Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove manual exclusion of specific packages #7676

Merged
merged 1 commit into from
Jul 31, 2023

Conversation

jeffwidman
Copy link
Member

The exclusion for these two packages was added years ago by Grey, back when Dependabot ran on a completely different service back-end.

Since then, much of our internal infra has been completely rewritten and any failures with deps in prod can invariably be repro'd locally, so it no longer makes sense to carve out these exclusions.

I suspect the underlying issue in composer that led to this problem has likely been fixed (at least in composer 2) so we won't see this problem.

But if for some reason we do, than we should investigate further to see what the root problem is rather than swallowing it.

The exclusion for these two packages was added years ago by Grey, back
when Dependabot ran on a completely different service back-end.

Since then, much of our internal infra has been completely rewritten
and any failures with deps in prod can invariably be repro'd locally, so
it no longer makes sense to carve out these exclusions.

I suspect the underlying issue in `composer` that led to this problem
has likely been fixed (at least in `composer 2`) so we won't see this
problem.

But if for some reason we do, than we should investigate further to see
what the _root_ problem is rather than swallowing it.
@jeffwidman jeffwidman requested a review from a team as a code owner July 31, 2023 20:15
@github-actions github-actions bot added the L: php:composer Issues and code for Composer label Jul 31, 2023
@jeffwidman jeffwidman merged commit 9d1973b into main Jul 31, 2023
107 checks passed
@jeffwidman jeffwidman deleted the remove-manual-workaround-for-specific-repo branch July 31, 2023 20:22
brettfo pushed a commit to brettfo/dependabot-core that referenced this pull request Oct 11, 2023
The exclusion for these two packages was added years ago by Grey, back
when Dependabot ran on a completely different service back-end.

Since then, much of our internal infra has been completely rewritten
and any failures with deps in prod can invariably be repro'd locally, so
it no longer makes sense to carve out these exclusions.

I suspect the underlying issue in `composer` that led to this problem
has likely been fixed (at least in `composer 2`) so we won't see this
problem.

But if for some reason we do, than we should investigate further to see
what the _root_ problem is rather than swallowing it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
L: php:composer Issues and code for Composer
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants