Repository navigation
Skip the Dependabot merge gate until its app is configured - #6
Merged
Merged
Conversation
Every scheduled run failed one merge (<org>) job per org with "'client-id' must be set to a non-empty string", because MERGE_APP_CLIENT_ID and MERGE_APP_PRIVATE_KEY are not set on this repository yet. The accounts job now checks both are present (only whether each is set reaches the step), posts a notice and skips the merge jobs when either is missing, and the gate runs as before once both exist. The schedule moves from hourly to weekly, Tuesday 14:17 UTC, a day after Dependabot's Monday run and the reconciler, per the org cap of weekly crons. Every failure was also an email.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The Dependabot merge gate failed every scheduled run, one red
merge (<org>)job per org (36 on head 25c5581), with'client-id' ... must be set to a non-empty string:vars.MERGE_APP_CLIENT_IDandsecrets.MERGE_APP_PRIVATE_KEYare not configured on this repository yet.accountsjob's first step checks whether both are set (only a boolean per value reaches the step, never the key). When either is missing it posts a::notice::and a job-summary line naming what is missing, and the merge matrix is skipped, so the run ends green. Once both exist the gate runs exactly as before.17 * * * *) becomes weekly, Tuesday 14:17 UTC (17 14 * * 2): a day after Dependabot's Monday 06:00 America/New_York run and the reconciler's Monday 14:00 UTC run. The org caps crons at weekly, and each hourly failure was an email.dependabot/README.mdupdated to match (cadence, and the skip behaviour).Not done here, because it is the owner's step: creating the Dependency Merge Bot and setting the variable and secret (
dependabot/README.md, Credentials).Verified locally: actionlint clean,
python3 -m unittest discover -s dependabot/tests(13 tests OK),vcs-orgs-presence/bin/health-audit.sh --offline(0 failures).