renovate 41.22.0 → 41.23.0

package/dist/modules/manager/pep621/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../lib/modules/manager/pep621/schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,6DAA2E;AAC3E,yDAAsE;AACtE,2CAAkD;AAIlD,MAAM,oBAAoB,GAAG,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC5D,MAAM,sBAAsB,GAAG,OAAC;KAC7B,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACvC,QAAQ,EAAE,CAAC;AAEd,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC;IACzB,kBAAkB,EAAE,sBAAsB;IAC1C,MAAM,EAAE,OAAC;SACN,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC,CACH;SACA,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,OAAC;SACJ,MAAM,CACL,OAAC,CAAC,MAAM,EAAE,EACV,OAAC;SACE,MAAM,CAAC;QACN,YAAY,EAAE,oBAAoB;QAClC,oBAAoB,EAAE,oBAAoB;KAC3C,CAAC;SACD,QAAQ,EAAE,CACd;SACA,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC3B,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,QAAQ,GAAG,OAAC,CAAC,KAAK,CAAC;IACvB,aAAa;IACb,WAAW;IACX,WAAW;IACX,YAAY;IACZ,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;IACxB,kBAAkB,EAAE,oBAAoB;IACxC,OAAO,EAAE,IAAA,0BAAW;IAClB,0EAA0E;IAC1E,OAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,+BAAsB,EAAC,MAAM,CAAC,CAAC,EAChE,QAAQ,CACT,CAAC,QAAQ,EAAE;IACZ,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;QACf,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACrC,CAAC,CACH;SACA,QAAQ,EAAE;CACd,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QAC/C,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACxC,YAAY,EAAE,oBAAoB;QAClC,uBAAuB,EAAE,sBAAsB;KAChD,CAAC;SACD,QAAQ,EAAE;IACb,cAAc,EAAE,OAAC;SACd,MAAM,CAAC;QACN,QAAQ,EAAE,oBAAoB;QAC9B,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,QAAQ,EAAE;IACb,mBAAmB,EAAE,OAAC;SACnB,MAAM,CACL,OAAC,CAAC,MAAM,EAAE;IACV,4FAA4F;IAC5F,IAAA,yBAAU,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CACvB;SACA,QAAQ,EAAE;IACb,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,IAAI,EAAE,yBAAgB,CAAC,QAAQ,EAAE;QACjC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC7B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE;KACxB,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,mBAAI,CAAC,IAAI,CACxC,OAAC,CAAC,MAAM,CAAC;IACP,OAAO,EAAE,IAAA,yBAAU,EACjB,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CACH;CACF,CAAC,CACH;KACE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAC9B,MAAM,CAAC,WAAW,CAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAoB,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAClE,CACF;KACA,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEtB,QAAA,gBAAgB,GAAG,mBAAI,CAAC,IAAI,CACvC,OAAC,CAAC,MAAM,CAAC;IACP,OAAO,EAAE,IAAA,yBAAU,EACjB,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CACH;CACF,CAAC,CACH,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAC/B,MAAM,CAAC,WAAW,CAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAoB,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAClE,CACF,CAAC","sourcesContent":["import { z } from 'zod';\nimport { LooseArray, LooseRecord, Toml } from '../../../util/schema-utils';\nimport { normalizePythonDepName } from '../../datasource/pypi/common';\nimport { PixiConfigSchema } from '../pixi/schema';\n\nexport type PyProject = z.infer<typeof PyProjectSchema>;\n\nconst DependencyListSchema = z.array(z.string()).optional();\nconst DependencyRecordSchema = z\n  .record(z.string(), z.array(z.string()))\n  .optional();\n\nconst PdmSchema = z.object({\n  'dev-dependencies': DependencyRecordSchema,\n  source: z\n    .array(\n      z.object({\n        url: z.string(),\n        name: z.string(),\n        verify_ssl: z.boolean().optional(),\n      }),\n    )\n    .optional(),\n});\n\nconst HatchSchema = z.object({\n  envs: z\n    .record(\n      z.string(),\n      z\n        .object({\n          dependencies: DependencyListSchema,\n          'extra-dependencies': DependencyListSchema,\n        })\n        .optional(),\n    )\n    .optional(),\n});\n\nconst UvIndexSource = z.object({\n  index: z.string(),\n});\n\nconst UvGitSource = z.object({\n  git: z.string(),\n  rev: z.string().optional(),\n  tag: z.string().optional(),\n  branch: z.string().optional(),\n});\nexport type UvGitSource = z.infer<typeof UvGitSource>;\n\nconst UvUrlSource = z.object({\n  url: z.string(),\n});\n\nconst UvPathSource = z.object({\n  path: z.string(),\n});\n\nconst UvWorkspaceSource = z.object({\n  workspace: z.literal(true),\n});\n\n// https://docs.astral.sh/uv/concepts/dependencies/#dependency-sources\nconst UvSource = z.union([\n  UvIndexSource,\n  UvGitSource,\n  UvUrlSource,\n  UvPathSource,\n  UvWorkspaceSource,\n]);\n\nconst UvSchema = z.object({\n  'dev-dependencies': DependencyListSchema,\n  sources: LooseRecord(\n    // uv applies the same normalization as for Python dependencies on sources\n    z.string().transform((source) => normalizePythonDepName(source)),\n    UvSource,\n  ).optional(),\n  index: z\n    .array(\n      z.object({\n        name: z.string().optional(),\n        url: z.string(),\n        default: z.boolean().default(false),\n        explicit: z.boolean().default(false),\n      }),\n    )\n    .optional(),\n});\n\nexport const PyProjectSchema = z.object({\n  project: z\n    .object({\n      version: z.string().optional().catch(undefined),\n      'requires-python': z.string().optional(),\n      dependencies: DependencyListSchema,\n      'optional-dependencies': DependencyRecordSchema,\n    })\n    .optional(),\n  'build-system': z\n    .object({\n      requires: DependencyListSchema,\n      'build-backend': z.string().optional(),\n    })\n    .optional(),\n  'dependency-groups': z\n    .record(\n      z.string(),\n      // Skip non-string entries, like `{include-group = \"typing\"}`, as they are not dependencies.\n      LooseArray(z.string()),\n    )\n    .optional(),\n  tool: z\n    .object({\n      pixi: PixiConfigSchema.optional(),\n      pdm: PdmSchema.optional(),\n      hatch: HatchSchema.optional(),\n      uv: UvSchema.optional(),\n    })\n    .optional(),\n});\n\nexport const PdmLockfileSchema = Toml.pipe(\n  z.object({\n    package: LooseArray(\n      z.object({\n        name: z.string(),\n        version: z.string(),\n      }),\n    ),\n  }),\n)\n  .transform(({ package: pkg }) =>\n    Object.fromEntries(\n      pkg.map(({ name, version }): [string, string] => [name, version]),\n    ),\n  )\n  .transform((lock) => ({ lock }));\n\nexport const UvLockfileSchema = Toml.pipe(\n  z.object({\n    package: LooseArray(\n      z.object({\n        name: z.string(),\n        version: z.string(),\n      }),\n    ),\n  }),\n).transform(({ package: pkg }) =>\n  Object.fromEntries(\n    pkg.map(({ name, version }): [string, string] => [name, version]),\n  ),\n);\n"]}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../lib/modules/manager/pep621/schema.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,6DAA2E;AAC3E,yDAAsE;AACtE,2CAAkD;AAIlD,MAAM,oBAAoB,GAAG,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC5D,MAAM,sBAAsB,GAAG,OAAC;KAC7B,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACvC,QAAQ,EAAE,CAAC;AAEd,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC;IACzB,kBAAkB,EAAE,sBAAsB;IAC1C,MAAM,EAAE,OAAC;SACN,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC,CACH;SACA,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,OAAC;SACJ,MAAM,CACL,OAAC,CAAC,MAAM,EAAE,EACV,OAAC;SACE,MAAM,CAAC;QACN,YAAY,EAAE,oBAAoB;QAClC,oBAAoB,EAAE,oBAAoB;KAC3C,CAAC;SACD,QAAQ,EAAE,CACd;SACA,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC3B,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,QAAQ,GAAG,OAAC,CAAC,KAAK,CAAC;IACvB,aAAa;IACb,WAAW;IACX,WAAW;IACX,YAAY;IACZ,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;IACxB,kBAAkB,EAAE,oBAAoB;IACxC,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,IAAA,0BAAW;IAClB,0EAA0E;IAC1E,OAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,+BAAsB,EAAC,MAAM,CAAC,CAAC,EAChE,QAAQ,CACT,CAAC,QAAQ,EAAE;IACZ,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;QACf,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACrC,CAAC,CACH;SACA,QAAQ,EAAE;CACd,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QAC/C,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACxC,YAAY,EAAE,oBAAoB;QAClC,uBAAuB,EAAE,sBAAsB;KAChD,CAAC;SACD,QAAQ,EAAE;IACb,cAAc,EAAE,OAAC;SACd,MAAM,CAAC;QACN,QAAQ,EAAE,oBAAoB;QAC9B,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,QAAQ,EAAE;IACb,mBAAmB,EAAE,OAAC;SACnB,MAAM,CACL,OAAC,CAAC,MAAM,EAAE;IACV,4FAA4F;IAC5F,IAAA,yBAAU,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CACvB;SACA,QAAQ,EAAE;IACb,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,IAAI,EAAE,yBAAgB,CAAC,QAAQ,EAAE;QACjC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC7B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE;KACxB,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,mBAAI,CAAC,IAAI,CACxC,OAAC,CAAC,MAAM,CAAC;IACP,OAAO,EAAE,IAAA,yBAAU,EACjB,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CACH;CACF,CAAC,CACH;KACE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAC9B,MAAM,CAAC,WAAW,CAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAoB,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAClE,CACF;KACA,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEtB,QAAA,gBAAgB,GAAG,mBAAI,CAAC,IAAI,CACvC,OAAC,CAAC,MAAM,CAAC;IACP,OAAO,EAAE,IAAA,yBAAU,EACjB,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CACH;CACF,CAAC,CACH,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAC/B,MAAM,CAAC,WAAW,CAChB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAoB,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAClE,CACF,CAAC","sourcesContent":["import { z } from 'zod';\nimport { LooseArray, LooseRecord, Toml } from '../../../util/schema-utils';\nimport { normalizePythonDepName } from '../../datasource/pypi/common';\nimport { PixiConfigSchema } from '../pixi/schema';\n\nexport type PyProject = z.infer<typeof PyProjectSchema>;\n\nconst DependencyListSchema = z.array(z.string()).optional();\nconst DependencyRecordSchema = z\n  .record(z.string(), z.array(z.string()))\n  .optional();\n\nconst PdmSchema = z.object({\n  'dev-dependencies': DependencyRecordSchema,\n  source: z\n    .array(\n      z.object({\n        url: z.string(),\n        name: z.string(),\n        verify_ssl: z.boolean().optional(),\n      }),\n    )\n    .optional(),\n});\n\nconst HatchSchema = z.object({\n  envs: z\n    .record(\n      z.string(),\n      z\n        .object({\n          dependencies: DependencyListSchema,\n          'extra-dependencies': DependencyListSchema,\n        })\n        .optional(),\n    )\n    .optional(),\n});\n\nconst UvIndexSource = z.object({\n  index: z.string(),\n});\n\nconst UvGitSource = z.object({\n  git: z.string(),\n  rev: z.string().optional(),\n  tag: z.string().optional(),\n  branch: z.string().optional(),\n});\nexport type UvGitSource = z.infer<typeof UvGitSource>;\n\nconst UvUrlSource = z.object({\n  url: z.string(),\n});\n\nconst UvPathSource = z.object({\n  path: z.string(),\n});\n\nconst UvWorkspaceSource = z.object({\n  workspace: z.literal(true),\n});\n\n// https://docs.astral.sh/uv/concepts/dependencies/#dependency-sources\nconst UvSource = z.union([\n  UvIndexSource,\n  UvGitSource,\n  UvUrlSource,\n  UvPathSource,\n  UvWorkspaceSource,\n]);\n\nconst UvSchema = z.object({\n  'dev-dependencies': DependencyListSchema,\n  'required-version': z.string().optional(),\n  sources: LooseRecord(\n    // uv applies the same normalization as for Python dependencies on sources\n    z.string().transform((source) => normalizePythonDepName(source)),\n    UvSource,\n  ).optional(),\n  index: z\n    .array(\n      z.object({\n        name: z.string().optional(),\n        url: z.string(),\n        default: z.boolean().default(false),\n        explicit: z.boolean().default(false),\n      }),\n    )\n    .optional(),\n});\n\nexport const PyProjectSchema = z.object({\n  project: z\n    .object({\n      version: z.string().optional().catch(undefined),\n      'requires-python': z.string().optional(),\n      dependencies: DependencyListSchema,\n      'optional-dependencies': DependencyRecordSchema,\n    })\n    .optional(),\n  'build-system': z\n    .object({\n      requires: DependencyListSchema,\n      'build-backend': z.string().optional(),\n    })\n    .optional(),\n  'dependency-groups': z\n    .record(\n      z.string(),\n      // Skip non-string entries, like `{include-group = \"typing\"}`, as they are not dependencies.\n      LooseArray(z.string()),\n    )\n    .optional(),\n  tool: z\n    .object({\n      pixi: PixiConfigSchema.optional(),\n      pdm: PdmSchema.optional(),\n      hatch: HatchSchema.optional(),\n      uv: UvSchema.optional(),\n    })\n    .optional(),\n});\n\nexport const PdmLockfileSchema = Toml.pipe(\n  z.object({\n    package: LooseArray(\n      z.object({\n        name: z.string(),\n        version: z.string(),\n      }),\n    ),\n  }),\n)\n  .transform(({ package: pkg }) =>\n    Object.fromEntries(\n      pkg.map(({ name, version }): [string, string] => [name, version]),\n    ),\n  )\n  .transform((lock) => ({ lock }));\n\nexport const UvLockfileSchema = Toml.pipe(\n  z.object({\n    package: LooseArray(\n      z.object({\n        name: z.string(),\n        version: z.string(),\n      }),\n    ),\n  }),\n).transform(({ package: pkg }) =>\n  Object.fromEntries(\n    pkg.map(({ name, version }): [string, string] => [name, version]),\n  ),\n);\n"]}

package/dist/util/interpolator.d.ts

@@ -5,4 +5,4 @@ export interface InterpolatorOptions {
     nameRegex: RegExp;
 }
 export declare function validateInterpolatedValues(input: unknown, options: InterpolatorOptions): void;
-export declare function replaceInterpolatedValuesInObject(config_: RenovateConfig, input: Record<string, string>, options: InterpolatorOptions, deleteValues: boolean): RenovateConfig;
+export declare function replaceInterpolatedValuesInObject(config_: RenovateConfig, input: Record<string, string>, options: InterpolatorOptions, deleteValues?: boolean): RenovateConfig;

package/dist/util/interpolator.js

@@ -28,7 +28,7 @@ function validateInterpolatedValues(input, options) {
     }
     if (validationErrors.length) {
         logger_1.logger.error({ validationErrors }, `Invalid ${name}s configured`);
-        throw new Error(error_messages_1.CONFIG_SECRETS_INVALID);
+        throw new Error(name === 'secrets' ? error_messages_1.CONFIG_SECRETS_INVALID : error_messages_1.CONFIG_VARIABLES_INVALID);
     }
 }
 function replaceInterpolatedValuesInString(key, value, input, options) {
@@ -56,7 +56,7 @@ function replaceInterpolatedValuesInString(key, value, input, options) {
         throw error;
     });
 }
-function replaceInterpolatedValuesInObject(config_, input, options, deleteValues) {
+function replaceInterpolatedValuesInObject(config_, input, options, deleteValues = true) {
     const config = { ...config_ };
     const { name } = options;
     if (deleteValues) {

package/dist/util/interpolator.js.map

@@ -1 +1 @@
-{"version":3,"file":"interpolator.js","sourceRoot":"","sources":["../../lib/util/interpolator.ts"],"names":[],"mappings":";;AAeA,gEAgCC;AAoCD,8EAiDC;;AApID,kEAAkC;AAElC,gEAGqC;AACrC,sCAAmC;AACnC,qCAAsC;AAQtC,SAAgB,0BAA0B,CACxC,KAAc,EACd,OAA4B;IAE5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAEpC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,IAAI,YAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,gBAAgB,CAAC,IAAI,CAAC,WAAW,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,YAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,gBAAgB,CAAC,IAAI,CACnB,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,uCAAuC,OAAO,KAAK,QAAQ,IAAI,IAAI,GAAG,EAAE,CAC5F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,IAAI,CACnB,UAAU,IAAI,oCAAoC,OAAO,KAAK,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAC5B,eAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,WAAW,IAAI,cAAc,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uCAAsB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,iCAAiC,CACxC,GAAW,EACX,KAAa,EACb,KAA6B,EAC7B,OAA4B;IAE5B,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IACxC,+CAA+C;IAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3E,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;QAC3C,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QAClC,KAAK,CAAC,eAAe,GAAG,cAAc,IAAI,eAAe,CAAC;QAC1D,KAAK,CAAC,iBAAiB,GAAG,eAAe,GAAG,kBAAkB,IAAI,eAAe,CAAC;QAClF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;QAC3C,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QAClC,KAAK,CAAC,eAAe,GAAG,WAAW,IAAI,OAAO,CAAC;QAC/C,KAAK,CAAC,iBAAiB,GAAG,iBAAiB,IAAI,kCAAkC,MAAM,CACrF,GAAG,CACJ,EAAE,CAAC;QACJ,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,iCAAiC,CAC/C,OAAuB,EACvB,KAA6B,EAC7B,OAA4B,EAC5B,YAAqB;IAErB,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,YAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,iCAAiC,CAC7C,KAAK,EACL,KAAK,EACL,OAAO,EACP,YAAY,CACb,CAAC;QACJ,CAAC;QACD,IAAI,YAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,iCAAiC,CAC7C,GAAG,EACH,KAAK,EACL,KAAK,EACL,OAAO,CACR,CAAC;QACJ,CAAC;QACD,IAAI,YAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtD,IAAI,YAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,KAAK,CAAC,UAAU,CAAC,GAAG,iCAAiC,CACnD,SAAS,EACT,KAAK,EACL,OAAO,EACP,YAAY,CACb,CAAC;gBACJ,CAAC;qBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChC,KAAK,CAAC,UAAU,CAAC,GAAG,iCAAiC,CACnD,GAAG,EACH,SAAS,EACT,KAAK,EACL,OAAO,CACR,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport type { RenovateConfig } from '../config/types';\nimport {\n  CONFIG_SECRETS_INVALID,\n  CONFIG_VALIDATION,\n} from '../constants/error-messages';\nimport { logger } from '../logger';\nimport { capitalize } from './string';\n\nexport interface InterpolatorOptions {\n  name: 'secrets' | 'variables';\n  templateRegex: RegExp;\n  nameRegex: RegExp;\n}\n\nexport function validateInterpolatedValues(\n  input: unknown,\n  options: InterpolatorOptions,\n): void {\n  if (!input) {\n    return;\n  }\n\n  const { name, nameRegex } = options;\n\n  const validationErrors: string[] = [];\n  if (is.plainObject(input)) {\n    for (const [key, value] of Object.entries(input)) {\n      if (!nameRegex.test(key)) {\n        validationErrors.push(`Invalid ${name} name \"${key}\"`);\n      }\n      if (!is.string(value)) {\n        validationErrors.push(\n          `${capitalize(name)} values must be strings. Found type ${typeof value} for ${name} ${key}`,\n        );\n      }\n    }\n  } else {\n    validationErrors.push(\n      `Config ${name}s must be a plain object. Found: ${typeof input}`,\n    );\n  }\n\n  if (validationErrors.length) {\n    logger.error({ validationErrors }, `Invalid ${name}s configured`);\n    throw new Error(CONFIG_SECRETS_INVALID);\n  }\n}\n\nfunction replaceInterpolatedValuesInString(\n  key: string,\n  value: string,\n  input: Record<string, string>,\n  options: InterpolatorOptions,\n): string {\n  const { name, templateRegex } = options;\n  // do nothing if no interpolator template found\n  if (!templateRegex.test(value)) {\n    return value;\n  }\n\n  const disallowedPrefixes = ['branch', 'commit', 'group', 'pr', 'semantic'];\n  if (disallowedPrefixes.some((prefix) => key.startsWith(prefix))) {\n    const error = new Error(CONFIG_VALIDATION);\n    error.validationSource = 'config';\n    error.validationError = `Disallowed ${name} substitution`;\n    error.validationMessage = `The field \\`${key}\\` may not use ${name} substitution`;\n    throw error;\n  }\n  return value.replace(templateRegex, (_, key) => {\n    if (input?.[key]) {\n      return input[key];\n    }\n    const error = new Error(CONFIG_VALIDATION);\n    error.validationSource = 'config';\n    error.validationError = `Unknown ${name} name`;\n    error.validationMessage = `The following ${name} name was not found in config: ${String(\n      key,\n    )}`;\n    throw error;\n  });\n}\n\nexport function replaceInterpolatedValuesInObject(\n  config_: RenovateConfig,\n  input: Record<string, string>,\n  options: InterpolatorOptions,\n  deleteValues: boolean,\n): RenovateConfig {\n  const config = { ...config_ };\n  const { name } = options;\n  if (deleteValues) {\n    delete config[name];\n  }\n  for (const [key, value] of Object.entries(config)) {\n    if (is.plainObject(value)) {\n      config[key] = replaceInterpolatedValuesInObject(\n        value,\n        input,\n        options,\n        deleteValues,\n      );\n    }\n    if (is.string(value)) {\n      config[key] = replaceInterpolatedValuesInString(\n        key,\n        value,\n        input,\n        options,\n      );\n    }\n    if (is.array(value)) {\n      for (const [arrayIndex, arrayItem] of value.entries()) {\n        if (is.plainObject(arrayItem)) {\n          value[arrayIndex] = replaceInterpolatedValuesInObject(\n            arrayItem,\n            input,\n            options,\n            deleteValues,\n          );\n        } else if (is.string(arrayItem)) {\n          value[arrayIndex] = replaceInterpolatedValuesInString(\n            key,\n            arrayItem,\n            input,\n            options,\n          );\n        }\n      }\n    }\n  }\n  return config;\n}\n"]}
+{"version":3,"file":"interpolator.js","sourceRoot":"","sources":["../../lib/util/interpolator.ts"],"names":[],"mappings":";;AAgBA,gEAkCC;AAoCD,8EAiDC;;AAvID,kEAAkC;AAElC,gEAIqC;AACrC,sCAAmC;AACnC,qCAAsC;AAQtC,SAAgB,0BAA0B,CACxC,KAAc,EACd,OAA4B;IAE5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAEpC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,IAAI,YAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,gBAAgB,CAAC,IAAI,CAAC,WAAW,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,YAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,gBAAgB,CAAC,IAAI,CACnB,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,uCAAuC,OAAO,KAAK,QAAQ,IAAI,IAAI,GAAG,EAAE,CAC5F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,IAAI,CACnB,UAAU,IAAI,oCAAoC,OAAO,KAAK,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAC5B,eAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,WAAW,IAAI,cAAc,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,uCAAsB,CAAC,CAAC,CAAC,yCAAwB,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iCAAiC,CACxC,GAAW,EACX,KAAa,EACb,KAA6B,EAC7B,OAA4B;IAE5B,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IACxC,+CAA+C;IAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3E,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;QAC3C,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QAClC,KAAK,CAAC,eAAe,GAAG,cAAc,IAAI,eAAe,CAAC;QAC1D,KAAK,CAAC,iBAAiB,GAAG,eAAe,GAAG,kBAAkB,IAAI,eAAe,CAAC;QAClF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;QAC3C,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QAClC,KAAK,CAAC,eAAe,GAAG,WAAW,IAAI,OAAO,CAAC;QAC/C,KAAK,CAAC,iBAAiB,GAAG,iBAAiB,IAAI,kCAAkC,MAAM,CACrF,GAAG,CACJ,EAAE,CAAC;QACJ,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,iCAAiC,CAC/C,OAAuB,EACvB,KAA6B,EAC7B,OAA4B,EAC5B,YAAY,GAAG,IAAI;IAEnB,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,YAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,iCAAiC,CAC7C,KAAK,EACL,KAAK,EACL,OAAO,EACP,YAAY,CACb,CAAC;QACJ,CAAC;QACD,IAAI,YAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,iCAAiC,CAC7C,GAAG,EACH,KAAK,EACL,KAAK,EACL,OAAO,CACR,CAAC;QACJ,CAAC;QACD,IAAI,YAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtD,IAAI,YAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,KAAK,CAAC,UAAU,CAAC,GAAG,iCAAiC,CACnD,SAAS,EACT,KAAK,EACL,OAAO,EACP,YAAY,CACb,CAAC;gBACJ,CAAC;qBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChC,KAAK,CAAC,UAAU,CAAC,GAAG,iCAAiC,CACnD,GAAG,EACH,SAAS,EACT,KAAK,EACL,OAAO,CACR,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport type { RenovateConfig } from '../config/types';\nimport {\n  CONFIG_SECRETS_INVALID,\n  CONFIG_VALIDATION,\n  CONFIG_VARIABLES_INVALID,\n} from '../constants/error-messages';\nimport { logger } from '../logger';\nimport { capitalize } from './string';\n\nexport interface InterpolatorOptions {\n  name: 'secrets' | 'variables';\n  templateRegex: RegExp;\n  nameRegex: RegExp;\n}\n\nexport function validateInterpolatedValues(\n  input: unknown,\n  options: InterpolatorOptions,\n): void {\n  if (!input) {\n    return;\n  }\n\n  const { name, nameRegex } = options;\n\n  const validationErrors: string[] = [];\n  if (is.plainObject(input)) {\n    for (const [key, value] of Object.entries(input)) {\n      if (!nameRegex.test(key)) {\n        validationErrors.push(`Invalid ${name} name \"${key}\"`);\n      }\n      if (!is.string(value)) {\n        validationErrors.push(\n          `${capitalize(name)} values must be strings. Found type ${typeof value} for ${name} ${key}`,\n        );\n      }\n    }\n  } else {\n    validationErrors.push(\n      `Config ${name}s must be a plain object. Found: ${typeof input}`,\n    );\n  }\n\n  if (validationErrors.length) {\n    logger.error({ validationErrors }, `Invalid ${name}s configured`);\n    throw new Error(\n      name === 'secrets' ? CONFIG_SECRETS_INVALID : CONFIG_VARIABLES_INVALID,\n    );\n  }\n}\n\nfunction replaceInterpolatedValuesInString(\n  key: string,\n  value: string,\n  input: Record<string, string>,\n  options: InterpolatorOptions,\n): string {\n  const { name, templateRegex } = options;\n  // do nothing if no interpolator template found\n  if (!templateRegex.test(value)) {\n    return value;\n  }\n\n  const disallowedPrefixes = ['branch', 'commit', 'group', 'pr', 'semantic'];\n  if (disallowedPrefixes.some((prefix) => key.startsWith(prefix))) {\n    const error = new Error(CONFIG_VALIDATION);\n    error.validationSource = 'config';\n    error.validationError = `Disallowed ${name} substitution`;\n    error.validationMessage = `The field \\`${key}\\` may not use ${name} substitution`;\n    throw error;\n  }\n  return value.replace(templateRegex, (_, key) => {\n    if (input?.[key]) {\n      return input[key];\n    }\n    const error = new Error(CONFIG_VALIDATION);\n    error.validationSource = 'config';\n    error.validationError = `Unknown ${name} name`;\n    error.validationMessage = `The following ${name} name was not found in config: ${String(\n      key,\n    )}`;\n    throw error;\n  });\n}\n\nexport function replaceInterpolatedValuesInObject(\n  config_: RenovateConfig,\n  input: Record<string, string>,\n  options: InterpolatorOptions,\n  deleteValues = true,\n): RenovateConfig {\n  const config = { ...config_ };\n  const { name } = options;\n  if (deleteValues) {\n    delete config[name];\n  }\n  for (const [key, value] of Object.entries(config)) {\n    if (is.plainObject(value)) {\n      config[key] = replaceInterpolatedValuesInObject(\n        value,\n        input,\n        options,\n        deleteValues,\n      );\n    }\n    if (is.string(value)) {\n      config[key] = replaceInterpolatedValuesInString(\n        key,\n        value,\n        input,\n        options,\n      );\n    }\n    if (is.array(value)) {\n      for (const [arrayIndex, arrayItem] of value.entries()) {\n        if (is.plainObject(arrayItem)) {\n          value[arrayIndex] = replaceInterpolatedValuesInObject(\n            arrayItem,\n            input,\n            options,\n            deleteValues,\n          );\n        } else if (is.string(arrayItem)) {\n          value[arrayIndex] = replaceInterpolatedValuesInString(\n            key,\n            arrayItem,\n            input,\n            options,\n          );\n        }\n      }\n    }\n  }\n  return config;\n}\n"]}

package/dist/workers/global/config/parse/index.js

@@ -118,9 +118,16 @@ async function parseConfigs(env, argv) {
         config.onboardingNoDeps = 'enabled';
     }
     // do not add these secrets to repoSecrets and,
-    //  do not delete the secrets object after applying on global config as it needs to be re-used for repo config
-    if (is_1.default.nonEmptyObject(config.secrets)) {
-        config = (0, secrets_1.applySecretsToConfig)(config, undefined, false);
+    //  do not delete the secrets/variables object after applying on global config as it needs to be re-used for repo config
+    if (is_1.default.nonEmptyObject(config.secrets) ||
+        is_1.default.nonEmptyObject(config.variables)) {
+        config = (0, secrets_1.applySecretsAndVariablesToConfig)({
+            config,
+            secrets: config.secrets,
+            variables: config.variables,
+            deleteSecrets: false,
+            deleteVariables: false,
+        });
         // adding these secrets to the globalSecrets set so that they can be redacted from logs
         for (const secret of Object.values(config.secrets)) {
             (0, sanitize_1.addSecretForSanitizing)(secret, 'global');

package/dist/workers/global/config/parse/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../lib/workers/global/config/parse/index.ts"],"names":[],"mappings":";;AAqBA,oDAaC;AAED,oCA8HC;;AAlKD,kEAAkC;AAClC,wDAA4D;AAC5D,oFAA8D;AAC9D,wDAAkE;AAClE,wDAAkE;AAElE,oDAA4D;AAC5D,yEAA8E;AAC9E,+CAAwD;AACxD,yDAAoE;AACpE,kDAAqD;AACrD,8CAAoD;AACpD,4CAAqD;AACrD,wDAAmE;AACnE,8CAA2D;AAC3D,yDAAmC;AACnC,iEAA2C;AAC3C,yDAAmC;AACnC,2DAAqC;AACrC,+DAAyD;AAElD,KAAK,UAAU,oBAAoB,CACxC,aAAuB,EACvB,aAAwB;IAExB,IAAI,CAAC;QACH,iFAAiF;QACjF,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,IAAA,8BAAoB,EAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,uCAAsB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,GAAsB,EACtB,IAAc;IAEd,eAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAEhC,cAAc;IACd,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAEjD,IAAI,MAAM,GAAc,IAAA,wBAAgB,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,GAAG,IAAA,wBAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAE7C,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,qBAA4C,CAAC;IAEjD,IAAI,YAAE,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QAC5C,qCAAqC;QACrC,qBAAqB,GAAG,MAAM,oBAAoB,CAChD,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,aAAa,CACrB,CAAC;QACF,MAAM,GAAG,IAAA,wBAAgB,EAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC;IAE9B,MAAM,GAAG,IAAA,wBAAgB,EAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAEjD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC,KAAK,CAAC;QACvB,OAAO,SAAS,CAAC,SAAS,CAAC;QAC3B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAChD,MAAM,CAAC,UAAU,GAAG,MAAM,IAAA,mBAAc,EAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,cAAc,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACtD,MAAM,CAAC,aAAa,GAAG,MAAM,IAAA,mBAAc,EACzC,MAAM,CAAC,iBAAiB,EACxB,MAAM,CACP,CAAC;QACF,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IAED,2DAA2D;IAC3D,IAAA,iCAAsB,EAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAA,iCAAsB,EAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAA,wBAAc,EAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,UAAU,CAAC;IACzB,OAAO,MAAM,CAAC,aAAa,CAAC;IAE5B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,0HAA0H;QAC1H,IAAA,mBAAU,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC1D,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;IACpD,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;IAClD,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;IAClD,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC3E,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACrC,eAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChD,MAAM,mBAAmB,GAAG,MAAM,IAAA,+BAAqB,GAAE,CAAC;QAC1D,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACvE,MAAM,GAAG,IAAA,wBAAgB,EAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAA,sCAAgB,EAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,GAAG,CAAC,GAAG,IAAA,mBAAW,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE,CAAC;IACD,oBAAoB;IACpB,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC;IAExC,4CAA4C;IAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,GAAG,IAAA,yBAAmB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QACjE,eAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACvE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;IACpC,CAAC;IAED,mDAAmD;IACnD,MAAM,UAAU,CAAC,sBAAsB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAExE,2BAA2B;IAC3B,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QACnE,eAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACzE,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACtC,CAAC;IAED,+CAA+C;IAC/C,8GAA8G;IAC9G,IAAI,YAAE,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,IAAA,8BAAoB,EAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACxD,uFAAuF;QACvF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAQ,CAAC,EAAE,CAAC;YACpD,IAAA,iCAAsB,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,IAAI,YAAE,CAAC,cAAc,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACjD,IAAA,kBAAY,EAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { setPrivateKeys } from '../../../../config/decrypt';\nimport * as defaultsParser from '../../../../config/defaults';\nimport { resolveConfigPresets } from '../../../../config/presets';\nimport { applySecretsToConfig } from '../../../../config/secrets';\nimport type { AllConfig } from '../../../../config/types';\nimport { mergeChildConfig } from '../../../../config/utils';\nimport { CONFIG_PRESETS_INVALID } from '../../../../constants/error-messages';\nimport { logger, setContext } from '../../../../logger';\nimport { detectAllGlobalConfig } from '../../../../modules/manager';\nimport { coerceArray } from '../../../../util/array';\nimport { setCustomEnv } from '../../../../util/env';\nimport { readSystemFile } from '../../../../util/fs';\nimport { addSecretForSanitizing } from '../../../../util/sanitize';\nimport { ensureTrailingSlash } from '../../../../util/url';\nimport * as cliParser from './cli';\nimport * as codespaces from './codespaces';\nimport * as envParser from './env';\nimport * as fileParser from './file';\nimport { hostRulesFromEnv } from './host-rules-from-env';\n\nexport async function resolveGlobalExtends(\n  globalExtends: string[],\n  ignorePresets?: string[],\n): Promise<AllConfig> {\n  try {\n    // Make a \"fake\" config to pass to resolveConfigPresets and resolve globalPresets\n    const config = { extends: globalExtends, ignorePresets };\n    const resolvedConfig = await resolveConfigPresets(config);\n    return resolvedConfig;\n  } catch (err) {\n    logger.error({ err }, 'Error resolving config preset');\n    throw new Error(CONFIG_PRESETS_INVALID);\n  }\n}\n\nexport async function parseConfigs(\n  env: NodeJS.ProcessEnv,\n  argv: string[],\n): Promise<AllConfig> {\n  logger.debug('Parsing configs');\n\n  // Get configs\n  const defaultConfig = defaultsParser.getConfig();\n  const fileConfig = await fileParser.getConfig(env);\n  const cliConfig = cliParser.getConfig(argv);\n  const envConfig = await envParser.getConfig(env);\n\n  let config: AllConfig = mergeChildConfig(fileConfig, envConfig);\n  config = mergeChildConfig(config, cliConfig);\n\n  config = await codespaces.setConfig(config);\n\n  let resolvedGlobalExtends: AllConfig | undefined;\n\n  if (is.nonEmptyArray(config?.globalExtends)) {\n    // resolve global presets immediately\n    resolvedGlobalExtends = await resolveGlobalExtends(\n      config.globalExtends,\n      config.ignorePresets,\n    );\n    config = mergeChildConfig(resolvedGlobalExtends, config);\n    delete config.globalExtends;\n  }\n\n  const combinedConfig = config;\n\n  config = mergeChildConfig(defaultConfig, config);\n\n  if (config.forceCli) {\n    const forcedCli = { ...cliConfig };\n    delete forcedCli.token;\n    delete forcedCli.hostRules;\n    if (config.force) {\n      config.force = { ...config.force, ...forcedCli };\n    } else {\n      config.force = forcedCli;\n    }\n  }\n\n  if (!config.privateKey && config.privateKeyPath) {\n    config.privateKey = await readSystemFile(config.privateKeyPath, 'utf8');\n    delete config.privateKeyPath;\n  }\n\n  if (!config.privateKeyOld && config.privateKeyPathOld) {\n    config.privateKeyOld = await readSystemFile(\n      config.privateKeyPathOld,\n      'utf8',\n    );\n    delete config.privateKeyPathOld;\n  }\n\n  // Add private keys for sanitizing then set and delete them\n  addSecretForSanitizing(config.privateKey, 'global');\n  addSecretForSanitizing(config.privateKeyOld, 'global');\n  setPrivateKeys(config.privateKey, config.privateKeyOld);\n  delete config.privateKey;\n  delete config.privateKeyOld;\n\n  if (config.logContext) {\n    // This only has an effect if logContext was defined via file or CLI, otherwise it would already have been detected in env\n    setContext(config.logContext);\n  }\n\n  logger.trace({ config: defaultConfig }, 'Default config');\n  logger.debug({ config: fileConfig }, 'File config');\n  logger.debug({ config: cliConfig }, 'CLI config');\n  logger.debug({ config: envConfig }, 'Env config');\n  logger.debug({ config: resolvedGlobalExtends }, 'Resolved global extends');\n  logger.debug({ config: combinedConfig }, 'Combined config');\n\n  if (config.detectGlobalManagerConfig) {\n    logger.debug('Detecting global manager config');\n    const globalManagerConfig = await detectAllGlobalConfig();\n    logger.debug({ config: globalManagerConfig }, 'Global manager config');\n    config = mergeChildConfig(config, globalManagerConfig);\n  }\n\n  if (config.detectHostRulesFromEnv) {\n    const hostRules = hostRulesFromEnv(env);\n    config.hostRules = [...coerceArray(config.hostRules), ...hostRules];\n  }\n  // Get global config\n  logger.trace({ config }, 'Full config');\n\n  // Massage endpoint to have a trailing slash\n  if (config.endpoint) {\n    logger.debug('Adding trailing slash to endpoint');\n    config.endpoint = ensureTrailingSlash(config.endpoint);\n  }\n\n  // Massage forkProcessing\n  if (!config.autodiscover && config.forkProcessing !== 'disabled') {\n    logger.debug('Enabling forkProcessing while in non-autodiscover mode');\n    config.forkProcessing = 'enabled';\n  }\n\n  // Only try deletion if RENOVATE_CONFIG_FILE is set\n  await fileParser.deleteNonDefaultConfig(env, !!config.deleteConfigFile);\n\n  // Massage onboardingNoDeps\n  if (!config.autodiscover && config.onboardingNoDeps !== 'disabled') {\n    logger.debug('Enabling onboardingNoDeps while in non-autodiscover mode');\n    config.onboardingNoDeps = 'enabled';\n  }\n\n  // do not add these secrets to repoSecrets and,\n  //  do not delete the secrets object after applying on global config as it needs to be re-used for repo config\n  if (is.nonEmptyObject(config.secrets)) {\n    config = applySecretsToConfig(config, undefined, false);\n    // adding these secrets to the globalSecrets set so that they can be redacted from logs\n    for (const secret of Object.values(config.secrets!)) {\n      addSecretForSanitizing(secret, 'global');\n    }\n  }\n\n  if (is.nonEmptyObject(config.customEnvVariables)) {\n    setCustomEnv(config.customEnvVariables);\n  }\n\n  return config;\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../lib/workers/global/config/parse/index.ts"],"names":[],"mappings":";;AAqBA,oDAaC;AAED,oCAuIC;;AA3KD,kEAAkC;AAClC,wDAA4D;AAC5D,oFAA8D;AAC9D,wDAAkE;AAClE,wDAA8E;AAE9E,oDAA4D;AAC5D,yEAA8E;AAC9E,+CAAwD;AACxD,yDAAoE;AACpE,kDAAqD;AACrD,8CAAoD;AACpD,4CAAqD;AACrD,wDAAmE;AACnE,8CAA2D;AAC3D,yDAAmC;AACnC,iEAA2C;AAC3C,yDAAmC;AACnC,2DAAqC;AACrC,+DAAyD;AAElD,KAAK,UAAU,oBAAoB,CACxC,aAAuB,EACvB,aAAwB;IAExB,IAAI,CAAC;QACH,iFAAiF;QACjF,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,IAAA,8BAAoB,EAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,uCAAsB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,GAAsB,EACtB,IAAc;IAEd,eAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAEhC,cAAc;IACd,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAEjD,IAAI,MAAM,GAAc,IAAA,wBAAgB,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,GAAG,IAAA,wBAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAE7C,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,qBAA4C,CAAC;IAEjD,IAAI,YAAE,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QAC5C,qCAAqC;QACrC,qBAAqB,GAAG,MAAM,oBAAoB,CAChD,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,aAAa,CACrB,CAAC;QACF,MAAM,GAAG,IAAA,wBAAgB,EAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC;IAE9B,MAAM,GAAG,IAAA,wBAAgB,EAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAEjD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC,KAAK,CAAC;QACvB,OAAO,SAAS,CAAC,SAAS,CAAC;QAC3B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAChD,MAAM,CAAC,UAAU,GAAG,MAAM,IAAA,mBAAc,EAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,cAAc,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACtD,MAAM,CAAC,aAAa,GAAG,MAAM,IAAA,mBAAc,EACzC,MAAM,CAAC,iBAAiB,EACxB,MAAM,CACP,CAAC;QACF,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IAED,2DAA2D;IAC3D,IAAA,iCAAsB,EAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAA,iCAAsB,EAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAA,wBAAc,EAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,UAAU,CAAC;IACzB,OAAO,MAAM,CAAC,aAAa,CAAC;IAE5B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,0HAA0H;QAC1H,IAAA,mBAAU,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC1D,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;IACpD,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;IAClD,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;IAClD,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAC3E,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACrC,eAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChD,MAAM,mBAAmB,GAAG,MAAM,IAAA,+BAAqB,GAAE,CAAC;QAC1D,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACvE,MAAM,GAAG,IAAA,wBAAgB,EAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAA,sCAAgB,EAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,GAAG,CAAC,GAAG,IAAA,mBAAW,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE,CAAC;IACD,oBAAoB;IACpB,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC;IAExC,4CAA4C;IAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,GAAG,IAAA,yBAAmB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QACjE,eAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACvE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;IACpC,CAAC;IAED,mDAAmD;IACnD,MAAM,UAAU,CAAC,sBAAsB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAExE,2BAA2B;IAC3B,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QACnE,eAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACzE,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACtC,CAAC;IAED,+CAA+C;IAC/C,wHAAwH;IACxH,IACE,YAAE,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC;QACjC,YAAE,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EACnC,CAAC;QACD,MAAM,GAAG,IAAA,0CAAgC,EAAC;YACxC,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;QACH,uFAAuF;QACvF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAQ,CAAC,EAAE,CAAC;YACpD,IAAA,iCAAsB,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,IAAI,YAAE,CAAC,cAAc,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACjD,IAAA,kBAAY,EAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { setPrivateKeys } from '../../../../config/decrypt';\nimport * as defaultsParser from '../../../../config/defaults';\nimport { resolveConfigPresets } from '../../../../config/presets';\nimport { applySecretsAndVariablesToConfig } from '../../../../config/secrets';\nimport type { AllConfig } from '../../../../config/types';\nimport { mergeChildConfig } from '../../../../config/utils';\nimport { CONFIG_PRESETS_INVALID } from '../../../../constants/error-messages';\nimport { logger, setContext } from '../../../../logger';\nimport { detectAllGlobalConfig } from '../../../../modules/manager';\nimport { coerceArray } from '../../../../util/array';\nimport { setCustomEnv } from '../../../../util/env';\nimport { readSystemFile } from '../../../../util/fs';\nimport { addSecretForSanitizing } from '../../../../util/sanitize';\nimport { ensureTrailingSlash } from '../../../../util/url';\nimport * as cliParser from './cli';\nimport * as codespaces from './codespaces';\nimport * as envParser from './env';\nimport * as fileParser from './file';\nimport { hostRulesFromEnv } from './host-rules-from-env';\n\nexport async function resolveGlobalExtends(\n  globalExtends: string[],\n  ignorePresets?: string[],\n): Promise<AllConfig> {\n  try {\n    // Make a \"fake\" config to pass to resolveConfigPresets and resolve globalPresets\n    const config = { extends: globalExtends, ignorePresets };\n    const resolvedConfig = await resolveConfigPresets(config);\n    return resolvedConfig;\n  } catch (err) {\n    logger.error({ err }, 'Error resolving config preset');\n    throw new Error(CONFIG_PRESETS_INVALID);\n  }\n}\n\nexport async function parseConfigs(\n  env: NodeJS.ProcessEnv,\n  argv: string[],\n): Promise<AllConfig> {\n  logger.debug('Parsing configs');\n\n  // Get configs\n  const defaultConfig = defaultsParser.getConfig();\n  const fileConfig = await fileParser.getConfig(env);\n  const cliConfig = cliParser.getConfig(argv);\n  const envConfig = await envParser.getConfig(env);\n\n  let config: AllConfig = mergeChildConfig(fileConfig, envConfig);\n  config = mergeChildConfig(config, cliConfig);\n\n  config = await codespaces.setConfig(config);\n\n  let resolvedGlobalExtends: AllConfig | undefined;\n\n  if (is.nonEmptyArray(config?.globalExtends)) {\n    // resolve global presets immediately\n    resolvedGlobalExtends = await resolveGlobalExtends(\n      config.globalExtends,\n      config.ignorePresets,\n    );\n    config = mergeChildConfig(resolvedGlobalExtends, config);\n    delete config.globalExtends;\n  }\n\n  const combinedConfig = config;\n\n  config = mergeChildConfig(defaultConfig, config);\n\n  if (config.forceCli) {\n    const forcedCli = { ...cliConfig };\n    delete forcedCli.token;\n    delete forcedCli.hostRules;\n    if (config.force) {\n      config.force = { ...config.force, ...forcedCli };\n    } else {\n      config.force = forcedCli;\n    }\n  }\n\n  if (!config.privateKey && config.privateKeyPath) {\n    config.privateKey = await readSystemFile(config.privateKeyPath, 'utf8');\n    delete config.privateKeyPath;\n  }\n\n  if (!config.privateKeyOld && config.privateKeyPathOld) {\n    config.privateKeyOld = await readSystemFile(\n      config.privateKeyPathOld,\n      'utf8',\n    );\n    delete config.privateKeyPathOld;\n  }\n\n  // Add private keys for sanitizing then set and delete them\n  addSecretForSanitizing(config.privateKey, 'global');\n  addSecretForSanitizing(config.privateKeyOld, 'global');\n  setPrivateKeys(config.privateKey, config.privateKeyOld);\n  delete config.privateKey;\n  delete config.privateKeyOld;\n\n  if (config.logContext) {\n    // This only has an effect if logContext was defined via file or CLI, otherwise it would already have been detected in env\n    setContext(config.logContext);\n  }\n\n  logger.trace({ config: defaultConfig }, 'Default config');\n  logger.debug({ config: fileConfig }, 'File config');\n  logger.debug({ config: cliConfig }, 'CLI config');\n  logger.debug({ config: envConfig }, 'Env config');\n  logger.debug({ config: resolvedGlobalExtends }, 'Resolved global extends');\n  logger.debug({ config: combinedConfig }, 'Combined config');\n\n  if (config.detectGlobalManagerConfig) {\n    logger.debug('Detecting global manager config');\n    const globalManagerConfig = await detectAllGlobalConfig();\n    logger.debug({ config: globalManagerConfig }, 'Global manager config');\n    config = mergeChildConfig(config, globalManagerConfig);\n  }\n\n  if (config.detectHostRulesFromEnv) {\n    const hostRules = hostRulesFromEnv(env);\n    config.hostRules = [...coerceArray(config.hostRules), ...hostRules];\n  }\n  // Get global config\n  logger.trace({ config }, 'Full config');\n\n  // Massage endpoint to have a trailing slash\n  if (config.endpoint) {\n    logger.debug('Adding trailing slash to endpoint');\n    config.endpoint = ensureTrailingSlash(config.endpoint);\n  }\n\n  // Massage forkProcessing\n  if (!config.autodiscover && config.forkProcessing !== 'disabled') {\n    logger.debug('Enabling forkProcessing while in non-autodiscover mode');\n    config.forkProcessing = 'enabled';\n  }\n\n  // Only try deletion if RENOVATE_CONFIG_FILE is set\n  await fileParser.deleteNonDefaultConfig(env, !!config.deleteConfigFile);\n\n  // Massage onboardingNoDeps\n  if (!config.autodiscover && config.onboardingNoDeps !== 'disabled') {\n    logger.debug('Enabling onboardingNoDeps while in non-autodiscover mode');\n    config.onboardingNoDeps = 'enabled';\n  }\n\n  // do not add these secrets to repoSecrets and,\n  //  do not delete the secrets/variables object after applying on global config as it needs to be re-used for repo config\n  if (\n    is.nonEmptyObject(config.secrets) ||\n    is.nonEmptyObject(config.variables)\n  ) {\n    config = applySecretsAndVariablesToConfig({\n      config,\n      secrets: config.secrets,\n      variables: config.variables,\n      deleteSecrets: false,\n      deleteVariables: false,\n    });\n    // adding these secrets to the globalSecrets set so that they can be redacted from logs\n    for (const secret of Object.values(config.secrets!)) {\n      addSecretForSanitizing(secret, 'global');\n    }\n  }\n\n  if (is.nonEmptyObject(config.customEnvVariables)) {\n    setCustomEnv(config.customEnvVariables);\n  }\n\n  return config;\n}\n"]}

package/dist/workers/global/index.js

@@ -116,8 +116,8 @@ async function start() {
             await validatePresets(config);
             (0, remap_1.setGlobalLogLevelRemaps)(config.logLevelRemap);
             checkEnv();
-            // validate secrets. Will throw and abort if invalid
-            (0, secrets_1.validateConfigSecrets)(config);
+            // validate secrets and variables. Will throw and abort if invalid
+            (0, secrets_1.validateConfigSecretsAndVariables)(config);
         });
         // autodiscover repositories (needs to come after platform initialization)
         config = await (0, instrumentation_1.instrument)('discover', () => (0, autodiscover_1.autodiscoverRepositories)(config));

package/dist/workers/global/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/workers/global/index.ts"],"names":[],"mappings":";;AAgCA,kDAwBC;AA8BD,0CAQC;AAED,sBAsIC;;AAtOD,kEAAkC;AAClC,mCAA+B;AAC/B,gEAA0B;AAC1B,4DAA4B;AAC5B,0DAA0B;AAC1B,mEAA6C;AAC7C,gDAAmD;AACnD,kDAA4D;AAC5D,kDAA6D;AAM7D,mEAAwE;AACxE,iDAAuC;AACvC,2DAAmD;AACnD,+DAA8E;AAC9E,yCAAsE;AACtE,8CAA6D;AAC7D,wCAAwC;AACxC,yEAAmD;AACnD,qEAA+C;AAC/C,2EAAqD;AACrD,4CAAqD;AACrD,kDAA6D;AAC7D,wEAAkD;AAClD,iDAA0D;AAC1D,0CAA8C;AAC9C,6CAAgE;AAChE,qCAA0C;AAEnC,KAAK,UAAU,mBAAmB,CACvC,YAA4B,EAC5B,UAA8B;IAE9B,MAAM,UAAU,GAAG,YAAY,CAAC,gBAAgB,CAC9C,YAAY,EACZ,YAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CACpD,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,SAAS,CAAC,GAAG,EAAE,CAAC;IAChB,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,UAAU,CAAC,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC;IAC3C,uBAAuB;IACvB,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;IAC/C,UAAU,CAAC,QAAQ;QACjB,QAAQ,KAAK,OAAO;YAClB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACf,CAAC,CAAC,eAAK,CAAC,IAAI,CACR,UAAU,CAAC,OAAO,EAClB,WAAW,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAC/C,CAAC;IACR,MAAM,kBAAE,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,UAAU,CAAC,OAAO,CAAC;IAC1B,OAAO,YAAY,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAA,oBAAY,EAAC,IAAA,YAAM,GAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,IAAA,uBAAc,EAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,eAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0BAA0B;AAC1B,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,gBAAG,CAAC,OAAQ,CAAC,IAAK,CAAC;IACjC,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAChE,eAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EACxD,oCAAoC,CACrC,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,gBAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC5D,eAAM,CAAC,KAAK,CACV,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,EACrC,yEAAyE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,MAAiB;IACrD,eAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAA,8BAAoB,EAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAsB,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,uCAAsB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,KAAK;IACzB,uBAAuB;IACvB,IAAI,yBAAiB,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC3C,eAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,yBAAiB,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACpD,eAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,yBAAiB,CAAC,GAAG,EAAE,EAC9B,wCAAwC,CACzC,CAAC;IACJ,CAAC;SAAM,IAAI,yBAAiB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChD,eAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,MAAiB,CAAC;IACtB,MAAM,GAAG,GAAG,IAAA,YAAM,GAAE,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,YAAE,CAAC,8BAA8B,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACjE,IAAA,iCAAsB,EAAC,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAE,CAAC,8BAA8B,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7D,IAAA,iCAAsB,EAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,IAAA,4BAAU,EAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YACpC,iDAAiD;YACjD,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;YAEjC,2FAA2F;YAC3F,qBAAY,CAAC,GAAG,CAAC;gBACf,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YACH,4BAA4B;YAC5B,MAAM,GAAG,MAAM,IAAA,6BAAgB,EAAC,MAAM,CAAC,CAAC;YAExC,sFAAsF;YACtF,qBAAY,CAAC,GAAG,CAAC;gBACf,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YAEH,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;YAE9B,IAAA,+BAAuB,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAE9C,QAAQ,EAAE,CAAC;YAEX,oDAAoD;YACpD,IAAA,+BAAqB,EAAC,MAAM,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,MAAM,GAAG,MAAM,IAAA,4BAAU,EAAC,UAAU,EAAE,GAAG,EAAE,CACzC,IAAA,uCAAwB,EAAC,MAAM,CAAC,CACjC,CAAC;QAEF,IAAI,YAAE,CAAC,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACpD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;YACzD,eAAM,CAAC,IAAI,CACT,sCAAsC,MAAM,CAAC,oBAAoB,EAAE,CACpE,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAa,EAAE,CAAC;YAC9C,IAAI,iBAAiB,EAAE,EAAE,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,MAAM,IAAA,4BAAU,EACd,YAAY,EACZ,KAAK,IAAI,EAAE;gBACT,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACjE,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;oBACzB,eAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBAClD,SAAS,CAAC,KAAK,EAAE,CAAC;oBAClB,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC5D,UAAU,CAAC,SAAS,GAAG,EAAE,CAAC;gBAC5B,CAAC;gBAED,oCAAoC;gBACpC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAEjB,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACtD,IAAA,gBAAO,EAAC,EAAE,CAAC,CAAC;YACd,CAAC,EACD;gBACE,UAAU,EAAE;oBACV,UAAU,EACR,OAAO,UAAU,KAAK,QAAQ;wBAC5B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,UAAU,CAAC,UAAU;iBAC5B;aACF,CACF,CAAC;QACJ,CAAC;QAED,IAAA,0BAAc,GAAE,CAAC;QACjB,MAAM,IAAA,uBAAW,EAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,eAAM,CAAC,KAAK,CACV,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAC1C,sBAAsB,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,eAAe,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,MAAO,EAAE,CAAC;YACb,gDAAgD;YAChD,eAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,IAAA,2BAAc,EAAC,MAAO,CAAC,CAAC;QAC9B,IAAI,IAAA,iBAAQ,GAAE,KAAK,MAAM,EAAE,CAAC;YAC1B,eAAM,CAAC,IAAI,CACT,kCAAkC,IAAA,iBAAQ,GAAE,6EAA6E,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,oBAAW,GAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,cAAK,CAAC,CAAC;IACnE,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QACxB,eAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,EAChB,6EAA6E,CAC9E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { ERROR } from 'bunyan';\nimport fs from 'fs-extra';\nimport semver from 'semver';\nimport upath from 'upath';\nimport * as configParser from '../../config';\nimport { GlobalConfig } from '../../config/global';\nimport { resolveConfigPresets } from '../../config/presets';\nimport { validateConfigSecrets } from '../../config/secrets';\nimport type {\n  AllConfig,\n  RenovateConfig,\n  RenovateRepository,\n} from '../../config/types';\nimport { CONFIG_PRESETS_INVALID } from '../../constants/error-messages';\nimport { pkg } from '../../expose.cjs';\nimport { instrument } from '../../instrumentation';\nimport { exportStats, finalizeReport } from '../../instrumentation/reporting';\nimport { getProblems, logLevel, logger, setMeta } from '../../logger';\nimport { setGlobalLogLevelRemaps } from '../../logger/remap';\nimport { getEnv } from '../../util/env';\nimport * as hostRules from '../../util/host-rules';\nimport * as queue from '../../util/http/queue';\nimport * as throttle from '../../util/http/throttle';\nimport { regexEngineStatus } from '../../util/regex';\nimport { addSecretForSanitizing } from '../../util/sanitize';\nimport * as repositoryWorker from '../repository';\nimport { autodiscoverRepositories } from './autodiscover';\nimport { parseConfigs } from './config/parse';\nimport { globalFinalize, globalInitialize } from './initialize';\nimport { isLimitReached } from './limits';\n\nexport async function getRepositoryConfig(\n  globalConfig: RenovateConfig,\n  repository: RenovateRepository,\n): Promise<RenovateConfig> {\n  const repoConfig = configParser.mergeChildConfig(\n    globalConfig,\n    is.string(repository) ? { repository } : repository,\n  );\n  const repoParts = repoConfig.repository.split('/');\n  repoParts.pop();\n  repoConfig.parentOrg = repoParts.join('/');\n  repoConfig.topLevelOrg = repoParts.shift();\n  // TODO: types (#22198)\n  const platform = GlobalConfig.get('platform')!;\n  repoConfig.localDir =\n    platform === 'local'\n      ? process.cwd()\n      : upath.join(\n          repoConfig.baseDir,\n          `./repos/${platform}/${repoConfig.repository}`,\n        );\n  await fs.ensureDir(repoConfig.localDir);\n  delete repoConfig.baseDir;\n  return configParser.filterConfig(repoConfig, 'repository');\n}\n\nfunction getGlobalConfig(): Promise<RenovateConfig> {\n  return parseConfigs(getEnv(), process.argv);\n}\n\nfunction haveReachedLimits(): boolean {\n  if (isLimitReached('Commits')) {\n    logger.info('Max commits created for this run.');\n    return true;\n  }\n  return false;\n}\n\n/* istanbul ignore next */\nfunction checkEnv(): void {\n  const range = pkg.engines!.node!;\n  if (process.release?.name !== 'node' || !process.versions?.node) {\n    logger.warn(\n      { release: process.release, versions: process.versions },\n      'Unknown node environment detected.',\n    );\n  } else if (!semver.satisfies(process.versions?.node, range)) {\n    logger.error(\n      { versions: process.versions, range },\n      'Unsupported node environment detected. Please update your node version.',\n    );\n  }\n}\n\nexport async function validatePresets(config: AllConfig): Promise<void> {\n  logger.debug('validatePresets()');\n  try {\n    await resolveConfigPresets(config);\n  } catch (err) /* istanbul ignore next */ {\n    logger.error({ err }, CONFIG_PRESETS_INVALID);\n    throw new Error(CONFIG_PRESETS_INVALID);\n  }\n}\n\nexport async function start(): Promise<number> {\n  // istanbul ignore next\n  if (regexEngineStatus.type === 'available') {\n    logger.debug('Using RE2 regex engine');\n  } else if (regexEngineStatus.type === 'unavailable') {\n    logger.warn(\n      { err: regexEngineStatus.err },\n      'RE2 not usable, falling back to RegExp',\n    );\n  } else if (regexEngineStatus.type === 'ignored') {\n    logger.debug('RE2 regex engine is ignored via RENOVATE_X_IGNORE_RE2');\n  }\n\n  let config: AllConfig;\n  const env = getEnv();\n  try {\n    if (is.nonEmptyStringAndNotWhitespace(env.AWS_SECRET_ACCESS_KEY)) {\n      addSecretForSanitizing(env.AWS_SECRET_ACCESS_KEY, 'global');\n    }\n    if (is.nonEmptyStringAndNotWhitespace(env.AWS_SESSION_TOKEN)) {\n      addSecretForSanitizing(env.AWS_SESSION_TOKEN, 'global');\n    }\n\n    await instrument('config', async () => {\n      // read global config from file, env and cli args\n      config = await getGlobalConfig();\n\n      // Set allowedHeaders and userAgent in case hostRules headers are configured in file config\n      GlobalConfig.set({\n        allowedHeaders: config.allowedHeaders,\n        userAgent: config.userAgent,\n      });\n      // initialize all submodules\n      config = await globalInitialize(config);\n\n      // Set platform, endpoint, allowedHeaders and userAgent in case local presets are used\n      GlobalConfig.set({\n        allowedHeaders: config.allowedHeaders,\n        platform: config.platform,\n        endpoint: config.endpoint,\n        userAgent: config.userAgent,\n      });\n\n      await validatePresets(config);\n\n      setGlobalLogLevelRemaps(config.logLevelRemap);\n\n      checkEnv();\n\n      // validate secrets. Will throw and abort if invalid\n      validateConfigSecrets(config);\n    });\n\n    // autodiscover repositories (needs to come after platform initialization)\n    config = await instrument('discover', () =>\n      autodiscoverRepositories(config),\n    );\n\n    if (is.nonEmptyString(config.writeDiscoveredRepos)) {\n      const content = JSON.stringify(config.repositories);\n      await fs.writeFile(config.writeDiscoveredRepos, content);\n      logger.info(\n        `Written discovered repositories to ${config.writeDiscoveredRepos}`,\n      );\n      return 0;\n    }\n\n    // Iterate through repositories sequentially\n    for (const repository of config.repositories!) {\n      if (haveReachedLimits()) {\n        break;\n      }\n      await instrument(\n        'repository',\n        async () => {\n          const repoConfig = await getRepositoryConfig(config, repository);\n          if (repoConfig.hostRules) {\n            logger.debug('Reinitializing hostRules for repo');\n            hostRules.clear();\n            repoConfig.hostRules.forEach((rule) => hostRules.add(rule));\n            repoConfig.hostRules = [];\n          }\n\n          // host rules can change concurrency\n          queue.clear();\n          throttle.clear();\n\n          await repositoryWorker.renovateRepository(repoConfig);\n          setMeta({});\n        },\n        {\n          attributes: {\n            repository:\n              typeof repository === 'string'\n                ? repository\n                : repository.repository,\n          },\n        },\n      );\n    }\n\n    finalizeReport();\n    await exportStats(config);\n  } catch (err) /* istanbul ignore next */ {\n    if (err.message.startsWith('Init: ')) {\n      logger.fatal(\n        { errorMessage: err.message.substring(6) },\n        'Initialization error',\n      );\n    } else {\n      logger.fatal({ err }, 'Unknown error');\n    }\n    if (!config!) {\n      // return early if we can't parse config options\n      logger.debug(`Missing config`);\n      return 2;\n    }\n  } finally {\n    await globalFinalize(config!);\n    if (logLevel() === 'info') {\n      logger.info(\n        `Renovate was run at log level \"${logLevel()}\". Set LOG_LEVEL=debug in environment variables to see extended debug logs.`,\n      );\n    }\n  }\n  const loggerErrors = getProblems().filter((p) => p.level >= ERROR);\n  if (loggerErrors.length) {\n    logger.info(\n      { loggerErrors },\n      'Renovate is exiting with a non-zero code due to the following logged errors',\n    );\n    return 1;\n  }\n  return 0;\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/workers/global/index.ts"],"names":[],"mappings":";;AAgCA,kDAwBC;AA8BD,0CAQC;AAED,sBAsIC;;AAtOD,kEAAkC;AAClC,mCAA+B;AAC/B,gEAA0B;AAC1B,4DAA4B;AAC5B,0DAA0B;AAC1B,mEAA6C;AAC7C,gDAAmD;AACnD,kDAA4D;AAC5D,kDAAyE;AAMzE,mEAAwE;AACxE,iDAAuC;AACvC,2DAAmD;AACnD,+DAA8E;AAC9E,yCAAsE;AACtE,8CAA6D;AAC7D,wCAAwC;AACxC,yEAAmD;AACnD,qEAA+C;AAC/C,2EAAqD;AACrD,4CAAqD;AACrD,kDAA6D;AAC7D,wEAAkD;AAClD,iDAA0D;AAC1D,0CAA8C;AAC9C,6CAAgE;AAChE,qCAA0C;AAEnC,KAAK,UAAU,mBAAmB,CACvC,YAA4B,EAC5B,UAA8B;IAE9B,MAAM,UAAU,GAAG,YAAY,CAAC,gBAAgB,CAC9C,YAAY,EACZ,YAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CACpD,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,SAAS,CAAC,GAAG,EAAE,CAAC;IAChB,UAAU,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,UAAU,CAAC,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC;IAC3C,uBAAuB;IACvB,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;IAC/C,UAAU,CAAC,QAAQ;QACjB,QAAQ,KAAK,OAAO;YAClB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACf,CAAC,CAAC,eAAK,CAAC,IAAI,CACR,UAAU,CAAC,OAAO,EAClB,WAAW,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAC/C,CAAC;IACR,MAAM,kBAAE,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,UAAU,CAAC,OAAO,CAAC;IAC1B,OAAO,YAAY,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,IAAA,oBAAY,EAAC,IAAA,YAAM,GAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,IAAA,uBAAc,EAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,eAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0BAA0B;AAC1B,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,gBAAG,CAAC,OAAQ,CAAC,IAAK,CAAC;IACjC,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAChE,eAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EACxD,oCAAoC,CACrC,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,gBAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC5D,eAAM,CAAC,KAAK,CACV,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,EACrC,yEAAyE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,MAAiB;IACrD,eAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAA,8BAAoB,EAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAsB,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,uCAAsB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,KAAK;IACzB,uBAAuB;IACvB,IAAI,yBAAiB,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC3C,eAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,yBAAiB,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACpD,eAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,yBAAiB,CAAC,GAAG,EAAE,EAC9B,wCAAwC,CACzC,CAAC;IACJ,CAAC;SAAM,IAAI,yBAAiB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChD,eAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,MAAiB,CAAC;IACtB,MAAM,GAAG,GAAG,IAAA,YAAM,GAAE,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,YAAE,CAAC,8BAA8B,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACjE,IAAA,iCAAsB,EAAC,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAE,CAAC,8BAA8B,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7D,IAAA,iCAAsB,EAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,IAAA,4BAAU,EAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YACpC,iDAAiD;YACjD,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;YAEjC,2FAA2F;YAC3F,qBAAY,CAAC,GAAG,CAAC;gBACf,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YACH,4BAA4B;YAC5B,MAAM,GAAG,MAAM,IAAA,6BAAgB,EAAC,MAAM,CAAC,CAAC;YAExC,sFAAsF;YACtF,qBAAY,CAAC,GAAG,CAAC;gBACf,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YAEH,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;YAE9B,IAAA,+BAAuB,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAE9C,QAAQ,EAAE,CAAC;YAEX,kEAAkE;YAClE,IAAA,2CAAiC,EAAC,MAAM,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,MAAM,GAAG,MAAM,IAAA,4BAAU,EAAC,UAAU,EAAE,GAAG,EAAE,CACzC,IAAA,uCAAwB,EAAC,MAAM,CAAC,CACjC,CAAC;QAEF,IAAI,YAAE,CAAC,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACpD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;YACzD,eAAM,CAAC,IAAI,CACT,sCAAsC,MAAM,CAAC,oBAAoB,EAAE,CACpE,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAa,EAAE,CAAC;YAC9C,IAAI,iBAAiB,EAAE,EAAE,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,MAAM,IAAA,4BAAU,EACd,YAAY,EACZ,KAAK,IAAI,EAAE;gBACT,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACjE,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;oBACzB,eAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBAClD,SAAS,CAAC,KAAK,EAAE,CAAC;oBAClB,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC5D,UAAU,CAAC,SAAS,GAAG,EAAE,CAAC;gBAC5B,CAAC;gBAED,oCAAoC;gBACpC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAEjB,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACtD,IAAA,gBAAO,EAAC,EAAE,CAAC,CAAC;YACd,CAAC,EACD;gBACE,UAAU,EAAE;oBACV,UAAU,EACR,OAAO,UAAU,KAAK,QAAQ;wBAC5B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,UAAU,CAAC,UAAU;iBAC5B;aACF,CACF,CAAC;QACJ,CAAC;QAED,IAAA,0BAAc,GAAE,CAAC;QACjB,MAAM,IAAA,uBAAW,EAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,eAAM,CAAC,KAAK,CACV,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAC1C,sBAAsB,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,eAAe,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,MAAO,EAAE,CAAC;YACb,gDAAgD;YAChD,eAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,IAAA,2BAAc,EAAC,MAAO,CAAC,CAAC;QAC9B,IAAI,IAAA,iBAAQ,GAAE,KAAK,MAAM,EAAE,CAAC;YAC1B,eAAM,CAAC,IAAI,CACT,kCAAkC,IAAA,iBAAQ,GAAE,6EAA6E,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,oBAAW,GAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,cAAK,CAAC,CAAC;IACnE,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QACxB,eAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,EAChB,6EAA6E,CAC9E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { ERROR } from 'bunyan';\nimport fs from 'fs-extra';\nimport semver from 'semver';\nimport upath from 'upath';\nimport * as configParser from '../../config';\nimport { GlobalConfig } from '../../config/global';\nimport { resolveConfigPresets } from '../../config/presets';\nimport { validateConfigSecretsAndVariables } from '../../config/secrets';\nimport type {\n  AllConfig,\n  RenovateConfig,\n  RenovateRepository,\n} from '../../config/types';\nimport { CONFIG_PRESETS_INVALID } from '../../constants/error-messages';\nimport { pkg } from '../../expose.cjs';\nimport { instrument } from '../../instrumentation';\nimport { exportStats, finalizeReport } from '../../instrumentation/reporting';\nimport { getProblems, logLevel, logger, setMeta } from '../../logger';\nimport { setGlobalLogLevelRemaps } from '../../logger/remap';\nimport { getEnv } from '../../util/env';\nimport * as hostRules from '../../util/host-rules';\nimport * as queue from '../../util/http/queue';\nimport * as throttle from '../../util/http/throttle';\nimport { regexEngineStatus } from '../../util/regex';\nimport { addSecretForSanitizing } from '../../util/sanitize';\nimport * as repositoryWorker from '../repository';\nimport { autodiscoverRepositories } from './autodiscover';\nimport { parseConfigs } from './config/parse';\nimport { globalFinalize, globalInitialize } from './initialize';\nimport { isLimitReached } from './limits';\n\nexport async function getRepositoryConfig(\n  globalConfig: RenovateConfig,\n  repository: RenovateRepository,\n): Promise<RenovateConfig> {\n  const repoConfig = configParser.mergeChildConfig(\n    globalConfig,\n    is.string(repository) ? { repository } : repository,\n  );\n  const repoParts = repoConfig.repository.split('/');\n  repoParts.pop();\n  repoConfig.parentOrg = repoParts.join('/');\n  repoConfig.topLevelOrg = repoParts.shift();\n  // TODO: types (#22198)\n  const platform = GlobalConfig.get('platform')!;\n  repoConfig.localDir =\n    platform === 'local'\n      ? process.cwd()\n      : upath.join(\n          repoConfig.baseDir,\n          `./repos/${platform}/${repoConfig.repository}`,\n        );\n  await fs.ensureDir(repoConfig.localDir);\n  delete repoConfig.baseDir;\n  return configParser.filterConfig(repoConfig, 'repository');\n}\n\nfunction getGlobalConfig(): Promise<RenovateConfig> {\n  return parseConfigs(getEnv(), process.argv);\n}\n\nfunction haveReachedLimits(): boolean {\n  if (isLimitReached('Commits')) {\n    logger.info('Max commits created for this run.');\n    return true;\n  }\n  return false;\n}\n\n/* istanbul ignore next */\nfunction checkEnv(): void {\n  const range = pkg.engines!.node!;\n  if (process.release?.name !== 'node' || !process.versions?.node) {\n    logger.warn(\n      { release: process.release, versions: process.versions },\n      'Unknown node environment detected.',\n    );\n  } else if (!semver.satisfies(process.versions?.node, range)) {\n    logger.error(\n      { versions: process.versions, range },\n      'Unsupported node environment detected. Please update your node version.',\n    );\n  }\n}\n\nexport async function validatePresets(config: AllConfig): Promise<void> {\n  logger.debug('validatePresets()');\n  try {\n    await resolveConfigPresets(config);\n  } catch (err) /* istanbul ignore next */ {\n    logger.error({ err }, CONFIG_PRESETS_INVALID);\n    throw new Error(CONFIG_PRESETS_INVALID);\n  }\n}\n\nexport async function start(): Promise<number> {\n  // istanbul ignore next\n  if (regexEngineStatus.type === 'available') {\n    logger.debug('Using RE2 regex engine');\n  } else if (regexEngineStatus.type === 'unavailable') {\n    logger.warn(\n      { err: regexEngineStatus.err },\n      'RE2 not usable, falling back to RegExp',\n    );\n  } else if (regexEngineStatus.type === 'ignored') {\n    logger.debug('RE2 regex engine is ignored via RENOVATE_X_IGNORE_RE2');\n  }\n\n  let config: AllConfig;\n  const env = getEnv();\n  try {\n    if (is.nonEmptyStringAndNotWhitespace(env.AWS_SECRET_ACCESS_KEY)) {\n      addSecretForSanitizing(env.AWS_SECRET_ACCESS_KEY, 'global');\n    }\n    if (is.nonEmptyStringAndNotWhitespace(env.AWS_SESSION_TOKEN)) {\n      addSecretForSanitizing(env.AWS_SESSION_TOKEN, 'global');\n    }\n\n    await instrument('config', async () => {\n      // read global config from file, env and cli args\n      config = await getGlobalConfig();\n\n      // Set allowedHeaders and userAgent in case hostRules headers are configured in file config\n      GlobalConfig.set({\n        allowedHeaders: config.allowedHeaders,\n        userAgent: config.userAgent,\n      });\n      // initialize all submodules\n      config = await globalInitialize(config);\n\n      // Set platform, endpoint, allowedHeaders and userAgent in case local presets are used\n      GlobalConfig.set({\n        allowedHeaders: config.allowedHeaders,\n        platform: config.platform,\n        endpoint: config.endpoint,\n        userAgent: config.userAgent,\n      });\n\n      await validatePresets(config);\n\n      setGlobalLogLevelRemaps(config.logLevelRemap);\n\n      checkEnv();\n\n      // validate secrets and variables. Will throw and abort if invalid\n      validateConfigSecretsAndVariables(config);\n    });\n\n    // autodiscover repositories (needs to come after platform initialization)\n    config = await instrument('discover', () =>\n      autodiscoverRepositories(config),\n    );\n\n    if (is.nonEmptyString(config.writeDiscoveredRepos)) {\n      const content = JSON.stringify(config.repositories);\n      await fs.writeFile(config.writeDiscoveredRepos, content);\n      logger.info(\n        `Written discovered repositories to ${config.writeDiscoveredRepos}`,\n      );\n      return 0;\n    }\n\n    // Iterate through repositories sequentially\n    for (const repository of config.repositories!) {\n      if (haveReachedLimits()) {\n        break;\n      }\n      await instrument(\n        'repository',\n        async () => {\n          const repoConfig = await getRepositoryConfig(config, repository);\n          if (repoConfig.hostRules) {\n            logger.debug('Reinitializing hostRules for repo');\n            hostRules.clear();\n            repoConfig.hostRules.forEach((rule) => hostRules.add(rule));\n            repoConfig.hostRules = [];\n          }\n\n          // host rules can change concurrency\n          queue.clear();\n          throttle.clear();\n\n          await repositoryWorker.renovateRepository(repoConfig);\n          setMeta({});\n        },\n        {\n          attributes: {\n            repository:\n              typeof repository === 'string'\n                ? repository\n                : repository.repository,\n          },\n        },\n      );\n    }\n\n    finalizeReport();\n    await exportStats(config);\n  } catch (err) /* istanbul ignore next */ {\n    if (err.message.startsWith('Init: ')) {\n      logger.fatal(\n        { errorMessage: err.message.substring(6) },\n        'Initialization error',\n      );\n    } else {\n      logger.fatal({ err }, 'Unknown error');\n    }\n    if (!config!) {\n      // return early if we can't parse config options\n      logger.debug(`Missing config`);\n      return 2;\n    }\n  } finally {\n    await globalFinalize(config!);\n    if (logLevel() === 'info') {\n      logger.info(\n        `Renovate was run at log level \"${logLevel()}\". Set LOG_LEVEL=debug in environment variables to see extended debug logs.`,\n      );\n    }\n  }\n  const loggerErrors = getProblems().filter((p) => p.level >= ERROR);\n  if (loggerErrors.length) {\n    logger.info(\n      { loggerErrors },\n      'Renovate is exiting with a non-zero code due to the following logged errors',\n    );\n    return 1;\n  }\n  return 0;\n}\n"]}

package/dist/workers/global/initialize.js

@@ -62,7 +62,11 @@ async function checkVersions() {
 function setGlobalHostRules(config) {
     if (config.hostRules) {
         logger_1.logger.debug('Setting global hostRules');
-        (0, secrets_1.applySecretsToConfig)(config, undefined, false);
+        (0, secrets_1.applySecretsAndVariablesToConfig)({
+            config,
+            deleteVariables: false,
+            deleteSecrets: false,
+        });
         config.hostRules.forEach((rule) => hostRules.add(rule));
     }
 }

package/dist/workers/global/initialize.js.map

@@ -1 +1 @@
-{"version":3,"file":"initialize.js","sourceRoot":"","sources":["../../../lib/workers/global/initialize.ts"],"names":[],"mappings":";;AA8EA,4CAgBC;AAED,wCAGC;;AAnGD,8DAAyB;AACzB,gEAA0B;AAC1B,0DAA0B;AAC1B,kDAA4D;AAE5D,yCAAsC;AACtC,8CAA+D;AAC/D,qDAAsD;AACtD,+EAAyD;AACzD,4CAAkD;AAClD,wCAAoD;AACpD,yEAAmD;AACnD,6DAAgE;AAChE,kEAAkE;AAClE,qCAAuC;AAEvC,KAAK,UAAU,cAAc,CAAC,KAAgB;IAC5C,MAAM,MAAM,GAAc,EAAE,GAAG,KAAK,EAAE,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,iBAAE,CAAC,MAAM,EAAE,CAAC;IAChE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,eAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,OAAO,GAAG,eAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5D,eAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,6BAA6B,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,QAAQ,GAAG,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtD,eAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,eAAM,CAAC,KAAK,CACV,qCAAqC,GAAG,MAAM,CAAC,gBAAgB,CAChE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,gBAAgB,GAAG,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YACvE,eAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAsB;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,oBAAoB,CAAC;IACxC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAA,oBAAW,EAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,eAAe,GAAG,MAAM,IAAA,wBAAkB,GAAE,CAAC;IACnD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAsB;IAChD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACzC,IAAA,8BAAoB,EAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAiB;IACrD,wFAAwF;IACxF,gEAAgE;IAChE,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACrC,eAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC,CAAC,+FAA+F;QAC/I,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC,CAAC,+FAA+F;IACjJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,OAAkB;IAElB,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAA,+BAAiB,GAAE,CAAC;IACpB,MAAM,aAAa,EAAE,CAAC;IACtB,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,GAAG,MAAM,IAAA,uBAAY,EAAC,MAAM,CAAC,CAAC;IACpC,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC;IACvB,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,IAAA,sCAAmB,EAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,MAAsB;IACzD,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAA,iCAAyB,GAAE,CAAC;AAC9B,CAAC","sourcesContent":["import os from 'node:os';\nimport fs from 'fs-extra';\nimport upath from 'upath';\nimport { applySecretsToConfig } from '../../config/secrets';\nimport type { AllConfig, RenovateConfig } from '../../config/types';\nimport { logger } from '../../logger';\nimport { resetGlobalLogLevelRemaps } from '../../logger/remap';\nimport { initPlatform } from '../../modules/platform';\nimport * as packageCache from '../../util/cache/package';\nimport { setEmojiConfig } from '../../util/emoji';\nimport { validateGitVersion } from '../../util/git';\nimport * as hostRules from '../../util/host-rules';\nimport { setHttpRateLimits } from '../../util/http/rate-limits';\nimport { initMergeConfidence } from '../../util/merge-confidence';\nimport { setMaxLimit } from './limits';\n\nasync function setDirectories(input: AllConfig): Promise<AllConfig> {\n  const config: AllConfig = { ...input };\n  process.env.TMPDIR = process.env.RENOVATE_TMPDIR ?? os.tmpdir();\n  if (config.baseDir) {\n    logger.debug('Using configured baseDir: ' + config.baseDir);\n  } else {\n    config.baseDir = upath.join(process.env.TMPDIR, 'renovate');\n    logger.debug('Using baseDir: ' + config.baseDir);\n  }\n  await fs.ensureDir(config.baseDir);\n  if (config.cacheDir) {\n    logger.debug('Using configured cacheDir: ' + config.cacheDir);\n  } else {\n    config.cacheDir = upath.join(config.baseDir, 'cache');\n    logger.debug('Using cacheDir: ' + config.cacheDir);\n  }\n  await fs.ensureDir(config.cacheDir);\n  if (config.binarySource === 'docker' || config.binarySource === 'install') {\n    if (config.containerbaseDir) {\n      logger.debug(\n        'Using configured containerbaseDir: ' + config.containerbaseDir,\n      );\n    } else {\n      config.containerbaseDir = upath.join(config.cacheDir, 'containerbase');\n      logger.debug('Using containerbaseDir: ' + config.containerbaseDir);\n    }\n    await fs.ensureDir(config.containerbaseDir);\n  }\n  return config;\n}\n\nfunction limitCommitsPerRun(config: RenovateConfig): void {\n  let limit = config.prCommitsPerRunLimit;\n  limit = typeof limit === 'number' && limit > 0 ? limit : null;\n  setMaxLimit('Commits', limit);\n}\n\nasync function checkVersions(): Promise<void> {\n  const validGitVersion = await validateGitVersion();\n  if (!validGitVersion) {\n    throw new Error('Init: git version needs upgrading');\n  }\n}\n\nfunction setGlobalHostRules(config: RenovateConfig): void {\n  if (config.hostRules) {\n    logger.debug('Setting global hostRules');\n    applySecretsToConfig(config, undefined, false);\n    config.hostRules.forEach((rule) => hostRules.add(rule));\n  }\n}\n\nfunction configureThirdPartyLibraries(config: AllConfig): void {\n  // Not using early return style to make clear what's the criterion to set the variables,\n  // especially when there is more stuff added here in the future.\n  if (!config.useCloudMetadataServices) {\n    logger.debug('Disabling the use of cloud metadata services');\n    process.env.AWS_EC2_METADATA_DISABLED = 'true'; // See https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-envvars.html#envvars-list\n    process.env.METADATA_SERVER_DETECTION = 'none'; // See https://cloud.google.com/nodejs/docs/reference/gcp-metadata/latest#environment-variables\n  }\n}\n\nexport async function globalInitialize(\n  config_: AllConfig,\n): Promise<RenovateConfig> {\n  let config = config_;\n  setHttpRateLimits();\n  await checkVersions();\n  setGlobalHostRules(config);\n  config = await initPlatform(config);\n  config = await setDirectories(config);\n  await packageCache.init(config);\n  limitCommitsPerRun(config);\n  setEmojiConfig(config);\n  setGlobalHostRules(config);\n  configureThirdPartyLibraries(config);\n  await initMergeConfidence(config);\n  return config;\n}\n\nexport async function globalFinalize(config: RenovateConfig): Promise<void> {\n  await packageCache.cleanup(config);\n  resetGlobalLogLevelRemaps();\n}\n"]}
+{"version":3,"file":"initialize.js","sourceRoot":"","sources":["../../../lib/workers/global/initialize.ts"],"names":[],"mappings":";;AAkFA,4CAgBC;AAED,wCAGC;;AAvGD,8DAAyB;AACzB,gEAA0B;AAC1B,0DAA0B;AAC1B,kDAAwE;AAExE,yCAAsC;AACtC,8CAA+D;AAC/D,qDAAsD;AACtD,+EAAyD;AACzD,4CAAkD;AAClD,wCAAoD;AACpD,yEAAmD;AACnD,6DAAgE;AAChE,kEAAkE;AAClE,qCAAuC;AAEvC,KAAK,UAAU,cAAc,CAAC,KAAgB;IAC5C,MAAM,MAAM,GAAc,EAAE,GAAG,KAAK,EAAE,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,iBAAE,CAAC,MAAM,EAAE,CAAC;IAChE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,eAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,OAAO,GAAG,eAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5D,eAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,6BAA6B,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,QAAQ,GAAG,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtD,eAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,eAAM,CAAC,KAAK,CACV,qCAAqC,GAAG,MAAM,CAAC,gBAAgB,CAChE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,gBAAgB,GAAG,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YACvE,eAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAsB;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,oBAAoB,CAAC;IACxC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAA,oBAAW,EAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,eAAe,GAAG,MAAM,IAAA,wBAAkB,GAAE,CAAC;IACnD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAsB;IAChD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,eAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACzC,IAAA,0CAAgC,EAAC;YAC/B,MAAM;YACN,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAiB;IACrD,wFAAwF;IACxF,gEAAgE;IAChE,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC;QACrC,eAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC,CAAC,+FAA+F;QAC/I,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC,CAAC,+FAA+F;IACjJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,OAAkB;IAElB,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAA,+BAAiB,GAAE,CAAC;IACpB,MAAM,aAAa,EAAE,CAAC;IACtB,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,GAAG,MAAM,IAAA,uBAAY,EAAC,MAAM,CAAC,CAAC;IACpC,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC;IACvB,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,IAAA,sCAAmB,EAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,MAAsB;IACzD,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAA,iCAAyB,GAAE,CAAC;AAC9B,CAAC","sourcesContent":["import os from 'node:os';\nimport fs from 'fs-extra';\nimport upath from 'upath';\nimport { applySecretsAndVariablesToConfig } from '../../config/secrets';\nimport type { AllConfig, RenovateConfig } from '../../config/types';\nimport { logger } from '../../logger';\nimport { resetGlobalLogLevelRemaps } from '../../logger/remap';\nimport { initPlatform } from '../../modules/platform';\nimport * as packageCache from '../../util/cache/package';\nimport { setEmojiConfig } from '../../util/emoji';\nimport { validateGitVersion } from '../../util/git';\nimport * as hostRules from '../../util/host-rules';\nimport { setHttpRateLimits } from '../../util/http/rate-limits';\nimport { initMergeConfidence } from '../../util/merge-confidence';\nimport { setMaxLimit } from './limits';\n\nasync function setDirectories(input: AllConfig): Promise<AllConfig> {\n  const config: AllConfig = { ...input };\n  process.env.TMPDIR = process.env.RENOVATE_TMPDIR ?? os.tmpdir();\n  if (config.baseDir) {\n    logger.debug('Using configured baseDir: ' + config.baseDir);\n  } else {\n    config.baseDir = upath.join(process.env.TMPDIR, 'renovate');\n    logger.debug('Using baseDir: ' + config.baseDir);\n  }\n  await fs.ensureDir(config.baseDir);\n  if (config.cacheDir) {\n    logger.debug('Using configured cacheDir: ' + config.cacheDir);\n  } else {\n    config.cacheDir = upath.join(config.baseDir, 'cache');\n    logger.debug('Using cacheDir: ' + config.cacheDir);\n  }\n  await fs.ensureDir(config.cacheDir);\n  if (config.binarySource === 'docker' || config.binarySource === 'install') {\n    if (config.containerbaseDir) {\n      logger.debug(\n        'Using configured containerbaseDir: ' + config.containerbaseDir,\n      );\n    } else {\n      config.containerbaseDir = upath.join(config.cacheDir, 'containerbase');\n      logger.debug('Using containerbaseDir: ' + config.containerbaseDir);\n    }\n    await fs.ensureDir(config.containerbaseDir);\n  }\n  return config;\n}\n\nfunction limitCommitsPerRun(config: RenovateConfig): void {\n  let limit = config.prCommitsPerRunLimit;\n  limit = typeof limit === 'number' && limit > 0 ? limit : null;\n  setMaxLimit('Commits', limit);\n}\n\nasync function checkVersions(): Promise<void> {\n  const validGitVersion = await validateGitVersion();\n  if (!validGitVersion) {\n    throw new Error('Init: git version needs upgrading');\n  }\n}\n\nfunction setGlobalHostRules(config: RenovateConfig): void {\n  if (config.hostRules) {\n    logger.debug('Setting global hostRules');\n    applySecretsAndVariablesToConfig({\n      config,\n      deleteVariables: false,\n      deleteSecrets: false,\n    });\n    config.hostRules.forEach((rule) => hostRules.add(rule));\n  }\n}\n\nfunction configureThirdPartyLibraries(config: AllConfig): void {\n  // Not using early return style to make clear what's the criterion to set the variables,\n  // especially when there is more stuff added here in the future.\n  if (!config.useCloudMetadataServices) {\n    logger.debug('Disabling the use of cloud metadata services');\n    process.env.AWS_EC2_METADATA_DISABLED = 'true'; // See https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-envvars.html#envvars-list\n    process.env.METADATA_SERVER_DETECTION = 'none'; // See https://cloud.google.com/nodejs/docs/reference/gcp-metadata/latest#environment-variables\n  }\n}\n\nexport async function globalInitialize(\n  config_: AllConfig,\n): Promise<RenovateConfig> {\n  let config = config_;\n  setHttpRateLimits();\n  await checkVersions();\n  setGlobalHostRules(config);\n  config = await initPlatform(config);\n  config = await setDirectories(config);\n  await packageCache.init(config);\n  limitCommitsPerRun(config);\n  setEmojiConfig(config);\n  setGlobalHostRules(config);\n  configureThirdPartyLibraries(config);\n  await initMergeConfidence(config);\n  return config;\n}\n\nexport async function globalFinalize(config: RenovateConfig): Promise<void> {\n  await packageCache.cleanup(config);\n  resetGlobalLogLevelRemaps();\n}\n"]}

package/dist/workers/repository/index.js

@@ -35,7 +35,11 @@ const result_1 = require("./result");
 // istanbul ignore next
 async function renovateRepository(repoConfig, canRetry = true) {
     (0, split_1.splitInit)();
-    let config = global_1.GlobalConfig.set((0, secrets_1.applySecretsToConfig)(repoConfig, undefined, false));
+    let config = global_1.GlobalConfig.set((0, secrets_1.applySecretsAndVariablesToConfig)({
+        config: repoConfig,
+        deleteVariables: false,
+        deleteSecrets: false,
+    }));
     await (0, docker_1.removeDanglingContainers)();
     (0, logger_1.setMeta)({ repository: config.repository });
     logger_1.logger.info({ renovateVersion: expose_cjs_1.pkg.version }, 'Repository started');

package/dist/workers/repository/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/workers/repository/index.ts"],"names":[],"mappings":";;AA8CA,gDA+GC;AAWD,0DAQC;;AAhLD,gEAA0B;AAC1B,gDAAmD;AACnD,kDAA4D;AAE5D,mEAIwC;AACxC,iDAAuC;AACvC,2DAAmD;AACnD,+DAAqE;AACrE,yCAA+C;AAC/C,8CAAmE;AACnE,mDAAkE;AAClE,sCAAiE;AACjE,wCAA0C;AAC1C,sDAAgE;AAChE,qEAA+C;AAC/C,2EAAqD;AACrD,4CAAkE;AAClE,4CAQ0B;AAC1B,mCAAyC;AACzC,qCAA+C;AAC/C,yDAAqD;AACrD,iEAAmE;AACnE,4DAAkC;AAClC,yCAA0C;AAC1C,4CAAsD;AACtD,iCAAkC;AAClC,gDAAsD;AACtD,wCAAqD;AACrD,uCAA4D;AAG5D,qCAAyC;AAEzC,uBAAuB;AAChB,KAAK,UAAU,kBAAkB,CACtC,UAA0B,EAC1B,QAAQ,GAAG,IAAI;IAEf,IAAA,iBAAS,GAAE,CAAC;IACZ,IAAI,MAAM,GAAG,qBAAY,CAAC,GAAG,CAC3B,IAAA,8BAAoB,EAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CACnD,CAAC;IACF,MAAM,IAAA,iCAAwB,GAAE,CAAC;IACjC,IAAA,gBAAO,EAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3C,eAAM,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,gBAAG,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACpE,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACzB,IAAI,UAAqC,CAAC;IAC1C,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7B,eAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,QAAQ,CAAC,CAAC;QAC5C,MAAM,GAAG,MAAM,IAAA,eAAQ,EAAC,MAAM,CAAC,CAAC;QAChC,IAAA,gBAAQ,EAAC,MAAM,CAAC,CAAC;QACjB,MAAM,cAAc,GAClB,MAAM,CAAC,eAAgB;YACvB,CAAC,wBAAe,CAAC,oBAAoB;YACrC,wBAAe,CAAC,iBAAiB,CAAC;QACpC,MAAM,aAAa,GAAG,cAAc;YAClC,CAAC,CAAC,MAAM,IAAA,4BAAU,EAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAA,6BAAmB,EAAC,MAAM,CAAC,CAAC;YAChE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzB,IAAA,8BAAkB,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAE1C,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;QAE7D,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;YACtC,MAAM,CAAC,eAAe,GAAG,MAAM,IAAA,gCAAqB,GAAE,CAAC;QACzD,CAAC;QAED,IACE,qBAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;YACvC,qBAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,EACxC,CAAC;YACD,MAAM,IAAA,4BAAU,EAAC,YAAY,EAAE,GAAG,EAAE,CAClC,IAAA,uBAAkB,EAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CACnD,CAAC;YACF,IAAA,gBAAQ,EAAC,YAAY,CAAC,CAAC;YACvB,MAAM,GAAG,GAAG,MAAM,IAAA,4BAAU,EAAC,QAAQ,EAAE,GAAG,EAAE,CAC1C,IAAA,oBAAU,EAAC,MAAM,EAAE,QAAQ,CAAC,CAC7B,CAAC;YACF,IAAA,gBAAO,EAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3C,IAAA,gBAAQ,EAAC,QAAQ,CAAC,CAAC;YACnB,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,IAAA,sBAAc,EAAC,QAAQ,CAAC,CAAC,CAAC,8CAA8C;YAChF,CAAC;YACD,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;gBACzB,IAAI,QAAQ,EAAE,CAAC;oBACb,eAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;oBAChE,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBACjE,OAAO,YAAY,CAAC;gBACtB,CAAC;gBACD,eAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,MAAM,kBAAkB,GAAG,MAAM,IAAA,kCAAe,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACrE,MAAM,IAAA,gDAAyB,EAC7B,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,kBAAkB,CACnB,CAAC;YACJ,CAAC;YACD,MAAM,IAAA,uBAAY,EAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YACnD,cAAc;YACd,UAAU,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE,GAAI,CAAC,CAAC;QAC3C,CAAC;QACD,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAA,gBAAO,EAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAA,eAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,eAAe,GAAG;YACtB,8CAA6B;YAC7B,kCAAiB;YACjB,qCAAoB;SACrB,CAAC;QACF,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAA,0BAAkB,EAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,UAAU,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAA,oBAAe,EAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACtC,eAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,MAAM,CAAC,IAAA,oBAAe,GAAE,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACtC,eAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,gCAAgC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;IAC3B,eAAM,CAAC,KAAK,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;IAChE,yBAAiB,CAAC,MAAM,EAAE,CAAC;IAC3B,4BAAoB,CAAC,MAAM,EAAE,CAAC;IAC9B,iBAAS,CAAC,MAAM,EAAE,CAAC;IACnB,sBAAc,CAAC,MAAM,EAAE,CAAC;IACxB,mBAAW,CAAC,MAAM,EAAE,CAAC;IACrB,8BAAsB,CAAC,MAAM,EAAE,CAAC;IAChC,6BAAqB,CAAC,MAAM,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAA,cAAQ,GAAE,CAAC;IAC1B,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACzE,IAAA,qCAA6B,GAAE,CAAC;IAChC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,sDAAsD;AACtD,SAAS,YAAY,CAAC,MAAsB;IAC1C,OAAO;QACL,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,CAAC,MAAM,CAAC,gBAAiB,CAAC,EAAE,0BAA0B;QAClE,YAAY,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,UAA8B;IACpE,MAAM,YAAY,GAAG,IAAA,4BAAmB,EAAC,UAAU,CAAC,CAAC;IACrD,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;QACtB,eAAM,CAAC,KAAK,CACV,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAC1C,qBAAqB,CACtB,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import fs from 'fs-extra';\nimport { GlobalConfig } from '../../config/global';\nimport { applySecretsToConfig } from '../../config/secrets';\nimport type { RenovateConfig } from '../../config/types';\nimport {\n  REPOSITORY_DISABLED_BY_CONFIG,\n  REPOSITORY_FORKED,\n  REPOSITORY_NO_CONFIG,\n} from '../../constants/error-messages';\nimport { pkg } from '../../expose.cjs';\nimport { instrument } from '../../instrumentation';\nimport { addExtractionStats } from '../../instrumentation/reporting';\nimport { logger, setMeta } from '../../logger';\nimport { resetRepositoryLogLevelRemaps } from '../../logger/remap';\nimport { removeDanglingContainers } from '../../util/exec/docker';\nimport { deleteLocalFile, privateCacheDir } from '../../util/fs';\nimport { isCloned } from '../../util/git';\nimport { detectSemanticCommits } from '../../util/git/semantic';\nimport * as queue from '../../util/http/queue';\nimport * as throttle from '../../util/http/throttle';\nimport { addSplit, getSplits, splitInit } from '../../util/split';\nimport {\n  AbandonedPackageStats,\n  DatasourceCacheStats,\n  HttpCacheStats,\n  HttpStats,\n  LookupStats,\n  ObsoleteCacheHitLogger,\n  PackageCacheStats,\n} from '../../util/stats';\nimport { setBranchCache } from './cache';\nimport { extractRepoProblems } from './common';\nimport { configMigration } from './config-migration';\nimport { ensureDependencyDashboard } from './dependency-dashboard';\nimport handleError from './error';\nimport { finalizeRepo } from './finalize';\nimport { pruneStaleBranches } from './finalize/prune';\nimport { initRepo } from './init';\nimport { OnboardingState } from './onboarding/common';\nimport { ensureOnboardingPr } from './onboarding/pr';\nimport { extractDependencies, updateRepo } from './process';\nimport type { ExtractResult } from './process/extract-update';\nimport type { ProcessResult } from './result';\nimport { processResult } from './result';\n\n// istanbul ignore next\nexport async function renovateRepository(\n  repoConfig: RenovateConfig,\n  canRetry = true,\n): Promise<ProcessResult | undefined> {\n  splitInit();\n  let config = GlobalConfig.set(\n    applySecretsToConfig(repoConfig, undefined, false),\n  );\n  await removeDanglingContainers();\n  setMeta({ repository: config.repository });\n  logger.info({ renovateVersion: pkg.version }, 'Repository started');\n  logger.trace({ config });\n  let repoResult: ProcessResult | undefined;\n  queue.clear();\n  throttle.clear();\n  const localDir = GlobalConfig.get('localDir')!;\n  try {\n    await fs.ensureDir(localDir);\n    logger.debug('Using localDir: ' + localDir);\n    config = await initRepo(config);\n    addSplit('init');\n    const performExtract =\n      config.repoIsOnboarded! ||\n      !OnboardingState.onboardingCacheValid ||\n      OnboardingState.prUpdateRequested;\n    const extractResult = performExtract\n      ? await instrument('extract', () => extractDependencies(config))\n      : emptyExtract(config);\n    addExtractionStats(config, extractResult);\n\n    const { branches, branchList, packageFiles } = extractResult;\n\n    if (config.semanticCommits === 'auto') {\n      config.semanticCommits = await detectSemanticCommits();\n    }\n\n    if (\n      GlobalConfig.get('dryRun') !== 'lookup' &&\n      GlobalConfig.get('dryRun') !== 'extract'\n    ) {\n      await instrument('onboarding', () =>\n        ensureOnboardingPr(config, packageFiles, branches),\n      );\n      addSplit('onboarding');\n      const res = await instrument('update', () =>\n        updateRepo(config, branches),\n      );\n      setMeta({ repository: config.repository });\n      addSplit('update');\n      if (performExtract) {\n        await setBranchCache(branches); // update branch cache if performed extraction\n      }\n      if (res === 'automerged') {\n        if (canRetry) {\n          logger.info('Restarting repository job after automerge result');\n          const recursiveRes = await renovateRepository(repoConfig, false);\n          return recursiveRes;\n        }\n        logger.debug(`Automerged but already retried once`);\n      } else {\n        const configMigrationRes = await configMigration(config, branchList);\n        await ensureDependencyDashboard(\n          config,\n          branches,\n          packageFiles,\n          configMigrationRes,\n        );\n      }\n      await finalizeRepo(config, branchList, repoConfig);\n      // TODO #22198\n      repoResult = processResult(config, res!);\n    }\n    printRepositoryProblems(config.repository);\n  } catch (err) /* istanbul ignore next */ {\n    setMeta({ repository: config.repository });\n    const errorRes = await handleError(config, err);\n    const pruneWhenErrors = [\n      REPOSITORY_DISABLED_BY_CONFIG,\n      REPOSITORY_FORKED,\n      REPOSITORY_NO_CONFIG,\n    ];\n    if (pruneWhenErrors.includes(errorRes)) {\n      await pruneStaleBranches(config, []);\n    }\n    repoResult = processResult(config, errorRes);\n  }\n  if (localDir && !repoConfig.persistRepoData) {\n    try {\n      await deleteLocalFile('.');\n    } catch (err) /* istanbul ignore if */ {\n      logger.warn({ err }, 'localDir deletion error');\n    }\n  }\n  try {\n    await fs.remove(privateCacheDir());\n  } catch (err) /* istanbul ignore if */ {\n    logger.warn({ err }, 'privateCacheDir deletion error');\n  }\n  const splits = getSplits();\n  logger.debug(splits, 'Repository timing splits (milliseconds)');\n  PackageCacheStats.report();\n  DatasourceCacheStats.report();\n  HttpStats.report();\n  HttpCacheStats.report();\n  LookupStats.report();\n  ObsoleteCacheHitLogger.report();\n  AbandonedPackageStats.report();\n  const cloned = isCloned();\n  logger.info({ cloned, durationMs: splits.total }, 'Repository finished');\n  resetRepositoryLogLevelRemaps();\n  return repoResult;\n}\n\n// istanbul ignore next: renovateRepository is ignored\nfunction emptyExtract(config: RenovateConfig): ExtractResult {\n  return {\n    branches: [],\n    branchList: [config.onboardingBranch!], // to prevent auto closing\n    packageFiles: {},\n  };\n}\n\nexport function printRepositoryProblems(repository: string | undefined): void {\n  const repoProblems = extractRepoProblems(repository);\n  if (repoProblems.size) {\n    logger.debug(\n      { repoProblems: Array.from(repoProblems) },\n      'repository problems',\n    );\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/workers/repository/index.ts"],"names":[],"mappings":";;AA8CA,gDAmHC;AAWD,0DAQC;;AApLD,gEAA0B;AAC1B,gDAAmD;AACnD,kDAAwE;AAExE,mEAIwC;AACxC,iDAAuC;AACvC,2DAAmD;AACnD,+DAAqE;AACrE,yCAA+C;AAC/C,8CAAmE;AACnE,mDAAkE;AAClE,sCAAiE;AACjE,wCAA0C;AAC1C,sDAAgE;AAChE,qEAA+C;AAC/C,2EAAqD;AACrD,4CAAkE;AAClE,4CAQ0B;AAC1B,mCAAyC;AACzC,qCAA+C;AAC/C,yDAAqD;AACrD,iEAAmE;AACnE,4DAAkC;AAClC,yCAA0C;AAC1C,4CAAsD;AACtD,iCAAkC;AAClC,gDAAsD;AACtD,wCAAqD;AACrD,uCAA4D;AAG5D,qCAAyC;AAEzC,uBAAuB;AAChB,KAAK,UAAU,kBAAkB,CACtC,UAA0B,EAC1B,QAAQ,GAAG,IAAI;IAEf,IAAA,iBAAS,GAAE,CAAC;IACZ,IAAI,MAAM,GAAG,qBAAY,CAAC,GAAG,CAC3B,IAAA,0CAAgC,EAAC;QAC/B,MAAM,EAAE,UAAU;QAClB,eAAe,EAAE,KAAK;QACtB,aAAa,EAAE,KAAK;KACrB,CAAC,CACH,CAAC;IACF,MAAM,IAAA,iCAAwB,GAAE,CAAC;IACjC,IAAA,gBAAO,EAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3C,eAAM,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,gBAAG,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACpE,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACzB,IAAI,UAAqC,CAAC;IAC1C,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7B,eAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,QAAQ,CAAC,CAAC;QAC5C,MAAM,GAAG,MAAM,IAAA,eAAQ,EAAC,MAAM,CAAC,CAAC;QAChC,IAAA,gBAAQ,EAAC,MAAM,CAAC,CAAC;QACjB,MAAM,cAAc,GAClB,MAAM,CAAC,eAAgB;YACvB,CAAC,wBAAe,CAAC,oBAAoB;YACrC,wBAAe,CAAC,iBAAiB,CAAC;QACpC,MAAM,aAAa,GAAG,cAAc;YAClC,CAAC,CAAC,MAAM,IAAA,4BAAU,EAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAA,6BAAmB,EAAC,MAAM,CAAC,CAAC;YAChE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACzB,IAAA,8BAAkB,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAE1C,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;QAE7D,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;YACtC,MAAM,CAAC,eAAe,GAAG,MAAM,IAAA,gCAAqB,GAAE,CAAC;QACzD,CAAC;QAED,IACE,qBAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;YACvC,qBAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,EACxC,CAAC;YACD,MAAM,IAAA,4BAAU,EAAC,YAAY,EAAE,GAAG,EAAE,CAClC,IAAA,uBAAkB,EAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CACnD,CAAC;YACF,IAAA,gBAAQ,EAAC,YAAY,CAAC,CAAC;YACvB,MAAM,GAAG,GAAG,MAAM,IAAA,4BAAU,EAAC,QAAQ,EAAE,GAAG,EAAE,CAC1C,IAAA,oBAAU,EAAC,MAAM,EAAE,QAAQ,CAAC,CAC7B,CAAC;YACF,IAAA,gBAAO,EAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3C,IAAA,gBAAQ,EAAC,QAAQ,CAAC,CAAC;YACnB,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,IAAA,sBAAc,EAAC,QAAQ,CAAC,CAAC,CAAC,8CAA8C;YAChF,CAAC;YACD,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;gBACzB,IAAI,QAAQ,EAAE,CAAC;oBACb,eAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;oBAChE,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBACjE,OAAO,YAAY,CAAC;gBACtB,CAAC;gBACD,eAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,MAAM,kBAAkB,GAAG,MAAM,IAAA,kCAAe,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACrE,MAAM,IAAA,gDAAyB,EAC7B,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,kBAAkB,CACnB,CAAC;YACJ,CAAC;YACD,MAAM,IAAA,uBAAY,EAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YACnD,cAAc;YACd,UAAU,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE,GAAI,CAAC,CAAC;QAC3C,CAAC;QACD,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,IAAA,gBAAO,EAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAA,eAAW,EAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,eAAe,GAAG;YACtB,8CAA6B;YAC7B,kCAAiB;YACjB,qCAAoB;SACrB,CAAC;QACF,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAA,0BAAkB,EAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,UAAU,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAA,oBAAe,EAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACtC,eAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,MAAM,CAAC,IAAA,oBAAe,GAAE,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACtC,eAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,gCAAgC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,iBAAS,GAAE,CAAC;IAC3B,eAAM,CAAC,KAAK,CAAC,MAAM,EAAE,yCAAyC,CAAC,CAAC;IAChE,yBAAiB,CAAC,MAAM,EAAE,CAAC;IAC3B,4BAAoB,CAAC,MAAM,EAAE,CAAC;IAC9B,iBAAS,CAAC,MAAM,EAAE,CAAC;IACnB,sBAAc,CAAC,MAAM,EAAE,CAAC;IACxB,mBAAW,CAAC,MAAM,EAAE,CAAC;IACrB,8BAAsB,CAAC,MAAM,EAAE,CAAC;IAChC,6BAAqB,CAAC,MAAM,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAA,cAAQ,GAAE,CAAC;IAC1B,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACzE,IAAA,qCAA6B,GAAE,CAAC;IAChC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,sDAAsD;AACtD,SAAS,YAAY,CAAC,MAAsB;IAC1C,OAAO;QACL,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,CAAC,MAAM,CAAC,gBAAiB,CAAC,EAAE,0BAA0B;QAClE,YAAY,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,UAA8B;IACpE,MAAM,YAAY,GAAG,IAAA,4BAAmB,EAAC,UAAU,CAAC,CAAC;IACrD,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;QACtB,eAAM,CAAC,KAAK,CACV,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAC1C,qBAAqB,CACtB,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import fs from 'fs-extra';\nimport { GlobalConfig } from '../../config/global';\nimport { applySecretsAndVariablesToConfig } from '../../config/secrets';\nimport type { RenovateConfig } from '../../config/types';\nimport {\n  REPOSITORY_DISABLED_BY_CONFIG,\n  REPOSITORY_FORKED,\n  REPOSITORY_NO_CONFIG,\n} from '../../constants/error-messages';\nimport { pkg } from '../../expose.cjs';\nimport { instrument } from '../../instrumentation';\nimport { addExtractionStats } from '../../instrumentation/reporting';\nimport { logger, setMeta } from '../../logger';\nimport { resetRepositoryLogLevelRemaps } from '../../logger/remap';\nimport { removeDanglingContainers } from '../../util/exec/docker';\nimport { deleteLocalFile, privateCacheDir } from '../../util/fs';\nimport { isCloned } from '../../util/git';\nimport { detectSemanticCommits } from '../../util/git/semantic';\nimport * as queue from '../../util/http/queue';\nimport * as throttle from '../../util/http/throttle';\nimport { addSplit, getSplits, splitInit } from '../../util/split';\nimport {\n  AbandonedPackageStats,\n  DatasourceCacheStats,\n  HttpCacheStats,\n  HttpStats,\n  LookupStats,\n  ObsoleteCacheHitLogger,\n  PackageCacheStats,\n} from '../../util/stats';\nimport { setBranchCache } from './cache';\nimport { extractRepoProblems } from './common';\nimport { configMigration } from './config-migration';\nimport { ensureDependencyDashboard } from './dependency-dashboard';\nimport handleError from './error';\nimport { finalizeRepo } from './finalize';\nimport { pruneStaleBranches } from './finalize/prune';\nimport { initRepo } from './init';\nimport { OnboardingState } from './onboarding/common';\nimport { ensureOnboardingPr } from './onboarding/pr';\nimport { extractDependencies, updateRepo } from './process';\nimport type { ExtractResult } from './process/extract-update';\nimport type { ProcessResult } from './result';\nimport { processResult } from './result';\n\n// istanbul ignore next\nexport async function renovateRepository(\n  repoConfig: RenovateConfig,\n  canRetry = true,\n): Promise<ProcessResult | undefined> {\n  splitInit();\n  let config = GlobalConfig.set(\n    applySecretsAndVariablesToConfig({\n      config: repoConfig,\n      deleteVariables: false,\n      deleteSecrets: false,\n    }),\n  );\n  await removeDanglingContainers();\n  setMeta({ repository: config.repository });\n  logger.info({ renovateVersion: pkg.version }, 'Repository started');\n  logger.trace({ config });\n  let repoResult: ProcessResult | undefined;\n  queue.clear();\n  throttle.clear();\n  const localDir = GlobalConfig.get('localDir')!;\n  try {\n    await fs.ensureDir(localDir);\n    logger.debug('Using localDir: ' + localDir);\n    config = await initRepo(config);\n    addSplit('init');\n    const performExtract =\n      config.repoIsOnboarded! ||\n      !OnboardingState.onboardingCacheValid ||\n      OnboardingState.prUpdateRequested;\n    const extractResult = performExtract\n      ? await instrument('extract', () => extractDependencies(config))\n      : emptyExtract(config);\n    addExtractionStats(config, extractResult);\n\n    const { branches, branchList, packageFiles } = extractResult;\n\n    if (config.semanticCommits === 'auto') {\n      config.semanticCommits = await detectSemanticCommits();\n    }\n\n    if (\n      GlobalConfig.get('dryRun') !== 'lookup' &&\n      GlobalConfig.get('dryRun') !== 'extract'\n    ) {\n      await instrument('onboarding', () =>\n        ensureOnboardingPr(config, packageFiles, branches),\n      );\n      addSplit('onboarding');\n      const res = await instrument('update', () =>\n        updateRepo(config, branches),\n      );\n      setMeta({ repository: config.repository });\n      addSplit('update');\n      if (performExtract) {\n        await setBranchCache(branches); // update branch cache if performed extraction\n      }\n      if (res === 'automerged') {\n        if (canRetry) {\n          logger.info('Restarting repository job after automerge result');\n          const recursiveRes = await renovateRepository(repoConfig, false);\n          return recursiveRes;\n        }\n        logger.debug(`Automerged but already retried once`);\n      } else {\n        const configMigrationRes = await configMigration(config, branchList);\n        await ensureDependencyDashboard(\n          config,\n          branches,\n          packageFiles,\n          configMigrationRes,\n        );\n      }\n      await finalizeRepo(config, branchList, repoConfig);\n      // TODO #22198\n      repoResult = processResult(config, res!);\n    }\n    printRepositoryProblems(config.repository);\n  } catch (err) /* istanbul ignore next */ {\n    setMeta({ repository: config.repository });\n    const errorRes = await handleError(config, err);\n    const pruneWhenErrors = [\n      REPOSITORY_DISABLED_BY_CONFIG,\n      REPOSITORY_FORKED,\n      REPOSITORY_NO_CONFIG,\n    ];\n    if (pruneWhenErrors.includes(errorRes)) {\n      await pruneStaleBranches(config, []);\n    }\n    repoResult = processResult(config, errorRes);\n  }\n  if (localDir && !repoConfig.persistRepoData) {\n    try {\n      await deleteLocalFile('.');\n    } catch (err) /* istanbul ignore if */ {\n      logger.warn({ err }, 'localDir deletion error');\n    }\n  }\n  try {\n    await fs.remove(privateCacheDir());\n  } catch (err) /* istanbul ignore if */ {\n    logger.warn({ err }, 'privateCacheDir deletion error');\n  }\n  const splits = getSplits();\n  logger.debug(splits, 'Repository timing splits (milliseconds)');\n  PackageCacheStats.report();\n  DatasourceCacheStats.report();\n  HttpStats.report();\n  HttpCacheStats.report();\n  LookupStats.report();\n  ObsoleteCacheHitLogger.report();\n  AbandonedPackageStats.report();\n  const cloned = isCloned();\n  logger.info({ cloned, durationMs: splits.total }, 'Repository finished');\n  resetRepositoryLogLevelRemaps();\n  return repoResult;\n}\n\n// istanbul ignore next: renovateRepository is ignored\nfunction emptyExtract(config: RenovateConfig): ExtractResult {\n  return {\n    branches: [],\n    branchList: [config.onboardingBranch!], // to prevent auto closing\n    packageFiles: {},\n  };\n}\n\nexport function printRepositoryProblems(repository: string | undefined): void {\n  const repoProblems = extractRepoProblems(repository);\n  if (repoProblems.size) {\n    logger.debug(\n      { repoProblems: Array.from(repoProblems) },\n      'repository problems',\n    );\n  }\n}\n"]}

