4 updated dependencies
  outputs.dependency-names: github.com/fatih/color, github.com/fatih/structtag, github.com/spf13/cobra, github.com/spf13/viper
  outputs.dependency-type: direct:production
  outputs.update-type: version-update:semver-major
  outputs.directory: /
  outputs.package-ecosystem: go_modules
  outputs.target-branch: main
  outputs.previous-version: 
  outputs.new-version: 
  outputs.compatibility-score: 0
  outputs.maintainer-changes: false
  outputs.dependency-group: all
  outputs.alert-state: 
  outputs.ghsa-id: 
  outputs.cvss: 0

Here is the example PR link: https://github.com/navruzm/depbot/pull/1

@navruzm navruzm added the bug Something isn't working label Jan 29, 2024
@dreid
Copy link

dreid commented Feb 16, 2024

This issue is caused by https://github.com/dependabot/fetch-metadata/blob/main/src/dependabot/update_metadata.ts#L52

That code is expecting the branch name to contain the dependency name when for grouped updates it will only contain the group name, and because all the dependency names contain multiple /s it is failing to get the directory name.

This is similar to #493 and #494, but it is not addressed by my pr #495.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants