[Automation][bug] Beats dependency stopped automatically updating

[ebeahan]

Automation added in #8174 has runs as scheduled , completes successfully, but Updatecli hasn't been creating the expected PRs against main or 8.19 to update the Beats dependency.

Suspect cause appears related to the behavior described in updatecli/updatecli#4165 when the action runs concurrently for each branch. Only running the job for main manually successfully created #8380.

[elasticmachine]

Pinging @elastic/elastic-agent-control-plane (Team:Elastic-Agent-Control-Plane)

[cmacknz]

CC @v1v the action was silently failing with WARNING: Git branch reset detected, the action must reset previous action description and not opening a PR.

Any ideas on how to handle this better?

[v1v]

CC @v1v the action was silently failing with WARNING: Git branch reset detected, the action must reset previous action description and not opening a PR.

According to updatecli/updatecli#2211 (comment) force: false should fix the issue.

Just adding that configuration bit at

elastic-agent/.ci/updatecli/update-beats.yml

Lines 6 to 15 in 175c6f9

	default:
	kind: github
	spec:
	user: '{{ requiredEnv "GITHUB_ACTOR" }}'
	username: '{{ requiredEnv "GITHUB_ACTOR" }}'
	owner: '{{ .scm.owner }}'
	repository: '{{ .scm.repository }}'
	token: '{{ requiredEnv "GITHUB_TOKEN" }}'
	branch: '{{ requiredEnv "BRANCH_NAME" }}'
	commitusingapi: true

should help

[v1v]

BTW, I'm running the updatecli locally targeting 8.19 using the 8.19 branch (that's how it has been implemented), to see whether I can actually reproduce the behaviour - that's one of the good things with updatecli what it runs in GH actions can be triggered manually too 👼

Dry Run (diff command)

$ git checkout 8.19
$ eval "$(gvm use 1.24.2)"
$ GITHUB_TOKEN=$(gh auth token) \
   GITHUB_ACTOR=v1v \
   BRANCH_NAME=8.19 \
   updatecli diff \
           --config .ci/updatecli/update-beats.yml \
           --values .ci/updatecli/values.d/scm.yml

Apply

$ git checkout 8.19
$ eval "$(gvm use 1.24.2)"
$ GITHUB_TOKEN=$(gh auth token) \
   GITHUB_ACTOR=v1v \
   BRANCH_NAME=8.19 \
   updatecli apply \
           --config .ci/updatecli/update-beats.yml \
           --values .ci/updatecli/values.d/scm.yml

and it also failed locally

klog/v2 k8s.io/kube-openapi k8s.io/kubelet k8s.io/utils kernel.org/pub/linux/libs/security/libcap/cap kernel.org/pub/linux/libs/security/libcap/psx sigs.k8s.io/controller-runtime sigs.k8s.io/json sigs.k8s.io/structured-merge-diff/v4 sigs.k8s.io/yaml | go run go.elastic.co/go-licence-detector -includeIndirect -rules dev-tools/notice/rules.json -overrides dev-tools/notice/overrides.json -noticeTemplate dev-tools/notice/NOTICE.txt.tmpl -noticeOut NOTICE.txt -depsOut 
2025/06/18 08:54:08 Failed to detect licences: dependency github.com/juju/ratelimit uses licence LGPL-3.0 which is not allowed by the rules file
exit status 1
----

command stderr output was:
----
...
go: downloading github.com/UNO-SOFT/zlog v0.8.1
Error: failed to generate NOTICE.txt: exit status 1

----

ERROR: something went wrong in "target#beats" : something went wrong in target "beats" : "Shell command exited on error."

Pipeline "Bump beats" failed
Skipping due to:
	something went wrong during target execution


ACTIONS
========

ERROR: 1 target(s) (beats) failed for action "default"

Bump beats
  => [8.19][Automation] Update elastic/beats to d84e81350530

No follow up action needed

=============================

SUMMARY:



✗ Bump beats:
	Source:
		✔ [beats] 
		✔ [gomod] 
	Condition:
		✔ [is-already-updated] Is version 'github.com/elastic/beats@d84e81350530' not updated in 'go.mod'?
	Target:
		✗ [beats] Update to elastic/beats@d84e81350530

Failed to detect licences: dependency github.com/juju/ratelimit uses licence LGPL-3.0 which is not allowed by the rules file exit status 1

[cmacknz]

#8583