Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update dependency rspec to v3.13.2
• chore(deps): update dependency bson_ext to v1.12.5
• chore(deps): update actions/checkout action to v6
• chore(deps): update dependency bigdecimal to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency webrick to v1.8.2 [security]
• chore(deps): update dependency sinatra to v4 [security]
• chore(deps): update dependency ostruct to v0.6.3
• chore(deps): update dependency tttls1.3 to v0.3.5
• chore(deps): update actions/checkout action to v4.3.1
• chore(deps): update buildpacks/github-actions action to v5.10.0
• chore(deps): update dependency bigdecimal to v3.3.1
• chore(deps): update dependency guard to v2.19.1
• chore(deps): update dependency mongo to v2.22.0
• chore(deps): update dependency rack-test to v2.2.0
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bundler (1)

Gemfile (12)

• ruby > 3.0.0
• sinatra lock file @ 3.2.0
• mongo lock file @ 2.21.0
• bson_ext lock file @ 1.5.1
• tttls1.3 '>=0.2.15'
• webrick '~> 1.8'
• bigdecimal lock file @ 3.1.8
• ostruct '~> 0.6.0'
• rspec lock file @ 3.13.0
• rack-test lock file @ 2.1.0
• guard lock file @ 2.18.1
• guard-rspec lock file @ 4.7.3

github-actions (1)

.github/workflows/build-using-cnb-buildpack.yml (4)

• actions/checkout v4.1.5@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b
• docker/login-action v3
• docker/setup-buildx-action v3
• buildpacks/github-actions v5.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository

[gberche-orange]

WARN: Detected empty commit - aborting git push

Looking at the logs this seems renovate failing to install current old ruby 2.1.2 and its error handling resulting into an empty commit message for renovate/rubygems-sinatra-vulnerability branch (see more into https://stackoverflow.com/questions/9725160/aborting-commit-due-to-empty-commit-message )

Details

INFO: Gemfile.lock update failed due to an unknown reason (branch="renovate/rubygems-sinatra-vulnerability")
{
  "err": {
    "cmd": "/bin/sh -c install-tool ruby 2.1.2",
    "stderr": "",
    "stdout": "installing v2 tool ruby v2.1.2\n[10:31:07.307] INFO (55): Installing tool ruby@2.1.2...\nDownload failed: https://github.com/containerbase/ruby-prebuild/releases/download/2.1.2/ruby-2.1.2-focal-x86_64.tar.xz\n[10:31:07.566] INFO (94): Downloading file ...\n    url: \"https://github.com/containerbase/ruby-prebuild/releases/download/2.1.2/ruby-2.1.2-focal-x86_64.tar.xz\"\n    output: \"/tmp/renovate/cache/containerbase/88a62dc7eb88ad4d934c38569c607f05487ab662fde40ec4824e0ce7699ba9f1/ruby-2.1.2-focal-x86_64.tar.xz\"\n[10:31:07.761] FATAL (94): Response code 404 (Not Found)\n    err: {\n      \"type\": \"HTTPError\",\n      \"message\": \"Response code 404 (Not Found)\",\n      \"stack\":\n          HTTPError: Response code 404 (Not Found)\n              at _Request._onResponseBase (/snapshot/dist/containerbase-cli.js:42857:25)\n              at _Request._onResponse (/snapshot/dist/containerbase-cli.js:42912:18)\n              at ClientRequest.<anonymous> (/snapshot/dist/containerbase-cli.js:42927:17)\n              at Object.onceWrapper (node:events:629:26)\n              at ClientRequest.emit (node:events:526:35)\n              at ClientRequest.emit (node:domain:488:12)\n              at HTTPParser.parserOnIncomingClient (node:_http_client:693:27)\n              at HTTPParser.parserOnHeadersComplete (node:_http_common:119:17)\n              at TLSSocket.socketOnData (node:_http_client:535:22)\n              at TLSSocket.emit (node:events:514:28)\n      \"code\": \"ERR_NON_2XX_3XX_RESPONSE\",\n      \"timings\": {\n        \"start\": 1704969067583,\n        \"socket\": 1704969067599,\n        \"lookup\": 1704969067601,\n        \"connect\": 1704969067604,\n        \"secureConnect\": 1704969067610,\n        \"upload\": 1704969067611,\n        \"response\": 1704969067740,\n        \"end\": 1704969067755,\n        \"phases\": {\n          \"wait\": 16,\n          \"dns\": 2,\n          \"tcp\": 3,\n          \"tls\": 6,\n          \"request\": 1,\n          \"firstByte\": 129,\n          \"download\": 15,\n          \"total\": 172\n        }\n      },\n      \"name\": \"HTTPError\",\n      \"options\": {\n        \"agent\": {},\n        \"decompress\": true,\n        \"timeout\": {},\n        \"prefixUrl\": \"\",\n        \"ignoreInvalidCookies\": false,\n        \"context\": {},\n        \"hooks\": {\n          \"init\": [],\n          \"beforeRequest\": [],\n          \"beforeError\": [],\n          \"beforeRedirect\": [],\n          \"beforeRetry\": [],\n          \"afterResponse\": []\n        },\n        \"followRedirect\": true,\n        \"maxRedirects\": 10,\n        \"throwHttpErrors\": true,\n        \"username\": \"\",\n        \"password\": \"\",\n        \"http2\": false,\n        \"allowGetBody\": false,\n        \"headers\": {\n          \"user-agent\": \"got (https://github.com/sindresorhus/got)\",\n          \"accept-encoding\": \"gzip, deflate, br\"\n        },\n        \"methodRewriting\": false,\n        \"retry\": {\n          \"limit\": 2,\n          \"methods\": [\n            \"GET\",\n            \"PUT\",\n            \"HEAD\",\n            \"DELETE\",\n            \"OPTIONS\",\n            \"TRACE\"\n          ],\n          \"statusCodes\": [\n            408,\n            413,\n            429,\n            500,\n            502,\n            503,\n            504,\n            521,\n            522,\n            524\n          ],\n          \"errorCodes\": [\n            \"ETIMEDOUT\",\n            \"ECONNRESET\",\n            \"EADDRINUSE\",\n            \"ECONNREFUSED\",\n            \"EPIPE\",\n            \"ENOTFOUND\",\n            \"ENETUNREACH\",\n            \"EAI_AGAIN\"\n          ],\n          \"backoffLimit\": null,\n          \"noise\": 100\n        },\n        \"method\": \"GET\",\n        \"cacheOptions\": {},\n        \"https\": {},\n        \"resolveBodyOnly\": false,\n        \"isStream\": true,\n        \"responseType\": \"text\",\n        \"url\": \"https://github.com/containerbase/ruby-prebuild/releases/download/2.1.2/ruby-2.1.2-focal-x86_64.tar.xz\",\n        \"pagination\": {\n          \"countLimit\": null,\n          \"backoff\": 0,\n          \"requestLimit\": 10000,\n          \"stackAllItems\": false\n        },\n        \"setHost\": true,\n        \"enableUnixSockets\": false\n      }\n    }\n[10:31:07.857] INFO (94): Download completed with errors  in 291ms.\n[10:31:07.883] FATAL (55): Command failed with exit code 1: /usr/local/containerbase/bin/install-tool ruby 2.1.2\n    err: {\n      \"type\": \"Error\",\n      \"message\": \"Command failed with exit code 1: /usr/local/containerbase/bin/install-tool ruby 2.1.2\",\n      \"stack\":\n          Error: Command failed with exit code 1: /usr/local/containerbase/bin/install-tool ruby 2.1.2\n              at makeError (/snapshot/dist/containerbase-cli.js:44225:13)\n              at handlePromise (/snapshot/dist/containerbase-cli.js:45124:29)\n              at process.processTicksAndRejections (node:internal/process/task_queues:95:5)\n              at async InstallLegacyToolService.execute (/snapshot/dist/containerbase-cli.js:51949:5)\n              at async InstallToolService.execute (/snapshot/dist/containerbase-cli.js:52129:9)\n              at async InstallToolShortCommand.execute (/snapshot/dist/containerbase-cli.js:52337:14)\n              at async InstallToolShortCommand.validateAndExecute (/snapshot/dist/containerbase-cli.js:2426:26)\n              at async _Cli.run (/snapshot/dist/containerbase-cli.js:3539:22)\n              at async _Cli.runExit (/snapshot/dist/containerbase-cli.js:3547:28)\n              at async main (/snapshot/dist/containerbase-cli.js:52531:3)\n      \"shortMessage\": \"Command failed with exit code 1: /usr/local/containerbase/bin/install-tool ruby 2.1.2\",\n      \"command\": \"/usr/local/containerbase/bin/install-tool ruby 2.1.2\",\n      \"escapedCommand\": \"\\\"/usr/local/containerbase/bin/install-tool\\\" ruby 2.1.2\",\n      \"exitCode\": 1,\n      \"cwd\": \"/tmp/renovate/repos/github/orange-cloudfoundry/cf-mongodb-example-app\",\n      \"failed\": true,\n      \"timedOut\": false,\n      \"isCanceled\": false,\n      \"killed\": false\n    }\n[10:31:07.892] INFO (55): Installed tool ruby with errors in 585ms.\n",
    "options": {
      "cwd": "/tmp/renovate/repos/github/orange-cloudfoundry/cf-mongodb-example-app",
      "encoding": "utf-8",
      "env": {
        "BUNDLE_GITHUB__COM": "**redacted**",
        "GEM_HOME": "/tmp/renovate/cache/others/bundler",
        "HOME": "/home/ubuntu",
        "PATH": "/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
        "LC_ALL": "C.UTF-8",
        "LANG": "C.UTF-8",
        "CONTAINERBASE_CACHE_DIR": "/tmp/renovate/cache/containerbase"
      },
      "maxBuffer": 10485760,
      "timeout": 900000
    },
    "exitCode": 1,
    "name": "ExecError",
    "message": "Command failed: install-tool ruby 2.1.2\n",
    "stack": "ExecError: Command failed: install-tool ruby 2.1.2\n\n    at ChildProcess.<anonymous> (/opt/containerbase/tools/renovate/37.127.0/node_modules/renovate/lib/util/exec/common.ts:99:11)\n    at ChildProcess.emit (node:events:529:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:292:12)"
  }
}

DEBUG: Updated 1 package files (branch="renovate/rubygems-sinatra-vulnerability")
DEBUG: No updated lock files in branch (branch="renovate/rubygems-sinatra-vulnerability")
DEBUG: Branch timestamp: 2022-11-25T20:30:28.771Z (branch="renovate/rubygems-sinatra-vulnerability")
DEBUG: PR is older than 2 hours, raise PR with lock file errors (branch="renovate/rubygems-sinatra-vulnerability")
DEBUG: 1 file(s) to commit (branch="renovate/rubygems-sinatra-vulnerability")
DEBUG: Preparing files for committing to branch renovate/rubygems-sinatra-vulnerability (branch="renovate/rubygems-sinatra-vulnerability")
DEBUG: Setting git author name: renovate[bot] (branch="renovate/rubygems-sinatra-vulnerability")
DEBUG: Setting git author email: 29139614+renovate[bot]@users.noreply.github.com (branch="renovate/rubygems-sinatra-vulnerability")
WARN: Detected empty commit - aborting git push (branch="renovate/rubygems-sinatra-vulnerability")
{
  "commitRes": {
    "author": null,
    "branch": "",
    "commit": "",
    "root": false,
    "summary": {
      "changes": 0,
      "insertions": 0,
      "deletions": 0
    }
  }
}

DEBUG: Platform-native commit: unable to prepare for commit (branch="renovate/rubygems-sinatra-vulnerability")
{
  "branchName": "renovate/rubygems-sinatra-vulnerability"
  "files": [
    "Gemfile"
  ]
}

The workaround would likely require to first merge #4 and #5