matchUpdateTypes not honored in docker ubuntu

[Elbandi]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

docker renovate full image.

Please tell us more about your question or problem

I have a simple Dockerfile:

FROM ubuntu:focal@sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef

This is the renovate config:

  extends: [
    'config:recommended',
  ],

  // Disable dependency dashboard
  dependencyDashboard: false,

  // Use our labelling system
  labels: ['dependencies'],
  enabledManagers: [
    "dockerfile",
  ],
}

After running local platform it found that there is a dist upgrade: focal->noble. and there is a digest update too:

DEBUG: packageFiles with updates (repository=local)
       "config": {
         "docker-compose": [{"deps": [], "packageFile": "docker-compose.yml"}],
         "dockerfile": [
           {
             "deps": [
               {
                 "depName": "ubuntu",
                 "currentValue": "focal",
                 "currentDigest": "sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef",
                 "replaceString": "ubuntu:focal@sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef",
                 "autoReplaceStringTemplate": "{{depName}}{{#if newValue}}:{{newValue}}{{/if}}{{#if newDigest}}@{{newDigest}}{{/if}}",
                 "datasource": "docker",
                 "versioning": "ubuntu",
                 "depType": "final",
                 "updates": [
                   {
                     "bucket": "major",
                     "newVersion": "noble",
                     "newValue": "noble",
                     "newDigest": "sha256:80dd3c3b9c6cecb9f1667e9290b3bc61b78c2678c02cbdae5f0fea92cc6734ab",
                     "releaseTimestamp": "2024-12-03T06:04:42.280Z",
                     "newVersionAgeInDays": 27,
                     "newMajor": 24,
                     "newMinor": 4,
                     "newPatch": null,
                     "updateType": "major",
                     "branchName": "renovate/ubuntu-24.x"
                   },
                   {
                     "updateType": "digest",
                     "newValue": "focal",
                     "newDigest": "sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b",
                     "branchName": "renovate/ubuntu-focal"
                   }
                 ],
                 "packageName": "ubuntu",
                 "warnings": [],
                 "registryUrl": "https://index.docker.io",
                 "lookupName": "library/ubuntu",
                 "currentVersion": "focal",
                 "currentVersionTimestamp": "2024-10-19T05:04:26.484Z",
                 "currentVersionAgeInDays": 72,
                 "isSingleVersion": true,
                 "fixedVersion": "focal"
               }
             ],
             "packageFile": "Dockerfile"
           }
         ]
       }

For testing, i disable everything by package rule:

  "packageRules": [
    {
      "matchDatasources": ["docker"],
      "matchPackageNames": ["amd64/ubuntu", "ubuntu"],
      "enabled": false,
    },
 ],

Looks good:

         "dockerfile": [
           {
             "deps": [
               {
                 "depName": "ubuntu",
                 "currentValue": "focal",
                 "currentDigest": "sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef",
                 "replaceString": "ubuntu:focal@sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef",
                 "autoReplaceStringTemplate": "{{depName}}{{#if newValue}}:{{newValue}}{{/if}}{{#if newDigest}}@{{newDigest}}{{/if}}",
                 "datasource": "docker",
                 "versioning": "ubuntu",
                 "depType": "final",
                 "updates": [],
                 "packageName": "ubuntu",
                 "skipReason": "disabled"
               }
             ],
             "packageFile": "Dockerfile"
           }
       ]
     }

If i want to disable major+minor updates, not works:

  "packageRules": [
    {
      "matchDatasources": ["docker"],
      "matchPackageNames": ["amd64/ubuntu", "ubuntu"],
      "matchUpdateTypes": ["major", "minor"],
      "enabled": false,
    },
  ],

Result:

         "dockerfile": [
           {
             "deps": [
               {
                 "depName": "ubuntu",
                 "currentValue": "focal",
                 "currentDigest": "sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef",
                 "replaceString": "ubuntu:focal@sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef",
                 "autoReplaceStringTemplate": "{{depName}}{{#if newValue}}:{{newValue}}{{/if}}{{#if newDigest}}@{{newDigest}}{{/if}}",
                 "datasource": "docker",
                 "versioning": "ubuntu",
                 "depType": "final",
                 "updates": [
                   {
                     "bucket": "major",
                     "newVersion": "noble",
                     "newValue": "noble",
                     "newDigest": "sha256:80dd3c3b9c6cecb9f1667e9290b3bc61b78c2678c02cbdae5f0fea92cc6734ab",
                     "releaseTimestamp": "2024-12-03T06:04:42.280Z",
                     "newVersionAgeInDays": 27,
                     "newMajor": 24,
                     "newMinor": 4,
                     "newPatch": null,
                     "updateType": "major",
                     "branchName": "renovate/ubuntu-24.x"
                   },
                   {
                     "updateType": "digest",
                     "newValue": "focal",
                     "newDigest": "sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b",
                     "branchName": "renovate/ubuntu-focal"
                   }
                 ],
                 "packageName": "ubuntu",
                 "warnings": [],
                 "registryUrl": "https://index.docker.io",
                 "lookupName": "library/ubuntu",
                 "currentVersion": "focal",
                 "currentVersionTimestamp": "2024-10-19T05:04:26.484Z",
                 "currentVersionAgeInDays": 72,
                 "isSingleVersion": true,
                 "fixedVersion": "focal"
               }
             ],
             "packageFile": "Dockerfile"
           }
         ]
       }

I searched for similar discussions, but i dont want to use nether allowedVersions workaround nor "close PR" workaround!

Logs (if relevant)

Logs

DEBUG: Using RE2 regex engine
DEBUG: Parsing configs
DEBUG: Checking for config file in config.js
DEBUG: No config file found on disk - skipping
DEBUG: File config
       "config": {}
DEBUG: CLI config
       "config": {"platform": "local"}
DEBUG: Env config
       "config": {"hostRules": [], "binarySource": "global"}
DEBUG: Combined config
       "config": {"hostRules": [], "binarySource": "global", "platform": "local"}
DEBUG: Enabling forkProcessing while in non-autodiscover mode
DEBUG: Enabling onboardingNoDeps while in non-autodiscover mode
DEBUG: Found valid git version: 2.47.1
DEBUG: Setting global hostRules
DEBUG: Using baseDir: /tmp/renovate
DEBUG: Using cacheDir: /tmp/renovate/cache
DEBUG: Initializing Renovate internal cache into /tmp/renovate/cache/renovate/renovate-cache-v1
DEBUG: Commits limit = null
DEBUG: Setting global hostRules
DEBUG: validatePresets()
DEBUG: Reinitializing hostRules for repo
DEBUG: Clearing hostRules
 INFO: Repository started (repository=local)
       "renovateVersion": "39.86.0"
DEBUG: Using localDir: /home/elbandi/devel/test (repository=local)
DEBUG: PackageFiles.clear() - Package files deleted (repository=local)
DEBUG: Resetting npmrc (repository=local)
DEBUG: Resetting npmrc (repository=local)
DEBUG: checkOnboarding() (repository=local)
DEBUG: isOnboarded() (repository=local)
DEBUG: findFile(renovate.json) (repository=local)
DEBUG: Got file list using git (repository=local)
DEBUG: findFile(renovate.json5) (repository=local)
DEBUG: Got file list using git (repository=local)
DEBUG: findFile(.github/renovate.json) (repository=local)
DEBUG: Got file list using git (repository=local)
DEBUG: findFile(.github/renovate.json5) (repository=local)
DEBUG: Got file list using git (repository=local)
DEBUG: Config file exists, fileName: .github/renovate.json5 (repository=local)
DEBUG: Repo is onboarded (repository=local)
DEBUG: Got file list using git (repository=local)
DEBUG: Found .github/renovate.json5 config file (repository=local)
DEBUG: Repository config (repository=local)
       "fileName": ".github/renovate.json5",
       "config": {
         "extends": ["config:recommended"],
         "dependencyDashboard": false,
         "labels": ["dependencies"],
         "enabledManagers": ["dockerfile"],
         "packageRules": [
           {
             "matchDatasources": ["docker"],
             "matchPackageNames": ["amd64/ubuntu", "ubuntu"],
             "matchUpdateTypes": ["major", "minor"],
             "enabled": false
           }
         ]
       }
DEBUG: migrateAndValidate() (repository=local)
DEBUG: No config migration necessary (repository=local)
DEBUG: Found repo ignorePaths (repository=local)
       "ignorePaths": [
         "**/node_modules/**",
         "**/bower_components/**",
         "**/vendor/**",
         "**/examples/**",
         "**/__tests__/**",
         "**/test/**",
         "**/tests/**",
         "**/__fixtures__/**"
       ]
DEBUG: No vulnerability alerts found (repository=local)
DEBUG: No baseBranches (repository=local)
DEBUG: extract() (repository=local)
DEBUG: Got file list using git (repository=local)
DEBUG: Using file match: (^|/|\.)([Dd]ocker|[Cc]ontainer)file$ for manager dockerfile (repository=local)
DEBUG: Using file match: (^|/)([Dd]ocker|[Cc]ontainer)file[^/]*$ for manager dockerfile (repository=local)
DEBUG: Matched 1 file(s) for manager dockerfile: Dockerfile (repository=local)
DEBUG: manager extract durations (ms) (repository=local)
       "managers": {"dockerfile": 6}
DEBUG: Found dockerfile package files (repository=local)
DEBUG: Found 1 package file(s) (repository=local)
 INFO: Dependency extraction complete (repository=local)
       "stats": {
         "managers": {"dockerfile": {"fileCount": 1, "depCount": 1}},
         "total": {"fileCount": 1, "depCount": 1}
       }
DEBUG: PackageFiles.add() - Package file saved for base branch (repository=local)
DEBUG: Package releases lookups complete (repository=local)
DEBUG: branchifyUpgrades (repository=local)
DEBUG: detectSemanticCommits() (repository=local)
DEBUG: getCommitMessages (repository=local)
