Config-help: Renovate doesn't create any PRs
Which Renovate are you using?
WhiteSource Renovate App
Renovate Pro
Which platform are you using?
GitHub Enterprise
Have you checked the logs? Don't forget to include them if relevant
INFO: Renovating repository
{
"renovateVersion": "19.129.0"
}
DEBUG: Using localDir: /mnt/renovate/gh/plotly/streambed
DEBUG: initRepo("plotly/streambed")
DEBUG: plotly/streambed owner = plotly
DEBUG: plotly/streambed default branch = master
DEBUG: Using app token for git init
INFO: Initialising git repository into /mnt/renovate/gh/plotly/streambed
INFO: git clone completed
{
"cloneSeconds": 14.2
}
DEBUG: latest commit
{
"latestCommitDate": "2020-02-10 15:14:06 -0500"
}
DEBUG: Git private key configured, but not being set
INFO: Setting git author
{
"gitAuthor": {
"name": "Renovate Bot",
"email": "[email protected]"
}
}
DEBUG: resetMemCache()
DEBUG: detectSemanticCommits()
DEBUG: getCommitMessages
DEBUG: Semantic commits detection: unknown
DEBUG: No semantic commits detected
DEBUG: checkOnboarding()
DEBUG: isOnboarded()
DEBUG: findFile(renovate.json)
DEBUG: config file exists
DEBUG: ensureIssueClosing(Action required: Add a Renovate config)
DEBUG: Retrieving issueList
DEBUG: Retrieved 1 issues
DEBUG: Repo is onboarded
DEBUG: Found renovate.json config file
INFO: Repository config
{
"configFile": "renovate.json",
"config": {
"extends": [
"config:base"
],
"enabledManagers": [
"yarn"
],
"packageRules": [
{
"paths": [
"shelly/webapp/static/webapp/package.json"
],
"labels": [
"webapp",
"Renovate"
],
"updateTypes": "minor",
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"shelly/webapp/static/webapp/package.json"
],
"labels": [
"webapp",
"Renovate"
],
"updateTypes": "minor",
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"shelly/embedplot/static/embedplot/package.json"
],
"labels": [
"embedplot",
"Renovate"
],
"updateTypes": "minor",
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"package.json"
],
"labels": [
"plotlyjs",
"Renovate"
],
"updateTypes": "minor",
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"package.json"
],
"labels": [
"plotlyjs",
"Renovate"
],
"updateTypes": "minor",
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"shelly/administration/static/administration/package.json"
],
"labels": [
"administration",
"Renovate"
],
"updateTypes": "minor",
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"shelly/administration/static/administration/package.json"
],
"labels": [
"administration",
"Renovate"
],
"updateTypes": "minor",
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"image_server/package.json"
],
"labels": [
"imageserver",
"Renovate"
],
"updateTypes": "minor",
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
}
],
"schedule": [
"on monday after 4pm"
]
}
}
DEBUG: migrateAndValidate()
DEBUG: No config migration necessary
DEBUG: massaged config
{
"config": {
"extends": [
"config:base"
],
"enabledManagers": [
"yarn"
],
"packageRules": [
{
"paths": [
"shelly/webapp/static/webapp/package.json"
],
"labels": [
"webapp",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"shelly/webapp/static/webapp/package.json"
],
"labels": [
"webapp",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"shelly/embedplot/static/embedplot/package.json"
],
"labels": [
"embedplot",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"package.json"
],
"labels": [
"plotlyjs",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"package.json"
],
"labels": [
"plotlyjs",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"shelly/administration/static/administration/package.json"
],
"labels": [
"administration",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"shelly/administration/static/administration/package.json"
],
"labels": [
"administration",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"image_server/package.json"
],
"labels": [
"imageserver",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
}
],
"schedule": [
"on monday after 4pm"
]
}
}
DEBUG: migrated config
{
"config": {
"extends": [
"config:base"
],
"enabledManagers": [
"yarn"
],
"packageRules": [
{
"paths": [
"shelly/webapp/static/webapp/package.json"
],
"labels": [
"webapp",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"shelly/webapp/static/webapp/package.json"
],
"labels": [
"webapp",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"shelly/embedplot/static/embedplot/package.json"
],
"labels": [
"embedplot",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"package.json"
],
"labels": [
"plotlyjs",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"package.json"
],
"labels": [
"plotlyjs",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"shelly/administration/static/administration/package.json"
],
"labels": [
"administration",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
},
{
"paths": [
"shelly/administration/static/administration/package.json"
],
"labels": [
"administration",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"devDependencies"
],
"groupName": "minor devDeps"
},
{
"paths": [
"image_server/package.json"
],
"labels": [
"imageserver",
"Renovate"
],
"updateTypes": [
"minor"
],
"depTypeList": [
"dependencies"
],
"groupName": "minor deps"
}
],
"schedule": [
"on monday after 4pm"
]
}
}
DEBUG: Found repo ignorePaths
{
"ignorePaths": [
"**/node_modules/**",
"**/bower_components/**",
"**/vendor/**",
"**/examples/**",
"**/__tests__/**",
"**/test/**",
"**/tests/**"
]
}
DEBUG: checkBaseBranch()
DEBUG: config.repoIsOnboarded=true
DEBUG: Setting baseBranch to master
DEBUG: latest commit
{
"branchName": "master",
"latestCommitDate": "2020-02-10 15:14:06 -0500"
}
DEBUG: Setting branchPrefix: renovate/
INFO: Found GitHub vulnerability alerts
{
"alerts": [
{
"dismissReason": "Vulnerable code is not actually used",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 0.0.5",
"securityAdvisory": {
"description": "stringstream versions before 0.0.6 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input stream on Node.js 4.x and below.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-mf6x-7mm4-x2g7"
},
{
"type": "WHITE_SOURCE",
"value": "WS-2018-0103"
}
],
"references": [
{
"url": "https://hackerone.com/reports/321670"
}
],
"severity": "MODERATE"
},
"securityVulnerability": {
"package": {
"name": "stringstream",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "0.0.6"
},
"vulnerableVersionRange": "< 0.0.6"
}
},
{
"dismissReason": "No bandwidth to fix this",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "yarn.lock",
"vulnerableRequirements": "= 0.2.4",
"securityAdvisory": {
"description": "The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing arbitrary code execution.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-5mjw-6jrh-hvfq"
},
{
"type": "CVE",
"value": "CVE-2017-16226"
}
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16226"
}
],
"severity": "MODERATE"
},
"securityVulnerability": {
"package": {
"name": "static-eval",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "2.0.0"
},
"vulnerableVersionRange": "< 2.0.0"
}
},
{
"dismissReason": "Vulnerable code is not actually used",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 1.2.11",
"securityAdvisory": {
"description": "The mime module is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-wrvr-8mpx-r7pp"
},
{
"type": "CVE",
"value": "CVE-2017-16138"
}
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16138"
}
],
"severity": "HIGH"
},
"securityVulnerability": {
"package": {
"name": "mime",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "1.4.1"
},
"vulnerableVersionRange": "< 1.4.1"
}
},
{
"dismissReason": "Vulnerable code is not actually used",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 0.2.2",
"securityAdvisory": {
"description": "The NPM package cryptiles version 4.1.1 and earlier contains a CWE-331: Insufficient Entropy vulnerability in randomDigits() method that can result in An attacker is more likely to be able to brute force something that was supposed to be random.. This attack appear to be exploitable via Depends upon the calling application.. This vulnerability appears to have been fixed in 4.1.2.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-rq8g-5pc5-wrhr"
},
{
"type": "CVE",
"value": "CVE-2018-1000620"
}
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000620"
}
],
"severity": "HIGH"
},
"securityVulnerability": {
"package": {
"name": "cryptiles",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "4.1.2"
},
"vulnerableVersionRange": "< 4.1.2"
}
},
{
"dismissReason": "Vulnerable code is not actually used",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 1.1.7",
"securityAdvisory": {
"description": "react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-6g33-f262-xjp4"
},
{
"type": "CVE",
"value": "CVE-2017-16028"
}
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16028"
}
],
"severity": "LOW"
},
"securityVulnerability": {
"package": {
"name": "randomatic",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "3.0.0"
},
"vulnerableVersionRange": "< 3.0.0"
}
},
{
"dismissReason": "Vulnerable code is not actually used",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 0.4.3",
"securityAdvisory": {
"description": "Versions of tunnel-agent before 0.6.0 are vulnerable to memory exposure.\n\nThis is exploitable if user supplied input is provided to the auth value and is a number.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-xc7v-wxcw-j472"
},
{
"type": "WHITE_SOURCE",
"value": "WS-2018-0076"
}
],
"references": [
{
"url": "https://github.com/request/tunnel-agent/commit/9ca95ec7219daface8a6fc2674000653de0922c0"
}
],
"severity": "MODERATE"
},
"securityVulnerability": {
"package": {
"name": "tunnel-agent",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "0.6.0"
},
"vulnerableVersionRange": "< 0.6.0"
}
},
{
"dismissReason": "Vulnerable code is not actually used",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 3.6.1",
"securityAdvisory": {
"description": "Js-yaml prior to 3.13.1 are vulnerable to Code Injection. The load() function may execute arbitrary code injected through a malicious YAML file.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-8j8c-7jfh-h6hx"
},
{
"type": "WHITE_SOURCE",
"value": "WS-2019-0063"
}
],
"references": [
{
"url": "https://github.com/nodeca/js-yaml/pull/480"
}
],
"severity": "HIGH"
},
"securityVulnerability": {
"package": {
"name": "js-yaml",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "3.13.1"
},
"vulnerableVersionRange": "< 3.13.1"
}
},
{
"dismissReason": "Vulnerable code is not actually used",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 3.6.1",
"securityAdvisory": {
"description": "Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-2pr6-76vf-7546"
},
{
"type": "WHITE_SOURCE",
"value": "WS-2019-0032"
}
],
"references": [
{
"url": "https://github.com/nodeca/js-yaml/issues/475"
}
],
"severity": "MODERATE"
},
"securityVulnerability": {
"package": {
"name": "js-yaml",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "3.13.0"
},
"vulnerableVersionRange": "< 3.13.0"
}
},
{
"dismissReason": "Vulnerable code is not actually used",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 1.4.0",
"securityAdvisory": {
"description": "A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-h6ch-v84p-w6p9"
},
{
"type": "WHITE_SOURCE",
"value": "WS-2018-0590"
}
],
"references": [
{
"url": "https://github.com/kpdecker/jsdiff/commit/2aec4298639bf30fb88a00b356bf404d3551b8c0"
}
],
"severity": "HIGH"
},
"securityVulnerability": {
"package": {
"name": "diff",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "3.5.0"
},
"vulnerableVersionRange": "< 3.5.0"
}
},
{
"dismissReason": "No bandwidth to fix this",
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "yarn.lock",
"vulnerableRequirements": "= 1.1.0",
"securityAdvisory": {
"description": "In nodejs-mem before version 4.0.0 there is a memory leak due to old results not being removed from the cache despite reaching maxAge. Exploitation of this can lead to exhaustion of memory and subsequent denial of service.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-4xcv-9jjx-gfj3"
},
{
"type": "WHITE_SOURCE",
"value": "WS-2018-0236"
}
],
"references": [
{
"url": "https://github.com/sindresorhus/mem/commit/da4e4398cb27b602de3bd55f746efa9b4a31702b"
}
],
"severity": "MODERATE"
},
"securityVulnerability": {
"package": {
"name": "mem",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "4.0.0"
},
"vulnerableVersionRange": "< 4.0.0"
}
},
{
"dismissReason": null,
"vulnerableManifestFilename": "yarn.lock",
"vulnerableManifestPath": "image_server/yarn.lock",
"vulnerableRequirements": "= 4.0.11",
"securityAdvisory": {
"description": "Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.",
"identifiers": [
{
"type": "GHSA",
"value": "GHSA-w457-6q6x-cgp9"
},
{
"type": "CVE",
"value": "CVE-2019-19919"
}
],
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19919"
}
],
"severity": "HIGH"
},
"securityVulnerability": {
"package": {
"name": "handlebars",
"ecosystem": "NPM"
},
"firstPatchedVersion": {
"identifier": "4.3.0"
},
"vulnerableVersionRange": "< 4.3.0"
}
}
]
}
DEBUG: alert package rules
{
"alertPackageRules": [
{
"datasources": [
"npm"
],
"packageNames": [
"handlebars"
],
"matchCurrentVersion": "= 4.0.11",
"allowedVersions": "4.3.0",
"prBodyNotes": [
"### GitHub Vulnerability Alerts",
"#### [CVE-2019-19919](https://nvd.nist.gov/vuln/detail/CVE-2019-19919)\n\nVersions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads."
],
"force": {
"groupName": null,
"schedule": [],
"masterIssueApproval": false,
"rangeStrategy": "update-lockfile",
"commitMessageSuffix": "[SECURITY]",
"vulnerabilityAlert": true,
"branchTopic": "npm-handlebars-vulnerability"
}
}
]
}
DEBUG: processRepo()
DEBUG: No baseBranches
DEBUG: extractAndUpdate()
DEBUG: ansible is not in enabledManagers list - skipping
DEBUG: bazel is not in enabledManagers list - skipping
DEBUG: buildkite is not in enabledManagers list - skipping
DEBUG: bundler is not in enabledManagers list - skipping
DEBUG: cargo is not in enabledManagers list - skipping
DEBUG: cdnurl is not in enabledManagers list - skipping
DEBUG: circleci is not in enabledManagers list - skipping
DEBUG: composer is not in enabledManagers list - skipping
DEBUG: deps-edn is not in enabledManagers list - skipping
DEBUG: docker-compose is not in enabledManagers list - skipping
DEBUG: dockerfile is not in enabledManagers list - skipping
DEBUG: droneci is not in enabledManagers list - skipping
DEBUG: git-submodules is not in enabledManagers list - skipping
DEBUG: github-actions is not in enabledManagers list - skipping
DEBUG: gitlabci is not in enabledManagers list - skipping
DEBUG: gitlabci-include is not in enabledManagers list - skipping
DEBUG: gomod is not in enabledManagers list - skipping
DEBUG: gradle is not in enabledManagers list - skipping
DEBUG: gradle-wrapper is not in enabledManagers list - skipping
DEBUG: helm-requirements is not in enabledManagers list - skipping
DEBUG: helm-values is not in enabledManagers list - skipping
DEBUG: helmfile is not in enabledManagers list - skipping
DEBUG: homebrew is not in enabledManagers list - skipping
DEBUG: kubernetes is not in enabledManagers list - skipping
DEBUG: leiningen is not in enabledManagers list - skipping
DEBUG: maven is not in enabledManagers list - skipping
DEBUG: meteor is not in enabledManagers list - skipping
DEBUG: mix is not in enabledManagers list - skipping
DEBUG: npm is not in enabledManagers list - skipping
DEBUG: nuget is not in enabledManagers list - skipping
DEBUG: nvm is not in enabledManagers list - skipping
DEBUG: pip_requirements is not in enabledManagers list - skipping
DEBUG: pip_setup is not in enabledManagers list - skipping
DEBUG: pipenv is not in enabledManagers list - skipping
DEBUG: poetry is not in enabledManagers list - skipping
DEBUG: pub is not in enabledManagers list - skipping
DEBUG: ruby-version is not in enabledManagers list - skipping
DEBUG: sbt is not in enabledManagers list - skipping
DEBUG: swift is not in enabledManagers list - skipping
DEBUG: terraform is not in enabledManagers list - skipping
DEBUG: travis is not in enabledManagers list - skipping
DEBUG: Found 0 package file(s)
DEBUG: manager.fetchUpdates()
DEBUG: packageFiles with updates
{
"config": {}
}
DEBUG: branchifyUpgrades
DEBUG: 0 flattened updates found:
DEBUG: Returning 0 branch(es)
DEBUG: config.repoIsOnboarded=true
INFO: Processing 0 branches:
DEBUG: Calculating hourly PRs remaining
DEBUG: Retrieving PR list
DEBUG: Retrieved 1000 Pull Requests
DEBUG: currentHourStart=1581368400000
DEBUG: PR hourly limit remaining: 2
DEBUG: Enforcing prConcurrentLimit (20)
DEBUG: 0 PRs are currently open
DEBUG: PR concurrent limit remaining: 20
DEBUG: branchPrefix: renovate/
DEBUG: Found 0 Renovate PRs
{
"renovatePrs": []
}
DEBUG: Removing any stale branches
DEBUG: config.repoIsOnboarded=true
DEBUG: No renovate branches found
DEBUG: ensureIssueClosing(Action Required: Fix Renovate Configuration)
INFO: Finished repository
What would you like to do?
