API rate limit exceeded

The dependabot configuration has following:

- task: dependabot@1
  inputs:
    packageManager: "pip"
    openPullRequestsLimit: 10
    versioningStrategy: "auto"
    gitHubConnection: $(GITHUBVARIABLE)

and the githubvariable is defined in the pipeline

However while running the pipeline, we continue to receive this error. Is there a different way to set it?

Submitting joblib pull request for creation. /vendor/ruby/2.6.0/gems/octokit-4.20.0/lib/octokit/response/raise_error.rb:14:in on_complete: GET https://api.github.com/repos/joblib/joblib/commits?sha=1.0.1: 403 - API rate limit exceeded for 52.156.121.197. (But here's the good news: Authenticated requests get a higher rate limit. Check out the documentation for more details.) // See: https://docs.github.com/rest/overview/resources-in-the-rest-api#rate-limiting (Octokit::TooManyRequests)

[mburumaxwell]

GitHub connection needs to be supplied as a service connection and not the token. You can create a service connection using the PAT you have.

[jakubtrebacz-dev]

Having automated process to use my own identity to commit or raise PRs or in fact to do anything isn’t a good solution. I got same problem, but I don’t have the PAT token nor any control over it as it’s Project Collection Build Service account that’s used from the pipeline.

trigger: none # Disable CI trigger

variables:
  - name: Repository
    value: 'repo_name'


schedules:
  - cron: '0 7 * * 1' # on Mondays at 7am UTC
    always: true # run even when there are no code changes
    branches:
      include:
        - 'main'
    batch: true
    displayName: 'on Mondays'

pool:
  vmImage: 'ubuntu-latest' # requires macos or ubuntu (windows is not supported)

steps:
  # Checks out repo outside the current repo to run dependabot with `targetRepositoryName` param
  - checkout: git://project_name/${{ variables.Repository }}

  # Creates $(VSS_NUGET_ACCESSTOKEN) for Private feeds
  - task: NuGetAuthenticate@1 

  - task: dependabot@1
    inputs:
      packageManager: 'nuget'
      directory: '/'
      openPullRequestsLimit: '10'
      milestone: '4100'
      mergeStrategy: '1'
      targetRepositoryName: '${{ variables.Repository }}'
      setAutoComplete: true
      azureDevOpsAccessToken: $(System.AccessToken)
      gitHubAccessToken: $(System.AccessToken)
      # pull-request-branch-name.separator: 'dependabot/nuget/'
      extraEnvironmentVariables: DEPENDABOT_EXTRA_CREDENTIALS=[{"type":"nuget_feed","token":"$(VSS_NUGET_ACCESSTOKEN)","url":"https://pkgs.dev.azure.com/....../nuget/v3/index.json"}]

This works fine.