Skip to content

Ignore StyleCop.Analyzers in dependabot#5906

Merged
bouwkast merged 1 commit into
masterfrom
steven/dependabot-fix
Aug 15, 2024
Merged

Ignore StyleCop.Analyzers in dependabot#5906
bouwkast merged 1 commit into
masterfrom
steven/dependabot-fix

Conversation

@bouwkast

Copy link
Copy Markdown
Collaborator

Summary of changes

Adds StyleCope.Analyzers to the ignored dependencies within Dependabot.

Reason for change

I've been looking into why it seemed that Dependabot wasn't creating PRs and found several issues in the logs:

`.../NuGet.targets(169,5): error : '[1.2.0-beta.*]' is not a valid version string. [...]`

This was repeated throughout all of the Dependabot logs and doesn't appear to cause the run to loudly fail, but appears to cause it to silently fail. This version comes from here: https://github.com/DataDog/dd-trace-dotnet/blob/master/tracer/Directory.Build.props#L20

I attempted to replicate this issue and have had no luck. But I think it is fine to just try to ignore this package as it is a floating version anyway and will automatically update (and only applies to the editor).

Implementation details

Added the package to the ignore list.

Test coverage

  • Attempted to debug this locally with MSBuild tasks to parse versions (which seemed fine) and with dependabot

Other details

I don't think there is a way to manually run this file until it is merged.

There is another issue that may or may not be related with InlineIL.Fody and the SourceGenerators project, but want to fix this one first as it is in all of them.

This is an attempt to fix dependabot silently failing.
@bouwkast
bouwkast requested a review from a team as a code owner August 15, 2024 16:06
@github-actions github-actions Bot added the area:builds project files, build scripts, pipelines, versioning, releases, packages label Aug 15, 2024

@andrewlock andrewlock left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tbh, I thought StyleCop.Analyzers was deprecated in favour of other analyzers anyway 🤔 We should look into that at some point 😄

@bouwkast

Copy link
Copy Markdown
Collaborator Author

Tbh, I thought StyleCop.Analyzers was deprecated in favour of other analyzers anyway 🤔 We should look into that at some point 😄

I think it provides additional analyzers compared to the official ones, if it still poses an issue I can take a peek at what the current status is and whether it can be removed in place of the other ones.

@bouwkast
bouwkast merged commit 45a66ab into master Aug 15, 2024
@bouwkast
bouwkast deleted the steven/dependabot-fix branch August 15, 2024 17:12
@github-actions github-actions Bot added this to the vNext-v3 milestone Aug 15, 2024
bouwkast added a commit that referenced this pull request Aug 15, 2024
This reverts commit 45a66ab.

This didn't work
@andrewlock andrewlock added dependencies Pull requests that update a dependency file area:dependabot dependabot updates labels Sep 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:builds project files, build scripts, pipelines, versioning, releases, packages area:dependabot dependabot updates dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants