-
Type:
Clean up
-
Status: Resolved
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: None
-
Component/s: CI/CD
-
Epic Link:
-
Tags:
-
Sprint:nxplatform #76
-
Story Points:1
A lot of profiles and related repositories are irrelevant in the root POM, let's clean them up.
Typically, the qa, qapriv, nightly profiles.
The related repositories are not only unused but are slowing down the dependency check made by Dependabot, for security or version updates (see NXP-31424):
updater | INFO <job_527809191> version-update:semver-major - from .github/dependabot.yaml proxy | 2022/11/30 05:11:15 [711] GET http://mavenin.nuxeo.com/nexus/content/repositories/nightly-staging/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:11:35 [711] No response from server proxy | 2022/11/30 05:11:35 [712] GET http://mavenin.nuxeo.com/nexus/content/repositories/nightly-staging/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:11:55 [712] No response from server proxy | 2022/11/30 05:11:55 [713] GET http://mavenin.nuxeo.com/nexus/content/repositories/nightly-staging/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:12:15 [713] No response from server proxy | 2022/11/30 05:12:15 [714] GET http://mavenin.nuxeo.com/nexus/content/repositories/nightly-staging/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:12:35 [714] No response from server proxy | 2022/11/30 05:12:36 [716] GET https://packages.nuxeo.com:443/repository/maven-internal/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:12:36 [716] 401 https://packages.nuxeo.com:443/repository/maven-internal/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:12:36 [718] GET https://packages.nuxeo.com:443/repository/maven-private/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:12:36 [718] 401 https://packages.nuxeo.com:443/repository/maven-private/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:12:36 [720] GET https://mavenpriv.nuxeo.com:443/nexus/content/repositories/releases/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:12:56 [722] GET https://mavenpriv.nuxeo.com:443/nexus/content/repositories/releases/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:13:16 [724] GET https://mavenpriv.nuxeo.com:443/nexus/content/repositories/releases/org/apache/tomcat/tomcat-catalina/maven-metadata.xml proxy | 2022/11/30 05:13:36 [726] GET https://mavenpriv.nuxeo.com:443/nexus/content/repositories/releases/org/apache/tomcat/tomcat-catalina/maven-metadata.xml
which ends up by timing out:
updater | time="2022-11-19T23:10:03Z" level=info msg="task complete" container_id=job-519111216-updater exit_code=137 job_id=519111216 step=updater updater | time="2022-11-19T23:10:03Z" level=warning msg="timeout running job" error="waiting for updater: waiting for container: context deadline exceeded" job_id=519111216
Also see https://github.com/dependabot/dependabot-core/issues/2416.
Not sure why the repositories under non active profiles are checked.
