The GitHub Actions job "Basic checks" on airflow-site-archive.git/replace-dependabot-with-update-workflow has failed. Run started by GitHub user potiuk (triggered by potiuk).
Head commit for run: bfc203e397ae1a3763b6bcefe4bb706bb178efdf / Jarek Potiuk <[email protected]> Replace Dependabot with a sparse-checkout update workflow Dependabot clones the whole repository before its file fetcher runs. At 826k files and 47 GB that never finishes inside a Dependabot job, so the runs time out and the pinned actions and pre-commit hooks fall behind - only one Dependabot PR has landed here since April. There is no knob in dependabot.yml that avoids the clone, so this drops the config and does the same job from a workflow that only ever needs the configuration files: * .github/workflows/update-pinned-deps.yml runs weekly (and on demand), once per target branch, on a sparse blobless checkout of .github. * scripts/update_pinned_deps.py resolves each SHA-pinned action and pre-commit hook to the newest release outside a 7-day cooldown window - the same cooldown the Dependabot config used - and rewrites the pins in place, preserving the `# vX.Y.Z` / `# frozen: vX.Y.Z` style. Branch pins such as `# main` move along their branch instead. Pull requests opened with GITHUB_TOKEN do not trigger other workflows, so the workflow runs pre-commit on the changed files itself before opening the PR. Dependabot security alerts are unaffected - they do not come from dependabot.yml. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> Report URL: https://github.com/apache/airflow-site-archive/actions/runs/31395504513 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
