Mend Renovate App is incorrectly onboarding repos with no dependencies

[rarkins]

How are you running Renovate?

Mend Renovate hosted app on github.com

If you're self-hosting Renovate, tell us what version of Renovate you run.

No response

If you're self-hosting Renovate, select which platform you are using.

None

Was this something which used to work for you, and then stopped?

None

Describe the problem

Repos with no dependencies are being onboarded. Normally this shouldn't happen if the org has installed Renovate into "All repositories" and instead only if the user has installed into "Selected repositories" (so apparently wants Renovate in that repo).

However we are recently seeing this config line incorrectly in jobs:

    "onboardingNoDeps": true,

Which triggers the onboarding PR for repos without dependencies.

An example affected repository: https://github.com/rust-cli/team/pulls?q=is%3Apr+is%3Aclosed+sort%3Aupdated-desc

Relevant debug logs

Logs

DEBUG: Env config
{
  "config": {
    "allowPostUpgradeCommandTemplating": true,
    "allowedPostUpgradeCommands": [
      "^git add --all$",
      "^git reset$",
      "^npx beachball change( --no-fetch)? --no-commit --type (patch|none) --message '{{{commitMessage}}}'$",
      "^pwd$"
    ],
    "baseDir": "/tmp/worker/3ad147/703ce8",
    "binarySource": "docker",
    "cacheTtlOverride": {
      "datasource-docker-digest": 180,
      "datasource-docker-labels": 180,
      "datasource-docker-releases": 180,
      "datasource-docker-tags": 180
    },
    "customizeDashboard": {
      "repoProblemsHeader": "These problems occurred while renovating this repository. [View logs](https://developer.mend.io/{{platform}}/{{repository}})."
    },
    "dependencyDashboardFooter": "\n- [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository\n",
    "dockerImagePrefix": "ghcr.io/containerbase",
    "enabled": true,
    "extends": [
      "mergeConfidence:all-badges"
    ],
    "forkProcessing": "disabled",
    "gitAuthor": "renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
    "gitIgnoredAuthors": [
      "29139614+renovate[bot]@users.noreply.github.com"
    ],
    "hostRules": [
      {
        "hostType": "docker",
        "matchHost": "docker.io",
        "password": "***********",
        "username": "mdpprodrenovate"
      }
    ],
    "logContext": "54284f6ddb7945d398e0b444c3bc5145",
    "logFile": "/tmp/worker/3ad147/703ce8/github/rust-cli/team/54284f6ddb7945d398e0b444c3bc5145.log",
    "logFileLevel": "debug",
    "onboarding": true,
    "onboardingConfig": {
      "$schema": "https://docs.renovatebot.com/renovate-schema.json",
      "extends": [
        "config:recommended"
      ]
    },
    "onboardingNoDeps": true,
    "platform": "github",
    "platformCommit": true,
    "prFooter": "This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/{{platform}}/{{repository}}).",
    "prHeader": "[![Mend Renovate logo banner](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)",
    "redisUrl": "redis:https://mend-developer-platform-renovate-prod.aqffol.ng.0001.use1.cache.amazonaws.com:6379",
    "repositories": [
      "rust-cli/team"
    ],
    "repositoryCache": "enabled",
    "repositoryCacheType": "s3:https://mend-developer-platform-prod/renovate/",
    "requireConfig": "required",
    "token": "***********",
    "username": "renovate[bot]",
    "dockerChildPrefix": "renovate_a_",
    "dockerCliOptions": "--memory=3584m",
    "privateKey": "***********",
    "privateKeyOld": "***********"
  }
}

DEBUG: manager extract durations (ms)
{
  "managers": {}
}

DEBUG: Found 0 package file(s)
DEBUG: Need to create onboarding PR
DEBUG: createOnboardingBranch()

Have you created a minimal reproduction repository?

I have explained in the description why a minimal reproduction is impossible

[viceice]

same here

• chore: Configure Renovate - abandoned containerbase/docker-build-cache#1

[rarkins]

Most of these problems are happening now because at the beginning of every month we retry every disabled repo just in case. Disabled repos are disabled because they're forks, archived, or have no dependencies. We have canceled the remaining monthly jobs for now until we get to the bottom of the problem of onboardingNoDeps=true

[rarkins]

This bug was resolved on Sunday