Failed to look up rubygems package from a private artifactory repo

[sandeshhardikar]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

Gitlab renovate-ce:9.2.0-full

Please tell us more about your question or problem

Failed to look up rubygems package

We have hosted our gems repository in our organizations private artifactory repo and renovate fails to look up those dependencies. Please note that we have bunch of other dependencies like docker,gradle for example which are also hosted in the same private artifactory instance and they seem to work well.

Scenario 1 Use token as combination of username:to authenticate

This is what our dependency dashboard says

1. Failed to look up rubygems package simplecov
2. bundler

Gemfile

- `simplecov undefined`

3. This is how part of our renovate config looks like (I am putting in contents which makes sense)

enabledManagers: [
    'bundler',
    'dockerfile',
    'gradle',
    'helm-requirements',
    'helm-values',
    'helmv3',
    'maven',
    'nodenv',
    'npm',
    'pip_requirements',
  ],
 secrets: {
    artifactory_password: "@artifactory_password@",
  },
  hostRules: [
    {
      timeout: 60000, //60s (default) - Lookups of uncached objects Artifactory can take a while; look for "Timeout awaiting" in the renovate log
    },
    {
      matchHost: '@artifactory_url@',
      hostType: 'rubygems',
      token: "@artifactory_username@:{{ secrets.artifactory_password }}"
    },
    {
      matchHost: '@artifactory_url@',
      hostType: 'maven',
      username: "@artifactory_username@",
      password: "{{ secrets.artifactory_password }}"
    },

 packageRules: [
   {
      matchDatasources: ['rubygems'],
      registryUrls: ["@artifactory_url@/artifactory/api/gems/gems-all"]
    },
    {
      matchDatasources: ['gradle-version'],
      registryUrls: ["@artifactory_url@/artifactory/gradle-all"]
    },
]

For scenario 1, this is the log message i get

2025-07-08T08:40:34.587313461Z DEBUG: Datasource unauthorized (repository=gitlabgroup/reponame)
2025-07-08T08:40:34.587323921Z        "datasource": "rubygems",
2025-07-08T08:40:34.587326681Z        "packageName": "simplecov",
2025-07-08T08:40:34.587328751Z        "url": "https://privateartifactoryurl/artifactory/api/gems/gems-all/api/v1/dependencies?gems=simplecov"
2025-07-08T08:40:34.588208799Z DEBUG: Failed to look up rubygems package simplecov (repository=gitlabgroup/reponame, packageFile=Gemfile, dependency=simplecov)
2025-07-08T08:40:34.588216359Z DEBUG: GET https://privateartifactoryurl/artifactory/api/gems/gems-all/api/v1/dependencies?gems=rubocop-rake = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=401 retryCount=0, duration=39) (repository=gitlabgroup/reponame)

Scenario 2 Use username and password to authenticate

The only thing which changes is

{
     matchHost: '@artifactory_url@',
     hostType: 'rubygems',
     username: "@artifactory_username@",
     password: "{{ secrets.artifactory_password }}"
   },

For scenario 2 the dependency dashboard errors out

Errored
These updates encountered an error and will be retried. Click on a checkbox below to force a retry now.

