question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Private source authentication (was working last week)

See original GitHub issue

This job was working fine last week and no changes were made, however it is now failing with:

To use retry middleware with Faraday v2.0+, install faraday-retry gem /home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.213.0/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb:319:in check_npm_response': The following source could not be reached as it requires authentication (and any provided details were invalid or lacked the required permissions): https://pkgs.dev.azure.com/BC-SDPR-Research/_packaging/Research/npm/registry/ (Dependabot::PrivateSourceAuthenticationFailure) from /home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.213.0/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb:276:in npm_details’ from /home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.213.0/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb:108:in valid_npm_details?' from /home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.213.0/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb:36:in latest_version_from_registry’ from /home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.213.0/lib/dependabot/npm_and_yarn/update_checker.rb:294:in latest_released_version' from /home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.213.0/lib/dependabot/npm_and_yarn/update_checker.rb:319:in latest_version_details’ from /home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.213.0/lib/dependabot/npm_and_yarn/update_checker.rb:39:in latest_version' from /home/dependabot/dependabot-script/.bundle/gems/dependabot-common-0.213.0/lib/dependabot/update_checkers/base.rb:231:in numeric_version_up_to_date?’ from /home/dependabot/dependabot-script/.bundle/gems/dependabot-common-0.213.0/lib/dependabot/update_checkers/base.rb:189:in version_up_to_date?' from /home/dependabot/dependabot-script/.bundle/gems/dependabot-common-0.213.0/lib/dependabot/update_checkers/base.rb:33:in up_to_date?’ from /home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.213.0/lib/dependabot/npm_and_yarn/update_checker.rb:27:in up_to_date?' from ./update-script.rb:332:in block in <main>’ from ./update-script.rb:310:in each' from ./update-script.rb:310:in <main>’ GitHub access token has been provided. Using hostname = ‘dev.azure.com’, protocol = ‘https’, port = ‘443’. Using ‘https://dev.azure.com:443/’ as API endpoint Pull Requests shall be linked to milestone (work item) 3499 Fetching npm_and_yarn dependency files for (our registry) Targeting ‘develop’ branch under ‘/’ directory Parsing dependencies information Checking if @babel/runtime 7.20.1 needs updating No update needed for @babel/runtime 7.20.1 Checking if @research/react-app-cards 1.0.0 needs updating ##[error]The process ‘/usr/bin/docker’ failed with exit code 1 Finishing: Run Dependabot - dtes

OUR Pipeline is as defined below. NOTE: This was working last week and no changes were made schedules:

  • cron: “0 4 * * SAT” displayName: ‘Weekly Run’ always: true branches: include: - ‘main’ trigger: none pool: vmImage: ‘ubuntu-latest’ variables: DEPENDABOT_EXTRA_CREDENTIALS: ‘[{“type”:“npm_registry”,“token”:“$(DEPENDABOT_PAT)”,“registry”:“$(NPM_REG)”}]’ # put the credentials for private registries and feeds stages:
  • stage: Dtes jobs:
    • job: DependabotDtes steps:
      • task: Cache@2 inputs: key: docker | “$(IMAGETOCACHE)” path: $(Pipeline.Workspace)/docker cacheHitVar: DOCKER_CACHE_HIT displayName: Cache Docker images
      • script: | docker load -i $(Pipeline.Workspace)/docker/cache.tar displayName: Restore Docker image condition: and(not(canceled()), eq(variables.DOCKER_CACHE_HIT, ‘true’))
      • script: | mkdir -p $(Pipeline.Workspace)/docker docker pull -q $(IMAGETOCACHE) docker save -o $(Pipeline.Workspace)/docker/cache.tar $(IMAGETOCACHE) displayName: Save Docker image condition: and(not(canceled()), or(failed(), ne(variables.DOCKER_CACHE_HIT, ‘true’)))
      • task: dependabot@1 displayName: ‘Run Dependabot - dtes’ inputs: useConfigFile: true setAutoComplete: false azureDevOpsAccessToken: $(DEPENDABOT_PAT) gitHubAccessToken: $(GITHUB_TOKEN)

Varibales: IMAGETOCACHE = tingle/dependabot-azure-devops:latest NPM_REG = our npm registry

Please let me know any suggestions, thank you.

Issue Analytics

  • State:closed
  • Created 10 months ago
  • Comments:9 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
MO2k4commented, Nov 14, 2022

I’ve got the same issue 😕

0reactions
ChrisDoddGitcommented, Nov 24, 2022

The updated dependabot image (0:10) has resolved the issue. Can close this issue.

Thank you for your help

Read more comments on GitHub >

github_iconTop Results From Across the Web

NuGet keeps prompting for credentials when connecting to ...
I am having an issue where Visual Studio keeps asking me to enter my username and password to my nuget source which is...
Read more >
dotnet tool install have trouble installing when an private ...
NET CLI keeps referencing private feeds first when trying to install/update a tool. Can we please re-open this? With --ignore-failed-sources, ...
Read more >
Authentication problems with nuget and GitLab
Using the deploy token allows things to work. My working code to deploy is: dotnet nuget add source https://gitlab.com/api/v4/projects/314159/ ...
Read more >
Getting "fatal: Authentication failed for..." error
Solved: In SourceTree, I'm getting the "fatal: Authentication failed for..." error when I try to Push/Pull from origin. The Git terminal.
Read more >
Cannot push packages to azure artifacts feed, keeps ...
To solve this issue, you could try to use UserName + PAT (Personal Access Tokens). For example: enter image description here. On the...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found