Composer Not Found in Renovate Environment

[liby]

How are you running Renovate?

Mend Renovate hosted app on github.com

If you're self-hosting Renovate, tell us what version of Renovate you run.

No response

If you're self-hosting Renovate, select which platform you are using.

None

Was this something which used to work for you, and then stopped?

I never saw this working

Wanted end result.

I want to successfully run composer install as a postinstall script when Renovate updates my pnpm-lock.yaml. My project uses both pnpm for JavaScript dependencies and Composer for PHP dependencies.

What you tried so far.

In my project, I have a postinstall script in my package.json that runs composer install to install PHP dependencies. This works fine when I run pnpm install locally or in my CI/CD environment. However, when Renovate runs pnpm install, it fails with a "composer: not found" error. This suggests that Composer is not available in the Renovate environment.

Here is the postinstall script from my package.json:

"postinstall": "composer install",

And here is the error message from Renovate:

I'm seeking advice on how to ensure composer install can be successfully executed as a postinstall script in the Renovate environment when updating pnpm dependencies.

Relevant debug logs

Logs

DEBUG: Docker image is already prefetched: ghcr.io/containerbase/sidecar:9.19.4@sha256:ab05c0c9e2fc1ef76d775746252e68d681c589d93f10f5d9d76b12bc475a900b (branch="renovate/pin-dependencies")
DEBUG: Executing command (branch="renovate/pin-dependencies")
{
  "command": "docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v \"/tmp/worker/842df1/5f473b/repos/github/user/repo\":\"/tmp/worker/842df1/5f473b/repos/github/user/repo\" -v \"/tmp/worker/842df1/5f473b/cache\":\"/tmp/worker/842df1/5f473b/cache\" -e NPM_CONFIG_CACHE -e npm_config_store -e CONTAINERBASE_CACHE_DIR -w \"/tmp/worker/842df1/5f473b/repos/github/user/repo\" ghcr.io/containerbase/sidecar:9.19.4 bash -l -c \"install-tool node 18.17.1 && install-tool pnpm 8.7.4 && pnpm install --recursive --lockfile-only --ignore-scripts --ignore-pnpmfile && pnpm dedupe\""
}

DEBUG: rawExec err (branch="renovate/pin-dependencies")
{
  "err": {
    "cmd": "/bin/sh -c docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v \"/tmp/worker/842df1/5f473b/repos/github/user/repo\":\"/tmp/worker/842df1/5f473b/repos/github/user/repo\" -v \"/tmp/worker/842df1/5f473b/cache\":\"/tmp/worker/842df1/5f473b/cache\" -e NPM_CONFIG_CACHE -e npm_config_store -e CONTAINERBASE_CACHE_DIR -w \"/tmp/worker/842df1/5f473b/repos/github/user/repo\" ghcr.io/containerbase/sidecar:9.19.4 bash -l -c \"install-tool node 18.17.1 && install-tool pnpm 8.7.4 && pnpm install --recursive --lockfile-only --ignore-scripts --ignore-pnpmfile && pnpm dedupe\"",
    "stderr": "sh: 1: composer: not found\n",
    "stdout": "[03:57:08.786] INFO (10): Installing tool node v18.17.1...\nv18.17.1\n9.6.7\n0.18.0\n[03:57:11.483] INFO (10): Installed tool node in 2.6s.\n[03:57:12.026] INFO (46): Installing tool pnpm v8.7.4...\n8.7.4\n[03:57:13.399] INFO (46): Installed tool pnpm in 1.3s.\nProgress: resolved 1, reused 0, downloaded 0, added 0\nProgress: resolved 35, reused 0, downloaded 32, added 0\nProgress: resolved 232, reused 0, downloaded 232, added 0\nProgress: resolved 410, reused 0, downloaded 387, added 0\nProgress: resolved 466, reused 0, downloaded 466, added 0, done\nDone in 4.2s\nProgress: resolved 1, reused 0, downloaded 0, added 0\nProgress: resolved 29, reused 29, downloaded 0, added 0\nProgress: resolved 155, reused 106, downloaded 0, added 0\nProgress: resolved 419, reused 173, downloaded 0, added 0\nAlready up to date\nProgress: resolved 466, reused 466, downloaded 0, added 79\nProgress: resolved 466, reused 466, downloaded 0, added 466, done\n\n> @user/repo@0.1.2 postinstall /tmp/worker/842df1/5f473b/repos/github/user/repo\n> composer install\n\n ELIFECYCLE  Command failed.\n",
    "options": {
      "cwd": "/tmp/worker/842df1/5f473b/repos/github/user/repo",
      "encoding": "utf-8",
      "env": {
        "NPM_CONFIG_CACHE": "/tmp/worker/842df1/5f473b/cache/others/npm",
        "npm_config_store": "/tmp/worker/842df1/5f473b/cache/others/pnpm",
        "HOME": "/home/ubuntu",
        "PATH": "/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
        "LC_ALL": "C.UTF-8",
        "LANG": "C.UTF-8",
        "CONTAINERBASE_CACHE_DIR": "/tmp/worker/842df1/5f473b/cache/containerbase"
      },
      "maxBuffer": 10485760,
      "timeout": 900000
    },
    "exitCode": 1,
    "name": "ExecError",
    "message": "Command failed: docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v \"/tmp/worker/842df1/5f473b/repos/github/user/repo\":\"/tmp/worker/842df1/5f473b/repos/github/user/repo\" -v \"/tmp/worker/842df1/5f473b/cache\":\"/tmp/worker/842df1/5f473b/cache\" -e NPM_CONFIG_CACHE -e npm_config_store -e CONTAINERBASE_CACHE_DIR -w \"/tmp/worker/842df1/5f473b/repos/github/user/repo\" ghcr.io/containerbase/sidecar:9.19.4 bash -l -c \"install-tool node 18.17.1 && install-tool pnpm 8.7.4 && pnpm install --recursive --lockfile-only --ignore-scripts --ignore-pnpmfile && pnpm dedupe\"\nsh: 1: composer: not found\n",
    "stack": "ExecError: Command failed: docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v \"/tmp/worker/842df1/5f473b/repos/github/user/repo\":\"/tmp/worker/842df1/5f473b/repos/github/user/repo\" -v \"/tmp/worker/842df1/5f473b/cache\":\"/tmp/worker/842df1/5f473b/cache\" -e NPM_CONFIG_CACHE -e npm_config_store -e CONTAINERBASE_CACHE_DIR -w \"/tmp/worker/842df1/5f473b/repos/github/user/repo\" ghcr.io/containerbase/sidecar:9.19.4 bash -l -c \"install-tool node 18.17.1 && install-tool pnpm 8.7.4 && pnpm install --recursive --lockfile-only --ignore-scripts --ignore-pnpmfile && pnpm dedupe\"\nsh: 1: composer: not found\n\n    at ChildProcess.<anonymous> (/opt/containerbase/tools/renovate/36.83.0/node_modules/renovate/lib/util/exec/common.ts:99:11)\n    at ChildProcess.emit (node:events:526:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:291:12)"
  }
  "durationMs": 21815
}

DEBUG: lock file error (branch="renovate/pin-dependencies")
{
  "cmd": "pnpm"
  "err": {
    "cmd": "/bin/sh -c docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v \"/tmp/worker/842df1/5f473b/repos/github/user/repo\":\"/tmp/worker/842df1/5f473b/repos/github/user/repo\" -v \"/tmp/worker/842df1/5f473b/cache\":\"/tmp/worker/842df1/5f473b/cache\" -e NPM_CONFIG_CACHE -e npm_config_store -e CONTAINERBASE_CACHE_DIR -w \"/tmp/worker/842df1/5f473b/repos/github/user/repo\" ghcr.io/containerbase/sidecar:9.19.4 bash -l -c \"install-tool node 18.17.1 && install-tool pnpm 8.7.4 && pnpm install --recursive --lockfile-only --ignore-scripts --ignore-pnpmfile && pnpm dedupe\"",
    "stderr": "sh: 1: composer: not found\n",
    "stdout": "[03:57:08.786] INFO (10): Installing tool node v18.17.1...\nv18.17.1\n9.6.7\n0.18.0\n[03:57:11.483] INFO (10): Installed tool node in 2.6s.\n[03:57:12.026] INFO (46): Installing tool pnpm v8.7.4...\n8.7.4\n[03:57:13.399] INFO (46): Installed tool pnpm in 1.3s.\nProgress: resolved 1, reused 0, downloaded 0, added 0\nProgress: resolved 35, reused 0, downloaded 32, added 0\nProgress: resolved 232, reused 0, downloaded 232, added 0\nProgress: resolved 410, reused 0, downloaded 387, added 0\nProgress: resolved 466, reused 0, downloaded 466, added 0, done\nDone in 4.2s\nProgress: resolved 1, reused 0, downloaded 0, added 0\nProgress: resolved 29, reused 29, downloaded 0, added 0\nProgress: resolved 155, reused 106, downloaded 0, added 0\nProgress: resolved 419, reused 173, downloaded 0, added 0\nAlready up to date\nProgress: resolved 466, reused 466, downloaded 0, added 79\nProgress: resolved 466, reused 466, downloaded 0, added 466, done\n\n> @user/repo@0.1.2 postinstall /tmp/worker/842df1/5f473b/repos/github/user/repo\n> composer install\n\n ELIFECYCLE  Command failed.\n",
    "options": {
      "cwd": "/tmp/worker/842df1/5f473b/repos/github/user/repo",
      "encoding": "utf-8",
      "env": {
        "NPM_CONFIG_CACHE": "/tmp/worker/842df1/5f473b/cache/others/npm",
        "npm_config_store": "/tmp/worker/842df1/5f473b/cache/others/pnpm",
        "HOME": "/home/ubuntu",
        "PATH": "/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/.cargo/bin:/home/ubuntu/.local/bin:/go/bin:/home/ubuntu/bin:/home/ubuntu/.npm-global/bin:/home/ubuntu/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
        "LC_ALL": "C.UTF-8",
        "LANG": "C.UTF-8",
        "CONTAINERBASE_CACHE_DIR": "/tmp/worker/842df1/5f473b/cache/containerbase"
      },
      "maxBuffer": 10485760,
      "timeout": 900000
    },
    "exitCode": 1,
    "name": "ExecError",
    "message": "Command failed: docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v \"/tmp/worker/842df1/5f473b/repos/github/user/repo\":\"/tmp/worker/842df1/5f473b/repos/github/user/repo\" -v \"/tmp/worker/842df1/5f473b/cache\":\"/tmp/worker/842df1/5f473b/cache\" -e NPM_CONFIG_CACHE -e npm_config_store -e CONTAINERBASE_CACHE_DIR -w \"/tmp/worker/842df1/5f473b/repos/github/user/repo\" ghcr.io/containerbase/sidecar:9.19.4 bash -l -c \"install-tool node 18.17.1 && install-tool pnpm 8.7.4 && pnpm install --recursive --lockfile-only --ignore-scripts --ignore-pnpmfile && pnpm dedupe\"\nsh: 1: composer: not found\n",
    "stack": "ExecError: Command failed: docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v \"/tmp/worker/842df1/5f473b/repos/github/user/repo\":\"/tmp/worker/842df1/5f473b/repos/github/user/repo\" -v \"/tmp/worker/842df1/5f473b/cache\":\"/tmp/worker/842df1/5f473b/cache\" -e NPM_CONFIG_CACHE -e npm_config_store -e CONTAINERBASE_CACHE_DIR -w \"/tmp/worker/842df1/5f473b/repos/github/user/repo\" ghcr.io/containerbase/sidecar:9.19.4 bash -l -c \"install-tool node 18.17.1 && install-tool pnpm 8.7.4 && pnpm install --recursive --lockfile-only --ignore-scripts --ignore-pnpmfile && pnpm dedupe\"\nsh: 1: composer: not found\n\n    at ChildProcess.<anonymous> (/opt/containerbase/tools/renovate/36.83.0/node_modules/renovate/lib/util/exec/common.ts:99:11)\n    at ChildProcess.emit (node:events:526:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:291:12)"
  }
  "type": "pnpm"
}

[rarkins]

Questions:

1. What are you hoping to achieve by running composer install after pnpm install? e.g. is it updating a composer.lock file and you hope to include that in the same PR, or updating the pnpm-lock.yaml file somehow
2. For Renovate PRs, can this option be skipped?
3. Do your PRs contain correctly updated pnpm-lock.yaml anyway, despite the error/warning?

[liby]

Unfortunately, it is not supported at the moment, do we have any other solutions? For example, some Renovate environment variables are available for me to judge.

[liby]

 "postinstall": "if [ -z \"$RENOVATE_ENV\" ]; then composer install; else echo 'In Renovate environment, skipping composer install.'; fi"

[rarkins]

I don't think we set that today but I don't see why it can't be added

[liby]

I could first remove pnpmDedupe from the postUpdateOptions, so it won't run pnpm dedupe. However, it seems like pnpm dedupe should be able to accept --ignore-scripts.

[liby]

pnpm dedupe now support --ignore-scripts, for which I also submitted a PR to renovate, adding a new pnpmDedupeIgnoreScripts value for postUpdateOptions.