For scenario 2, this is the log message i get

2025-07-08T09:35:29.071495691Z DEBUG: Executing command (repository=gitlabgroup/reponame, branch=renovate/all-dependencies)
2025-07-08T09:35:29.071500551Z        "command": "bundler lock --patch --strict --update minitest"
2025-07-08T09:35:29.466084185Z DEBUG: rawExec err (repository=gitlabgroup/reponame, branch=renovate/all-dependencies)
2025-07-08T09:35:29.466109565Z        "err": {
2025-07-08T09:35:29.466111845Z          "cmd": "/bin/sh -c bundler lock --patch --strict --update minitest",
2025-07-08T09:35:29.466114345Z          "stderr": "Authentication is required for myprivaterepo.net.\nPlease supply credentials for this source. You can do this by running:\n`bundle config set --global myprivaterepo.net\nusername:password`\nor by storing the credentials in the\n`BUNDLE_MY___ARTIFACTORY__APPS__PRIVATE___REPO__NET` environment variable\n",
2025-07-08T09:35:29.466124885Z          "stdout": "Writing lockfile to /tmp/renovate/repos/gitlab/gitlabgroup/reponame/Gemfile.lock\n",
2025-07-08T09:35:29.466126955Z          "options": {
2025-07-08T09:35:29.466128565Z            "cwd": "/tmp/renovate/repos/gitlab/gitlabgroup/reponame",
2025-07-08T09:35:29.466130695Z            "encoding": "utf-8",
2025-07-08T09:35:29.466132395Z            "env": {
2025-07-08T09:35:29.466134005Z              "GEM_HOME": "/tmp/renovate/cache/others/bundler",
2025-07-08T09:35:29.466135685Z              "HOME": "/home/ubuntu",
2025-07-08T09:35:29.466137555Z              "PATH": "/home/ubuntu/.local/bin:/home/ubuntu/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin",
2025-07-08T09:35:29.466139465Z              "LC_ALL": "C.UTF-8",
2025-07-08T09:35:29.466141085Z              "LANG": "C.UTF-8",
2025-07-08T09:35:29.466142765Z              "NODE_EXTRA_CA_CERTS": "/usr/src/app/ca-certificates.crt"
2025-07-08T09:35:29.466144555Z            },
2025-07-08T09:35:29.466146145Z            "maxBuffer": 10485760,
2025-07-08T09:35:29.466147835Z            "timeout": 900000
2025-07-08T09:35:29.466149555Z          },
2025-07-08T09:35:29.466151185Z          "exitCode": 17,
2025-07-08T09:35:29.466152925Z          "name": "ExecError",
2025-07-08T09:35:29.466154735Z          "message": "Command failed: bundler lock --patch --strict --update minitest\nAuthentication is required for myprivaterepo.net.\nPlease supply credentials for this source. You can do this by running:\n`bundle config set --global myprivaterepo.net\nusername:password`\nor by storing the credentials in the\n`BUNDLE_MY___ARTIFACTORY__APPS__PRIVATE___REPO__NET` environment variable\n",
2025-07-08T09:35:29.466160135Z          "stack": "ExecError: Command failed: bundler lock --patch --strict --update minitest\nAuthentication is required for myprivaterepo.net.\nPlease supply credentials for this source. You can do this by running:\n`bundle config set --global myprivaterepo.net\nusername:password`\nor by storing the credentials in the\n`BUNDLE_MY___ARTIFACTORY__APPS__PRIVATE___REPO__NET` environment variable\n\n    at ChildProcess.<anonymous> (/usr/src/app/node_modules/renovate/lib/util/exec/common.ts:101:11)\n    at ChildProcess.emit (node:events:530:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:293:12)"
2025-07-08T09:35:29.466163455Z        },
2025-07-08T09:35:29.466165045Z        "durationMs": 392
2025-07-08T09:35:29.466191925Z DEBUG: Gemfile.lock update failed due to missing credentials - skipping branch (repository=gitlabgroup/reponame, branch=renovate/all-dependencies)

I have also set BUNDLE_MY___ARTIFACTORY__APPS__PRIVATE___REPO__NET variable inside the container, but renovate doesnt seem to pick it from there
Note: Artifactory gem repo is a virtual repo.

Logs (if relevant)

Logs

Replace this text with your logs, between the starting and ending triple backticks

[github-actions[bot]]

Hi there,

The maintainers have labeled this discussion as a use case specific to "enterprise" users. Enterprise users typically self-host Renovate and have advanced requirements like custom certificates, HTTP proxies, private registries, air gapping, etc.

Such cases usually need a lot of back-and-forth to resolve, because the problem is related to the user's environment. Usually the user's environment can not be reproduced publicly, which means that maintainer debugging is not possible.

The maintainers decided their time is best spent on issues that help large numbers of users. This means enterprise-specific issues affecting one user (or a small number of users), are not a priority. If we can help you quickly, we will. But if you see this message, then a maintainer believes this is not a quick fix. The maintainers will not actively work on this issue, unless new information is found.

If you are an enterprise user, please consider the following options:

• Troubleshoot and contribute a fix yourself, or
• Hire a consultant to help you, or
• Consider an Enterprise support contract from Mend.io, or
• Wait for a community member to help you, if they have the same problem

If you choose to wait, then this discussion can remain open indefinitely. But please be patient, do not nudge or bump this discussion just to get attention.

Thanks, the Renovate team