Files
renovate/lib
Jamie Tanna 28ed2ee25e fix(datasource/go): treat modules with go host rule credentials as private (#47031)
When determining whether a Go module is public - which infers whether to
cache it - we had previously miscategorised authenticated traffic to Go
module proxies, as we only looked for `GOPROXY`, `GONOPROXY` and
`GOPRIVATE`.

Instead, we should treat a package as private if there is an
authenticated Host Rule that matches the Go module.

We can do this by checking for `hostType: go`, to catch only Go module
specific authentication, and to avoid catching i.e. auth to
`github.com`.

If any credentials (`token`, `password` or `httpsPrivateKey`) are found,
we treat this as credentialed.

Co-authored-by: Claude Opus 5.5 <jamie.tanna+claude-code@mend.io>
2026-10-14 11:17:39 +00:00
..