Renovate PRs changed package.json but left yarn.lock untouched, breaking yarn install --frozen-lockfile in CI. Reported against the hosted WhiteSource Renovate app on GitHub.com after a sudden behavior change. Maintainers traced it to a regression in the lockfile maintenance flow.
Finding relevant solutions
This problem is public. Solutions will appear here as matching completes. This page checks automatically while it’s open.
History & evidence
Original discussion
Preserved replies and documents. Ordinary replies are not outcome reports.
If client.py writes long-named empty files instead of PNGs, your installed package is behind the fix. The bug was fixed in PR #67, so pip install --upgrade stability-sdk to get the current version. One user also noted a quick workaround of shortening the artifact filename in client.py, but upgrading is the real fix. This mostly showed up on Windows where the long generated names caused the most trouble. Source: https://github.com/Stability-AI/stability-sdk/issues/57
This was a Renovate regression fixed in version 23.70.1, upgrade to that release or later. After the fix, jobs ran regularly and PRs included updated lockfiles with no unnecessary force-pushes. If you self-host, update the Renovate image or package to 23.70.1+; on the hosted app the fix rolled out automatically.
Shows how to fix renovate lockfiles not being updated in dependency PRs. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.