[
https://issues.apache.org/jira/browse/CAMEL-24912?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18118351#comment-18118351
]
Guillaume Nodet commented on CAMEL-24912:
-----------------------------------------
Triage analysis: This is a GitHub Dependabot platform limitation. The Apache
Camel project has ~900 dependencies and Dependabot times out before checking
all of them (~600 checked per run).
The current dependabot.yml uses a single root directory for the maven
ecosystem. Potential workarounds include:
- Adding more ignore rules to reduce the dependency count (trades coverage for
speed)
- Switching to an alternative tool like Renovate Bot which does not have this
timeout constraint
- Splitting the configuration (limited benefit for a single-root-POM reactor)
Could the reporter or maintainers clarify the preferred direction? Without
knowing which approach the project wants to pursue, a targeted fix cannot be
scoped.
_Note: This comment was generated by an AI coding agent and requires manual
verification._
> Dependabot is again not able to check all dependencies
> ------------------------------------------------------
>
> Key: CAMEL-24912
> URL: https://issues.apache.org/jira/browse/CAMEL-24912
> Project: Camel
> Issue Type: Task
> Components: build system
> Affects Versions: 4.23.0
> Reporter: Aurélien Pupier
> Priority: Major
>
> even when it has created 0 Pull Requests, it was able to check only 600
> dependencies (on the 900 existing)
> see https://github.com/apache/camel/actions/runs/35722236476/job/106727557689
> and check of "checking if" string
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
