ERROR: merge confidence API token rejected - aborting run #23229

schmidi · 2023-07-07T06:52:49Z

schmidi
Jul 7, 2023

How are you running Renovate?

Self-hosted

If you're self-hosting Renovate, tell us what version of Renovate you run.

36.1.16

If you're self-hosting Renovate, select which platform you are using.

Bitbucket Server

Was this something which used to work for you, and then stopped?

I never saw this working

Wanted end result.

Renovate should run and check the repository.

What you tried so far.

Searched for information how to get an api token for the merge confidence api.

Relevant debug logs

Logs

ERROR: merge confidence API token rejected - aborting run
       "err": {
         "name": "HTTPError",
         "code": "ERR_NON_2XX_3XX_RESPONSE",
         "timings": {
           "start": 1688712627202,
           "socket": 1688712627205,
           "lookup": 1688712627254,
           "connect": 1688712627272,
           "secureConnect": 1688712627294,
           "upload": 1688712627295,
           "response": 1688712627721,
           "end": 1688712627725,
           "phases": {
             "wait": 3,
             "dns": 49,
             "tcp": 18,
             "tls": 22,
             "request": 1,
             "firstByte": 426,
             "download": 4,
             "total": 523
           }
         },
         "message": "Response code 403 (Forbidden)",
         "stack": "HTTPError: Response code 403 (Forbidden)\n    at Request.<anonymous> (/opt/containerbase/tools/renovate/36.1.16/node_modules/got/dist/source/as-promise/index.js:118:42)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)",
         "options": {
           "headers": {
             "user-agent": "RenovateBot/36.1.16 (https://github.com/renovatebot/renovate)",
             "authorization": "***********",
             "accept-encoding": "gzip, deflate, br"
           },
           "url": "https://developer.mend.io/api/mc/availability",
           "hostType": "merge-confidence",
           "username": "",
           "password": "",
           "method": "GET",
           "http2": false
         },
         "response": {
           "statusCode": 403,
           "statusMessage": "Forbidden",
           "body": "{\"message\":\"invalid token\"}",
           "headers": {
             "date": "Fri, 07 Jul 2023 06:50:27 GMT",
             "content-type": "application/json; charset=utf-8",
             "content-length": "27",
             "connection": "close",
             "x-powered-by": "Express",
             "etag": "W/\"1b-vdbCRHEl3J3b81u/YMssBiTkS2w\"",
             "cf-cache-status": "DYNAMIC",
             "server": "cloudflare",
             "cf-ray": "7e2e274098484c51-MXP"
           },
           "httpVersion": "1.1",
           "retryCount": 0
         }
       }

Answered by rarkins

Jul 7, 2023

I see it now. It's because you wrote hostMatch instead of matchHost in your hostRules

View full answer

viceice · 2023-07-07T06:54:27Z

viceice
Jul 7, 2023
Maintainer

don't use that yet, it's beta and mend internal only feature yet

2 replies

schmidi Jul 7, 2023
Author

How can I disable that feature?
I did not activate it on purpose...
Is there an option for the config.js file?
In my repository configuration I already inserted: "ignorePresets": ["github>whitesource/merge-confidence:beta"],

viceice Jul 7, 2023
Maintainer

don't use this in package rules

https://docs.renovatebot.com/configuration-options/#matchconfidence

rarkins · 2023-07-07T07:01:09Z

rarkins
Jul 7, 2023
Maintainer

Don't use the matchConfidence or minimumConfidence fields

9 replies

rarkins Jul 7, 2023
Maintainer

I think your github.com host rules are causing Renovate to think it's a token for merge confidence. This should be addressed by #23231

schmidi Jul 7, 2023
Author

Thank you for your quick response. I am waiting for the new docker image release to test the fix.
Will mark the post as answer as soon as I can confirm the fix.

schmidi Jul 7, 2023
Author

Unfortunately the problem still exists with version 36.3.0, see the attached logs:

Select me to see logs

DEBUG: Using RE2 as regex engine
DEBUG: Parsing configs
DEBUG: Checking for config file in /usr/src/app/config.js
DEBUG: File config
       "config": {
         "platform": "bitbucket-server",
         "username": "generic",
         "password": "***********",
         "endpoint": "https://git.telecom.ewb.ch",
         "repositories": ["ted/tedrepository"],
         "persistRepoData": true,
         "autodiscover": false,
         "dryRun": null,
         "unicodeEmoji": false,
         "timezone": "Europe/Zurich",
         "onboardingConfig": {
           "extends": ["config:recommended", ":dependencyDashboard"]
         },
         "hostRules": [
           {"hostMatch": "github.com", "token": "***********"},
           {"hostMatch": "api.github.com", "token": "***********"},
           {
             "hostType": "docker",
             "username": "telecomcenter",
             "password": "***********"
           }
         ]
       }
DEBUG: CLI config
       "config": {}
DEBUG: Env config
       "config": {"hostRules": []}
DEBUG: Combined config
       "config": {
         "platform": "bitbucket-server",
         "username": "generic",
         "password": "***********",
         "endpoint": "https://git.telecom.ewb.ch",
         "repositories": ["ted/tedrepository"],
         "persistRepoData": true,
         "autodiscover": false,
         "dryRun": null,
         "unicodeEmoji": false,
         "timezone": "Europe/Zurich",
         "onboardingConfig": {
           "extends": ["config:recommended", ":dependencyDashboard"]
         },
         "hostRules": [
           {"hostMatch": "github.com", "token": "***********"},
           {"hostMatch": "api.github.com", "token": "***********"},
           {
             "hostType": "docker",
             "username": "telecomcenter",
             "password": "***********"
           }
         ]
       }
DEBUG: Adding trailing slash to endpoint
DEBUG: Enabling forkProcessing while in non-autodiscover mode
DEBUG: Found valid git version: 2.41.0
DEBUG: Adding password authentication for git.telecom.ewb.ch to hostRules
DEBUG: Using baseDir: /tmp/renovate
DEBUG: Using cacheDir: /tmp/renovate/cache
DEBUG: Using containerbaseDir: /tmp/renovate/cache/containerbase
DEBUG: Initializing Renovate internal cache into /tmp/renovate/cache/renovate/renovate-cache-v1
DEBUG: Commits limit = null
DEBUG: Setting global hostRules
DEBUG: Adding password authentication for git.telecom.ewb.ch to hostRules
DEBUG: Merge confidence token found for https://developer.mend.io/
DEBUG: GET https://developer.mend.io/api/mc/availability = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=403 retryCount=0, duration=512)
ERROR: merge confidence API token rejected - aborting run
       "err": {
         "name": "HTTPError",
         "code": "ERR_NON_2XX_3XX_RESPONSE",
         "timings": {
           "start": 1688728748928,
           "socket": 1688728748931,
           "lookup": 1688728748933,
           "connect": 1688728748977,
           "secureConnect": 1688728748996,
           "upload": 1688728748997,
           "response": 1688728749436,
           "end": 1688728749440,
           "phases": {
             "wait": 3,
             "dns": 2,
             "tcp": 44,
             "tls": 19,
             "request": 1,
             "firstByte": 439,
             "download": 4,
             "total": 512
           }
         },
         "message": "Response code 403 (Forbidden)",
         "stack": "HTTPError: Response code 403 (Forbidden)\n    at Request.<anonymous> (/opt/containerbase/tools/renovate/36.3.0/node_modules/got/dist/source/as-promise/index.js:118:42)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)",
         "options": {
           "headers": {
             "user-agent": "RenovateBot/36.3.0 (https://github.com/renovatebot/renovate)",
             "authorization": "***********",
             "accept-encoding": "gzip, deflate, br"
           },
           "url": "https://developer.mend.io/api/mc/availability",
           "hostType": "merge-confidence",
           "username": "",
           "password": "",
           "method": "GET",
           "http2": false
         },
         "response": {
           "statusCode": 403,
           "statusMessage": "Forbidden",
           "body": "{\"message\":\"invalid token\"}",
           "headers": {
             "date": "Fri, 07 Jul 2023 11:19:09 GMT",
             "content-type": "application/json; charset=utf-8",
             "content-length": "27",
             "connection": "close",
             "x-powered-by": "Express",
             "etag": "W/\"1b-vdbCRHEl3J3b81u/YMssBiTkS2w\"",
             "cf-cache-status": "DYNAMIC",
             "server": "cloudflare",
             "cf-ray": "7e2fb0d93c48bad5-MXP"
           },
           "httpVersion": "1.1",
           "retryCount": 0
         }
       }
FATAL: Fatal error: external-host-error
       "err": {
         "hostType": "merge-confidence",
         "err": {
           "name": "HTTPError",
           "code": "ERR_NON_2XX_3XX_RESPONSE",
           "timings": {
             "start": 1688728748928,
             "socket": 1688728748931,
             "lookup": 1688728748933,
             "connect": 1688728748977,
             "secureConnect": 1688728748996,
             "upload": 1688728748997,
             "response": 1688728749436,
             "end": 1688728749440,
             "phases": {
               "wait": 3,
               "dns": 2,
               "tcp": 44,
               "tls": 19,
               "request": 1,
               "firstByte": 439,
               "download": 4,
               "total": 512
             }
           },
           "message": "Response code 403 (Forbidden)",
           "stack": "HTTPError: Response code 403 (Forbidden)\n    at Request.<anonymous> (/opt/containerbase/tools/renovate/36.3.0/node_modules/got/dist/source/as-promise/index.js:118:42)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)",
           "options": {
             "headers": {
               "user-agent": "RenovateBot/36.3.0 (https://github.com/renovatebot/renovate)",
               "authorization": "***********",
               "accept-encoding": "gzip, deflate, br"
             },
             "url": "https://developer.mend.io/api/mc/availability",
             "hostType": "merge-confidence",
             "username": "",
             "password": "",
             "method": "GET",
             "http2": false
           },
           "response": {
             "statusCode": 403,
             "statusMessage": "Forbidden",
             "body": "{\"message\":\"invalid token\"}",
             "headers": {
               "date": "Fri, 07 Jul 2023 11:19:09 GMT",
               "content-type": "application/json; charset=utf-8",
               "content-length": "27",
               "connection": "close",
               "x-powered-by": "Express",
               "etag": "W/\"1b-vdbCRHEl3J3b81u/YMssBiTkS2w\"",
               "cf-cache-status": "DYNAMIC",
               "server": "cloudflare",
               "cf-ray": "7e2fb0d93c48bad5-MXP"
             },
             "httpVersion": "1.1",
             "retryCount": 0
           }
         },
         "message": "external-host-error",
         "stack": "Error: external-host-error\n    at apiErrorHandler (/opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/util/merge-confidence/index.ts:243:11)\n    at initMergeConfidence (/opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/util/merge-confidence/index.ts:190:5)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at globalInitialize (/opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/workers/global/initialize.ts:78:3)\n    at /opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/workers/global/index.ts:134:16\n    at start (/opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/workers/global/index.ts:123:5)\n    at /opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/renovate.ts:18:22"
       }
DEBUG: Checking file package cache for expired items
DEBUG: Deleted 0 of 0 file cached entries in 3ms
DEBUG: Renovate exiting
 INFO: Renovate is exiting with a non-zero code due to the following logged errors
       "loggerErrors": [
         {
           "name": "renovate",
           "level": 50,
           "logContext": "ruPMLp23gueri3DjzaRdF",
           "err": {
             "name": "HTTPError",
             "code": "ERR_NON_2XX_3XX_RESPONSE",
             "timings": {
               "start": 1688728748928,
               "socket": 1688728748931,
               "lookup": 1688728748933,
               "connect": 1688728748977,
               "secureConnect": 1688728748996,
               "upload": 1688728748997,
               "response": 1688728749436,
               "end": 1688728749440,
               "phases": {
                 "wait": 3,
                 "dns": 2,
                 "tcp": 44,
                 "tls": 19,
                 "request": 1,
                 "firstByte": 439,
                 "download": 4,
                 "total": 512
               }
             },
             "message": "Response code 403 (Forbidden)",
             "stack": "HTTPError: Response code 403 (Forbidden)\n    at Request.<anonymous> (/opt/containerbase/tools/renovate/36.3.0/node_modules/got/dist/source/as-promise/index.js:118:42)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)",
             "options": {
               "headers": {
                 "user-agent": "RenovateBot/36.3.0 (https://github.com/renovatebot/renovate)",
                 "authorization": "***********",
                 "accept-encoding": "gzip, deflate, br"
               },
               "url": "https://developer.mend.io/api/mc/availability",
               "hostType": "merge-confidence",
               "username": "",
               "password": "",
               "method": "GET",
               "http2": false
             },
             "response": {
               "statusCode": 403,
               "statusMessage": "Forbidden",
               "body": "{\"message\":\"invalid token\"}",
               "headers": {
                 "date": "Fri, 07 Jul 2023 11:19:09 GMT",
                 "content-type": "application/json; charset=utf-8",
                 "content-length": "27",
                 "connection": "close",
                 "x-powered-by": "Express",
                 "etag": "W/\"1b-vdbCRHEl3J3b81u/YMssBiTkS2w\"",
                 "cf-cache-status": "DYNAMIC",
                 "server": "cloudflare",
                 "cf-ray": "7e2fb0d93c48bad5-MXP"
               },
               "httpVersion": "1.1",
               "retryCount": 0
             }
           },
           "msg": "merge confidence API token rejected - aborting run"
         },
         {
           "name": "renovate",
           "level": 60,
           "logContext": "ruPMLp23gueri3DjzaRdF",
           "err": {
             "hostType": "merge-confidence",
             "err": {
               "name": "HTTPError",
               "code": "ERR_NON_2XX_3XX_RESPONSE",
               "timings": {
                 "start": 1688728748928,
                 "socket": 1688728748931,
                 "lookup": 1688728748933,
                 "connect": 1688728748977,
                 "secureConnect": 1688728748996,
                 "upload": 1688728748997,
                 "response": 1688728749436,
                 "end": 1688728749440,
                 "phases": {
                   "wait": 3,
                   "dns": 2,
                   "tcp": 44,
                   "tls": 19,
                   "request": 1,
                   "firstByte": 439,
                   "download": 4,
                   "total": 512
                 }
               },
               "message": "Response code 403 (Forbidden)",
               "stack": "HTTPError: Response code 403 (Forbidden)\n    at Request.<anonymous> (/opt/containerbase/tools/renovate/36.3.0/node_modules/got/dist/source/as-promise/index.js:118:42)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)",
               "options": {
                 "headers": {
                   "user-agent": "RenovateBot/36.3.0 (https://github.com/renovatebot/renovate)",
                   "authorization": "***********",
                   "accept-encoding": "gzip, deflate, br"
                 },
                 "url": "https://developer.mend.io/api/mc/availability",
                 "hostType": "merge-confidence",
                 "username": "",
                 "password": "",
                 "method": "GET",
                 "http2": false
               },
               "response": {
                 "statusCode": 403,
                 "statusMessage": "Forbidden",
                 "body": "{\"message\":\"invalid token\"}",
                 "headers": {
                   "date": "Fri, 07 Jul 2023 11:19:09 GMT",
                   "content-type": "application/json; charset=utf-8",
                   "content-length": "27",
                   "connection": "close",
                   "x-powered-by": "Express",
                   "etag": "W/\"1b-vdbCRHEl3J3b81u/YMssBiTkS2w\"",
                   "cf-cache-status": "DYNAMIC",
                   "server": "cloudflare",
                   "cf-ray": "7e2fb0d93c48bad5-MXP"
                 },
                 "httpVersion": "1.1",
                 "retryCount": 0
               }
             },
             "message": "external-host-error",
             "stack": "Error: external-host-error\n    at apiErrorHandler (/opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/util/merge-confidence/index.ts:243:11)\n    at initMergeConfidence (/opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/util/merge-confidence/index.ts:190:5)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at globalInitialize (/opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/workers/global/initialize.ts:78:3)\n    at /opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/workers/global/index.ts:134:16\n    at start (/opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/workers/global/index.ts:123:5)\n    at /opt/containerbase/tools/renovate/36.3.0/node_modules/renovate/lib/renovate.ts:18:22"
           },
           "msg": "Fatal error: external-host-error"
         }
       ]

