Artifact downloaded but 'No dependency graph files found to submit' when using download-and-submit
#196
Comments
|
Thanks for your report. The dependency-graph is being generated and saved (you can see the attached artifact here), but it appears that the This functionality is difficult to verify with automated testing, so it's possible I introduced a bug as part of this fix in v3.3.1. |
Pil0tXia
added a commit
to Pil0tXia/eventmesh
that referenced
this issue
Apr 24, 2024
Pil0tXia
added a commit
to Pil0tXia/eventmesh
that referenced
this issue
Apr 24, 2024
Pil0tXia
added a commit
to Pil0tXia/eventmesh
that referenced
this issue
Apr 24, 2024
|
Hi! I've made changes in Pil0tXia/eventmesh@b96139c, it seems |
|
Thanks for letting me know. I'll try to get this fixed ASAP. |
bigdaz
changed the title
download-and-submit
bigdaz
added a commit
that referenced
this issue
Apr 25, 2024
|
@Pil0tXia Thanks again for the thorough report: it helped me get this fixed quickly. |
mxsm
pushed a commit
to apache/eventmesh
that referenced
this issue
May 17, 2024
* Sync changes in #4719 * minor change * Only keep the artifact name * Run `sed -i 's/-[0-9].*\.jar//g'` * Run `sort known-dependencies.txt | uniq > known-dependencies-unique.txt` * Allow CI to run on branches with namespace in the branch name in forked repos * Correct typo and remove useless command * Use `sort -u -o` instead of `uniq` to remove duplicate artifacts with different version * Enlarge open-pull-requests-limit * minor: polish tips * Test apache/skywalking-eyes/dependency CI result * Fix 'unable to find version `0.6.0`' * See debug log to prove it works * skywalking-eyes/dependency doesn't support gradle, test basic actions/dependency-review-action * Add all denied licenses * Remove redundant check * Remove not included SPDX: ASL, RSAL * Add a useful printAllDependencyTrees task * Exampt safe artifact under multiple licenses * Exempt more safe artifacts (Looks like the last of them) * 'allow-dependencies-licenses' attribute only supports single-line text * Add a TODO comment * Add more file extensions for checkstyle * Resolve some checkstyle header violations * Add back apache/skywalking-eyes * Fix downloaded file didn't have a `.` * Disable Go deps update & Must pass CI before merge * No need to force up-to-date & Auto-approve only * Remove the slash at the end of the homepage url in Repo GitHub desc * Skip patch updates temporarily to reduce PR noise * Logback removed after be06ef7 * Accept patch update * Submit dependency graph * Follow https://github.com/gradle/actions/blob/main/docs/dependency-submission.md#usage-with-pull-requests-from-public-forked-repositories * try to sort dependency graph workflow exec seq * `workflow_run` event will only trigger a workflow run if the workflow file is on the default branch * Grant required permission of CodeQL * Attempt to fix 'No dependency graph files found to submit' * Attempt to fix 'No dependency graph files found to submit' try 2 * Attempt to fix 'No dependency graph files found to submit' try 3 * Attempt to fix 'No dependency graph files found to submit' try 4 * Try to check dependency-review * Only check bundled dependencies * Fix 'No snapshots were found for the head SHA' attempt 1 * Test runtimeClasspath dependencies * Revert "Test runtimeClasspath dependencies" This reverts commit 3de89a5. * Try to retry 1 hr wo wait for snapshot update * Test gradle/actions#196 (comment) * Add todo comments * Keep implementation and compileOnly for now * Keep runtimeOnly deps * [Breaking Change] Remove dependency-review-action and wait for its bugfix * Add checkDeniedLicense into CI * minor code optimization
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I tried Integrating
dependency-submissionanddependency-review-actionfor pull requests from public forked repositories, the workflow files are as follows:However, neither
dependency-submission@v3(Commit, Actions log) orsetup-gradle@v3(Commit, Actions log), the following log was output, and the gradle dependencies were not added to the dependency graph of the Repo (that is, the artifacts marked withDetected by GitHub Dependency Graph Gradle Plugin):When I rolled back to
gradle/gradle-build-action@v2, it worked (Commit, Actions log), and the dependency graph of the Repo had been updated.The text was updated successfully, but these errors were encountered: