Failure: Android NDK license not accepted when executing renovate

[runningcode]

How are you running Renovate?

A Mend.io-hosted app

Which platform you running Renovate on?

GitHub.com

Which version of Renovate are you using?

43.235.0

Please tell us more about your question or problem

Any dependency update in this repo with Gradle lockfiles and dependency verification files fails due to a missing Android NDK license.

Here's a link to the failure: getsentry/sentry-android-gradle-plugin#1333 (comment)

Further context, we just enabled Renovate in order to help with updating our dependency lockfiles and dependency verification files. All the Renovate PRs to update the versions are failing such as the above linked PR with the failure. It seems like an NDK license needs to be accepted but I'm not sure how to accept it.

Logs (if relevant)

Logs

Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties
#=#=#                                                                          

#######################################################                   76.7%
######################################################################## 100.0%
#=#=#                                                                          

#################################################                         69.3%
######################################################################## 100.0%
#=#=#                                                                          

#####################################                                     51.5%
######################################################################## 100.0%
#=#=#                                                                          

################################                                          45.2%
######################################################################## 100.0%
#=#=#                                                                          

###################################                                       48.9%
######################################################################## 100.0%
#=#=#                                                                          

##############################################################            87.3%
######################################################################## 100.0%

FAILURE: Build failed with an exception.

* What went wrong:
A problem occurred configuring project ':examples:android-ndk'.
> com.android.builder.sdk.LicenceNotAcceptedException: Failed to install the following Android SDK packages as some licences have not been accepted.
     ndk;27.0.12077973 NDK (Side by side) 27.0.12077973
  To build this project, accept the SDK license agreements and install the missing components using the Android Studio SDK Manager.
  All licenses can be accepted using the sdkmanager command line tool:
  sdkmanager.bat --licenses
  Or, to transfer the license agreements from one workstation to another, see https://developer.android.com/studio/intro/update.html#download-with-gradle
  
  Using Android SDK: /home/ubuntu/.android-sdk

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Get more help at https://help.gradle.org.

BUILD FAILED in 8m 41s

[jamietanna]

I've amended the description to remove the note that you're using the GitHub Action, looks like you're using renovate[bot] which is the regular Mend-hosted Renovate :)

[jamietanna]

@viceice at first I thought that this is something related to the new Android SDK support (containerbase/base#6183) but looking at the logs:

DEBUG: Updating androidx.compose.runtime:runtime in gradle/libs.versions.toml (branch="renovate/androidx.compose.runtime-runtime-1.x")
DEBUG: updateArtifacts for updatedPackageFiles (branch="renovate/androidx.compose.runtime-runtime-1.x")
DEBUG: gradle.updateArtifacts(gradle/libs.versions.toml) (branch="renovate/androidx.compose.runtime-runtime-1.x")
DEBUG: Updating found Gradle dependency lockfiles (branch="renovate/androidx.compose.runtime-runtime-1.x")
DEBUG: Setting CONTAINERBASE_CACHE_DIR to /runner/cache/containerbase (branch="renovate/androidx.compose.runtime-runtime-1.x")
DEBUG: Using containerbase dynamic installs (branch="renovate/androidx.compose.runtime-runtime-1.x")
DEBUG: Resolved stable matching version (branch="renovate/androidx.compose.runtime-runtime-1.x")
{
  "toolName": "java",
  "constraint": "^21.0.0",
  "resolvedVersion": "21.0.11+10.0.LTS"
}

DEBUG: Executing command (branch="renovate/androidx.compose.runtime-runtime-1.x")
{
  "command": "install-tool java 21.0.11+10.0.LTS"
}

DEBUG: exec completed (branch="renovate/androidx.compose.runtime-runtime-1.x")
{
  "durationMs": 5055,
  "stdout": "[13:20:00.225] INFO (774): Installing tool java@21.0.11+10.0.LTS...\nopenjdk version \"21.0.11\" 2026-04-21 LTS\nOpenJDK Runtime Environment Temurin-21.0.11+10 (build 21.0.11+10-LTS)\nOpenJDK 64-Bit Server VM Temurin-21.0.11+10 (build 21.0.11+10-LTS, mixed mode, sharing)\n[13:20:04.849] INFO (774): Install tool java succeeded in 4.6s.\n",
  "stderr": ""
}

DEBUG: Executing command (branch="renovate/androidx.compose.runtime-runtime-1.x")
{
  "command": "./gradlew -Dorg.gradle.jvmargs=\"-Xms512m -Xmx512m\" --console=plain --dependency-verification lenient -q properties"
}

DEBUG: rawExec err (branch="renovate/androidx.compose.runtime-runtime-1.x")
{
  "err": {
    "cmd": "./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties",
    "stderr": "...",
    "stdout": "...",
    "options": {
      "cwd": "/tmp/renovate/repos/github/getsentry/sentry-android-gradle-plugin",
      "env": [
        "GRADLE_OPTS",
        "HOME",
        "PATH",
        "LC_ALL",
        "LANG",
        "CONTAINERBASE_CACHE_DIR"
      ],
      "maxBuffer": 10485760,
      "timeout": 900000,
      "stdin": "pipe",
      "stdout": "pipe",
      "stderr": "pipe"
    },
    "exitCode": 1,
    "name": "ExecError",
    "message": "...",
    "stack": "..."
  },
  "durationMs": 525619
}

it doesn't seem to be?

Or would using install-tool android-sdk ... (before Gradle runs) mean that the license would be accepted?

[jamietanna]

Sorry, had nudged someone internally about that but not heard back

[jamietanna]

I guess if we did that, then the workaround here is that they could make sure they install-tool android-sdk here?

The difficulty would then be how to configure that 🤔 We don't want to run that for all Gradle invocations

[viceice]

we can detect android usage, but renovate doesn't need the sdk to update android projects

[runningcode]

Just to clarify, this isn't about the SDK, it is about the NDK.

[runningcode]

Do you need any further information from me to help debug?