Re-running the renovate pipeline results in different file changes in the pull request. #29474

re-source-tech · 2024-06-06T07:58:36Z

re-source-tech
Jun 6, 2024

What would you like help with?

I would like help with my configuration

How are you running Renovate?

Self-hosted

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

platform: 'azure', [email protected]

Please tell us more about your question or problem

I placed the global configuration file config.js and renovate-pipeline.yml in a devops repository and placed the repository configuration file renovate.json5 in the application repository. The first pipeline run looks good, but

The first run(26 changed files):

The second run(2 changed files):

Each run pushed a new commit(Updates tab):

But it always has one commit in Commits tab:

config.js

module.exports = {
    platform: 'azure',
    endpoint: 'https://dev.azure.com/my-org/',
    token: process.env.AZURE_REPO_TOKEN,
    repositories: [ // list of repos that should be watched by renovate bot
        'my-project/my-apps'
    ],
    gitNoVerify: ["commit", "push"] // passes the `--no-verify` flag to `git commit` and `git push`
};

renovate.json5

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "enabledManagers": ["npm", "nodenv", "nvm", "bun", "meteor"], // Most managers are enabled by default. We currently only enable JavaScript and Node.js
  "azureWorkItemId": 3022, // used in the pull request
  "packageRules": [
    {
      "matchManagers": ["npm", "nodenv", "nvm", "bun", "meteor"],
      "groupName": "Package dependencies update" // All updates sharing the same groupName will be placed into the same branch/PR.
    }
  ],
  "labels":["renovate", "dependencies"],
  "reviewers": [
    "required:Dev Team",
    "required:DevOps Team"
  ],
  "azure-pipelines": { // enable Azure Pipelines support
    "enabled": true
  },
  "baseBranches": [ // the target branch of the PR
    "feature/3022-renovate-pipeline"
  ],
  "extends": [
    "config:best-practices"
  ],
  "prConcurrentLimit": 5, // Limit to a maximum of 5 concurrent branches/PRs
  "prHourlyLimit": 5,     // Rate limit PRs to maximum 5 created per hour
  "commitMessagePrefix": "3022 feature: ", // Prefix to add to start of commit messages and PR titles
  "semanticCommits": "disabled", // Renovate autodetects if your repository is already using semantic commits or not and follows suit, disable it to have customized commit prefix
  "osvVulnerabilityAlerts": true, // Use vulnerability alerts from https://osv.dev/
  "vulnerabilityAlerts": {
    "groupName": "vulnerabilityAlerts",
    "addLabels": ["renovate", "security", "vulnerability"]
  }
}

renovate-pipeline.yml

schedules:
  - cron: '0 3 * * *'
    displayName: 'Renovate dependency checker'
    branches:
      include:
        - main
    always: true

resources:
  repositories:
    - repository: my-apps
      type: git
      name: my-project/my-apps

trigger: none

pool:
  vmImage: ubuntu-latest

variables:
  - group: "Renovate"
  - name: self.name
    value: $[ resources.repositories['self'].name ]
  - name: app.name
    value: $[ resources.repositories['my-apps'].name ]

steps:
  - checkout: self
  - checkout: my-apps
  - bash: |
      git config --global user.email '[email protected]'
      git config --global user.name 'Renovate Bot'
      npx renovate
    env:
      AZURE_REPO_TOKEN: $(System.AccessToken)
      GITHUB_COM_TOKEN: $(GITHUB_COM_TOKEN)
      LOG_LEVEL: debug
      DEBUG: true
      RENOVATE_RECREATE_WHEN: always
      RENOVATE_USE_BASE_BRANCH_CONFIG: merge
    displayName: Run Renovate
    workingDirectory: $(System.DefaultWorkingDirectory)/$(self.name)/renovate

Logs (if relevant)

Logs


Replace this text with your logs, between the starting and ending triple backticks

2024-06-06T09:04:00Z

github-actions[bot]
bot Jun 6, 2024

Hi there,

Get your discussion fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. Discussions without reproductions are less likely to be converted to Issues.

To get started, please read our guide on creating a minimal reproduction.

Good luck,

The Renovate team

0 replies

rarkins · 2024-06-06T09:04:28Z

rarkins
Jun 6, 2024
Maintainer

Multiple things about your example seem abnormal: the PR title, grouping vulnerability alerts, and the lack of a package file in the update. We would need a public reproduction to be able to troubleshoot it further

3 replies

re-source-tech Jun 6, 2024
Author

Thank you!
I will create a reproduction repo.
To explain why I have these configurations:

the PR title: to follow the commit convention within the project.
grouping vulnerability alerts: to group all vulnerability updates into one pull request and group all non-vulnerability updates into another pull request.

re-source-tech Jun 6, 2024
Author

@rarkins
I created two repos:

renovate-reproduction has global configs config.js
my-apps has repository configs renovate.json5

Azure pipeline - renovate-pipeline
Pull requests

I can not reproduce it.
My assumption: my project is a mono repo, while this repo only contains a single package.json.

re-source-tech Jun 17, 2024
Author

Added multiple package files, plus yarn.lock, but can not reproduce it.

re-source-tech · 2024-06-16T11:03:25Z

re-source-tech
Jun 16, 2024
Author

Removed the vulnerability alerts grouping, found this maybe caused by npm-axios-vulnerability.

And Renovate pipeline logs related to it:

Azure Pipeline Logs

DEBUG: npm.updateDependency(): dependencies.axios = 0.28.0 (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: npm.updateDependency(): dependencies.axios = 0.28.0 (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: npm.updateDependency(): dependencies.axios = 1.6.0 (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: npm.updateDependency(): devDependencies.axios = 0.28.0 (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: npm.updateLockedDependency: [email protected] -> 1.6.0 [yarn.lock] (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: [email protected] not found in yarn.lock but [email protected] was - looks like it's already updated (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Upgrade of axios to 1.6.0 is already done in existing branch (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: npm.updateDependency(): dependencies.axios = 0.28.0 (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: npm.updateDependency(): dependencies.axios = 0.28.0 (repository=my-project/my-aps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: npm.updateDependency(): dependencies.axios = 0.28.0 (repository=my-project/my-aps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: npm.updateDependency(): dependencies.axios = 0.28.0 (repository=my-project/my-aps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: No package files need updating (repository=my-project/my-aps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)

...


DEBUG: Writing any updated package files (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Writing updated .npmrc file to .npmrc (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Generating yarn.lock for . (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Spawning yarn install to create yarn.lock (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Using node constraint "18" from .nvmrc (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Found yarn constraint in package.json packageManager: 3.3.1 (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Performing lockfileUpdate (yarn) (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Setting CONTAINERBASE_CACHE_DIR to /tmp/renovate/cache/containerbase (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Falling back to binarySource=global (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Executing command (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
       "command": "yarn install --mode=skip-build"
DEBUG: exec completed (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
       "durationMs": 267936,
       "stdout": "➤ YN0000: ┌ Resolution step\n➤ YN0002: │ @commitlint/load@npm:19.0.3 doesn't provide @types/node (p287fb), requested by cosmiconfig-typescript-loader\n➤ YN0002: │ @commitlint/load@npm:19.0.3 doesn't provide typescript (pedfe3), requested by cosmiconfig-typescript-loader\n➤ YN0002: │ @digitalcredentials/isomorphic-webcrypto@npm:2.3.9 doesn't provide expo (p455f2), requested by expo-random\n➤ YN0002: │ @digitalcredentials/isomorphic-webcrypto@npm:2.3.9 doesn't provide react-native (p7ed55), requested by react-native-securerandom\n➤ YN0002: │ @resource/logger-client@workspace:packages/logger-client doesn't provide tslib (p05766), requested by @microsoft/applicationinsights-web\n➤ YN0002: │ @storybook/cli@npm:6.5.15 doesn't provide react (pa1d09), requested by @storybook/core-common\n➤ YN0002: │ @storybook/cli@npm:6.5.15 doesn't provide react-dom (pa0e43), requested by @storybook/core-common\n➤ YN0002: │ @storybook/codemod@npm:6.5.15 doesn't provide @babel/preset-env (p5d19b), requested by jscodeshift\n➤ YN0002: │ @storybook/mdx1-csf@npm:0.0.1 doesn't provide @babel/core (p312f2), requested by @babel/preset-env\n➤ YN0002: │ @storybook/telemetry@npm:6.5.15 doesn't provide react (p1e5d6), requested by @storybook/core-common\n➤ YN0002: │ @storybook/telemetry@npm:6.5.15 doesn't provide react-dom (p60a6f), requested by @storybook/core-common\n➤ YN0002: │ @types/react-query@npm:1.2.9 doesn't provide react (p1ce78), requested by react-query\n➤ YN0060: │ MVP@workspace:. provides @typescript-eslint/eslint-plugin (p59db6) with version 5.51.0, which doesn't satisfy what eslint-plugin-unused-imports requests\n➤ YN0002: │ MVP@workspace:. doesn't provide jest (pa012b), requested by ts-jest\n➤ YN0002: │ babel-plugin-styled-components@npm:2.1.4 [f5984] doesn't provide @babel/core (p11f33), requested by @babel/plugin-syntax-jsx\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/abi (pce3fd), requested by @typechain/ethers-v5\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/abi (pcf151), requested by @typechain/hardhat\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/bytes (p9b4c8), requested by @typechain/ethers-v5\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/providers (p5011e), requested by @typechain/ethers-v5\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/providers (p34bb8), requested by @typechain/hardhat\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @nomiclabs/hardhat-etherscan (p3e966), requested by @openzeppelin/hardhat-upgrades\n➤ YN0002: │ eslint-config-react-app@npm:7.0.1 [f275c] doesn't provide @babel/plugin-syntax-flow (p37480), requested by eslint-plugin-flowtype\n➤ YN0002: │ eslint-config-react-app@npm:7.0.1 [f275c] doesn't provide @babel/plugin-transform-react-jsx (pc28a9), requested by eslint-plugin-flowtype\n➤ YN0002: │ floor@workspace:apps/floor doesn't provide @babel/plugin-syntax-flow (pdb111), requested by eslint-plugin-flowtype\n➤ YN0002: │ floor@workspace:apps/floor doesn't provide @babel/plugin-transform-react-jsx (p36aeb), requested by eslint-plugin-flowtype\n➤ YN0002: │ office@workspace:apps/office doesn't provide @babel/plugin-syntax-flow (pbc826), requested by eslint-plugin-flowtype\n➤ YN0002: │ office@workspace:apps/office doesn't provide @babel/plugin-transform-react-jsx (p2f809), requested by eslint-plugin-flowtype\n➤ YN0060: │ office@workspace:apps/office provides react (pc8286) with version 17.0.2, which doesn't satisfy what framer-motion requests\n➤ YN0060: │ office@workspace:apps/office provides react-dom (p90030) with version 17.0.2, which doesn't satisfy what framer-motion requests\n➤ YN0002: │ typechain@npm:3.0.0 doesn't provide typescript (p4ba7f), requested by ts-essentials\n➤ YN0002: │ typechain@npm:5.1.2 doesn't provide typescript (p0e7bb), requested by ts-essentials\n➤ YN0000: │ Some peer dependencies are incorrectly met; run yarn explain peer-requirements <hash> for details, where <hash> is the six-letter p-prefixed code\n➤ YN0000: └ Completed in 1s 139ms\n➤ YN0000: ┌ Fetch step\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT Packing @digitalcredentials/minimal-cipher@https://github.com/digitalcredentials/minimal-cipher.git#commit=6c010cc307e80c7cb542a7dfb3c274a33a58b8eb from sources\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT Using npm for bootstrap. Reason: found npm's \"package-lock.json\" lockfile\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT \n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDERR npm warn deprecated [email protected]: Please see https://github.com/lydell/urix#deprecated\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDERR npm warn deprecated [email protected]: See https://github.com/lydell/source-map-url#deprecated\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDERR npm warn deprecated [email protected]: See https://github.com/lydell/source-map-resolve#deprecated\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDERR npm warn deprecated [email protected]: https://github.com/lydell/resolve-url#deprecated\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDERR npm warn deprecated [email protected]: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT Packing @microsoft/msrcrypto@https://github.com/microsoft/MSR-JavaScript-Crypto.git#commit=1feef3fcfa690a20959008f81d03f2c812296ec4 from sources\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT Using npm for bootstrap. Reason: found npm's \"package-lock.json\" lockfile\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT \n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDERR npm warn deprecated [email protected]: support for ECMAScript is superseded by `uglify-js` as of v3.13.0\n➤ YN0000: │ /tmp/xfs-a3136c26 STDERR npm warn deprecated [email protected]: See https://github.com/lydell/source-map-url#deprecated\n➤ YN0000: │ /tmp/xfs-a3136c26 STDERR npm warn deprecated [email protected]: See https://github.com/lydell/source-map-resolve#deprecated\n➤ YN0000: │ /tmp/xfs-a3136c26 STDERR npm warn deprecated [email protected]: Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies\n➤ YN0000: │ /tmp/xfs-a3136c26 STDERR npm warn deprecated [email protected]: Please see https://github.com/lydell/urix#deprecated\n➤ YN0000: │ /tmp/xfs-a3136c26 STDERR npm warn deprecated [email protected]: https://github.com/lydell/resolve-url#deprecated\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDERR npm warn deprecated @unimodules/[email protected]: replaced by the 'expo' package, learn more: https://blog.expo.dev/whats-new-in-expo-modules-infrastructure-7a7cdda81ebc\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT \n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT added 420 packages, and audited 421 packages in 17s\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT \n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT 13 packages are looking for funding\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT   run `npm fund` for details\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT \n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT 21 vulnerabilities (1 low, 1 moderate, 19 high)\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT \n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT To address issues that do not require attention, run:\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT   npm audit fix\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT \n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT To address all issues (including breaking changes), run:\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT   npm audit fix --force\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT \n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT Run `npm audit` for details.\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDERR npm warn deprecated @unimodules/[email protected]: replaced by the 'expo' package, learn more: https://blog.expo.dev/whats-new-in-expo-modules-infrastructure-7a7cdda81ebc\n➤ YN0000: │ /tmp/xfs-a3136c26 STDOUT microsoft-msrcrypto-1.6.6.tgz\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT \n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT added 1340 packages, and audited 1341 packages in 1m\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT \n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT 82 packages are looking for funding\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT   run `npm fund` for details\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT \n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT 38 vulnerabilities (19 moderate, 16 high, 3 critical)\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT \n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT To address all issues, run:\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT   npm audit fix\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT \n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT Run `npm audit` for details.\n➤ YN0000: │ /tmp/xfs-fafdbaa5 STDOUT digitalcredentials-minimal-cipher-5.1.1-0.tgz\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT Packing did-context@https://github.com/digitalbazaar/did-context.git#commit=6907c4dd4495ec351fcc07f288c3d1d1c1b8a8e9 from sources\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT No package manager configuration detected; defaulting to Yarn\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT \n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: CHANGELOG.md\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: LICENSE.md\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: README.md\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: contexts/README.md\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: contexts/did-v1.jsonld\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: js/constants.js\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: js/context.js\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: js/index.js\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: package.json\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: Package archive generated in /tmp/xfs-0a630d87/package.tgz\n➤ YN0000: │ /tmp/xfs-0a630d87 STDOUT ➤ YN0000: Done in 0s 92ms\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT Packing ethereumjs-abi@https://github.com/ethereumjs/ethereumjs-abi.git#commit=ee3994657fa7a427238e6ba92a84d0b529bbcde0 from sources\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT No package manager configuration detected; defaulting to Yarn\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT \n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: .travis.yml\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: CHANGELOG.md\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: LICENSE\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: README.md\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: index.js\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: lib/index.js\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: package.json\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: test/index.js\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: Package archive generated in /tmp/xfs-69b0c1e3/package.tgz\n➤ YN0000: │ /tmp/xfs-69b0c1e3 STDOUT ➤ YN0000: Done in 0s 47ms\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT Packing x25519-key-agreement-2020-context@https://github.com/digitalbazaar/x25519-key-agreement-2020-context.git#commit=ecb22cd453c229625314ad97732a9b8f4e8f18a2 from sources\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT No package manager configuration detected; defaulting to Yarn\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT \n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: CHANGELOG.md\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: LICENSE\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: README.md\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: contexts/README.md\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: contexts/x25519-key-agreement-2020-v1.jsonld\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: js/constants.js\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: js/context.js\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: js/documentLoader.js\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: js/index.js\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: package.json\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: Package archive generated in /tmp/xfs-bfae8f74/package.tgz\n➤ YN0000: │ /tmp/xfs-bfae8f74 STDOUT ➤ YN0000: Done in 0s 104ms\n➤ YN0013: │ 26 packages were already cached, 3119 had to be fetched\n➤ YN0000: └ Completed in 4m 16s\n➤ YN0000: ┌ Link step\n➤ YN0076: │ fsevents@patch:fsevents@npm%3A1.2.13#~builtin<compat/fsevents>::version=1.2.13&hash=d11327 The linux-x64-glibc architecture is incompatible with this package, build skipped.\n➤ YN0000: │ ESM support for PnP uses the experimental loader API and is therefore experimental\n➤ YN0000: └ Completed in 8s 280ms\n➤ YN0000: Done with warnings in 4m 27s\n",
