Prevent install scripts from being run when using corepack `use`

[RahulGautamSingh]

Discussed in #36904

^{Originally posted by n3dst4 July 9, 2025}

How are you running Renovate?

A Mend.io-hosted app

Please tell us more about your question or problem

I am seeing PRs generated by Renovate that contain incorrect updates to packageManager field of my package.json.

The resulting PR had an "Artifact update problem" from Renovate, with the text Command failed: corepack use pnpm@10.12.4.

The change, while updating the version number, omitted the SHA512 hash:

-   "packageManager": "pnpm@10.12.1+sha512.f0dda8580f0ee9481c5c79a1d927b9164f2c478e90992ad268bbb2465a736984391d6333d2c327913578b2804af33474ca554ba29c04a8b13060a717675ae3ac"
+   "packageManager": "pnpm@10.12.4"

Minimal Repro

Minimal repro

Leading to this PR which demonstrates the issue.

Logs (if relevant)

Logs

DEBUG: Using RE2 regex engine
DEBUG: Parsing configs
DEBUG: Checking for config file in /runner/renovate/job_config.json
DEBUG: Detected config in env RENOVATE_CONFIG
{
  "config": {
    "extends": [
      "mergeConfidence:all-badges"
    ],
    "prFooter": "This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/{{platform}}/{{repository}}).",
    "redisUrl": "redis://developer-platform-bare-metal-prd.aqffol.ng.0001.use1.cache.amazonaws.com:6379",
    "binarySource": "install",
    "globalExtends": [
      "global:safeEnv"
    ],
    "logLevelRemap": [
      {
        "newLogLevel": "info",
        "matchMessage": "Cache fallback URLs"
      }
    ],
    "platformCommit": "enabled",
    "allowedCommands": [
      "^git add --all$",
      "^git reset$",
      "^pwd$"
    ],
    "repositoryCache": "enabled",
    "cacheTtlOverride": {
      "datasource-docker-hub-tags": 90,
      "datasource-maven:metadata-xml": 90
    },
    "encryptedWarning": "Encrypted secrets were detected in the repository config. This feature has been deprecated. Please migrate them to this portal. See the guide at http://docs.renovatebot.com/mend-hosted/migrating-secrets/",
    "onboardingConfig": {
      "$schema": "https://docs.renovatebot.com/renovate-schema.json",
      "extends": [
        "config:recommended"
      ]
    },
    "gitIgnoredAuthors": [
      "29139614+renovate[bot]@users.noreply.github.com"
    ],
    "customizeDashboard": {
      "repoProblemsHeader": "These problems occurred while renovating this repository. [View logs](https://developer.mend.io//{{platform}}/{{repository}})."
    },
    "repositoryCacheType": "local",
    "dependencyDashboardFooter": "\n- [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository\n",
    "dependencyDashboardHeader": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/{{platform}}/{{repository}})."
  }
}

DEBUG: File config
{
  "config": {
    "token": "***********",
    "hostRules": [
      {
        "hostType": "docker",
        "matchHost": "docker.io",
        "username": "mdpprodrenovate",
        "password": "***********"
      },
      {
        "hostType": "docker",
        "matchHost": "hub.docker.com",
        "username": "mdpprodrenovatedc2",
        "password": "***********"
      },
      {
        "hostType": "github",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "github-tags",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "github-releases",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "pod",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "terraform-provider",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "rubygems",
        "matchHost": "github.com",
        "token": "***********"
      }
    ],
    "secrets": {}
  }
}

DEBUG: CLI config
{
  "config": {}
}

DEBUG: Env config
{
  "config": {
    "extends": [
      "mergeConfidence:all-badges"
    ],
    "prFooter": "This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/{{platform}}/{{repository}}).",
    "redisUrl": "redis://developer-platform-bare-metal-prd.aqffol.ng.0001.use1.cache.amazonaws.com:6379",
    "binarySource": "install",
    "globalExtends": [
      "global:safeEnv"
    ],
    "logLevelRemap": [
      {
        "newLogLevel": "info",
        "matchMessage": "Cache fallback URLs"
      }
    ],
    "platformCommit": "enabled",
    "allowedCommands": [
      "^git add --all$",
      "^git reset$",
      "^pwd$"
    ],
    "repositoryCache": "enabled",
    "cacheTtlOverride": {
      "datasource-docker-hub-tags": 90,
      "datasource-maven:metadata-xml": 90
    },
    "encryptedWarning": "Encrypted secrets were detected in the repository config. This feature has been deprecated. Please migrate them to this portal. See the guide at http://docs.renovatebot.com/mend-hosted/migrating-secrets/",
    "onboardingConfig": {
      "$schema": "https://docs.renovatebot.com/renovate-schema.json",
      "extends": [
        "config:recommended"
      ]
    },
    "gitIgnoredAuthors": [
      "29139614+renovate[bot]@users.noreply.github.com"
    ],
    "customizeDashboard": {
      "repoProblemsHeader": "These problems occurred while renovating this repository. [View logs](https://developer.mend.io//{{platform}}/{{repository}})."
    },
    "repositoryCacheType": "local",
    "dependencyDashboardFooter": "\n- [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository\n",
    "dependencyDashboardHeader": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/{{platform}}/{{repository}}).",
    "hostRules": [],
    "onboardingNoDeps": "enabled",
    "cacheDir": "/runner/cache",
    "onboarding": true,
    "forkProcessing": "enabled",
    "requireConfig": "required",
    "platform": "github",
    "username": "renovate[bot]",
    "repositories": [
      "n3dst4/renovate-packagemanager-sha512-repro"
    ],
    "gitAuthor": "renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
    "checkedBranches": [
      "renovate/all-minor-patch"
    ],
    "deleteConfigFile": true
  }
}

DEBUG: Resolved global extends
{
  "config": {
    "allowedEnv": [
      "GO*",
      "GRADLE_OPTS",
      "RUSTC_BOOTSTRAP"
    ],
    "description": [
      "Hopefully safe environment variables to allow users to configure."
    ]
  }
}

DEBUG: Combined config
{
  "config": {
    "allowedEnv": [
      "GO*",
      "GRADLE_OPTS",
      "RUSTC_BOOTSTRAP"
    ],
    "description": [
      "Hopefully safe environment variables to allow users to configure."
    ],
    "token": "***********",
    "hostRules": [
      {
        "hostType": "docker",
        "matchHost": "docker.io",
        "username": "mdpprodrenovate",
        "password": "***********"
      },
      {
        "hostType": "docker",
        "matchHost": "hub.docker.com",
        "username": "mdpprodrenovatedc2",
        "password": "***********"
      },
      {
        "hostType": "github",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "github-tags",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "github-releases",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "pod",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "terraform-provider",
        "matchHost": "api.github.com",
        "token": "***********"
      },
      {
        "hostType": "rubygems",
        "matchHost": "github.com",
        "token": "***********"
      }
    ],
    "secrets": {},
    "extends": [
      "mergeConfidence:all-badges"
    ],
    "prFooter": "This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/{{platform}}/{{repository}}).",
    "redisUrl": "redis://developer-platform-bare-metal-prd.aqffol.ng.0001.use1.cache.amazonaws.com:6379",
    "binarySource": "install",
    "logLevelRemap": [
      {
        "newLogLevel": "info",
        "matchMessage": "Cache fallback URLs"
      }
    ],
    "platformCommit": "enabled",
    "allowedCommands": [
      "^git add --all$",
      "^git reset$",
      "^pwd$"
    ],
    "repositoryCache": "enabled",
    "cacheTtlOverride": {
      "datasource-docker-hub-tags": 90,
      "datasource-maven:metadata-xml": 90
    },
    "encryptedWarning": "Encrypted secrets were detected in the repository config. This feature has been deprecated. Please migrate them to this portal. See the guide at http://docs.renovatebot.com/mend-hosted/migrating-secrets/",
    "onboardingConfig": {
      "$schema": "https://docs.renovatebot.com/renovate-schema.json",
      "extends": [
        "config:recommended"
      ]
    },
    "gitIgnoredAuthors": [
      "29139614+renovate[bot]@users.noreply.github.com"
    ],
    "customizeDashboard": {
      "repoProblemsHeader": "These problems occurred while renovating this repository. [View logs](https://developer.mend.io//{{platform}}/{{repository}})."
    },
    "repositoryCacheType": "local",
    "dependencyDashboardFooter": "\n- [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository\n",
    "dependencyDashboardHeader": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/{{platform}}/{{repository}}).",
    "onboardingNoDeps": "enabled",
    "cacheDir": "/runner/cache",
    "onboarding": true,
    "forkProcessing": "enabled",
    "requireConfig": "required",
    "platform": "github",
    "username": "renovate[bot]",
    "repositories": [
      "n3dst4/renovate-packagemanager-sha512-repro"
    ],
    "gitAuthor": "renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
    "checkedBranches": [
      "renovate/all-minor-patch"
    ],
    "deleteConfigFile": true
  }
}

DEBUG: Enabling forkProcessing while in non-autodiscover mode
DEBUG: Enabling onboardingNoDeps while in non-autodiscover mode
DEBUG: Found valid git version: 2.49.0
DEBUG: Setting global hostRules
DEBUG: Adding password authentication for docker.io (hostType=docker) to hostRules
DEBUG: Adding password authentication for hub.docker.com (hostType=docker) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github-tags) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github-releases) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=pod) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=terraform-provider) to hostRules
DEBUG: Adding token authentication for github.com (hostType=rubygems) to hostRules
DEBUG: Using default github endpoint: https://api.github.com/
DEBUG: Platform config
{
  "platformConfig": {
    "hostType": "github",
    "endpoint": "https://api.github.com/",
    "isGHApp": true,
    "isGhe": false
  }
  "renovateUsername": "renovate[bot]"
}

DEBUG: Using configured gitAuthor (renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>)
DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules
DEBUG: Using baseDir: /tmp/renovate
DEBUG: Using configured cacheDir: /runner/cache
DEBUG: Using containerbaseDir: /runner/cache/containerbase
DEBUG: Redis cache init
DEBUG: Redis cache connected
DEBUG: Commits limit = null
DEBUG: Setting global hostRules
DEBUG: Adding password authentication for docker.io (hostType=docker) to hostRules
DEBUG: Adding password authentication for hub.docker.com (hostType=docker) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github-tags) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github-releases) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=pod) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=terraform-provider) to hostRules
DEBUG: Adding token authentication for github.com (hostType=rubygems) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules
DEBUG: validatePresets()
DEBUG: Reinitializing hostRules for repo
DEBUG: Clearing hostRules
DEBUG: Adding password authentication for docker.io (hostType=docker) to hostRules
DEBUG: Adding password authentication for hub.docker.com (hostType=docker) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github-tags) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github-releases) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=pod) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=terraform-provider) to hostRules
DEBUG: Adding token authentication for github.com (hostType=rubygems) to hostRules
DEBUG: Adding token authentication for api.github.com (hostType=github) to hostRules
INFO: Repository started
{
  "renovateVersion": "41.23.2"
}

DEBUG: Using localDir: /tmp/renovate/repos/github/n3dst4/renovate-packagemanager-sha512-repro
DEBUG: PackageFiles.clear() - Package files deleted
DEBUG: initRepo("n3dst4/renovate-packagemanager-sha512-repro")
DEBUG: hostRules: authentication already set for api.github.com
DEBUG: Using queue: host=api.github.com, concurrency=16
DEBUG: n3dst4/renovate-packagemanager-sha512-repro default branch = main
DEBUG: Issues cache: Adding 1 issues to reconcile queue
DEBUG: Using app token for git init
DEBUG: fetchBranchCommits(): url=https://**redacted**@github.com/n3dst4/renovate-packagemanager-sha512-repro.git
DEBUG: Repository cache is restored from revision 13
DEBUG: Resetting npmrc
DEBUG: Resetting npmrc
DEBUG: checkOnboarding()
DEBUG: isOnboarded()
DEBUG: findPr(renovate/configure, Configure Renovate, !open)
DEBUG: PR cache: sync fetch
DEBUG: http cache: saving https://api.github.com/repos/n3dst4/renovate-packagemanager-sha512-repro/pulls?per_page=20&state=all&sort=updated&direction=desc&page=1 (etag=W/"6f5e64ba702c01adbd1a99e5f25273e6d3d5e6f90b6ec35dca94ff5082c65c96", lastModified=undefined)
DEBUG: PR cache: Filtered 3 PRs to 3 (user=renovate[bot])
DEBUG: PR cache: updating item 3
DEBUG: PR cache: getPrList success
{
  "pullsTotal": 3
  "requestsTotal": 1
  "apiQuotaAffected": true
}

DEBUG: findPr(renovate/configure, chore: Configure Renovate, !open)
DEBUG: Checking cached config file name
DEBUG: http cache: Using cached response: https://api.github.com/repos/n3dst4/renovate-packagemanager-sha512-repro/contents/renovate.json from 2025-07-14T17:18:20.241Z
DEBUG: Existing config file confirmed
DEBUG: Repository config
{
  "fileName": "renovate.json"
  "config": {
    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
    "extends": [
      "config:recommended",
      "group:allNonMajor"
    ]
  }
}

DEBUG: Repo is onboarded
DEBUG: http cache: Using cached response: https://api.github.com/repos/n3dst4/renovate-packagemanager-sha512-repro/contents/renovate.json from 2025-07-14T17:18:20.241Z
DEBUG: migrateAndValidate()
DEBUG: No config migration necessary
DEBUG: Found repo ignorePaths
{
  "ignorePaths": [
    "**/node_modules/**",
    "**/bower_components/**",
    "**/vendor/**",
    "**/examples/**",
    "**/__tests__/**",
    "**/test/**",
    "**/tests/**",
    "**/__fixtures__/**"
  ]
}

DEBUG: No vulnerability alerts enabled for repo
DEBUG: No vulnerability alerts found
DEBUG: findIssue(Dependency Dashboard)
DEBUG: Issues cache: Done reconciling at issue 4
DEBUG: Issues cache: Done reconciling by iterating over all items
DEBUG: Issues cache: synced
DEBUG: Found issue 4
DEBUG: http cache: saving https://api.github.com/repos/n3dst4/renovate-packagemanager-sha512-repro/issues/4 (etag=W/"c9b0c948bd5131183555792c92fe9a5f90c1908948eda1ab8656aa3f26da2672", lastModified=Tue, 15 Jul 2025 09:46:17 GMT)
DEBUG: Issues cache: Updating issue 4 in cache
DEBUG: No baseBranches
DEBUG: extract()
DEBUG: Cached extract result cannot be used due to base branch SHA change (old=02881a206e8dd936ebf22095f10af92018b2667c, new=0d4833921a2a368b9c2573ea71139bc16135d7cf)
DEBUG: Setting current branch to main
DEBUG: syncGit(): Initializing git repository into /tmp/renovate/repos/github/n3dst4/renovate-packagemanager-sha512-repro
DEBUG: Performing blobless clone
DEBUG: git clone completed
{
  "durationMs": 319
}

DEBUG: latest repository commit
{
  "latestCommit": {
    "hash": "0d4833921a2a368b9c2573ea71139bc16135d7cf",
    "date": "2025-07-15T11:15:15+01:00",
    "message": "remove lockfile from repo",
    "refs": "HEAD -> main, origin/main, origin/HEAD",
    "body": "",
    "author_name": "Neil de Carteret",
    "author_email": "git@lumphammer.net"
  }
}

DEBUG: Current branch SHA: 0d4833921a2a368b9c2573ea71139bc16135d7cf
DEBUG: latest commit
{
  "branchName": "main"
  "latestCommitDate": "2025-07-15T11:15:15+01:00"
  "sha": "0d4833921a2a368b9c2573ea71139bc16135d7cf"
}

DEBUG: Using file pattern: /(^|/)tasks/[^/]+\.ya?ml$/ for manager ansible
DEBUG: Using file pattern: /(^|/)(galaxy|requirements)(\.ansible)?\.ya?ml$/ for manager ansible-galaxy
DEBUG: Using file pattern: /(^|/)\.tool-versions$/ for manager asdf
DEBUG: Using file pattern: /(^|/).azuredevops/.+\.ya?ml$/ for manager azure-pipelines
DEBUG: Using file pattern: /azure.*pipelines?.*\.ya?ml$/ for manager azure-pipelines
DEBUG: Using file pattern: /(^|/)batect(-bundle)?\.ya?ml$/ for manager batect
DEBUG: Using file pattern: /(^|/)batect$/ for manager batect-wrapper
DEBUG: Using file pattern: /(^|/)WORKSPACE(|\.bazel|\.bzlmod)$/ for manager bazel
DEBUG: Using file pattern: /\.WORKSPACE\.bazel$/ for manager bazel
DEBUG: Using file pattern: /\.bzl$/ for manager bazel
DEBUG: Using file pattern: /(^|/|\.)MODULE\.bazel$/ for manager bazel-module
DEBUG: Using file pattern: /(^|/)\.bazelversion$/ for manager bazelisk
DEBUG: Using file pattern: /\.bicep$/ for manager bicep
DEBUG: Using file pattern: /(^|/)\.?bitbucket-pipelines\.ya?ml$/ for manager bitbucket-pipelines
DEBUG: Using file pattern: /(^|/)bitrise\.ya?ml$/ for manager bitrise
DEBUG: Using file pattern: /buildkite\.ya?ml/ for manager buildkite
DEBUG: Using file pattern: /\.buildkite/.+\.ya?ml$/ for manager buildkite
DEBUG: Using file pattern: /(^|/)project\.toml$/ for manager buildpacks
DEBUG: Using file pattern: /(^|/)bun\.lockb?$/ for manager bun
DEBUG: Using file pattern: /(^|/)package\.json$/ for manager bun
DEBUG: Using file pattern: /(^|/)\.bun-version$/ for manager bun-version
DEBUG: Using file pattern: /(^|/)Gemfile$/ for manager bundler
DEBUG: Using file pattern: /\.cake$/ for manager cake
DEBUG: Using file pattern: /(^|/)Cargo\.toml$/ for manager cargo
DEBUG: Using file pattern: /(^|/)\.circleci/.+\.ya?ml$/ for manager circleci
DEBUG: Using file pattern: /(^|/)cloudbuild\.ya?ml/ for manager cloudbuild
DEBUG: Using file pattern: /(^|/)Podfile$/ for manager cocoapods
DEBUG: Using file pattern: /(^|/)([\w-]*)composer\.json$/ for manager composer
DEBUG: Using file pattern: /(^|/)conanfile\.(txt|py)$/ for manager conan
DEBUG: Using file pattern: /(^|/)\.copier-answers(\..+)?\.ya?ml/ for manager copier
DEBUG: Using file pattern: /(^|/)cpanfile$/ for manager cpanfile
DEBUG: Using file pattern: /(^|/)(?:deps|bb)\.edn$/ for manager deps-edn
DEBUG: Using file pattern: /(^|/)devbox\.json$/ for manager devbox
DEBUG: Using file pattern: /^.devcontainer/devcontainer.json$/ for manager devcontainer
DEBUG: Using file pattern: /^.devcontainer.json$/ for manager devcontainer
DEBUG: Using file pattern: /(^|/)(?:docker-)?compose[^/]*\.ya?ml$/ for manager docker-compose
DEBUG: Using file pattern: /(^|/|\.)([Dd]ocker|[Cc]ontainer)file$/ for manager dockerfile
DEBUG: Using file pattern: /(^|/)([Dd]ocker|[Cc]ontainer)file[^/]*$/ for manager dockerfile
DEBUG: Using file pattern: /(^|/)\.drone\.yml$/ for manager droneci
DEBUG: Using file pattern: /(^|/)fleet\.ya?ml/ for manager fleet
DEBUG: Using file pattern: /(?:^|/)gotk-components\.ya?ml$/ for manager flux
DEBUG: Using file pattern: /(^|/)\.fvm/fvm_config\.json$/ for manager fvm
DEBUG: Using file pattern: /(^|/)\.fvmrc$/ for manager fvm
DEBUG: Using file pattern: /(^|/)\.gitmodules$/ for manager git-submodules
DEBUG: Using file pattern: /(^|/)(workflow-templates|\.(?:github|gitea|forgejo)/(?:workflows|actions))/.+\.ya?ml$/ for manager github-actions
DEBUG: Using file pattern: /(^|/)action\.ya?ml$/ for manager github-actions
DEBUG: Using file pattern: /\.gitlab-ci\.ya?ml$/ for manager gitlabci
DEBUG: Using file pattern: /\.gitlab-ci\.ya?ml$/ for manager gitlabci-include
DEBUG: Using file pattern: /(^|/)gleam.toml$/ for manager gleam
DEBUG: Using file pattern: /(^|/)go\.mod$/ for manager gomod
DEBUG: Using file pattern: /\.gradle(\.kts)?$/ for manager gradle
DEBUG: Using file pattern: /(^|/)gradle\.properties$/ for manager gradle
DEBUG: Using file pattern: /(^|/)gradle/.+\.toml$/ for manager gradle
DEBUG: Using file pattern: /(^|/)buildSrc/.+\.kt$/ for manager gradle
DEBUG: Using file pattern: /\.versions\.toml$/ for manager gradle
DEBUG: Using file pattern: /(^|/)versions.props$/ for manager gradle
DEBUG: Using file pattern: /(^|/)versions.lock$/ for manager gradle
DEBUG: Using file pattern: /(^|/)gradle/wrapper/gradle-wrapper\.properties$/ for manager gradle-wrapper
DEBUG: Using file pattern: /\.cabal$/ for manager haskell-cabal
DEBUG: Using file pattern: /(^|/)requirements\.ya?ml$/ for manager helm-requirements
DEBUG: Using file pattern: /(^|/)values\.ya?ml$/ for manager helm-values
DEBUG: Using file pattern: /(^|/)helmfile\.ya?ml(?:\.gotmpl)?$/ for manager helmfile
DEBUG: Using file pattern: /(^|/)Chart\.ya?ml$/ for manager helmv3
DEBUG: Using file pattern: /(^|/)bin/hermit$/ for manager hermit
DEBUG: Using file pattern: /^Formula/[^/]+[.]rb$/ for manager homebrew
DEBUG: Using file pattern: /\.html?$/ for manager html
DEBUG: Using file pattern: /(^|/)plugins\.(txt|ya?ml)$/ for manager jenkins
DEBUG: Using file pattern: /(^|/)jsonnetfile\.json$/ for manager jsonnet-bundler
DEBUG: Using file pattern: /^.+\.main\.kts$/ for manager kotlin-script
DEBUG: Using file pattern: /(^|/)kustomization\.ya?ml$/ for manager kustomize
DEBUG: Using file pattern: /(^|/)project\.clj$/ for manager leiningen
DEBUG: Using file pattern: /(^|/|\.)pom\.xml$/ for manager maven
DEBUG: Using file pattern: /^(((\.mvn)|(\.m2))/)?settings\.xml$/ for manager maven
DEBUG: Using file pattern: /(^|/)\.mvn/extensions\.xml$/ for manager maven
DEBUG: Using file pattern: /(^|\/).mvn/wrapper/maven-wrapper.properties$/ for manager maven-wrapper
DEBUG: Using file pattern: /(^|/)package\.js$/ for manager meteor
DEBUG: Using file pattern: /(^|/)Mintfile$/ for manager mint
DEBUG: Using file pattern: /(^|/)\.?mise\.toml$/ for manager mise
DEBUG: Using file pattern: /(^|/)\.?mise/config\.toml$/ for manager mise
DEBUG: Using file pattern: /(^|/)mix\.exs$/ for manager mix
DEBUG: Using file pattern: /(^|/)flake\.nix$/ for manager nix
DEBUG: Using file pattern: /(^|/)\.node-version$/ for manager nodenv
DEBUG: Using file pattern: /(^|/)package\.json$/ for manager npm
DEBUG: Using file pattern: /(^|/)pnpm-workspace\.yaml$/ for manager npm
DEBUG: Using file pattern: /\.(?:cs|fs|vb)proj$/ for manager nuget
DEBUG: Using file pattern: /\.(?:props|targets)$/ for manager nuget
DEBUG: Using file pattern: /(^|/)dotnet-tools\.json$/ for manager nuget
DEBUG: Using file pattern: /(^|/)global\.json$/ for manager nuget
DEBUG: Using file pattern: /(^|/)\.nvmrc$/ for manager nvm
DEBUG: Using file pattern: /(^|/)src/main/features/.+\.json$/ for manager osgi
DEBUG: Using file pattern: /(^|/)pyproject\.toml$/ for manager pep621
DEBUG: Using file pattern: /(^|/)[\w-]*requirements([-.]\w+)?\.(txt|pip)$/ for manager pip_requirements
DEBUG: Using file pattern: /(^|/)setup\.py$/ for manager pip_setup
DEBUG: Using file pattern: /(^|/)Pipfile$/ for manager pipenv
DEBUG: Using file pattern: /(^|/)pyproject\.toml$/ for manager pixi
DEBUG: Using file pattern: /(^|/)pixi\.toml$/ for manager pixi
DEBUG: Using file pattern: /(^|/)pyproject\.toml$/ for manager poetry
DEBUG: Using file pattern: /(^|/)\.pre-commit-config\.ya?ml$/ for manager pre-commit
DEBUG: Using file pattern: /(^|/)pubspec\.ya?ml$/ for manager pub
DEBUG: Using file pattern: /(^|/)Puppetfile$/ for manager puppet
DEBUG: Using file pattern: /(^|/)\.python-version$/ for manager pyenv
DEBUG: Using file pattern: renovate.json for manager renovate-config-presets
DEBUG: Using file pattern: renovate.json5 for manager renovate-config-presets
DEBUG: Using file pattern: .github/renovate.json for manager renovate-config-presets
DEBUG: Using file pattern: .github/renovate.json5 for manager renovate-config-presets
DEBUG: Using file pattern: .gitlab/renovate.json for manager renovate-config-presets
DEBUG: Using file pattern: .gitlab/renovate.json5 for manager renovate-config-presets
DEBUG: Using file pattern: .renovaterc for manager renovate-config-presets
DEBUG: Using file pattern: .renovaterc.json for manager renovate-config-presets
DEBUG: Using file pattern: .renovaterc.json5 for manager renovate-config-presets
DEBUG: Using file pattern: /(^|/)\.ruby-version$/ for manager ruby-version
DEBUG: Using file pattern: /(^|/)runtime.txt$/ for manager runtime-version
DEBUG: Using file pattern: /\.sbt$/ for manager sbt
DEBUG: Using file pattern: /project/[^/]*\.scala$/ for manager sbt
DEBUG: Using file pattern: /project/build\.properties$/ for manager sbt
DEBUG: Using file pattern: /(^|/)repositories$/ for manager sbt
DEBUG: Using file pattern: /(^|/)\.scalafmt.conf$/ for manager scalafmt
DEBUG: Using file pattern: /(^|/)setup\.cfg$/ for manager setup-cfg
DEBUG: Using file pattern: /(^|/)Package\.swift/ for manager swift
DEBUG: Using file pattern: /\.tf$/ for manager terraform
DEBUG: Using file pattern: /(^|/)\.terraform-version$/ for manager terraform-version
DEBUG: Using file pattern: /(^|/)terragrunt\.hcl$/ for manager terragrunt
DEBUG: Using file pattern: /(^|/)\.terragrunt-version$/ for manager terragrunt-version
DEBUG: Using file pattern: /\.tflint\.hcl$/ for manager tflint-plugin
DEBUG: Using file pattern: /^\.travis\.ya?ml$/ for manager travis
DEBUG: Using file pattern: **/ProjectSettings/ProjectVersion.txt for manager unity3d
DEBUG: Using file pattern: /(^|/)\.vela\.ya?ml$/ for manager velaci
DEBUG: Using file pattern: /(^|/)vendir\.yml$/ for manager vendir
DEBUG: Using file pattern: /^\.woodpecker(?:/[^/]+)?\.ya?ml$/ for manager woodpecker
DEBUG: Matched 1 file(s) for manager bun: package.json
DEBUG: No bun lockfiles found
DEBUG: Matched 1 file(s) for manager npm: package.json
DEBUG: Matched 1 file(s) for manager renovate-config-presets: renovate.json
DEBUG: npm file package.json has name "renovate-packagemanager-sha512-repro"
DEBUG: Detecting pnpm Workspaces
DEBUG: Detecting workspaces
DEBUG: Finding locked versions
DEBUG: manager extract durations (ms)
{
  "managers": {
    "bun": 2,
    "renovate-config-presets": 18,
    "npm": 22
  }
}

DEBUG: Found npm package files
DEBUG: Found 1 package file(s)
INFO: Dependency extraction complete
{
  "baseBranch": "main"
  "stats": {
    "managers": {
      "npm": {
        "fileCount": 1,
        "depCount": 2
      }
    },
    "total": {
      "fileCount": 1,
      "depCount": 2
    }
  }
}

DEBUG: hostRules: no authentication for registry.npmjs.org
DEBUG: Using queue: host=registry.npmjs.org, concurrency=999
DEBUG: http cache: Using cached response: https://registry.npmjs.org/pnpm from 2025-07-09T21:37:52.498Z
DEBUG: PackageFiles.add() - Package file saved for base branch
{
  "baseBranch": "main"
}

DEBUG: Package releases lookups complete
{
  "baseBranch": "main"
}

DEBUG: Repository libYears
{
  "libYears": {
    "managers": {
      "npm": 0.03482093058726535
    },
    "total": 0.03482093058726535
  }
  "dependencyStatus": {
    "outdated": 1,
    "total": 2
  }
}

DEBUG: branchifyUpgrades
DEBUG: detectSemanticCommits()
DEBUG: getCommitMessages
DEBUG: semanticCommits: detected "unknown"
DEBUG: semanticCommits: disabled
DEBUG: 1 flattened updates found: pnpm
DEBUG: Returning 1 branch(es)
DEBUG: config.repoIsOnboarded=true
DEBUG: packageFiles with updates
{
  "baseBranch": "main"
  "config": {
    "npm": [
      {
        "deps": [
          {
            "depType": "dependencies",
            "depName": "fvtt-types",
            "currentValue": "github:League-of-Foundry-Developers/foundry-vtt-types#main",
            "skipReason": "unversioned-reference",
            "prettyDepType": "dependency",
            "updates": [],
            "packageName": "fvtt-types"
          },
          {
            "depType": "packageManager",
            "depName": "pnpm",
            "currentValue": "10.12.4+sha512.5ea8b0deed94ed68691c9bad4c955492705c5eeb8a87ef86bc62c74a26b037b08ff9570f108b2e4dbd1dd1a9186fea925e527f141c648e85af45631074680184",
            "datasource": "npm",
            "commitMessageTopic": "pnpm",
            "prettyDepType": "packageManager",
            "updates": [
              {
                "bucket": "non-major",
                "newVersion": "10.13.1",
                "newValue": "10.13.1",
                "releaseTimestamp": "2025-07-09T10:15:13.724Z",
                "newVersionAgeInDays": 6,
                "newMajor": 10,
                "newMinor": 13,
                "newPatch": 1,
                "updateType": "minor",
                "isBreaking": false,
                "libYears": 0.03482093058726535,
                "branchName": "renovate/all-minor-patch"
              }
            ],
            "packageName": "pnpm",
            "versioning": "npm",
            "warnings": [],
            "sourceUrl": "https://github.com/pnpm/pnpm",
            "registryUrl": "https://registry.npmjs.org",
            "sourceDirectory": "pnpm",
            "homepage": "https://pnpm.io",
            "mostRecentTimestamp": "2025-07-09T10:15:13.724Z",
            "currentVersion": "10.12.4",
            "currentVersionTimestamp": "2025-06-26T17:13:20.857Z",
            "currentVersionAgeInDays": 18,
            "isSingleVersion": true,
            "fixedVersion": "10.12.4+sha512.5ea8b0deed94ed68691c9bad4c955492705c5eeb8a87ef86bc62c74a26b037b08ff9570f108b2e4dbd1dd1a9186fea925e527f141c648e85af45631074680184"
          }
        ],
        "extractedConstraints": {
          "pnpm": "10.12.4+sha512.5ea8b0deed94ed68691c9bad4c955492705c5eeb8a87ef86bc62c74a26b037b08ff9570f108b2e4dbd1dd1a9186fea925e527f141c648e85af45631074680184"
        },
        "packageFileVersion": "1.0",
        "managerData": {
          "packageJsonName": "renovate-packagemanager-sha512-repro",
          "hasPackageManager": true,
          "yarnZeroInstall": false,
          "npmrcFileName": null
        },
        "skipInstalls": true,
        "packageFile": "package.json"
      }
    ]
  }
}

DEBUG: detectSemanticCommits()
DEBUG: semanticCommits: returning "disabled" from cache
DEBUG: processRepo()
DEBUG: Processing 1 branch: renovate/all-minor-patch
DEBUG: getBranchPr(renovate/all-minor-patch)
DEBUG: findPr(renovate/all-minor-patch, undefined, open)
DEBUG: Found PR #3
DEBUG: 1 PRs are currently open
DEBUG: ConcurrentPRs count = 1
DEBUG: 1 already existing branches found.
DEBUG: Branches count = 1
DEBUG: Calculating PRs created so far in this hour currentHourStart=2025-07-15T10:00:00.000Z
DEBUG: 0 PRs have been created so far in this hour.
DEBUG: HourlyPRs count = 0
DEBUG: syncBranchState() (branch="renovate/all-minor-patch")
DEBUG: syncBranchState(): update baseBranchSha (branch="renovate/all-minor-patch")
DEBUG: branch.isUpToDate(): using cached result "true" (branch="renovate/all-minor-patch")
DEBUG: getBranchPr(renovate/all-minor-patch) (branch="renovate/all-minor-patch")
DEBUG: findPr(renovate/all-minor-patch, undefined, open) (branch="renovate/all-minor-patch")
DEBUG: Found PR #3 (branch="renovate/all-minor-patch")
DEBUG: branchExists=true (branch="renovate/all-minor-patch")
DEBUG: dependencyDashboardCheck=global-config (branch="renovate/all-minor-patch")
DEBUG: PR rebase requested=false (branch="renovate/all-minor-patch")
DEBUG: Open PR Count: 1, Existing Branch Count: 1, Hourly PR Count: 0 (branch="renovate/all-minor-patch")
DEBUG: Checking if PR has been edited (branch="renovate/all-minor-patch")
DEBUG: branch.isModified(): using cached result "false" (branch="renovate/all-minor-patch")
DEBUG: Found existing branch PR (branch="renovate/all-minor-patch")
DEBUG: Checking schedule(schedule=at any time, tz=null, now=2025-07-15T10:17:04.805Z) (branch="renovate/all-minor-patch")
DEBUG: No schedule defined (branch="renovate/all-minor-patch")
DEBUG: Manual create/rebase requested via checkedBranches (branch="renovate/all-minor-patch")
DEBUG: Using reuseExistingBranch: false (branch="renovate/all-minor-patch")
DEBUG: Setting current branch to main (branch="renovate/all-minor-patch")
DEBUG: latest commit (branch="renovate/all-minor-patch")
{
  "branchName": "main"
  "latestCommitDate": "2025-07-15T11:15:15+01:00"
  "sha": "0d4833921a2a368b9c2573ea71139bc16135d7cf"
}

DEBUG: manager.getUpdatedPackageFiles() reuseExistingBranch=false (branch="renovate/all-minor-patch")
DEBUG: npm.updateDependency(): packageManager.pnpm = 10.13.1 (branch="renovate/all-minor-patch")
DEBUG: Updating pnpm in package.json (branch="renovate/all-minor-patch")
DEBUG: updateArtifacts for updatedPackageFiles (branch="renovate/all-minor-patch")
DEBUG: npm.updateArtifacts(package.json) (branch="renovate/all-minor-patch")
DEBUG: Found 0 npm host rule(s) (branch="renovate/all-minor-patch")
DEBUG: Found 1 host rule(s) without host type (branch="renovate/all-minor-patch")
DEBUG: Found 1 host rule(s) without host type after dropping duplicates (branch="renovate/all-minor-patch")
DEBUG: No node constraint found - using latest (branch="renovate/all-minor-patch")
DEBUG: Setting CONTAINERBASE_CACHE_DIR to /runner/cache/containerbase (branch="renovate/all-minor-patch")
DEBUG: Using containerbase dynamic installs (branch="renovate/all-minor-patch")
DEBUG: Resolved stable matching version (branch="renovate/all-minor-patch")
{
  "toolName": "node"
  "constraint": null
  "resolvedVersion": "22.17.0"
}

DEBUG: http cache: Using cached response: https://registry.npmjs.org/corepack from 2025-07-14T13:08:12.756Z (branch="renovate/all-minor-patch")
DEBUG: Resolved stable matching version (branch="renovate/all-minor-patch")
{
  "toolName": "corepack"
  "resolvedVersion": "0.33.0"
}

DEBUG: Executing command (branch="renovate/all-minor-patch")
{
  "command": "install-tool node 22.17.0"
}

DEBUG: exec completed (branch="renovate/all-minor-patch")
{
  "durationMs": 4371
  "stdout": "[10:17:05.325] INFO (935): Installing tool node@22.17.0...\nv22.17.0\n10.9.2\n0.33.0\n[10:17:09.080] INFO (935): Install tool node succeeded in 3.7s.\n"
  "stderr": ""
}

DEBUG: Executing command (branch="renovate/all-minor-patch")
{
  "command": "install-tool corepack 0.33.0"
}

DEBUG: exec completed (branch="renovate/all-minor-patch")
{
  "durationMs": 2511
  "stdout": "[10:17:09.840] INFO (972): Installing npm corepack@0.33.0...\n0.33.0\n[10:17:10.976] INFO (972): Install tool corepack succeeded in 1.1s.\n"
  "stderr": ""
}

DEBUG: Executing command (branch="renovate/all-minor-patch")
{
  "command": "corepack use pnpm@10.13.1"
}

DEBUG: rawExec err (branch="renovate/all-minor-patch")
{
  "err": {
    "cmd": "/bin/sh -c corepack use pnpm@10.13.1",
    "stderr": "",
    "stdout": "Installing pnpm@10.13.1 in the project...\n\nPackages are hard linked from the content-addressable store to the virtual store.\n  Content-addressable store is at: /runner/cache/others/pnpm/store/v10\n  Virtual store is at:             node_modules/.pnpm\n...1018_e59196bf83145feead96c46160db6f3d npm-install$ npm install\n...1018_e59196bf83145feead96c46160db6f3d npm-install: npm warn deprecated intl-messageformat-parser@1.1.0: We've written a new parser that's 6x faster and is backwards compatible. Please use @formatjs/icu-messageformat-parser\n...1018_e59196bf83145feead96c46160db6f3d npm-install: npm warn deprecated intl-relativeformat@1.1.0: This package has been deprecated, please see migration guide at 'https://**redacted**@11.4.2\n...1018_e59196bf83145feead96c46160db6f3d npm-install: npm notice\n...1018_e59196bf83145feead96c46160db6f3d npm-install: npm error A complete log of this run can be found in: /home/ubuntu/.npm/_logs/2025-07-15T10_17_15_112Z-debug-0.log\n...1018_e59196bf83145feead96c46160db6f3d npm-install: Failed\n ERR_PNPM_PREPARE_PACKAGE  Failed to prepare git-hosted package fetched from \"https://**redacted**@league-of-foundry-developers/foundry-vtt-types@13.346.0 npm-install: `npm install`\nExit status 1\n\nThis error happened while installing a direct dependency of /tmp/renovate/repos/github/n3dst4/renovate-packagemanager-sha512-repro\n",
    "options": {
      "cwd": "/tmp/renovate/repos/github/n3dst4/renovate-packagemanager-sha512-repro",
      "encoding": "utf-8",
      "env": {
        "npm_config_cache_dir": "/runner/cache/others/pnpm/cache",
        "npm_config_store_dir": "/runner/cache/others/pnpm/store",
        "pnpm_config_cache_dir": "/runner/cache/others/pnpm/cache",
        "pnpm_config_store_dir": "/runner/cache/others/pnpm/store",
        "HOME": "/home/ubuntu",
        "PATH": "/home/ubuntu/.local/bin:/home/ubuntu/bin:/home/ubuntu/.local/bin:/home/ubuntu/bin:/home/ubuntu/.local/bin:/home/ubuntu/bin:/home/ubuntu/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
        "LC_ALL": "C.UTF-8",
        "LANG": "C.UTF-8",
        "CONTAINERBASE_CACHE_DIR": "/runner/cache/containerbase"
      },
      "maxBuffer": 10485760,
      "timeout": 900000
    },
    "exitCode": 1,
    "name": "ExecError",
    "message": "Command failed: corepack use pnpm@10.13.1\n",
    "stack": "ExecError: Command failed: corepack use pnpm@10.13.1\n\n    at ChildProcess.<anonymous> (/usr/local/renovate/lib/util/exec/common.ts:120:11)\n    at ChildProcess.emit (node:events:530:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:293:12)"
  }
  "durationMs": 29128
}

WARN: Error updating package.json (branch="renovate/all-minor-patch")
{
  "err": {
    "cmd": "/bin/sh -c corepack use pnpm@10.13.1",
    "stderr": "",
    "stdout": "Installing pnpm@10.13.1 in the project...\n\nPackages are hard linked from the content-addressable store to the virtual store.\n  Content-addressable store is at: /runner/cache/others/pnpm/store/v10\n  Virtual store is at:             node_modules/.pnpm\n...1018_e59196bf83145feead96c46160db6f3d npm-install$ npm install\n...1018_e59196bf83145feead96c46160db6f3d npm-install: npm warn deprecated intl-messageformat-parser@1.1.0: We've written a new parser that's 6x faster and is backwards compatible. Please use @formatjs/icu-messageformat-parser\n...1018_e59196bf83145feead96c46160db6f3d npm-install: npm warn deprecated intl-relativeformat@1.1.0: This package has been deprecated, please see migration guide at 'https://**redacted**@11.4.2\n...1018_e59196bf83145feead96c46160db6f3d npm-install: npm notice\n...1018_e59196bf83145feead96c46160db6f3d npm-install: npm error A complete log of this run can be found in: /home/ubuntu/.npm/_logs/2025-07-15T10_17_15_112Z-debug-0.log\n...1018_e59196bf83145feead96c46160db6f3d npm-install: Failed\n ERR_PNPM_PREPARE_PACKAGE  Failed to prepare git-hosted package fetched from \"https://**redacted**@league-of-foundry-developers/foundry-vtt-types@13.346.0 npm-install: `npm install`\nExit status 1\n\nThis error happened while installing a direct dependency of /tmp/renovate/repos/github/n3dst4/renovate-packagemanager-sha512-repro\n",
    "options": {
      "cwd": "/tmp/renovate/repos/github/n3dst4/renovate-packagemanager-sha512-repro",
      "encoding": "utf-8",
      "env": {
        "npm_config_cache_dir": "/runner/cache/others/pnpm/cache",
        "npm_config_store_dir": "/runner/cache/others/pnpm/store",
        "pnpm_config_cache_dir": "/runner/cache/others/pnpm/cache",
        "pnpm_config_store_dir": "/runner/cache/others/pnpm/store",
        "HOME": "/home/ubuntu",
        "PATH": "/home/ubuntu/.local/bin:/home/ubuntu/bin:/home/ubuntu/.local/bin:/home/ubuntu/bin:/home/ubuntu/.local/bin:/home/ubuntu/bin:/home/ubuntu/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
        "LC_ALL": "C.UTF-8",
        "LANG": "C.UTF-8",
        "CONTAINERBASE_CACHE_DIR": "/runner/cache/containerbase"
      },
      "maxBuffer": 10485760,
      "timeout": 900000
    },
    "exitCode": 1,
    "name": "ExecError",
    "message": "Command failed: corepack use pnpm@10.13.1\n",
    "stack": "ExecError: Command failed: corepack use pnpm@10.13.1\n\n    at ChildProcess.<anonymous> (/usr/local/renovate/lib/util/exec/common.ts:120:11)\n    at ChildProcess.emit (node:events:530:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:293:12)"
  }
}

DEBUG: Updated 1 package files (branch="renovate/all-minor-patch")
DEBUG: Getting updated lock files (branch="renovate/all-minor-patch")
DEBUG: Writing package.json files (branch="renovate/all-minor-patch")
{
  "packageFiles": [
    "package.json"
  ]
}

DEBUG: Writing any updated package files (branch="renovate/all-minor-patch")
DEBUG: Writing package.json (branch="renovate/all-minor-patch")
DEBUG: Found 0 npm host rule(s) (branch="renovate/all-minor-patch")
DEBUG: Found 1 host rule(s) without host type (branch="renovate/all-minor-patch")
DEBUG: Found 1 host rule(s) without host type after dropping duplicates (branch="renovate/all-minor-patch")
DEBUG: No updated lock files in branch (branch="renovate/all-minor-patch")
DEBUG: Branch timestamp: 2025-07-09T10:15:13.724Z (branch="renovate/all-minor-patch")
DEBUG: PR is older than 2 hours, raise PR with lock file errors (branch="renovate/all-minor-patch")
DEBUG: isBranchConflicted(main, renovate/all-minor-patch) (branch="renovate/all-minor-patch")
DEBUG: branch.isConflicted(): using git to calculate (branch="renovate/all-minor-patch")
DEBUG: Setting git author name: renovate[bot] (branch="renovate/all-minor-patch")
DEBUG: Setting git author email: 29139614+renovate[bot]@users.noreply.github.com (branch="renovate/all-minor-patch")
DEBUG: branch.isConflicted(): true (branch="renovate/all-minor-patch")
DEBUG: 1 file(s) to commit (branch="renovate/all-minor-patch")
DEBUG: Preparing files for committing to branch renovate/all-minor-patch (branch="renovate/all-minor-patch")
DEBUG: git commit (branch="renovate/all-minor-patch")
{
  "deletedFiles": []
  "ignoredFiles": []
  "result": {
    "author": null,
    "branch": "renovate/all-minor-patch",
    "commit": "70a14bf7f515f4a7eec67586770478189c439052",
    "root": false,
    "summary": {
      "changes": 1,
      "insertions": 1,
      "deletions": 1
    }
  }
}

DEBUG: resetToCommit(0d4833921a2a368b9c2573ea71139bc16135d7cf) (branch="renovate/all-minor-patch")
DEBUG: Fetching branch renovate/all-minor-patch (branch="renovate/all-minor-patch")
DEBUG: Setting current branch to main (branch="renovate/all-minor-patch")
DEBUG: latest commit (branch="renovate/all-minor-patch")
{
  "branchName": "main"
  "latestCommitDate": "2025-07-15T11:15:15+01:00"
  "sha": "0d4833921a2a368b9c2573ea71139bc16135d7cf"
}

INFO: Branch updated (branch="renovate/all-minor-patch")
{
  "commitSha": "6e9eac224627b10b85f1f8d7ce655910445a418a"
}

DEBUG: http cache: saving https://api.github.com/repos/n3dst4/renovate-packagemanager-sha512-repro/commits/6e9eac224627b10b85f1f8d7ce655910445a418a/statuses (etag="fa35fc7d8df1ecd374ce6c4f6a6d87de0c7abdd91222f4a097a914e01289c6dc", lastModified=undefined) (branch="renovate/all-minor-patch")
DEBUG: Updating status check state to failed (branch="renovate/all-minor-patch")
DEBUG: Setting branch status (branch="renovate/all-minor-patch")
{
  "context": "renovate/artifacts"
  "state": "red"
}

DEBUG: http cache: saving https://api.github.com/repos/n3dst4/renovate-packagemanager-sha512-repro/commits/renovate/all-minor-patch/status (etag=W/"f8304261d79c0895494e1a251fc2a04cedf0ed6121a39010c41dcd63b68e1159", lastModified=undefined) (branch="renovate/all-minor-patch")
DEBUG: Ensuring PR (branch="renovate/all-minor-patch")
DEBUG: There are 0 errors and 0 warnings (branch="renovate/all-minor-patch")
DEBUG: getBranchPr(renovate/all-minor-patch) (branch="renovate/all-minor-patch")
DEBUG: findPr(renovate/all-minor-patch, undefined, open) (branch="renovate/all-minor-patch")
DEBUG: Found PR #3 (branch="renovate/all-minor-patch")
DEBUG: Found existing PR (branch="renovate/all-minor-patch")
DEBUG: PR cache matches but it has been edited in the past 24hrs, so processing PR (branch="renovate/all-minor-patch")
DEBUG: Forcing PR because of artifact errors (branch="renovate/all-minor-patch")
DEBUG: Fetching changelog: https://github.com/pnpm/pnpm (10.12.4 -> 10.13.1) (branch="renovate/all-minor-patch")
DEBUG: http cache: Using cached response: https://registry.npmjs.org/pnpm from 2025-07-09T21:37:52.498Z (branch="renovate/all-minor-patch")
DEBUG: Processing existing PR (branch="renovate/all-minor-patch")
DEBUG: setPrCache() (branch="renovate/all-minor-patch")
DEBUG: Pull Request #3 does not need updating (branch="renovate/all-minor-patch")
WARN: artifactErrors (branch="renovate/all-minor-patch")
{
  "artifactErrors": [
    {
      "fileName": "package.json",
      "stderr": "Command failed: corepack use pnpm@10.13.1\n"
    }
  ]
}

DEBUG: setBranchCommit() (branch="renovate/all-minor-patch")
DEBUG: getBranchPr(renovate/all-minor-patch)
DEBUG: findPr(renovate/all-minor-patch, undefined, open)
DEBUG: Found PR #3
DEBUG: http cache: Using cached response: https://api.github.com/repos/n3dst4/renovate-packagemanager-sha512-repro/contents/renovate.json from 2025-07-14T17:18:20.241Z
DEBUG: Config does not need migration
DEBUG: ensureDependencyDashboard()
DEBUG: Ensuring Dependency Dashboard
DEBUG: Checking packageFiles for deprecated packages
DEBUG: http cache: Using cached response: https://api.github.com/repos/n3dst4/renovate-packagemanager-sha512-repro/issues/4 from 2025-07-15T10:17:02.753Z
DEBUG: Issues cache: Updating issue 4 in cache
DEBUG: No changes to dependency dashboard issue needed
DEBUG: checkReconfigureBranch()
DEBUG: No reconfigure branch found
DEBUG: Removing any stale branches
DEBUG: config.repoIsOnboarded=true
DEBUG: Branch lists
{
  "branchList": [
    "renovate/all-minor-patch"
  ]
  "renovateBranches": [
    "renovate/all-minor-patch"
  ]
}

DEBUG: remainingBranches=
DEBUG: No branches to clean up
DEBUG: Cleaning up Renovate refs: refs/renovate/branches/*
DEBUG: PackageFiles.clear() - Package files deleted
DEBUG: Branch summary
{
  "cacheModified": true
  "baseBranches": [
    {
      "branchName": "main",
      "sha": "0d4833921a2a368b9c2573ea71139bc16135d7cf"
    }
  ]
  "branches": [
    {
      "automerge": false,
      "baseBranch": "main",
      "baseBranchSha": "0d4833921a2a368b9c2573ea71139bc16135d7cf",
      "branchName": "renovate/all-minor-patch",
      "branchSha": "6e9eac224627b10b85f1f8d7ce655910445a418a",
      "isModified": false,
      "isPristine": true
    }
  ]
  "defaultBranch": "main"
  "inactiveBranches": []
}

DEBUG: branches info extended
{
  "branchesInformation": [
    {
      "branchName": "renovate/all-minor-patch",
      "prNo": 3,
      "prTitle": "Update pnpm to v10.13.1",
      "result": "done",
      "upgrades": [
        {
          "datasource": "npm",
          "depName": "pnpm",
          "displayPending": "",
          "fixedVersion": "10.12.4+sha512.5ea8b0deed94ed68691c9bad4c955492705c5eeb8a87ef86bc62c74a26b037b08ff9570f108b2e4dbd1dd1a9186fea925e527f141c648e85af45631074680184",
          "currentVersion": "10.12.4",
          "currentValue": "10.12.4+sha512.5ea8b0deed94ed68691c9bad4c955492705c5eeb8a87ef86bc62c74a26b037b08ff9570f108b2e4dbd1dd1a9186fea925e527f141c648e85af45631074680184",
          "newValue": "10.13.1",
          "newVersion": "10.13.1",
          "packageFile": "package.json",
          "updateType": "minor",
          "packageName": "pnpm"
        }
      ]
    }
  ]
}

DEBUG: Renovate repository PR statistics
{
  "stats": {
    "total": 3,
    "open": 1,
    "closed": 2,
    "merged": 0
  }
}

DEBUG: Repository result: done, status: onboarded, enabled: true, onboarded: true
DEBUG: repository problems
{
  "repoProblems": [
    "WARN: Error updating package.json"
  ]
}

DEBUG: Repository timing splits (milliseconds)
{
  "splits": {
    "init": 2425,
    "extract": 1010,
    "lookup": 1124,
    "onboarding": 1,
    "update": 40374
  }
  "total": 45844
}

DEBUG: Package cache statistics
{
  "get": {
    "count": 9,
    "avgMs": 48,
    "medianMs": 1,
    "maxMs": 334,
    "totalMs": 436
  }
  "set": {
    "count": 2,
    "avgMs": 2,
    "medianMs": 3,
    "maxMs": 3,
    "totalMs": 4
  }
}

DEBUG: HTTP statistics
{
  "hosts": {
    "api.github.com": {
      "count": 16,
      "reqAvgMs": 140,
      "reqMedianMs": 115,
      "reqMaxMs": 269,
      "queueAvgMs": 1,
      "queueMedianMs": 0,
      "queueMaxMs": 9
    },
    "registry.npmjs.org": {
      "count": 3,
      "reqAvgMs": 86,
      "reqMedianMs": 70,
      "reqMaxMs": 145,
      "queueAvgMs": 0,
      "queueMedianMs": 0,
      "queueMaxMs": 1
    }
  }
  "requests": 19
}

DEBUG: HTTP cache statistics
{
  "https://api.github.com": {
    "/repos/n3dst4/renovate-packagemanager-sha512-repro/commits/6e9eac224627b10b85f1f8d7ce655910445a418a/statuses": {
      "hit": 0,
      "miss": 1
    },
    "/repos/n3dst4/renovate-packagemanager-sha512-repro/commits/renovate/all-minor-patch/status": {
      "hit": 0,
      "miss": 1
    },
    "/repos/n3dst4/renovate-packagemanager-sha512-repro/contents/renovate.json": {
      "hit": 3,
      "miss": 0
    },
    "/repos/n3dst4/renovate-packagemanager-sha512-repro/issues/4": {
      "hit": 1,
      "miss": 1
    },
    "/repos/n3dst4/renovate-packagemanager-sha512-repro/pulls": {
      "hit": 0,
      "miss": 1
    }
  }
  "https://registry.npmjs.org": {
    "/corepack": {
      "hit": 1,
      "miss": 0,
      "localMiss": 1
    },
    "/pnpm": {
      "hit": 2,
      "miss": 0,
      "localMiss": 2
    }
  }
}

DEBUG: Lookup statistics
{
  "npm": {
    "count": 1,
    "avgMs": 906,
    "medianMs": 906,
    "maxMs": 906,
    "totalMs": 906
  }
}

INFO: Cache fallback URLs
{
  "count": 0
  "hits": {}
  "oldLevel": "debug"
}

INFO: Repository finished
{
  "cloned": true
  "durationMs": 45844
}

Fix

Looking for one

[RahulGautamSingh]

There seems to be no direct solution to this, as in preventing the corepack use command from running the install script or using any other command, as a possible alternative also executes the install script automatically.

The only possible solution is to discard the usage of corepack commands fully and generate the hash ourselves.
It is possible as npm registry responses contain the integrity (for SHA512) and signatures for (SHA256) for each version, which we can convert to hashes supported by corepack as such:

https://github.com/nodejs/corepack/blob/57bfb67b062ea1b8746b302bcdbf9f8e8438c526/sources/corepackUtils.ts#L300

[viceice]

sounds to me as the solution is a oneliner

[n3dst4]

The only possible solution is to discard the usage of corepack commands fully and generate the hash ourselves. It is possible as npm registry responses contain the integrity (for SHA512) and signatures for (SHA256) for each version, which we can convert to hashes supported by corepack as such:

This would have a performance benefit too - Renovate doesn't actually need all the side-effects of corepack use.

[phanect]

corepack also supports preventing prepare scripts after corepack use with an environment variable.
I guess it is easier to fix.

NPM_CONFIG_IGNORE_SCRIPTS=true corepack use pnpm@x.x.x`

Any environment variables that start with npm_config_ will be interpreted as a configuration parameter. For example, putting npm_config_foo=bar in your environment will set the foo configuration parameter to bar.

― https://docs.npmjs.com/cli/v11/using-npm/config#environment-variables

ignore-scripts

If true, npm does not run scripts specified in package.json files.

― https://docs.npmjs.com/cli/v11/using-npm/config#ignore-scripts

[n3dst4]

corepack also supports preventing prepare scripts after corepack use. I guess it is easier to fix.

NPM_CONFIG_IGNORE_SCRIPTS=true corepack use pnpm@x.x.x`

Great point. I've just tested locally and this works even when pnpm is the package manager - presumably it honours the NPM_CONFIG_* variables.

[viceice]

There seems to be no direct solution to this, as in preventing the corepack use command from running the install script or using any other command, as a possible alternative also executes the install script automatically.

The only possible solution is to discard the usage of corepack commands fully and generate the hash ourselves.
It is possible as npm registry responses contain the integrity (for SHA512) and signatures for (SHA256) for each version, which we can convert to hashes supported by corepack as such:

https://github.com/nodejs/corepack/blob/57bfb67b062ea1b8746b302bcdbf9f8e8438c526/sources/corepackUtils.ts#L300

I would still prefer this solution for performance and code simplicity.