datasource/pypi: null home_page in JSON response throws ZodError, packages get no-result

[tlex]

How are you running Renovate?

Self-hosted Renovate CLI

Which platform you running Renovate on?

GitLab (.com or self-hosted)

Which version of Renovate are you using?

43.210.2

Please tell us more about your question or problem

The PyPI datasource fails to look up any package whose PyPI JSON metadata
has "home_page": null, returning no-result so the package never gets
updates. PyPI returns home_page: null for projects that declare only
project_urls (e.g. jinja2, pydantic, markupsafe, argon2-cffi). Packages
that still set a string home_page (e.g. azure-cli) are unaffected.

Root cause: the response schema declares home_page: z.string().optional()
(lib/modules/datasource/pypi/schema.ts). In Zod, .optional() accepts
undefined but not null, so a null home_page throws a ZodError inside
getDependency (pypi/index.ts:133). That aborts the JSON-API lookup; the
simple-index fallback is then attempted against the JSON host URL
(https://pypi.org/pypi/<name>/, not /simple/<name>/) and also fails,
yielding no-result. The sibling requires_python field already uses
.nullish().

Minimal reproduction: a repo with a single PyPI dependency on a package
that has a null home_page, e.g. a requirements.txt containing:

jinja2

Run with LOG_LEVEL=debug and observe the lookup fail with no-result.

Proposed fix (one line): change home_page to z.string().nullish().
I have a patch ready on my fork: branch fix/pypi-null-home-page at
github.com/tlex/renovate, and can open a PR if useful.

Logs (if relevant)

Logs

$ grep -i 'jinja2' /tmp/trace-azure.json \
>   | jq -rc 'select(.msg|test("Looking up|HTTP request|got lookup|no-result|fallback";"i"))
>             | "\(.time)  \(.msg)" + (if .err then "\n    └─ \(.err.stack)" else "" end)'
2026-06-04T07:27:19.286Z  Looking up pypi api dependency
2026-06-04T07:27:19.286Z  Pypi api got lookup
2026-06-04T07:27:19.286Z  HTTP request: GET https://pypi.org/pypi/jinja2/json
2026-06-04T07:27:19.355Z  Looking up pypi simple dependency via fallback
└─ ZodError: Schema error
at Http.requestJson (file:///usr/local/renovate/lib/util/http/http.ts:391:39)
at processTicksAndRejections (node:internal/process/task_queues:104:5)
at PypiDatasource.getDependency (file:///usr/local/renovate/lib/modules/datasource/pypi/index.ts:133:17)
at PypiDatasource.getReleases (file:///usr/local/renovate/lib/modules/datasource/pypi/index.ts:71:22)
at getRegistryReleases (file:///usr/local/renovate/lib/modules/datasource/index.ts:96:15)
at mergeRegistries (file:///usr/local/renovate/lib/modules/datasource/index.ts:195:19)
at fetchReleases (file:///usr/local/renovate/lib/modules/datasource/index.ts:389:15)
at lookupUpdates (file:///usr/local/renovate/lib/workers/repository/process/lookup/index.ts:159:56)
at file:///usr/local/renovate/lib/workers/repository/process/fetch.ts:81:12
at LookupStats.wrap (file:///usr/local/renovate/lib/util/stats.ts:39:20)
at file:///usr/local/renovate/lib/workers/repository/process/fetch.ts:141:14
at file:///usr/local/renovate/node_modules/.pnpm/p-map@6.0.0/node_modules/p-map/index.js:139:20
2026-06-04T07:27:19.355Z  HTTP request: GET https://pypi.org/pypi/jinja2/
2026-06-04T07:27:19.760Z  Failed to look up pypi package jinja2: no-result

[sueun-dev]

yeah, this looks real to me.

I checked current main (3eca3b4): schema.ts has home_page: z.string().optional() while requires_python is already nullish(). Live PyPI JSON for jinja2, pydantic, markupsafe, and argon2-cffi currently returns info.home_page: null; azure-cli is a useful control because it returns a string.

I didn't run the full Renovate CLI path, but the schema failure itself reproduces cleanly with zod v4.4.3: the current shape rejects jinja2 at ["info","home_page"] with “expected string, received null”, and changing just home_page to nullish() makes the same response pass. So your one-line fix looks right; I'd open the PR.

[tlex]

#43814

[tlex]

My current work-around is to use a custom image:

FROM ghcr.io/renovatebot/renovate:43.212.4@sha256:7ddbf899a371dec16a37c22e233a6b981c4d3fbfe3075dcf22a4f1ba22fe55a9

USER root

RUN set -eux; \
    schema=/usr/local/renovate/dist/modules/datasource/pypi/schema.js; \
    if grep -q 'home_page: z.string().nullish()' "$schema"; then \
        echo "pypi schema already allows null home_page"; \
    elif grep -q 'home_page: z.string().optional()' "$schema"; then \
        sed -i 's/home_page: z.string().optional()/home_page: z.string().nullish()/' "$schema"; \
        echo "patched pypi schema (home_page -> nullish)"; \
    else \
        echo "pypi schema home_page pattern not found" >&2; \
        exit 1; \
    fi; \
    grep -q 'home_page: z.string().nullish()' "$schema"

USER 12021