Skip to content

Make dependency-check resilient to transient registry errors#8818

Merged
zurfyx merged 1 commit into
mainfrom
dependency-check-retries
Jul 8, 2026
Merged

Make dependency-check resilient to transient registry errors#8818
zurfyx merged 1 commit into
mainfrom
dependency-check-retries

Conversation

@zurfyx

@zurfyx zurfyx commented Jul 8, 2026

Copy link
Copy Markdown
Member

Motivation

The internal-registry dependency-availability check occasionally fails when the registry returns a sporadic transient error, which blocks otherwise-healthy CI runs and can gate merges. The check should ride out a momentary hiccup rather than failing the whole run on a single bad response.

Changes

  • Retry failed requests (5xx and network/connection errors) with exponential backoff + full jitter, so parallel workers don't retry in lockstep. Definitive results (2xx/4xx) still return immediately, so a genuinely missing package fails fast.
  • Honor a server-provided Retry-After when present.
  • Raise request concurrency.
  • All limits are configurable via env: CHECK_MAX_ATTEMPTS, CHECK_RETRY_BASE_MS, CHECK_RETRY_MAX_MS, CHECK_CONCURRENCY.

Test plan

  • Against a stub registry: a 5xx triggers retries with increasing backoff, then succeeds (exit 0).
  • Happy path resolves available versions; a missing pinned version is still reported and fails the run.

The dependency availability check occasionally fails when the registry
returns a sporadic transient error, which blocks otherwise-healthy runs.
Retry failed requests with exponential backoff and jitter (all bounds
configurable via env), and raise request concurrency.
@vercel

vercel Bot commented Jul 8, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
lexical Ready Ready Preview Jul 8, 2026 8:49pm
lexical-playground Ready Ready Preview Jul 8, 2026 8:49pm

Request Review

@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Jul 8, 2026
@zurfyx zurfyx enabled auto-merge July 8, 2026 20:54
@zurfyx zurfyx added this pull request to the merge queue Jul 8, 2026
Merged via the queue into main with commit ecaf1f6 Jul 8, 2026
50 checks passed
@etrepum etrepum mentioned this pull request Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants