Dependabot updates have ceased to be

[AA-Turner]

As noticed by Peter in in #137647 (comment).

Last PR was September 2024.

cc @ZeroIntensity

Linked PRs

• gh-137650: Group dependabot actions updates #145947

[ZeroIntensity]

I found this article from GitHub: https://docs.github.com/en/code-security/dependabot/troubleshooting-dependabot/dependabot-updates-stopped. Based on that, I think one of the @python/cpython-repository-admins need to deal with it in settings.

[AA-Turner]

The bot is still responding on a random old PR: #122717, and the workflow has recent runs: https://github.com/python/cpython/actions/workflows/dependabot/dependabot-updates

[AA-Turner]

@dependabot update

[ZeroIntensity]

@bedevere-bot as a fellow robot can you tell @dependabot to give us update PRs

[AA-Turner]

Ahh, I've found the (some of) the logs: https://github.com/python/cpython/network/updates/1066103475

Dependabot failed to create a pull request

Dependabot ran into an issue when attempting to create the pull request

Dependabot encountered the following error:

Failed publishing content to GitHub: Couldn't update "dependabot/pip/Tools/types-setuptools-80.9.0.20250801": Cannot change this locked branch You're not authorized to push to this branch. Visit https://docs.github.com/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches for more information.

It's trying to create a branch directly on python/cpython, not a fork, which we've banned.

A

[AA-Turner]

We can manually trigger it through https://github.com/python/cpython/network/updates (the "Check for updates" button)

[AA-Turner]

Updating github-actions failed

Dependabot encountered '1' error(s) during execution, please check the logs for more details.
+--------------------------------------------------+
|          Dependencies failed to update           |
+------------------+---------------+---------------+
| Dependency       | Error Type    | Error Details |
+------------------+---------------+---------------+
| actions/checkout | unknown_error | null          |
+------------------+---------------+---------------+

