containerbase/python-prebuild warning when using poetry and specifying registryUrls

[critchtionary]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us what version of Renovate you run.

37.140.6

If you're self-hosting Renovate, select which platform you are using.

github.com

Was this something which used to work for you, and then stopped?

I have not seen this working

Describe the problem

Have a project using poetry to manage Python dependencies. We have a PyPI repository on a self-hosted Artifactory that should be used as an index, so have set the following in renovate.json (actual URL redacted):

{
    "extends": ["config:recommended"],  
    "python": {
        "registryUrls": [
          "https://artifactory.example.com/api/pypi/pypi-virtual/simple"
        ]
    }
}

When using poetry, renovate tries to install the containerbase/python-prebuild package from the Artifactory Python registry even though it's a github-release. The dependencies are resolved without issue, but this adds a warning to the dependency dashboard.

The same issue occurs when setting the registry URL to be https://pypi.python.org/simple, which is what I have done for the reproducer repository.

Relevant debug logs

Logs

DEBUG: Datasource connection error (repository=example-repo)
       "datasource": "github-releases",
       "packageName": "containerbase/python-prebuild",
       "url": "https://artifactory.example.com/api/pypi/pypi-virtual/simple/api/graphql",
       "errCode": "ERR_NON_2XX_3XX_RESPONSE"
DEBUG: Failed to look up github-releases package containerbase/python-prebuild (repository=example-repo, packageFile=pyproject.toml, dependency=containerbase/python-prebuild)
...

DEBUG: packageFiles with updates (repository=example-repo, baseBranch=main)
       "config": {
         "pep621": [
           {
             "deps": [
               {
                 "packageName": "poetry-core",
                 "depName": "poetry-core",
                 "datasource": "pypi",
                 "depType": "build-system.requires",
                 "skipReason": "unspecified-version",
                 "updates": []
               }
             ],
             "packageFile": "pyproject.toml"
           }
         ],
         "poetry": [
              {
                "deps": [
                  {
                    "datasource": "github-releases",
                    "currentValue": "^3.8",
                    "managerData": {"nestedVersion": false},
                    "versioning": "poetry",
                    "depName": "python",
                    "depType": "dependencies",
                    "packageName": "containerbase/python-prebuild",
                    "commitMessageTopic": "Python",
                    "registryUrls": null,
                    "updates": [],
                    "warnings": [
                      {
                        "topic": "containerbase/python-prebuild",
                        "message": "Failed to look up github-releases package containerbase/python-prebuild"
                      }
                    ]
                  },
...

Have you created a minimal reproduction repository?

I have linked to a minimal reproduction in the description above

[github-actions[bot]]

Hi there,

A maintainer has flagged that this discussion is misclassified as a bug when it is not.

Incorrectly classified discussions waste maintainer time, worsen search result accuracy and make it harder to train AI on this dataset.

The next time you create a discussion, please keep in mind:

• If you are new to Renovate, try to stick to questions instead of problem reports
• Just because Renovate does something you don't expect, doesn't automatically mean it's a bug
• Unsupported features should be raised as ideas, not problems
• Those who appear to be twisting questions into sounding like a bug for attention will be given the least support

Thanks, the Renovate team

[rarkins]

You should use matchDatasources=pypi in packageRules and not "python". Configuring within "python" is shorthand for saying "All python ecosystem package managers should use these registryUrls for everything".

This is a configuration error and not a bug