package/dist/workers/repository/init/index.js

@@ -52,7 +52,9 @@ async function initRepo(config_) {
     }
     (0, configured_1.checkIfConfigured)(config);
     warnOnUnsupportedOptions(config);
-    config = (0, secrets_1.applySecretsToConfig)(config);
+    config = (0, secrets_1.applySecretsAndVariablesToConfig)({
+        config,
+    });
     (0, git_1.setUserRepoConfig)(config);
     config = await (0, vulnerability_1.detectVulnerabilityAlerts)(config);
     // istanbul ignore if

package/dist/workers/repository/init/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../lib/workers/repository/init/index.ts"],"names":[],"mappings":";;AA+CA,4BA+BC;;AA9ED,mDAAsD;AACtD,qDAA+D;AAE/D,4CAAyC;AACzC,iDAAoE;AACpE,wDAAqD;AACrD,6EAAuD;AACvD,+CAA4C;AAC5C,2CAAuE;AACvE,yDAAkD;AAClD,8CAAkD;AAClD,oDAAgD;AAEhD,iCAAkC;AAClC,mCAAwD;AACxD,qCAAyC;AACzC,mDAA4D;AAE5D,SAAS,gBAAgB,CAAC,MAAsB;IAC9C,OAAO;QACL,GAAG,IAAA,aAAK,EAAC,MAAM,CAAC;QAChB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;KACf,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAsB;IACtD,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,mBAAQ,CAAC,sBAAsB,EAAE,CAAC;QACtE,uBAAuB;QACvB,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAC/C,eAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,EACZ,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,mBAAQ,CAAC,kBAAkB,EAAE,CAAC;QAClE,uBAAuB;QACvB,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAC/C,eAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,EACZ,yFAAyF,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,QAAQ,CAC5B,OAAuB;IAEvB,4BAAY,CAAC,KAAK,EAAE,CAAC;IACrB,IAAI,MAAM,GAAmB,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,IAAA,mBAAW,GAAE,CAAC;IACpB,eAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,MAAM,GAAG,MAAM,IAAA,eAAQ,EAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAA,wBAAgB,EAAC,MAA8B,CAAC,CAAC;IACvD,MAAM,GAAG,MAAM,IAAA,sBAAa,EAAC,MAAM,CAAC,CAAC;IACrC,IAAA,mCAA2B,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,eAAM,CAAC,IAAI,CACT,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAA,8BAAiB,EAAC,MAAM,CAAC,CAAC;IAC1B,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,IAAA,8BAAoB,EAAC,MAAM,CAAC,CAAC;IACtC,IAAA,uBAAiB,EAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,GAAG,MAAM,IAAA,yCAAyB,EAAC,MAAM,CAAC,CAAC;IACjD,qBAAqB;IACrB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,SAAS,EAAE,IAAA,mBAAM,GAAE,EAAE,EAC/B,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,IAAA,qBAAe,EAAC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { GlobalConfig } from '../../../config/global';\nimport { applySecretsToConfig } from '../../../config/secrets';\nimport type { RenovateConfig } from '../../../config/types';\nimport { logger } from '../../../logger';\nimport { setRepositoryLogLevelRemaps } from '../../../logger/remap';\nimport { platform } from '../../../modules/platform';\nimport * as memCache from '../../../util/cache/memory';\nimport { clone } from '../../../util/clone';\nimport { cloneSubmodules, setUserRepoConfig } from '../../../util/git';\nimport { getAll } from '../../../util/host-rules';\nimport { checkIfConfigured } from '../configured';\nimport { PackageFiles } from '../package-files';\nimport type { WorkerPlatformConfig } from './apis';\nimport { initApis } from './apis';\nimport { initializeCaches, resetCaches } from './cache';\nimport { getRepoConfig } from './config';\nimport { detectVulnerabilityAlerts } from './vulnerability';\n\nfunction initializeConfig(config: RenovateConfig): RenovateConfig {\n  return {\n    ...clone(config),\n    errors: [],\n    warnings: [],\n    branchList: [],\n  };\n}\n\nfunction warnOnUnsupportedOptions(config: RenovateConfig): void {\n  if (config.filterUnavailableUsers && !platform.filterUnavailableUsers) {\n    // TODO: types (#22198)\n    const platform = GlobalConfig.get('platform')!;\n    logger.warn(\n      { platform },\n      `Configuration option 'filterUnavailableUsers' is not supported on the current platform.`,\n    );\n  }\n\n  if (config.expandCodeOwnersGroups && !platform.expandGroupMembers) {\n    // TODO: types (#22198)\n    const platform = GlobalConfig.get('platform')!;\n    logger.warn(\n      { platform },\n      `Configuration option 'expandCodeOwnersGroups' is not supported on the current platform.`,\n    );\n  }\n}\n\nexport async function initRepo(\n  config_: RenovateConfig,\n): Promise<RenovateConfig> {\n  PackageFiles.clear();\n  let config: RenovateConfig = initializeConfig(config_);\n  await resetCaches();\n  logger.once.reset();\n  memCache.init();\n  config = await initApis(config);\n  await initializeCaches(config as WorkerPlatformConfig);\n  config = await getRepoConfig(config);\n  setRepositoryLogLevelRemaps(config.logLevelRemap);\n  if (config.mode === 'silent') {\n    logger.info(\n      'Repository is running with mode=silent and will not make Issues or PRs by default',\n    );\n  }\n  checkIfConfigured(config);\n  warnOnUnsupportedOptions(config);\n  config = applySecretsToConfig(config);\n  setUserRepoConfig(config);\n  config = await detectVulnerabilityAlerts(config);\n  // istanbul ignore if\n  if (config.printConfig) {\n    logger.info(\n      { config, hostRules: getAll() },\n      'Full resolved config and hostRules including presets',\n    );\n  }\n  await cloneSubmodules(!!config.cloneSubmodules, config.cloneSubmodulesFilter);\n  return config;\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../lib/workers/repository/init/index.ts"],"names":[],"mappings":";;AA+CA,4BAiCC;;AAhFD,mDAAsD;AACtD,qDAA2E;AAE3E,4CAAyC;AACzC,iDAAoE;AACpE,wDAAqD;AACrD,6EAAuD;AACvD,+CAA4C;AAC5C,2CAAuE;AACvE,yDAAkD;AAClD,8CAAkD;AAClD,oDAAgD;AAEhD,iCAAkC;AAClC,mCAAwD;AACxD,qCAAyC;AACzC,mDAA4D;AAE5D,SAAS,gBAAgB,CAAC,MAAsB;IAC9C,OAAO;QACL,GAAG,IAAA,aAAK,EAAC,MAAM,CAAC;QAChB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,EAAE;KACf,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAsB;IACtD,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,mBAAQ,CAAC,sBAAsB,EAAE,CAAC;QACtE,uBAAuB;QACvB,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAC/C,eAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,EACZ,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,sBAAsB,IAAI,CAAC,mBAAQ,CAAC,kBAAkB,EAAE,CAAC;QAClE,uBAAuB;QACvB,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAC/C,eAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,EACZ,yFAAyF,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,QAAQ,CAC5B,OAAuB;IAEvB,4BAAY,CAAC,KAAK,EAAE,CAAC;IACrB,IAAI,MAAM,GAAmB,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,IAAA,mBAAW,GAAE,CAAC;IACpB,eAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,MAAM,GAAG,MAAM,IAAA,eAAQ,EAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAA,wBAAgB,EAAC,MAA8B,CAAC,CAAC;IACvD,MAAM,GAAG,MAAM,IAAA,sBAAa,EAAC,MAAM,CAAC,CAAC;IACrC,IAAA,mCAA2B,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,eAAM,CAAC,IAAI,CACT,mFAAmF,CACpF,CAAC;IACJ,CAAC;IACD,IAAA,8BAAiB,EAAC,MAAM,CAAC,CAAC;IAC1B,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,IAAA,0CAAgC,EAAC;QACxC,MAAM;KACP,CAAC,CAAC;IACH,IAAA,uBAAiB,EAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,GAAG,MAAM,IAAA,yCAAyB,EAAC,MAAM,CAAC,CAAC;IACjD,qBAAqB;IACrB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,SAAS,EAAE,IAAA,mBAAM,GAAE,EAAE,EAC/B,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,IAAA,qBAAe,EAAC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { GlobalConfig } from '../../../config/global';\nimport { applySecretsAndVariablesToConfig } from '../../../config/secrets';\nimport type { RenovateConfig } from '../../../config/types';\nimport { logger } from '../../../logger';\nimport { setRepositoryLogLevelRemaps } from '../../../logger/remap';\nimport { platform } from '../../../modules/platform';\nimport * as memCache from '../../../util/cache/memory';\nimport { clone } from '../../../util/clone';\nimport { cloneSubmodules, setUserRepoConfig } from '../../../util/git';\nimport { getAll } from '../../../util/host-rules';\nimport { checkIfConfigured } from '../configured';\nimport { PackageFiles } from '../package-files';\nimport type { WorkerPlatformConfig } from './apis';\nimport { initApis } from './apis';\nimport { initializeCaches, resetCaches } from './cache';\nimport { getRepoConfig } from './config';\nimport { detectVulnerabilityAlerts } from './vulnerability';\n\nfunction initializeConfig(config: RenovateConfig): RenovateConfig {\n  return {\n    ...clone(config),\n    errors: [],\n    warnings: [],\n    branchList: [],\n  };\n}\n\nfunction warnOnUnsupportedOptions(config: RenovateConfig): void {\n  if (config.filterUnavailableUsers && !platform.filterUnavailableUsers) {\n    // TODO: types (#22198)\n    const platform = GlobalConfig.get('platform')!;\n    logger.warn(\n      { platform },\n      `Configuration option 'filterUnavailableUsers' is not supported on the current platform.`,\n    );\n  }\n\n  if (config.expandCodeOwnersGroups && !platform.expandGroupMembers) {\n    // TODO: types (#22198)\n    const platform = GlobalConfig.get('platform')!;\n    logger.warn(\n      { platform },\n      `Configuration option 'expandCodeOwnersGroups' is not supported on the current platform.`,\n    );\n  }\n}\n\nexport async function initRepo(\n  config_: RenovateConfig,\n): Promise<RenovateConfig> {\n  PackageFiles.clear();\n  let config: RenovateConfig = initializeConfig(config_);\n  await resetCaches();\n  logger.once.reset();\n  memCache.init();\n  config = await initApis(config);\n  await initializeCaches(config as WorkerPlatformConfig);\n  config = await getRepoConfig(config);\n  setRepositoryLogLevelRemaps(config.logLevelRemap);\n  if (config.mode === 'silent') {\n    logger.info(\n      'Repository is running with mode=silent and will not make Issues or PRs by default',\n    );\n  }\n  checkIfConfigured(config);\n  warnOnUnsupportedOptions(config);\n  config = applySecretsAndVariablesToConfig({\n    config,\n  });\n  setUserRepoConfig(config);\n  config = await detectVulnerabilityAlerts(config);\n  // istanbul ignore if\n  if (config.printConfig) {\n    logger.info(\n      { config, hostRules: getAll() },\n      'Full resolved config and hostRules including presets',\n    );\n  }\n  await cloneSubmodules(!!config.cloneSubmodules, config.cloneSubmodulesFilter);\n  return config;\n}\n"]}

package/dist/workers/repository/init/inherited.js

@@ -75,7 +75,11 @@ async function mergeInheritedConfig(config) {
         logger_1.logger.debug({ inheritedConfig: decryptedConfig, filteredConfig }, 'Removed global config from inherited config.');
     }
     if (is_1.default.nullOrUndefined(filteredConfig.extends)) {
-        filteredConfig = (0, secrets_1.applySecretsToConfig)(filteredConfig, config.secrets ?? {});
+        filteredConfig = (0, secrets_1.applySecretsAndVariablesToConfig)({
+            config: filteredConfig,
+            secrets: config.secrets ?? {},
+            variables: config.variables ?? {},
+        });
         setInheritedHostRules(filteredConfig);
         return (0, config_1.mergeChildConfig)(config, filteredConfig);
     }
@@ -97,7 +101,11 @@ async function mergeInheritedConfig(config) {
     if (!(0, dequal_1.dequal)(decryptedConfig, filteredConfig)) {
         logger_1.logger.debug({ inheritedConfig: decryptedConfig, filteredConfig }, 'Removed global config from inherited config presets.');
     }
-    filteredConfig = (0, secrets_1.applySecretsToConfig)(filteredConfig, config.secrets ?? {});
+    filteredConfig = (0, secrets_1.applySecretsAndVariablesToConfig)({
+        config: filteredConfig,
+        secrets: config.secrets ?? {},
+        variables: config.variables ?? {},
+    });
     setInheritedHostRules(filteredConfig);
     return (0, config_1.mergeChildConfig)(config, filteredConfig);
 }

package/dist/workers/repository/init/inherited.js.map

@@ -1 +1 @@
-{"version":3,"file":"inherited.js","sourceRoot":"","sources":["../../../../lib/workers/repository/init/inherited.ts"],"names":[],"mappings":";;AAqBA,oDAsIC;;AA3JD,kEAAkC;AAClC,mCAAgC;AAChC,4CAAuE;AACvE,qDAAwD;AACxD,iDAAwD;AACxD,qDAA+D;AAC/D,qDAA+D;AAE/D,2DAA4D;AAC5D,sEAI2C;AAC3C,4CAAyC;AACzC,wDAAqD;AACrD,4EAAsD;AACtD,wEAAkD;AAClD,8EAAwD;AACxD,yEAAmD;AAE5C,KAAK,UAAU,oBAAoB,CACxC,MAAsB;IAEtB,+CAA+C;IAC/C,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IACE,CAAC,YAAE,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACxC,CAAC,YAAE,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACxC,CAAC;QACD,8CAA8C;QAC9C,eAAM,CAAC,KAAK,CACV;YACE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;SACpD,EACD,2BAA2B,CAC5B,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,cAAc,GAAG;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;IACF,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,CAC5C,MAAM,CAAC,qBAAqB,EAC5B,cAAc,EACd,KAAK,CACN,CAAC;IACF,eAAM,CAAC,KAAK,CACV,EAAE,cAAc,EAAE,qBAAqB,EAAE,EACzC,wCAAwC,CACzC,CAAC;IACF,eAAM,CAAC,KAAK,CACV,sCAAsC,MAAM,CAAC,qBAAqB,YAAY,qBAAqB,GAAG,CACvG,CAAC;IACF,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,mBAAQ,CAAC,UAAU,CACvC,MAAM,CAAC,qBAAqB,EAC5B,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iCAAiC,CAAC,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,yCAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,eAAM,CAAC,KAAK,CAAC,gCAAgC,qBAAqB,GAAG,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,uBAAe,EACjC,MAAM,CAAC,qBAAqB,EAC5B,aAAa,CACd,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,eAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,iCAAiC,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,2CAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,eAAe,GAAG,WAAW,CAAC,cAAgC,CAAC;IACrE,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAc,EAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EACtB,0CAA0C,CAC3C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,eAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAC1B,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,GAAG,MAAM,IAAA,uBAAa,EAAC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAE9E,IAAI,cAAc,GAAG,IAAA,2BAAkB,EAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAA,eAAM,EAAC,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;QAC7C,eAAM,CAAC,KAAK,CACV,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,EACpD,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,YAAE,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,cAAc,GAAG,IAAA,8BAAoB,EAAC,cAAc,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC5E,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtC,OAAO,IAAA,yBAAgB,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IAED,eAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,MAAM,IAAA,8BAAoB,EAC/C,cAAc,EACd,MAAM,EACN,MAAM,CAAC,aAAa,CACrB,CAAC;IACF,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,2BAA2B,CAAC,CAAC;IAEtE,MAAM,aAAa,GAAG,MAAM,IAAA,2BAAc,EAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACtE,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,EAChC,6DAA6D,CAC9D,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClC,eAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,EACpC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,eAAe,GAAG,MAAM,IAAA,uBAAa,EAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAEzE,qFAAqF;IACrF,cAAc,GAAG,IAAA,2BAAkB,EAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAA,eAAM,EAAC,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;QAC7C,eAAM,CAAC,KAAK,CACV,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,EACpD,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,cAAc,GAAG,IAAA,8BAAoB,EAAC,cAAc,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC5E,qBAAqB,CAAC,cAAc,CAAC,CAAC;IACtC,OAAO,IAAA,yBAAgB,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAsB;IACnD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,eAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uBAAuB;gBACvB,eAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EACrB,oCAAoC,CACrC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,oCAAoC;QACpC,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,SAAS,CAAC;IAC1B,CAAC;AACH,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { mergeChildConfig, removeGlobalConfig } from '../../../config';\nimport { decryptConfig } from '../../../config/decrypt';\nimport { parseFileConfig } from '../../../config/parse';\nimport { resolveConfigPresets } from '../../../config/presets';\nimport { applySecretsToConfig } from '../../../config/secrets';\nimport type { RenovateConfig } from '../../../config/types';\nimport { validateConfig } from '../../../config/validation';\nimport {\n  CONFIG_INHERIT_NOT_FOUND,\n  CONFIG_INHERIT_PARSE_ERROR,\n  CONFIG_VALIDATION,\n} from '../../../constants/error-messages';\nimport { logger } from '../../../logger';\nimport { platform } from '../../../modules/platform';\nimport * as hostRules from '../../../util/host-rules';\nimport * as queue from '../../../util/http/queue';\nimport * as throttle from '../../../util/http/throttle';\nimport * as template from '../../../util/template';\n\nexport async function mergeInheritedConfig(\n  config: RenovateConfig,\n): Promise<RenovateConfig> {\n  // typescript doesn't know that repo is defined\n  if (!config.repository || !config.inheritConfig) {\n    return config;\n  }\n  if (\n    !is.string(config.inheritConfigRepoName) ||\n    !is.string(config.inheritConfigFileName)\n  ) {\n    // Config validation should prevent this error\n    logger.error(\n      {\n        inheritConfigRepoName: config.inheritConfigRepoName,\n        inheritConfigFileName: config.inheritConfigFileName,\n      },\n      'Invalid inherited config.',\n    );\n    return config;\n  }\n  const templateConfig = {\n    topLevelOrg: config.topLevelOrg,\n    parentOrg: config.parentOrg,\n    repository: config.repository,\n  };\n  const inheritConfigRepoName = template.compile(\n    config.inheritConfigRepoName,\n    templateConfig,\n    false,\n  );\n  logger.trace(\n    { templateConfig, inheritConfigRepoName },\n    'Compiled inheritConfigRepoName result.',\n  );\n  logger.debug(\n    `Checking for inherited config file ${config.inheritConfigFileName} in repo ${inheritConfigRepoName}.`,\n  );\n  let configFileRaw: string | null = null;\n  try {\n    configFileRaw = await platform.getRawFile(\n      config.inheritConfigFileName,\n      inheritConfigRepoName,\n    );\n  } catch (err) {\n    if (config.inheritConfigStrict) {\n      logger.debug({ err }, 'Error getting inherited config.');\n      throw new Error(CONFIG_INHERIT_NOT_FOUND);\n    }\n    logger.trace({ err }, `Error getting inherited config.`);\n  }\n  if (!configFileRaw) {\n    logger.debug(`No inherited config found in ${inheritConfigRepoName}.`);\n    return config;\n  }\n  const parseResult = parseFileConfig(\n    config.inheritConfigFileName,\n    configFileRaw,\n  );\n  if (!parseResult.success) {\n    logger.debug({ parseResult }, 'Error parsing inherited config.');\n    throw new Error(CONFIG_INHERIT_PARSE_ERROR);\n  }\n  const inheritedConfig = parseResult.parsedContents as RenovateConfig;\n  logger.debug({ config: inheritedConfig }, `Inherited config`);\n  const res = await validateConfig('inherit', inheritedConfig);\n  if (res.errors.length) {\n    logger.warn(\n      { errors: res.errors },\n      'Found errors in inherited configuration.',\n    );\n    throw new Error(CONFIG_VALIDATION);\n  }\n  if (res.warnings.length) {\n    logger.warn(\n      { warnings: res.warnings },\n      'Found warnings in inherited configuration.',\n    );\n  }\n\n  let decryptedConfig = await decryptConfig(inheritedConfig, config.repository);\n\n  let filteredConfig = removeGlobalConfig(decryptedConfig, true);\n  if (!dequal(decryptedConfig, filteredConfig)) {\n    logger.debug(\n      { inheritedConfig: decryptedConfig, filteredConfig },\n      'Removed global config from inherited config.',\n    );\n  }\n\n  if (is.nullOrUndefined(filteredConfig.extends)) {\n    filteredConfig = applySecretsToConfig(filteredConfig, config.secrets ?? {});\n    setInheritedHostRules(filteredConfig);\n    return mergeChildConfig(config, filteredConfig);\n  }\n\n  logger.debug('Resolving presets found in inherited config');\n  const resolvedConfig = await resolveConfigPresets(\n    filteredConfig,\n    config,\n    config.ignorePresets,\n  );\n  logger.trace({ config: resolvedConfig }, 'Resolved inherited config');\n\n  const validationRes = await validateConfig('inherit', resolvedConfig);\n  if (validationRes.errors.length) {\n    logger.warn(\n      { errors: validationRes.errors },\n      'Found errors in presets inside the inherited configuration.',\n    );\n    throw new Error(CONFIG_VALIDATION);\n  }\n  if (validationRes.warnings.length) {\n    logger.warn(\n      { warnings: validationRes.warnings },\n      'Found warnings in presets inside the inherited configuration.',\n    );\n  }\n\n  // decrypt again, as resolved presets could contain encrypted values\n  decryptedConfig = await decryptConfig(resolvedConfig, config.repository);\n\n  // remove global config options once again, as resolved presets could have added some\n  filteredConfig = removeGlobalConfig(decryptedConfig, true);\n  if (!dequal(decryptedConfig, filteredConfig)) {\n    logger.debug(\n      { inheritedConfig: decryptedConfig, filteredConfig },\n      'Removed global config from inherited config presets.',\n    );\n  }\n\n  filteredConfig = applySecretsToConfig(filteredConfig, config.secrets ?? {});\n  setInheritedHostRules(filteredConfig);\n  return mergeChildConfig(config, filteredConfig);\n}\n\nfunction setInheritedHostRules(config: RenovateConfig): void {\n  if (config.hostRules) {\n    logger.debug('Setting hostRules from config');\n    for (const rule of config.hostRules) {\n      try {\n        hostRules.add(rule);\n      } catch (err) {\n        // istanbul ignore next\n        logger.warn(\n          { err, config: rule },\n          'Error setting hostRule from config',\n        );\n      }\n    }\n    // host rules can change concurrency\n    queue.clear();\n    throttle.clear();\n    delete config.hostRules;\n  }\n}\n"]}
+{"version":3,"file":"inherited.js","sourceRoot":"","sources":["../../../../lib/workers/repository/init/inherited.ts"],"names":[],"mappings":";;AAqBA,oDA8IC;;AAnKD,kEAAkC;AAClC,mCAAgC;AAChC,4CAAuE;AACvE,qDAAwD;AACxD,iDAAwD;AACxD,qDAA+D;AAC/D,qDAA2E;AAE3E,2DAA4D;AAC5D,sEAI2C;AAC3C,4CAAyC;AACzC,wDAAqD;AACrD,4EAAsD;AACtD,wEAAkD;AAClD,8EAAwD;AACxD,yEAAmD;AAE5C,KAAK,UAAU,oBAAoB,CACxC,MAAsB;IAEtB,+CAA+C;IAC/C,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IACE,CAAC,YAAE,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACxC,CAAC,YAAE,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACxC,CAAC;QACD,8CAA8C;QAC9C,eAAM,CAAC,KAAK,CACV;YACE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;SACpD,EACD,2BAA2B,CAC5B,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,cAAc,GAAG;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;IACF,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,CAC5C,MAAM,CAAC,qBAAqB,EAC5B,cAAc,EACd,KAAK,CACN,CAAC;IACF,eAAM,CAAC,KAAK,CACV,EAAE,cAAc,EAAE,qBAAqB,EAAE,EACzC,wCAAwC,CACzC,CAAC;IACF,eAAM,CAAC,KAAK,CACV,sCAAsC,MAAM,CAAC,qBAAqB,YAAY,qBAAqB,GAAG,CACvG,CAAC;IACF,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,mBAAQ,CAAC,UAAU,CACvC,MAAM,CAAC,qBAAqB,EAC5B,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iCAAiC,CAAC,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,yCAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,eAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,eAAM,CAAC,KAAK,CAAC,gCAAgC,qBAAqB,GAAG,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,uBAAe,EACjC,MAAM,CAAC,qBAAqB,EAC5B,aAAa,CACd,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,eAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,iCAAiC,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,2CAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,eAAe,GAAG,WAAW,CAAC,cAAgC,CAAC;IACrE,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAc,EAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EACtB,0CAA0C,CAC3C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,eAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAC1B,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,GAAG,MAAM,IAAA,uBAAa,EAAC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAE9E,IAAI,cAAc,GAAG,IAAA,2BAAkB,EAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAA,eAAM,EAAC,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;QAC7C,eAAM,CAAC,KAAK,CACV,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,EACpD,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,YAAE,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,cAAc,GAAG,IAAA,0CAAgC,EAAC;YAChD,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;SAClC,CAAC,CAAC;QACH,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtC,OAAO,IAAA,yBAAgB,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;IAED,eAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,MAAM,IAAA,8BAAoB,EAC/C,cAAc,EACd,MAAM,EACN,MAAM,CAAC,aAAa,CACrB,CAAC;IACF,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,2BAA2B,CAAC,CAAC;IAEtE,MAAM,aAAa,GAAG,MAAM,IAAA,2BAAc,EAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACtE,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,eAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,EAChC,6DAA6D,CAC9D,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClC,eAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,EACpC,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,eAAe,GAAG,MAAM,IAAA,uBAAa,EAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAEzE,qFAAqF;IACrF,cAAc,GAAG,IAAA,2BAAkB,EAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAA,eAAM,EAAC,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;QAC7C,eAAM,CAAC,KAAK,CACV,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,EACpD,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,cAAc,GAAG,IAAA,0CAAgC,EAAC;QAChD,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;KAClC,CAAC,CAAC;IACH,qBAAqB,CAAC,cAAc,CAAC,CAAC;IACtC,OAAO,IAAA,yBAAgB,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAsB;IACnD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,eAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uBAAuB;gBACvB,eAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EACrB,oCAAoC,CACrC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,oCAAoC;QACpC,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC,SAAS,CAAC;IAC1B,CAAC;AACH,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { mergeChildConfig, removeGlobalConfig } from '../../../config';\nimport { decryptConfig } from '../../../config/decrypt';\nimport { parseFileConfig } from '../../../config/parse';\nimport { resolveConfigPresets } from '../../../config/presets';\nimport { applySecretsAndVariablesToConfig } from '../../../config/secrets';\nimport type { RenovateConfig } from '../../../config/types';\nimport { validateConfig } from '../../../config/validation';\nimport {\n  CONFIG_INHERIT_NOT_FOUND,\n  CONFIG_INHERIT_PARSE_ERROR,\n  CONFIG_VALIDATION,\n} from '../../../constants/error-messages';\nimport { logger } from '../../../logger';\nimport { platform } from '../../../modules/platform';\nimport * as hostRules from '../../../util/host-rules';\nimport * as queue from '../../../util/http/queue';\nimport * as throttle from '../../../util/http/throttle';\nimport * as template from '../../../util/template';\n\nexport async function mergeInheritedConfig(\n  config: RenovateConfig,\n): Promise<RenovateConfig> {\n  // typescript doesn't know that repo is defined\n  if (!config.repository || !config.inheritConfig) {\n    return config;\n  }\n  if (\n    !is.string(config.inheritConfigRepoName) ||\n    !is.string(config.inheritConfigFileName)\n  ) {\n    // Config validation should prevent this error\n    logger.error(\n      {\n        inheritConfigRepoName: config.inheritConfigRepoName,\n        inheritConfigFileName: config.inheritConfigFileName,\n      },\n      'Invalid inherited config.',\n    );\n    return config;\n  }\n  const templateConfig = {\n    topLevelOrg: config.topLevelOrg,\n    parentOrg: config.parentOrg,\n    repository: config.repository,\n  };\n  const inheritConfigRepoName = template.compile(\n    config.inheritConfigRepoName,\n    templateConfig,\n    false,\n  );\n  logger.trace(\n    { templateConfig, inheritConfigRepoName },\n    'Compiled inheritConfigRepoName result.',\n  );\n  logger.debug(\n    `Checking for inherited config file ${config.inheritConfigFileName} in repo ${inheritConfigRepoName}.`,\n  );\n  let configFileRaw: string | null = null;\n  try {\n    configFileRaw = await platform.getRawFile(\n      config.inheritConfigFileName,\n      inheritConfigRepoName,\n    );\n  } catch (err) {\n    if (config.inheritConfigStrict) {\n      logger.debug({ err }, 'Error getting inherited config.');\n      throw new Error(CONFIG_INHERIT_NOT_FOUND);\n    }\n    logger.trace({ err }, `Error getting inherited config.`);\n  }\n  if (!configFileRaw) {\n    logger.debug(`No inherited config found in ${inheritConfigRepoName}.`);\n    return config;\n  }\n  const parseResult = parseFileConfig(\n    config.inheritConfigFileName,\n    configFileRaw,\n  );\n  if (!parseResult.success) {\n    logger.debug({ parseResult }, 'Error parsing inherited config.');\n    throw new Error(CONFIG_INHERIT_PARSE_ERROR);\n  }\n  const inheritedConfig = parseResult.parsedContents as RenovateConfig;\n  logger.debug({ config: inheritedConfig }, `Inherited config`);\n  const res = await validateConfig('inherit', inheritedConfig);\n  if (res.errors.length) {\n    logger.warn(\n      { errors: res.errors },\n      'Found errors in inherited configuration.',\n    );\n    throw new Error(CONFIG_VALIDATION);\n  }\n  if (res.warnings.length) {\n    logger.warn(\n      { warnings: res.warnings },\n      'Found warnings in inherited configuration.',\n    );\n  }\n\n  let decryptedConfig = await decryptConfig(inheritedConfig, config.repository);\n\n  let filteredConfig = removeGlobalConfig(decryptedConfig, true);\n  if (!dequal(decryptedConfig, filteredConfig)) {\n    logger.debug(\n      { inheritedConfig: decryptedConfig, filteredConfig },\n      'Removed global config from inherited config.',\n    );\n  }\n\n  if (is.nullOrUndefined(filteredConfig.extends)) {\n    filteredConfig = applySecretsAndVariablesToConfig({\n      config: filteredConfig,\n      secrets: config.secrets ?? {},\n      variables: config.variables ?? {},\n    });\n    setInheritedHostRules(filteredConfig);\n    return mergeChildConfig(config, filteredConfig);\n  }\n\n  logger.debug('Resolving presets found in inherited config');\n  const resolvedConfig = await resolveConfigPresets(\n    filteredConfig,\n    config,\n    config.ignorePresets,\n  );\n  logger.trace({ config: resolvedConfig }, 'Resolved inherited config');\n\n  const validationRes = await validateConfig('inherit', resolvedConfig);\n  if (validationRes.errors.length) {\n    logger.warn(\n      { errors: validationRes.errors },\n      'Found errors in presets inside the inherited configuration.',\n    );\n    throw new Error(CONFIG_VALIDATION);\n  }\n  if (validationRes.warnings.length) {\n    logger.warn(\n      { warnings: validationRes.warnings },\n      'Found warnings in presets inside the inherited configuration.',\n    );\n  }\n\n  // decrypt again, as resolved presets could contain encrypted values\n  decryptedConfig = await decryptConfig(resolvedConfig, config.repository);\n\n  // remove global config options once again, as resolved presets could have added some\n  filteredConfig = removeGlobalConfig(decryptedConfig, true);\n  if (!dequal(decryptedConfig, filteredConfig)) {\n    logger.debug(\n      { inheritedConfig: decryptedConfig, filteredConfig },\n      'Removed global config from inherited config presets.',\n    );\n  }\n\n  filteredConfig = applySecretsAndVariablesToConfig({\n    config: filteredConfig,\n    secrets: config.secrets ?? {},\n    variables: config.variables ?? {},\n  });\n  setInheritedHostRules(filteredConfig);\n  return mergeChildConfig(config, filteredConfig);\n}\n\nfunction setInheritedHostRules(config: RenovateConfig): void {\n  if (config.hostRules) {\n    logger.debug('Setting hostRules from config');\n    for (const rule of config.hostRules) {\n      try {\n        hostRules.add(rule);\n      } catch (err) {\n        // istanbul ignore next\n        logger.warn(\n          { err, config: rule },\n          'Error setting hostRule from config',\n        );\n      }\n    }\n    // host rules can change concurrency\n    queue.clear();\n    throttle.clear();\n    delete config.hostRules;\n  }\n}\n"]}

package/dist/workers/repository/init/merge.js

@@ -225,7 +225,11 @@ async function mergeRenovateConfig(config, branchName) {
         logger_1.logger.debug('Ignoring any .npmrc files in repository due to configured npmrc');
         npmApi.setNpmrc(resolvedConfig.npmrc);
     }
-    resolvedConfig = (0, secrets_1.applySecretsToConfig)(resolvedConfig, (0, config_1.mergeChildConfig)(config.secrets ?? {}, resolvedConfig.secrets ?? {}));
+    resolvedConfig = (0, secrets_1.applySecretsAndVariablesToConfig)({
+        config: resolvedConfig,
+        secrets: (0, config_1.mergeChildConfig)(config.secrets ?? {}, resolvedConfig.secrets ?? {}),
+        variables: (0, config_1.mergeChildConfig)(config.variables ?? {}, resolvedConfig.variables ?? {}),
+    });
     // istanbul ignore if
     if (resolvedConfig.hostRules) {
         logger_1.logger.debug('Setting hostRules from config');