Logs

2025-08-11T18:08:12.2173895Z updater | 2025/08/11 18:08:12 INFO <job_1073159324> Checking if actions/checkout 4 needs updating
2025-08-11T18:08:12.2176895Z updater | 2025/08/11 18:08:12 INFO <job_1073159324> Ignored versions:
2025-08-11T18:08:12.2245242Z 2025/08/11 18:08:12 INFO <job_1073159324>   version-update:semver-minor - from .github/dependabot.yml
2025-08-11T18:08:12.2246395Z updater | 2025/08/11 18:08:12 INFO <job_1073159324>   version-update:semver-patch - from .github/dependabot.yml
2025-08-11T18:08:12.3092292Z   proxy | 2025/08/11 18:08:12 [171] GET https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
2025-08-11T18:08:12.3095733Z   proxy | 2025/08/11 18:08:12 [171] 200 https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
2025-08-11T18:08:12.3320858Z updater | 2025/08/11 18:08:12 INFO <job_1073159324> Available release version/ref is 5
2025-08-11T18:08:12.3321660Z 2025/08/11 18:08:12 INFO <job_1073159324> Latest version is 5
2025-08-11T18:08:12.4213021Z   proxy | 2025/08/11 18:08:12 [174] GET https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
2025-08-11T18:08:12.4214599Z 2025/08/11 18:08:12 [174] 200 https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
[... 54 duplicate lines elided ...]
2025-08-11T18:08:15.1166668Z updater | 2025/08/11 18:08:15 INFO <job_1073159324> Requirements to unlock own
2025-08-11T18:08:15.1167481Z updater | 2025/08/11 18:08:15 INFO <job_1073159324> Requirements update strategy 
2025-08-11T18:08:15.2041526Z   proxy | 2025/08/11 18:08:15 [230] GET https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
2025-08-11T18:08:15.2043207Z 2025/08/11 18:08:15 [230] 200 https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
[... 12 duplicate lines elided ...]
2025-08-11T18:08:15.8281483Z   proxy | 2025/08/11 18:08:15 Posting metrics to remote API endpoint
2025-08-11T18:08:15.9013267Z   proxy | 2025/08/11 18:08:15 [244] GET https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
2025-08-11T18:08:15.9015112Z 2025/08/11 18:08:15 [244] 200 https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
[... 80 duplicate lines elided ...]
2025-08-11T18:08:19.9794725Z   proxy | 2025/08/11 18:08:19 client received failure response
2025-08-11T18:08:20.0191473Z   proxy | 2025/08/11 18:08:20 [326] GET https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
2025-08-11T18:08:20.0193543Z 2025/08/11 18:08:20 [326] 200 https://github.com/actions/checkout.git/info/refs?service=git-upload-pack
[... 14 duplicate lines elided ...]
2025-08-11T18:08:20.7316969Z updater | 2025/08/11 18:08:20 INFO <job_1073159324> Updating actions/checkout from 4 to 5
2025-08-11T18:08:20.7385253Z updater | 2025/08/11 18:08:20 INFO <job_1073159324> Submitting actions/checkout pull request for creation
2025-08-11T18:08:21.2280242Z   proxy | 2025/08/11 18:08:21 [342] GET https://api.github.com:443/repos/python/cpython/commits?per_page=100
2025-08-11T18:08:21.2281246Z 2025/08/11 18:08:21 [342] * authenticating github api request with token for api.github.com
2025-08-11T18:08:21.2376070Z   proxy | 2025/08/11 18:08:21 client received failure response
2025-08-11T18:08:21.6045088Z   proxy | 2025/08/11 18:08:21 [342] 200 https://api.github.com:443/repos/python/cpython/commits?per_page=100
2025-08-11T18:08:21.8708086Z   proxy | 2025/08/11 18:08:21 [344] GET https://api.github.com:443/repos/actions/checkout/releases?per_page=100
2025-08-11T18:08:21.8708747Z 2025/08/11 18:08:21 [344] * authenticating github api request with token for api.github.com
2025-08-11T18:08:22.1729284Z   proxy | 2025/08/11 18:08:22 [344] 200 https://api.github.com:443/repos/actions/checkout/releases?per_page=100
2025-08-11T18:08:22.2496162Z   proxy | 2025/08/11 18:08:22 [346] GET https://api.github.com:443/repos/actions/checkout/contents/
2025-08-11T18:08:22.2496761Z 2025/08/11 18:08:22 [346] * authenticating github api request with token for api.github.com
2025-08-11T18:08:22.4322962Z   proxy | 2025/08/11 18:08:22 [346] 200 https://api.github.com:443/repos/actions/checkout/contents/
2025-08-11T18:08:22.4712037Z   proxy | 2025/08/11 18:08:22 [348] GET https://api.github.com:443/repos/actions/checkout/contents/CHANGELOG.md?ref=main
2025-08-11T18:08:22.4712714Z 2025/08/11 18:08:22 [348] * authenticating github api request with token for api.github.com
2025-08-11T18:08:22.5914184Z   proxy | 2025/08/11 18:08:22 [348] 200 https://api.github.com:443/repos/actions/checkout/contents/CHANGELOG.md?ref=main
2025-08-11T18:08:22.6317320Z   proxy | 2025/08/11 18:08:22 [350] GET https://api.github.com:443/repos/actions/checkout/commits?sha=v4
2025-08-11T18:08:22.6317928Z 2025/08/11 18:08:22 [350] * authenticating github api request with token for api.github.com
2025-08-11T18:08:22.8251479Z   proxy | 2025/08/11 18:08:22 [350] 200 https://api.github.com:443/repos/actions/checkout/commits?sha=v4
2025-08-11T18:08:22.8478665Z   proxy | 2025/08/11 18:08:22 [352] GET https://api.github.com:443/repos/actions/checkout/commits?sha=v5
2025-08-11T18:08:22.8479298Z 2025/08/11 18:08:22 [352] * authenticating github api request with token for api.github.com
2025-08-11T18:08:23.0343197Z   proxy | 2025/08/11 18:08:23 [352] 200 https://api.github.com:443/repos/actions/checkout/commits?sha=v5
2025-08-11T18:08:23.0559059Z   proxy | 2025/08/11 18:08:23 [354] GET https://api.github.com:443/repos/actions/checkout/commits?sha=v4
2025-08-11T18:08:23.0560416Z 2025/08/11 18:08:23 [354] 200 https://api.github.com:443/repos/actions/checkout/commits?sha=v4
2025-08-11T18:08:23.0915554Z   proxy | 2025/08/11 18:08:23 [356] GET https://api.github.com:443/repos/actions/checkout/commits?sha=v5
2025-08-11T18:08:23.0916953Z 2025/08/11 18:08:23 [356] 200 https://api.github.com:443/repos/actions/checkout/commits?sha=v5
2025-08-11T18:08:23.1168742Z   proxy | 2025/08/11 18:08:23 [358] GET https://api.github.com:443/repos/actions/checkout/commits?sha=v4
2025-08-11T18:08:23.1170969Z 2025/08/11 18:08:23 [358] 200 https://api.github.com:443/repos/actions/checkout/commits?sha=v4
2025-08-11T18:08:23.1866435Z   proxy | 2025/08/11 18:08:23 [360] GET https://api.github.com:443/repos/actions/checkout/commits?sha=v5
2025-08-11T18:08:23.1867389Z 2025/08/11 18:08:23 [360] 200 https://api.github.com:443/repos/actions/checkout/commits?sha=v5
2025-08-11T18:08:23.3407815Z   proxy | 2025/08/11 18:08:23 [362] POST /update_jobs/1073159324/create_pull_request
2025-08-11T18:08:23.4203174Z   proxy | 2025/08/11 18:08:23 [362] 503 /update_jobs/1073159324/create_pull_request
2025-08-11T18:08:23.4272978Z   proxy | 2025/08/11 18:08:23 [364] POST /update_jobs/1073159324/record_update_job_unknown_error
2025-08-11T18:08:23.9910052Z   proxy | 2025/08/11 18:08:23 [364] 204 /update_jobs/1073159324/record_update_job_unknown_error
2025-08-11T18:08:24.0371331Z   proxy | 2025/08/11 18:08:24 [366] POST /update_jobs/1073159324/record_update_job_error
2025-08-11T18:08:24.3773651Z   proxy | 2025/08/11 18:08:24 [366] 204 /update_jobs/1073159324/record_update_job_error
2025-08-11T18:08:24.4232259Z   proxy | 2025/08/11 18:08:24 [368] POST /update_jobs/1073159324/increment_metric
2025-08-11T18:08:24.9348876Z   proxy | 2025/08/11 18:08:24 [368] 204 /update_jobs/1073159324/increment_metric
2025-08-11T18:08:24.9410898Z   proxy | 2025/08/11 18:08:24 [370] POST /update_jobs/1073159324/record_update_job_unknown_error
2025-08-11T18:08:25.8400748Z   proxy | 2025/08/11 18:08:25 client received failure response
2025-08-11T18:08:25.9595473Z   proxy | 2025/08/11 18:08:25 [370] 204 /update_jobs/1073159324/record_update_job_unknown_error
2025-08-11T18:08:25.9609518Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> Error processing actions/checkout (JSON::ParserError)
2025-08-11T18:08:25.9610569Z 2025/08/11 18:08:25 ERROR <job_1073159324> unexpected token at 'upstream connect error or discon'
2025-08-11T18:08:25.9612019Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/json-2.9.1/lib/json/common.rb:221:in 'JSON::Ext::Parser.parse'
2025-08-11T18:08:25.9613675Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/json-2.9.1/lib/json/common.rb:221:in 'JSON.parse'
2025-08-11T18:08:25.9615449Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/api_client.rb:506:in 'Dependabot::ApiClient#dependency_file_not_supported_error?'
2025-08-11T18:08:25.9616876Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9618492Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'T::Private::Methods::CallValidation.validate_call'
2025-08-11T18:08:25.9620194Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/_methods.rb:277:in 'block in Dependabot::ApiClient#_on_method_added'
2025-08-11T18:08:25.9621627Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/api_client.rb:47:in 'block in Dependabot::ApiClient#create_pull_request'
2025-08-11T18:08:25.9623107Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/trace/tracer.rb:37:in 'block in OpenTelemetry::Trace::Tracer#in_span'
2025-08-11T18:08:25.9625565Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/trace.rb:70:in 'block in OpenTelemetry::Trace#with_span'
2025-08-11T18:08:25.9626853Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/context.rb:88:in 'OpenTelemetry::Context.with_value'
2025-08-11T18:08:25.9628086Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/trace.rb:70:in 'OpenTelemetry::Trace#with_span'
2025-08-11T18:08:25.9629303Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/trace/tracer.rb:37:in 'OpenTelemetry::Trace::Tracer#in_span'
2025-08-11T18:08:25.9630647Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/api_client.rb:38:in 'Dependabot::ApiClient#create_pull_request'
2025-08-11T18:08:25.9631752Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9633102Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'T::Private::Methods::CallValidation.validate_call'
2025-08-11T18:08:25.9634491Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/_methods.rb:277:in 'block in Dependabot::ApiClient#_on_method_added'
2025-08-11T18:08:25.9636039Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/service.rb:59:in 'Dependabot::Service#create_pull_request'
2025-08-11T18:08:25.9637134Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9638472Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'T::Private::Methods::CallValidation.validate_call'
2025-08-11T18:08:25.9639846Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/_methods.rb:277:in 'block in Dependabot::Service#_on_method_added'
2025-08-11T18:08:25.9641188Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:328:in 'Dependabot::Updater::Operations::UpdateAllVersions#create_pull_request'
2025-08-11T18:08:25.9642494Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9643822Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'T::Private::Methods::CallValidation.validate_call'
2025-08-11T18:08:25.9645486Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/_methods.rb:277:in 'block in Dependabot::Updater::Operations::UpdateAllVersions#_on_method_added'
2025-08-11T18:08:25.9646966Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:188:in 'Dependabot::Updater::Operations::UpdateAllVersions#check_and_create_pull_request'
2025-08-11T18:08:25.9648303Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation_2_7.rb:687:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9649783Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation_2_7.rb:687:in 'block in Dependabot::Updater::Operations::UpdateAllVersions#create_validator_procedure_fast1'
2025-08-11T18:08:25.9651367Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:94:in 'Dependabot::Updater::Operations::UpdateAllVersions#check_and_create_pr_with_error_handling'
2025-08-11T18:08:25.9652729Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation_2_7.rb:687:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9654325Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation_2_7.rb:687:in 'block in Dependabot::Updater::Operations::UpdateAllVersions#create_validator_procedure_fast1'
2025-08-11T18:08:25.9656082Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:59:in 'block in Dependabot::Updater::Operations::UpdateAllVersions#perform'
2025-08-11T18:08:25.9657249Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:59:in 'Array#each'
2025-08-11T18:08:25.9658377Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/update_all_versions.rb:59:in 'Dependabot::Updater::Operations::UpdateAllVersions#perform'
2025-08-11T18:08:25.9660005Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9661383Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'T::Private::Methods::CallValidation.validate_call'
2025-08-11T18:08:25.9662855Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/_methods.rb:277:in 'block in Dependabot::Updater::Operations::UpdateAllVersions#_on_method_added'
2025-08-11T18:08:25.9664390Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/group_update_all_versions.rb:138:in 'block in Dependabot::Updater::Operations::GroupUpdateAllVersions#run_ungrouped_dependency_updates'
2025-08-11T18:08:25.9665860Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/group_update_all_versions.rb:123:in 'Array#each'
2025-08-11T18:08:25.9667107Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/group_update_all_versions.rb:123:in 'Dependabot::Updater::Operations::GroupUpdateAllVersions#run_ungrouped_dependency_updates'
2025-08-11T18:08:25.9668489Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9669824Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'T::Private::Methods::CallValidation.validate_call'
2025-08-11T18:08:25.9671318Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/_methods.rb:277:in 'block in Dependabot::Updater::Operations::GroupUpdateAllVersions#_on_method_added'
2025-08-11T18:08:25.9672760Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater/operations/group_update_all_versions.rb:66:in 'Dependabot::Updater::Operations::GroupUpdateAllVersions#perform'
2025-08-11T18:08:25.9674037Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'UnboundMethod#bind_call'
2025-08-11T18:08:25.9675559Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/call_validation.rb:282:in 'T::Private::Methods::CallValidation.validate_call'
2025-08-11T18:08:25.9677187Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/sorbet-runtime-0.5.11952/lib/types/private/methods/_methods.rb:277:in 'block in Dependabot::Updater::Operations::GroupUpdateAllVersions#_on_method_added'
2025-08-11T18:08:25.9678371Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/updater.rb:45:in 'Dependabot::Updater#run'
2025-08-11T18:08:25.9679304Z 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/update_files_command.rb:54:in 'block in Dependabot::UpdateFilesCommand#perform_job'
2025-08-11T18:08:25.9680508Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/trace/tracer.rb:37:in 'block in OpenTelemetry::Trace::Tracer#in_span'
2025-08-11T18:08:25.9681956Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/trace.rb:70:in 'block in OpenTelemetry::Trace#with_span'
2025-08-11T18:08:25.9683233Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/context.rb:88:in 'OpenTelemetry::Context.with_value'
2025-08-11T18:08:25.9684481Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/trace.rb:70:in 'OpenTelemetry::Trace#with_span'
2025-08-11T18:08:25.9685966Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/vendor/ruby/3.4.0/gems/opentelemetry-api-1.5.0/lib/opentelemetry/trace/tracer.rb:37:in 'OpenTelemetry::Trace::Tracer#in_span'
2025-08-11T18:08:25.9687152Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/update_files_command.rb:21:in 'Dependabot::UpdateFilesCommand#perform_job'
2025-08-11T18:08:25.9688144Z updater | 2025/08/11 18:08:25 ERROR <job_1073159324> /home/dependabot/dependabot-updater/lib/dependabot/base_command.rb:37:in 'Dependabot::BaseCommand#run'
2025-08-11T18:08:25.9688807Z 2025/08/11 18:08:25 ERROR <job_1073159324> bin/update_files.rb:44:in '<main>'