       "stderr": ""
DEBUG: Executing command (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
       "command": "yarn up -R axios --mode=skip-build"
DEBUG: exec completed (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
       "durationMs": 11836,
       "stdout": "➤ YN0000: ┌ Resolution step\n➤ YN0002: │ @commitlint/load@npm:19.0.3 doesn't provide @types/node (p287fb), requested by cosmiconfig-typescript-loader\n➤ YN0002: │ @commitlint/load@npm:19.0.3 doesn't provide typescript (pedfe3), requested by cosmiconfig-typescript-loader\n➤ YN0002: │ @digitalcredentials/isomorphic-webcrypto@npm:2.3.9 doesn't provide expo (p455f2), requested by expo-random\n➤ YN0002: │ @digitalcredentials/isomorphic-webcrypto@npm:2.3.9 doesn't provide react-native (p7ed55), requested by react-native-securerandom\n➤ YN0002: │ @resource/logger-client@workspace:packages/logger-client doesn't provide tslib (p05766), requested by @microsoft/applicationinsights-web\n➤ YN0002: │ @storybook/cli@npm:6.5.15 doesn't provide react (pa1d09), requested by @storybook/core-common\n➤ YN0002: │ @storybook/cli@npm:6.5.15 doesn't provide react-dom (pa0e43), requested by @storybook/core-common\n➤ YN0002: │ @storybook/codemod@npm:6.5.15 doesn't provide @babel/preset-env (p5d19b), requested by jscodeshift\n➤ YN0002: │ @storybook/mdx1-csf@npm:0.0.1 doesn't provide @babel/core (p312f2), requested by @babel/preset-env\n➤ YN0002: │ @storybook/telemetry@npm:6.5.15 doesn't provide react (p1e5d6), requested by @storybook/core-common\n➤ YN0002: │ @storybook/telemetry@npm:6.5.15 doesn't provide react-dom (p60a6f), requested by @storybook/core-common\n➤ YN0002: │ @types/react-query@npm:1.2.9 doesn't provide react (p1ce78), requested by react-query\n➤ YN0060: │ MVP@workspace:. provides @typescript-eslint/eslint-plugin (p59db6) with version 5.51.0, which doesn't satisfy what eslint-plugin-unused-imports requests\n➤ YN0002: │ MVP@workspace:. doesn't provide jest (pa012b), requested by ts-jest\n➤ YN0002: │ babel-plugin-styled-components@npm:2.1.4 [f5984] doesn't provide @babel/core (p11f33), requested by @babel/plugin-syntax-jsx\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/abi (pce3fd), requested by @typechain/ethers-v5\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/abi (pcf151), requested by @typechain/hardhat\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/bytes (p9b4c8), requested by @typechain/ethers-v5\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/providers (p5011e), requested by @typechain/ethers-v5\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @ethersproject/providers (p34bb8), requested by @typechain/hardhat\n➤ YN0002: │ contracts@workspace:contracts doesn't provide @nomiclabs/hardhat-etherscan (p3e966), requested by @openzeppelin/hardhat-upgrades\n➤ YN0002: │ eslint-config-react-app@npm:7.0.1 [f275c] doesn't provide @babel/plugin-syntax-flow (p37480), requested by eslint-plugin-flowtype\n➤ YN0002: │ eslint-config-react-app@npm:7.0.1 [f275c] doesn't provide @babel/plugin-transform-react-jsx (pc28a9), requested by eslint-plugin-flowtype\n➤ YN0002: │ floor@workspace:apps/floor doesn't provide @babel/plugin-syntax-flow (pdb111), requested by eslint-plugin-flowtype\n➤ YN0002: │ floor@workspace:apps/floor doesn't provide @babel/plugin-transform-react-jsx (p36aeb), requested by eslint-plugin-flowtype\n➤ YN0002: │ office@workspace:apps/office doesn't provide @babel/plugin-syntax-flow (pbc826), requested by eslint-plugin-flowtype\n➤ YN0002: │ office@workspace:apps/office doesn't provide @babel/plugin-transform-react-jsx (p2f809), requested by eslint-plugin-flowtype\n➤ YN0060: │ office@workspace:apps/office provides react (pc8286) with version 17.0.2, which doesn't satisfy what framer-motion requests\n➤ YN0060: │ office@workspace:apps/office provides react-dom (p90030) with version 17.0.2, which doesn't satisfy what framer-motion requests\n➤ YN0002: │ typechain@npm:3.0.0 doesn't provide typescript (p4ba7f), requested by ts-essentials\n➤ YN0002: │ typechain@npm:5.1.2 doesn't provide typescript (p0e7bb), requested by ts-essentials\n➤ YN0000: │ Some peer dependencies are incorrectly met; run yarn explain peer-requirements <hash> for details, where <hash> is the six-letter p-prefixed code\n➤ YN0000: └ Completed in 1s 525ms\n➤ YN0000: ┌ Fetch step\n➤ YN0013: │ 3137 packages were already cached, 2 had to be fetched\n➤ YN0000: └ Completed in 2s 142ms\n➤ YN0000: ┌ Link step\n➤ YN0076: │ fsevents@patch:fsevents@npm%3A1.2.13#~builtin<compat/fsevents>::version=1.2.13&hash=d11327 The linux-x64-glibc architecture is incompatible with this package, build skipped.\n➤ YN0000: │ ESM support for PnP uses the experimental loader API and is therefore experimental\n➤ YN0007: │ esbuild@npm:0.17.15 must be built because it never has been before or the last one failed\n➤ YN0007: │ core-js@npm:3.32.0 must be built because it never has been before or the last one failed\n➤ YN0007: │ core-js@npm:2.6.12 must be built because it never has been before or the last one failed\n➤ YN0007: │ keccak@npm:3.0.3 must be built because it never has been before or the last one failed\n➤ YN0007: │ secp256k1@npm:4.0.3 must be built because it never has been before or the last one failed\n➤ YN0007: │ core-js-pure@npm:3.32.0 must be built because it never has been before or the last one failed\n➤ YN0007: │ keccak@npm:3.0.1 must be built because it never has been before or the last one failed\n➤ YN0007: │ web3@npm:1.2.11 must be built because it never has been before or the last one failed\n➤ YN0007: │ bufferutil@npm:4.0.7 must be built because it never has been before or the last one failed\n➤ YN0007: │ es5-ext@npm:0.10.62 must be built because it never has been before or the last one failed\n➤ YN0007: │ utf-8-validate@npm:5.0.10 must be built because it never has been before or the last one failed\n➤ YN0007: │ postinstall-postinstall@npm:2.1.0 must be built because it never has been before or the last one failed\n➤ YN0007: │ MVP@workspace:. must be built because it never has been before or the last one failed\n➤ YN0000: │ MVP@workspace:. STDOUT husky - Git hooks installed\n➤ YN0000: └ Completed in 5s 954ms\n➤ YN0000: Done with warnings in 10s 218ms\n",
       "stderr": ""
DEBUG: yarn.lock needs updating (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: updateYarnOffline resolvedPaths (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
       "resolvedPaths": [".yarn/cache", ".pnp.cjs", ".pnp.js", ".pnp.loader.mjs"]
DEBUG: Updated 2 lock files (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
       "updatedArtifacts": ["yarn.lock", ".pnp.cjs"]
DEBUG: Ensuring comment "⚠️ Artifact update problem" in #499 is removed (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: Ensuring comment "ℹ Artifact update notice" in #499 is removed (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)
DEBUG: 2 file(s) to commit (repository=my-project/my-apps, baseBranch=feature/3022-renovate-intermediate, branch=renovate/npm-axios-vulnerability)

