Python poetry occasionally receives error "Invalid Version: NaN.0.0"

[rblin081]

What would you like help with?

I think I found a bug

How are you running Renovate?

Self-hosted

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

GitHub Actions

Please tell us more about your question or problem

My company recently adopted Renovate and it's largely been going well. One issue I've noticed is that occasionally there's an error with message "Invalid Version: NaN.0.0" with the following run of the Renovate GitHub action succeeding. I'm having a hard time determining where the issue is coming from.

Here's the renovate.config.js

honorPackageNames = [....];
codeArtifactHost = "***"
npmCodeArtifactRegistryURL = "https://***
pythonCodeArtifactRegistryUrl = "https://***"

// Update packages at midnight UTC every day
// Renovate doesn't support minutes using cron syntax - https://docs.renovatebot.com/key-concepts/scheduling/#scheduling-syntax
// but leverages https://breejs.github.io/later/parsers.html#text for parsing schedule expressions
// There may be a mre succinct way of expressing every day instead of one rule for weekdays and one for weekends but this
// work
ONCE_DAILY_SCHEDULE = ['at 12:00 am every weekday', 'at 12:00 am every weekend']

// Update packages at midnight UTC every Sunday (weekly)
// Renovate doesn't support minutes using cron syntax - https://docs.renovatebot.com/key-concepts/scheduling/#scheduling-syntax
// but leverages https://breejs.github.io/later/parsers.html#text for parsing schedule expressions
ONCE_WEEKLY_ON_SUNDAY = 'at 12:00 am on Sunday'

module.exports = {
    gitAuthor: 'Renovate Bot <[email protected]>',
    platform: 'github',

    automerge: true,
    autoApprove: true,
    assigneesFromCodeOwners: true,

    // Repositories that Renovate will manage
    repositories: ['repo1, 'repo2'],

    // The current strategy is to have one GitHub repository bump dependencies for most of Honor's other private repositories
    // Don't want a limit on the number of PRs Renovate can manage
    // Value of 0 indicates no limit - https://docs.renovatebot.com/configuration-options/#prhourlylimit
    prHourlyLimit: 0,
    prConcurrentLimit: 0,

    // Skip Renovate onboarding, requires an engineer to manually merge an initial PR from Renovate.
    // requireConfig is in regards to the renovate.json file Renovate adds to the project
    // as part of the onboarding PR
    onboarding: false,
    requireConfig: 'optional',

    // For now Renovate will only manage our python and javascript dependencies
    enabledManagers: ["npm", "poetry", "pep621"],

    ignoreDeps: ['python'],

    // Configure authentication for hosts where Honor's packages reside
    hostRules: [
        {
            hostType: "npm",
            matchHost: codeArtifactHost,
            token: process.env.CODEARTIFACT_AUTH_TOKEN,
        },
        {
            hostType: "pypi",
            matchHost: codeArtifactHost,
            username: 'aws',
            password: process.env.CODEARTIFACT_AUTH_TOKEN,
        },
    ],

    // Rules for how to manage various packages in the Honor ecosystem
    packageRules: [
        // Honor specific npm packages
        {
            matchDatasources: ["npm"],
            matchPackagePrefixes: honorPackageNames,
            groupName: "honor-node-packages",
            registryUrls: [npmCodeArtifactRegistryURL,],
            schedule: ONCE_DAILY_SCHEDULE,
        },
        // All other npm packages excluding Honor npm packages
        {
            matchDatasources: ["npm"],
            excludePackagePrefixes: honorPackageNames,
            groupName: "node-packages",
            registryUrls: [npmCodeArtifactRegistryURL,],
            schedule: ONCE_WEEKLY_ON_SUNDAY,
        },
        // Honor specific python packages
        {
            matchDatasources: ["pypi"],
            matchPackagePrefixes: honorPackageNames,
            groupName: "honor-python-packages",
            registryUrls: [pythonCodeArtifactRegistryUrl,],
            schedule: ONCE_DAILY_SCHEDULE,
        },
        // All other python packages excluding Honor python packages
        {
            matchDatasources: ["pypi"],
            excludePackagePrefixes: honorPackageNames,
            groupName: "python-packages",
            registryUrls: [pythonCodeArtifactRegistryUrl,],
            schedule: ONCE_WEEKLY_ON_SUNDAY,
        },
    ],
};

Logs (if relevant)

Logs

DEBUG: Using file match: (^|/)package\.json$ for manager npm (repository=joinhonor/auth-api)
DEBUG: Using file match: (^|/)pyproject\.toml$ for manager pep621 (repository=joinhonor/auth-api)
DEBUG: Using file match: (^|/)pyproject\.toml$ for manager poetry (repository=joinhonor/auth-api)
DEBUG: Matched 1 file(s) for manager pep621: pyproject.toml (repository=joinhonor/auth-api)
DEBUG: Matched 1 file(s) for manager poetry: pyproject.toml (repository=joinhonor/auth-api)
.....
  INFO: Renovate is exiting with a non-zero code due to the following logged errors
       "loggerErrors": [
         {
           "name": "renovate",
           "level": 50,
           "logContext": "OS9ovaGBn7kHJR0g30E9g",
           "repository": "joinhonor/auth-api",
           "currentValue": "*",
           "datasource": "pypi",
           "packageName": "cryptography",
           "followTag": null,
           "lockedVersion": "42.0.8",
           "packageFile": "pyproject.toml",
           "pinDigests": false,
           "rollbackPrs": false,
           "updatePinnedDependencies": true,
           "unconstrainedValue": false,
           "err": {
             "message": "Invalid Version: NaN.0.0",
             "stack": "TypeError: Invalid Version: NaN.0.0\n    at new SemVer (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/semver/classes/semver.js:38:13)\n    at compare (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/semver/functions/compare.js:3:3)\n    at Object.gt [as isGreaterThan] (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/semver/functions/gt.js:2:29)\n    at Object.isGreaterThan (/usr/local/renovate/lib/modules/versioning/poetry/index.ts:54:39)\n    at /usr/local/renovate/lib/workers/repository/process/lookup/filter.ts:41:18\n    at Array.filter (<anonymous>)\n    at filterVersions (/usr/local/renovate/lib/workers/repository/process/lookup/filter.ts:38:35)\n    at lookupUpdates (/usr/local/renovate/lib/workers/repository/process/lookup/index.ts:350:44)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at Function.wrap (/usr/local/renovate/lib/util/stats.ts:38:20)\n    at fetchDepUpdates (/usr/local/renovate/lib/workers/repository/process/fetch.ts:58:42)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:104:23\n    at /usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/p-map/index.js:57:22"
           },
           "msg": "lookupUpdates error"
         }
       ]
Error: The process '/usr/bin/docker' failed with exit code 1

[gracevivi523]

We are seeing same error, raised in here #29851

[RahulGautamSingh]

"currentValue": "*",

In the logs the currentValue is an asterisk. Did you add it or it was like this?

[gracevivi523]

This is the package version defined in poetry project pyproject.toml file, it can be *.
Below is my case (I have masked the repo name and package file to be xxxxxxxxxx)

INFO: Renovate is exiting with a non-zero code due to the following logged errors
--
  | "loggerErrors": [
  | {
  | "name": "renovate",
  | "level": 50,
  | "logContext": "EqFKu9ngbO5dQopVDEhTG",
  | "repository": "xxxxxxxxx",
  | "currentValue": "^1.18.0",
  | "datasource": "pypi",
  | "packageName": "numpy",
  | "followTag": null,
  | "lockedVersion": "1.24.4",
  | "packageFile": "xxxxxxx/pyproject.toml",
  | "pinDigests": false,
  | "rollbackPrs": false,
  | "updatePinnedDependencies": true,
  | "unconstrainedValue": false,
  | "err": {
  | "message": "Invalid Version: NaN.0.0",
  | "stack": "TypeError: Invalid Version: NaN.0.0\n    at new SemVer (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/semver/classes/semver.js:38:13)\n    at compare (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/semver/functions/compare.js:3:3)\n    at Object.gt [as isGreaterThan] (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/semver/functions/gt.js:2:29)\n    at Object.isGreaterThan (/usr/local/renovate/lib/modules/versioning/poetry/index.ts:54:39)\n    at /usr/local/renovate/lib/workers/repository/process/lookup/filter.ts:41:18\n    at Array.filter (<anonymous>)\n    at filterVersions (/usr/local/renovate/lib/workers/repository/process/lookup/filter.ts:38:35)\n    at lookupUpdates (/usr/local/renovate/lib/workers/repository/process/lookup/index.ts:350:44)\n    at processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at Function.wrap (/usr/local/renovate/lib/util/stats.ts:38:20)\n    at fetchDepUpdates (/usr/local/renovate/lib/workers/repository/process/fetch.ts:58:42)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:104:23\n    at /usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/p-map/index.js:57:22"
  | },
  | "msg": "lookupUpdates error"
  | }
  | ]

[RahulGautamSingh]

Is it solved now after this:#29858 fix? If not, could you please create a minimal reproduction on Github.

[gracevivi523]

Testing 37.418.2 and will report back here asap.

[github-actions[bot]]

Hi there,

Get your discussion fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. Discussions without reproductions are less likely to be converted to Issues.

Please follow these steps:

1. Read our guide on creating a minimal reproduction.
2. Go to our minimal reproduction template repository.
3. Select the Use this template button to create a new repository based on the template.
4. Work on the minimal reproduction in your own repository.
5. Fill out the information in your repository's README.md.
6. Add the link to your reproduction to the first post of your Discussion. If you are not the original author, you can post a new comment with the link.

Good luck,

The Renovate team

[rarkins]

This might stop the error: #29858

Without a reproduction, we probably can't fix the root cause though.