GitHub GrapQL api requests are triggered with wrong auth on edge case #1040
Unanswered
notaphplover
asked this question in
Q&A
Replies: 1 comment
-
|
it looks like a config issue. please provide some more context logs around the error. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Given the following global config:
{ "$schema": "https://docs.renovatebot.com/renovate-global-schema.json", "allowedCommands": ["pnpm dlx @fission-ai/openspec update"], "binarySource": "install" }Given the following config:
{ "$schema": "https://docs.renovatebot.com/renovate-schema.json", "automerge": false, "customManagers": [ { "customType": "regex", "description": "Update @fission-ai/openspec version tracked via generatedBy field in skill files", "managerFilePatterns": ["/^\\.agent/skills/[^/]+/SKILL\\.md$/"], "matchStrings": ["generatedBy:\\s*\"(?<currentValue>[^\"]+)\""], "depNameTemplate": "@fission-ai/openspec", "datasourceTemplate": "npm", "versioningTemplate": "npm" }, { "customType": "regex", "description": "Update node version tracked in package.json engines field", "managerFilePatterns": ["/(^|/)package\\.json$/"], "matchStrings": [ "\"devEngines\"\\s*:\\s*\\{[\\s\\S]*?\"node\"\\s*:\\s*\"(?<currentValue>[^\"]+)\"" ], "depNameTemplate": "node", "datasourceTemplate": "node-version" }, { "customType": "regex", "description": "Update pnpm version tracked in package.json engines field", "managerFilePatterns": ["/(^|/)package\\.json$/"], "matchStrings": [ "\"devEngines\"\\s*:\\s*\\{[\\s\\S]*?\"pnpm\"\\s*:\\s*\"(?<currentValue>[^\"]+)\"" ], "depNameTemplate": "pnpm", "datasourceTemplate": "npm" }, { "customType": "regex", "description": "Update uWebSockets.js version tracked in package.json dependencies", "managerFilePatterns": ["/(^|/)package\\.json$/"], "matchStrings": [ "uNetworking/uWebSockets\\.js#(?<currentValue>[^\"\\s]+)" ], "depNameTemplate": "uNetworking/uWebSockets.js", "datasourceTemplate": "github-tags", "versioningTemplate": "semver-coerced" } ], "constraints": { "pnpm": "11.5.2" }, "extends": [ ":dependencyDashboard", ":disableRateLimiting", ":semanticCommitScopeDisabled", ":semanticPrefixFixDepsChoreOthers", "group:monorepos", "group:recommended", "helpers:pinGitHubActionDigests", "mergeConfidence:age-confidence-badges", "replacements:all", "workarounds:all" ], "ignoreDeps": [], "ignorePaths": [ "**/node_modules/**", "**/bower_components/**", "**/vendor/**", "**/__tests__/**", "**/test/**", "**/tests/**", "**/__fixtures__/**" ], "packageRules": [ { "description": "Ignore updates to dependencies that are less than 3 days old", "matchDatasources": ["npm"], "minimumReleaseAge": "3 days" }, { "enabled": false, "matchDepTypes": ["peerDependencies"], "matchPackageNames": ["express"], "matchUpdateTypes": ["major"], "matchCurrentVersion": ">=4.0.0 <5.0.0" }, { "enabled": false, "matchPackageNames": ["@types/express"], "matchUpdateTypes": ["major"], "matchCurrentVersion": ">=4.0.0 <5.0.0" }, { "automerge": true, "description": "auto merge on patch or minor", "groupName": "auto merge on patch or minor", "matchUpdateTypes": ["patch", "minor"], "matchPackageNames": ["!turbo", "!typescript"] }, { "description": "Group GitHub Actions updates", "groupName": "GitHub Actions", "matchManagers": ["github-actions"] }, { "description": "Quarantine packages with current known issues", "enabled": false, "matchPackageNames": [] }, { "description": "Ignore inversify version-aliased dependencies (e.g. inversify6, inversify7)", "enabled": false, "matchPackageNames": ["/^inversify\\d+$/"] }, { "description": "Regenerate OpenSpec instruction files after @fission-ai/openspec is bumped", "matchPackageNames": ["@fission-ai/openspec"], "postUpgradeTasks": { "commands": ["pnpm dlx @fission-ai/openspec update"], "executionMode": "branch", "fileFilters": ["**/skills/**"], "installTools": { "node": {}, "pnpm": {} } } } ], "rangeStrategy": "bump", "rebaseWhen": "conflicted", "semanticCommits": "enabled", "schedule": ["at any time"] }I've been trying to use the action to bump dependencies so I can allow custom commands and have post upgrade tasks.
The action receives a Github token with enough permissions, but I don't know why, a GraphQL request is send with wrong credentials:
The renovate action looks like this:
Why do I believe this is a bug
globalbinarySourceglobal options solves the issue.I checked the token has enough permissions to manage repository issues. Having said that, the server returns
401and not a403status code.What blows my mind is this config works by simply using the full docker image and
globalbinarySourceglobal options.Beta Was this translation helpful? Give feedback.
All reactions