When GitHub returns GH013 errors, they are silently captured

[akumria]

How are you running Renovate?

None

Which platform you running Renovate on?

GitHub.com

Which version of Renovate are you using?

43.249.7-full

Please tell us more about your question or problem

GitHub can return GH013 when there are ruleset or other repository requirements which are not met.

In our installation we've seen that some repositories have push protection for some paths (e.g. .github/workflows) and I've only noticed when they on-boarded and nothing was generated by renovate. At debug log level you can see the errors but, otherwise, they are invisible.

Logs (if relevant)

Logs

{"name":"renovate","hostname":"6feec2aceb57","pid":9,"level":20,"logContext":"a428def0-309e-4758-bfaf-6f1f4e1bbab4","repository":"WWW-XXX/YYY-Zzzz","branch":"renovate/go-1.x","branchName":"renovate/go-1.x","err":{"task":{"commands":["push","--force","origin","refs/renovate/branches/renovate/go-1.x","--verbose","--porcelain"],"format":"utf-8","parser":"[function]"},"message":"To https://github.com/WWW-XXX/YYY-Zzzz.git\n!\trefs/renovate/branches/renovate/go-1.x:refs/renovate/branches/renovate/go-1.x\t[remote rejected] (push declined due to repository rule violations)\nDone\nPushing to https://github.com/WWW-XXXl/YYY-Zzzz.git\nPOST git-receive-pack (734 bytes)\nremote: error: GH013: Repository rule violations found for refs/renovate/branches/renovate/go-1.x.        \nremote: Review all repository rules at https://github.com/WWW-XXX/YYY-Zzzz/rules?ref=refs%2Frenovate%2Fbranches%2Frenovate%2Ffoo-bar        \nremote: \nremote: - GITHUB PUSH PROTECTION        \nremote:   —————————————————————————————————————————        \nremote:     Resolve the following violations before pushing again        \nremote: \nremote:     - File path is restricted        \nremote:       Found 2 violations:        \nremote:             \nremote:       .github/workflows/AAA.yaml        \nremote:       .github/workflows/BBB.yaml        \nremote: \nremote:     (?) To push, resolve push protection violations or follow this URL to request push protection bypass.        \nremote:     https://github.com/WWW-XXX/YYY-Zzzz/exemptions/new/cHVzaF9ydWxlc2V0X2J5cGFzcy0zMjM1NDkzMzY5LTkyODA3NTc5NA==        \nremote: \nerror: failed to push some refs to 'https://github.com/WWW-XXX/YYY-Zzzz.git'\n","stack":"Error: To https://**redacted**@3.36.0/node_modules/simple-git/src/lib/plugins/error-detection.plugin.ts:42:29)\n    at PluginStore.exec (file:///usr/local/renovate/node_modules/.pnpm/simple-git@3.36.0/node_modules/simple-git/src/lib/plugins/plugin-store.ts:54:29)\n    at file:///usr/local/renovate/node_modules/.pnpm/simple-git@3.36.0/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:123:42\n    at new Promise (<anonymous>)\n    at GitExecutorChain.handleTaskData (file:///usr/local/renovate/node_modules/.pnpm/simple-git@3.36.0/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:120:14)\n    at GitExecutorChain.attemptRemoteTask (file:///usr/local/renovate/node_modules/.pnpm/simple-git@3.36.0/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:96:40)\n    at processTicksAndRejections (node:internal/process/task_queues:104:5)\n    at GitExecutorChain.attemptTask (file:///usr/local/renovate/node_modules/.pnpm/simple-git@3.36.0/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:20)"},"msg":"Platform-native commit: unknown error","time":"2026-07-03T20:52:47.243Z","v":0}

[RahulGautamSingh]

PR welcome to improve the visibility of such errors, possibly a warn level message is good here.