I've tried to reconfigure Renovate Bot several times for this archive. Tried both - reconfiguring and starting from scratch. Seems that all checks pass, no errors in the logs, but no PRs are raised at the defined time. I suspect there's something wrong with my config.
There are several apps in the archive and I want there to be different sets of PRs for each of them.
dmt0
All 10 comments
Your problem is this:
"enabledManagers": [
"yarn"
],
Use "npm" instead. npm/yarn/pnpm all share the "npm" manager name.
rarkins
on 10 Feb 2020
👍2
Thanks! That did it.
Another issue here in the same setup:
I have one package.json in the root, and a few more in subdirectories. I want a separate PR that include only packages in the root, and not from other subdirs.
Currently this part:
{
"paths": ["package.json"],
"labels": ["plotlyjs", "Renovate"],
"updateTypes": "minor",
"depTypeList": ["dependencies"],
"groupName": "Plotly.js minor deps"
},
triggers a PR that scans all subdirs.
How do I specify a path that excludes subdirs and only includes root level package.json?
dmt0
on 11 Feb 2020
try a minimatch expression
{
"paths": ["!**/package.json"],
"labels": ["plotlyjs", "Renovate"],
"updateTypes": "minor",
"depTypeList": ["dependencies"],
"groupName": "Plotly.js minor deps"
}
viceice
on 11 Feb 2020
@dmt0 Please close the issue if it works as expected.
viceice
on 11 Feb 2020
After the first change, Renovate Bot made 4 PRs - 2 for Administration, and 2 for root + everything else.
After the second change - 2 latter PRs got auto-closed immediately, but no new ones were created (I scheduled them for Monday after 9PM - it's 10PM now - no result).
I'm waiting for some confirmation that this method works before I close this issue.
dmt0
on 11 Feb 2020
@dmt0 looks like the pattern is wrong, needs to be +(package.json) because ** matches every path.
edit: fix pattern again
viceice
on 11 Feb 2020
👍1
OK, that did the job, thanks @ViceIce!
Regarding my initial issue, I see several possible improvements.
I think we could benefit from a debug message for the case when there are 0 package files found for a specific
enabledManagersentry. That one should be at leastWarninglevel. I'm sure there are few different things that can cause this behaviour. As of now a user is totally in the dark when this happens, especially given the fact that Renovate runs on a schedule and not instantly. Github integration thingy should also say that config is not valid if there are no package files detected at all.Scan the
renovate.jsonfile for disallowed values. The docs are clear thatyarnis not a valid entry forenabledManagers. It would be easy to determine that at run time and print an error message. Also Github integration should flag this.If it make sense, add
yarnas an alias tonpm?
dmt0
on 11 Feb 2020
You should get a issue for invalid configs, if issues are allowed
viceice
on 11 Feb 2020
You can see the logs in the first post - not seeing anything there.
dmt0
on 11 Feb 2020
I've created three feature requests in the main repo according to @dmt0's suggestions. I think we can close this now.
rarkins
on 11 Feb 2020
👍1
Was this page helpful?
0 / 5 - 0 ratings
Related issues
billyto
路
9Comments
simoneb
路
10Comments
Arcanemagus
路
3Comments
stefee
路
4Comments
HonkingGoose
路
4Comments
Most helpful comment
Your problem is this:
Use "npm" instead. npm/yarn/pnpm all share the "npm" manager name.