Skip to content

Conversation

@myronmarston
Copy link
Collaborator

This partially reverts "chore: rework Gemfiles. (#645)" (cce2474). It recombines the root Gemfile with config/Gemfile-for-gem, doing away with Gemfile-shared, while keeping the changes to #645 that impact how the root bundle works (e.g. calling gem with each ElasticGraph gem, rather than gemspec).

This appears to be necessary for dependabot. While some dependabot runs have been successful since #645 was merged, the last few runs have failed with:

Handled error whilst updating rubocop-rake: dependency_file_not_supported {message: "{\"errors\":[{\"status\":400,\"title\":\"Bad Request\",\"detail\":\"The request contains invalid or unauthorized changes\"}]}"}

I think the problem is Gemfile-shared: it's non standard to put gem versions there, and dependabot seems to not like it. By reverting back to a single root Gemfile I'm hopeful it'll fix dependabot.

In addition, I've reapplied "Increase the dependabot open-pull-request-limit. (#657)", effectively reverting (#659). That was a prior attempt at fixing dependabot which didn't work.

This partially reverts "chore: rework Gemfiles. (#645)" (cce2474).
It recombines the root `Gemfile` with `config/Gemfile-for-gem`, doing away with `Gemfile-shared`,
while keeping the changes to #645 that impact how the root bundle works (e.g. calling `gem`
with each ElasticGraph gem, rather than `gemspec`).

This appears to be necessary for dependabot. While some dependabot runs have been successful
since #645 was merged, the last few runs have failed with:

```
Handled error whilst updating rubocop-rake: dependency_file_not_supported {message: "{\"errors\":[{\"status\":400,\"title\":\"Bad Request\",\"detail\":\"The request contains invalid or unauthorized changes\"}]}"}
```

I think the problem is `Gemfile-shared`: it's non standard to put gem
versions there, and dependabot seems to not like it. By reverting back
to a single root `Gemfile` I'm hopeful it'll fix dependabot.

In addition, I've reapplied "Increase the dependabot open-pull-request-limit. (#657)", effectively reverting (#659).
That was a prior attempt at fixing dependabot which didn't work.
@CLAassistant
Copy link

CLAassistant commented Jul 8, 2025

CLA assistant check
All committers have signed the CLA.

@myronmarston myronmarston merged commit f118fc5 into main Jul 9, 2025
16 of 17 checks passed
@myronmarston myronmarston deleted the myron/fix-Gemfile-setup branch July 9, 2025 00:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants