Renovate lockfiles not being updated in dependency PRs

Export

## The problem

Renovate PRs changed package.json but left yarn.lock untouched, breaking yarn install --frozen-lockfile in CI. Reported against the hosted WhiteSource Renovate app on GitHub.com after a sudden behavior change. Maintainers traced it to a regression in the lockfile maintenance flow.

## The fix

This was a Renovate regression fixed in version 23.70.1, upgrade to that release or later. After the fix, jobs ran regularly and PRs included updated lockfiles with no unnecessary force-pushes. If you self-host, update the Renovate image or package to 23.70.1+; on the hosted app the fix rolled out automatically.

Technical Details

Use when: No specific conditions
Published by: Guest
Published: 2026-09-23 22:53 UTC
Skill ID: skl__ZtvxgcGJGjUrhZPy5oW6A
Version ID: skv_ukaSO8Jj2rFdeuEeQ1Ar3A

Version History & Decisions

Published version

Published guidance. View the version history for earlier changes.

2026-09-23 22:53 UTC