DEBUG: semanticCommits: detected "unknown" (repository=local)
DEBUG: semanticCommits: disabled (repository=local)
DEBUG: 1 flattened updates found: ubuntu (repository=local)
DEBUG: Returning 1 branch(es) (repository=local)
DEBUG: config.repoIsOnboarded=true (repository=local)
DEBUG: packageFiles with updates (repository=local)
       "config": {
         "dockerfile": [
           {
             "deps": [
               {
                 "depName": "ubuntu",
                 "currentValue": "focal",
                 "currentDigest": "sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef",
                 "replaceString": "ubuntu:focal@sha256:6d8d9799fe6ab3221965efac00b4c34a2bcc102c086a58dff9e19a08b913c7ef",
                 "autoReplaceStringTemplate": "{{depName}}{{#if newValue}}:{{newValue}}{{/if}}{{#if newDigest}}@{{newDigest}}{{/if}}",
                 "datasource": "docker",
                 "versioning": "ubuntu",
                 "depType": "final",
                 "updates": [
                   {
                     "bucket": "major",
                     "newVersion": "noble",
                     "newValue": "noble",
                     "newDigest": "sha256:80dd3c3b9c6cecb9f1667e9290b3bc61b78c2678c02cbdae5f0fea92cc6734ab",
                     "releaseTimestamp": "2024-12-03T06:04:42.280Z",
                     "newVersionAgeInDays": 27,
                     "newMajor": 24,
                     "newMinor": 4,
                     "newPatch": null,
                     "updateType": "major",
                     "branchName": "renovate/ubuntu-24.x"
                   },
                   {
                     "updateType": "digest",
                     "newValue": "focal",
                     "newDigest": "sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b",
                     "branchName": "renovate/ubuntu-focal"
                   }
                 ],
                 "packageName": "ubuntu",
                 "warnings": [],
                 "registryUrl": "https://index.docker.io",
                 "lookupName": "library/ubuntu",
                 "currentVersion": "focal",
                 "currentVersionTimestamp": "2024-10-19T05:04:26.484Z",
                 "currentVersionAgeInDays": 72,
                 "isSingleVersion": true,
                 "fixedVersion": "focal"
               }
             ],
             "packageFile": "Dockerfile"
           }
         ]
       }
DEBUG: detectSemanticCommits() (repository=local)
DEBUG: semanticCommits: returning "disabled" from cache (repository=local)
DEBUG: Repository timing splits (milliseconds) (repository=local)
       "splits": {"init": 1303, "extract": 32, "lookup": 533},
       "total": 1872
DEBUG: Package cache statistics (repository=local)
       "get": {"count": 1, "avgMs": 12, "medianMs": 12, "maxMs": 12, "totalMs": 12},
       "set": {"count": 0, "avgMs": 0, "medianMs": 0, "maxMs": 0, "totalMs": 0}
DEBUG: HTTP statistics (repository=local)
       "hosts": {},
       "requests": 0
DEBUG: HTTP cache statistics (repository=local)
DEBUG: Lookup statistics (repository=local)
       "docker": {"count": 1, "avgMs": 412, "medianMs": 412, "maxMs": 412, "totalMs": 412}
 INFO: Repository finished (repository=local)
       "cloned": undefined,
       "durationMs": 1872
DEBUG: Checking file package cache for expired items
DEBUG: Deleted 0 of 37 file cached entries in 123ms

[github-actions[bot]]

Hi there,

Get your discussion fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. Discussions without reproductions are less likely to be converted to Issues.

Please follow these steps:

1. Read our guide on creating a minimal reproduction.
2. Go to our minimal reproduction template repository.
3. Select the Use this template button to create a new repository based on the template.
4. Work on the minimal reproduction in your own repository.
5. Fill out the information in your repository's README.md.
6. Add the link to your reproduction to the first post of your Discussion. If you are not the original author, you can post a new comment with the link.

If you need help with running renovate on your minimal reproduction repository, please refer to our Running Renovate guide.
Good luck,

The Renovate team