Updating Tools/requirements*.txt succeeded/failed, it thinks it created a PR but then the network tab reports that PR creation failed.

+------------------------------------------------------------------------+
|                  Changes to Dependabot Pull Requests                   |
+---------+--------------------------------------------------------------+
| created | types-setuptools ( from 80.9.0.20250801 to 80.9.0.20250809 ) |
| created | hypothesis ( from 6.135.26 to 6.137.2 )                      |
+---------+--------------------------------------------------------------+

[hugovk]

Updating github-actions failed

Network error?

updater | 2025/08/11 18:08:27 INFO <job_1073159324> Finished job processing
updater | 2025/08/11 18:08:27 INFO Results:
Dependabot encountered '1' error(s) during execution, please check the logs for more details.
+--------------------------------------------------+
|          Dependencies failed to update           |
+------------------+---------------+---------------+
| Dependency       | Error Type    | Error Details |
+------------------+---------------+---------------+
| actions/checkout | unknown_error | null          |
+------------------+---------------+---------------+
Failure running container e2af7a20315e9f6a3a9e0f861fc83ccf27dc1f97e557580325adb05c63c10001: Error: Command failed with exit code 1: /bin/sh -c $DEPENDABOT_HOME/dependabot-updater/bin/run update_files
Cleaned up container e2af7a20315e9f6a3a9e0f861fc83ccf27dc1f97e557580325adb05c63c10001
  proxy | 2025/08/11 18:08:27 151/186 calls cached (81%)
Error: Dependabot encountered an unexpected problem

HttpClientError: upstream connect error or disconnect/reset before headers. retried and the latest reset reason: connection timeout

For more information see: https://github.com/python/cpython/network/updates/1073159324 (write access to the repository is required to view the log)
🤖 ~ finished: unexpected error ~

Clicking "Check for updates" ran a new one semi-successfully:

https://github.com/python/cpython/actions/runs/16904270764/job/47890267885

But we get again get "Dependabot failed to create a pull request", which as mentioned, is banned, so not surprising.

---

• Dependabot can only create branches in upstream, and not forks.
• For Adjusting the "Triager" role's permissions core-workflow#460, we added a branch protection rule to prevent creation of new branches.
• The 🔒 rule matches branches with a **/* pattern (so all except the main and version branches which have their own rules)
• It has the following checked:

• Dependabot cannot be added to the allowlist, it doesn't show up when typing "dependabot" / "Dependabot" in the box (on the contrary, bedevere-bot, miss-islington, miss-islington-app and hugovk do autocomplete there).
• Creating a temp team to see if we can add Dependabot via that:

• Perhaps if we add Dependabot to this org we can then either directly add it to the **/* allowlist?

[ZeroIntensity]

Dependabot cannot be added to the allowlist, it doesn't show up when typing "dependabot" / "Dependabot" in the box (on the contrary, bedevere-bot, miss-islington, miss-islington-app and hugovk do autocomplete there).

When I was looking at PRs created by Dependabot, I realized that you have to reference him by app/dependabot on GitHub, not just dependabot.

[AA-Turner]

We could maybe add a new dependabot/** rule. I do like the fact that there's no branch clutter in the repo, though.

Dependabot can only create branches in upstream, and not forks.

On mobile now, but this is the key thing -- if there's a configuration for dependabot to use a fork (even one we control), it would solve these problems.

[ZeroIntensity]

Could we somehow get Bedevere to do it? I'm thinking we could set up Dependabot on a forked repository, and then have Bedevere (or some other bot) simply relay those changes to a CPython PR.

[shenxianpeng]

Just a small thought — adding a new dependabot/** rule should work, and it’s not a big deal since it will be removed automatically after the merge.