rarkins Jul 7, 2023
Maintainer

I see it now. It's because you wrote hostMatch instead of matchHost in your hostRules

Answer selected by schmidi

schmidi Jul 7, 2023
Author

Thank you very much for the quick response. That change did the trick!

2023-07-07T07:09:10Z

github-actions[bot]
bot Jul 7, 2023

Hi there,

This issue or discussion is missing some logs, making it difficult or impossible to help you. Depending on which situation applies follow one, some or all of these instructions.

No logs at all

If you haven't posted any log yet, we need you to find and copy/paste the log into the issue template.

Finding logs on hosted app

Select me to read instructions

If you use the Renovate app (GitHub):

Go to the affected PR, and search for "View repository job log here"
Select the link to go to the "Mend Renovate Dashboard" and log in
You are now in the correct repository log overview screen
Copy/paste the correct log
Follow the steps in the formatting your logs section

Finding logs when self-hosting

Select me to read instructions

If you're running self-hosted, run with LOG_LEVEL=debug in your environment variables and search for whatever dependency/branch/PR that is causing the problem.

Insufficient logs

Select me to read instructions

If you already gave us a log, and the Renovate team said it's not enough, then follow the instructions from the No logs at all section.

Formatting your logs

Select me to read instructions

Please put your logs in a <details> and <summary> element like this:

<details><summary>Select me to see logs</summary>

```
Copy/paste your logs here, between the starting and ending backticks
```

</details>

Good luck,

The Renovate team

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ERROR: merge confidence API token rejected - aborting run #23229

{{title}}

Replies: 3 comments 11 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

ERROR: merge confidence API token rejected - aborting run #23229

schmidi Jul 7, 2023

How are you running Renovate?

If you're self-hosting Renovate, tell us what version of Renovate you run.

If you're self-hosting Renovate, select which platform you are using.

Was this something which used to work for you, and then stopped?

Wanted end result.

What you tried so far.

Relevant debug logs

Replies: 3 comments · 11 replies

viceice Jul 7, 2023 Maintainer

schmidi Jul 7, 2023 Author

viceice Jul 7, 2023 Maintainer

rarkins Jul 7, 2023 Maintainer

rarkins Jul 7, 2023 Maintainer

schmidi Jul 7, 2023 Author

schmidi Jul 7, 2023 Author

rarkins Jul 7, 2023 Maintainer

schmidi Jul 7, 2023 Author

github-actions[bot] bot Jul 7, 2023

No logs at all

Finding logs on hosted app

Finding logs when self-hosting

Insufficient logs

Formatting your logs

schmidi
Jul 7, 2023

Replies: 3 comments 11 replies

viceice
Jul 7, 2023
Maintainer

schmidi Jul 7, 2023
Author

viceice Jul 7, 2023
Maintainer

rarkins
Jul 7, 2023
Maintainer

rarkins Jul 7, 2023
Maintainer

schmidi Jul 7, 2023
Author

schmidi Jul 7, 2023
Author

rarkins Jul 7, 2023
Maintainer

schmidi Jul 7, 2023
Author

github-actions[bot]
bot Jul 7, 2023