pnpm v11.23 reshaped the `registries` setting in `pnpm-workspace.yaml`: it is now keyed by the registry URL, with the scopes routed to it listed in the entry. Renovate only accepted the older `<scope>: <url>` shape, so parsing of the whole workspace file failed and its catalogs and overrides were no longer extracted at all. Accept both shapes and flatten the new one into the old one, where the bare `@` scope is the scope-less default registry. URL keys which interpolate an env var, embed credentials, or are unparseable are skipped, matching what pnpm itself ignores or refuses. A `registries` value which is neither shape now falls back to `undefined` instead of taking the file's catalogs with it. Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
npm problems and workarounds
Invalid lock file (npm ci fails)
Unfortunately, npm itself sometimes generates invalid lock files which fail npm ci.
Try adding "postUpdateOptions": ["npmInstallTwice"] to tell Renovate run any npm install command (which is used to update lock files) twice.
This is less efficient than running npm once, but has been known to fix most problems of this type.
Renovate already runs npm install twice during lock file maintenance, because regenerating a lock file from scratch is known to need a second pass.
If this npm bug remains unfixed, and it becomes too frequent for Renovate users, then we may need to modify Renovate to do this by default. Please post feedback to the Renovate repository "Discussions" if you're needing to use this feature frequently or widely.
Yarn
Version Selection / Installation
If Renovate detects a packageManager setting for Yarn in package.json then it will use Corepack to install Yarn.
HTTP Proxy Support
Yarn itself does not natively recognize/support the HTTP_PROXY and HTTPS_PROXY environment variables.
You can configure RENOVATE_X_YARN_PROXY=true as an environment variable to enable configuring of Yarn proxy (e.g. if you cannot configure these proxy settings yourself in ~/.yarnrc.yml).
If set, and Renovate detects Yarn 2+, and one or both of those variables are present, then Renovate will run commands like yarn config set --home httpProxy http://proxy prior to executing yarn install.
This will result in the ~/.yarnrc.yml file being created or modified with these settings, and the settings are not removed afterwards.
Configuration/conversion of NO_PROXY to Yarn config is not supported.