Looks like it rewrites the commit.
So, re-running the pipeline result in skipping the package files update. How to update the Renovate configs to prevent it? Or is this the Azure platform specific issue?

2 replies

re-source-tech Jun 17, 2024
Author

But this is not reproducible in the reproduction repo.

re-source-tech Jun 17, 2024
Author

Other packages don't have such strange behavior.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Re-running the renovate pipeline results in different file changes in the pull request. #29474

{{title}}

Replies: 3 comments 5 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

Re-running the renovate pipeline results in different file changes in the pull request. #29474

re-source-tech Jun 6, 2024

What would you like help with?

How are you running Renovate?

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

Please tell us more about your question or problem

Logs (if relevant)

Replies: 3 comments · 5 replies

github-actions[bot] bot Jun 6, 2024

rarkins Jun 6, 2024 Maintainer

re-source-tech Jun 6, 2024 Author

re-source-tech Jun 6, 2024 Author

re-source-tech Jun 17, 2024 Author

re-source-tech Jun 16, 2024 Author

re-source-tech Jun 17, 2024 Author

re-source-tech Jun 17, 2024 Author

re-source-tech
Jun 6, 2024

Replies: 3 comments 5 replies

github-actions[bot]
bot Jun 6, 2024

rarkins
Jun 6, 2024
Maintainer

re-source-tech Jun 6, 2024
Author

re-source-tech Jun 6, 2024
Author

re-source-tech Jun 17, 2024
Author

re-source-tech
Jun 16, 2024
Author

re-source-tech Jun 17, 2024
Author

re-source-tech Jun 17, 2024
Author