Private Bitbucket packages try to fetch from packagist

[BernhardK91]

How are you running Renovate?

Self-hosted

If you're self-hosting Renovate, tell us what version of Renovate you run.

36.42.4

If you're self-hosting Renovate, select which platform you are using.

Bitbucket Cloud (bitbucket.org)

Was this something which used to work for you, and then stopped?

I never saw this working

Wanted end result.

We have some private hosted Composer (PHP) packages, hosted on Bitbucket. Unfortunately, renovate thinks they are packagist repos and tries to fetch from there, what fails.

I want to have renovate directly to check Bitbucket and not try packagist instead.

How can I tell renovate to use "bitbucket-tags" instead?

What you tried so far.

Tried to play with packageRules and adding a name to the "repositories" in the composer.json. Nothing worked so far.

Relevant debug logs

GET https://packagist.org/p2/[MY-WORKSPACE]/[MY-PRIVATE-PACKAGE]~dev.json = (code=ERR_NON_2XX_3XX_RESPONSE, statusCode=404 retryCount=0, duration=49) (repository=XXXXXX, baseBranch=development)

{
                 "depType": "require",
                 "depName": "[MY-WORKSPACE]/[MY-PRIVATE-PACKAGE]",
                 "currentValue": "*",
                 "lockedVersion": "0.2.1",
                 "datasource": "packagist",
                 "registryUrls": [
                   "https://repo.backpackforlaravel.com/",
                   "https://packagist.org/"
                 ],
                 "updates": [],
                 "packageName": "[MY-WORKSPACE]/[MY-PRIVATE-PACKAGE]",
                 "versioning": "composer",
                 "warnings": [
                   {
                     "topic": "[MY-WORKSPACE]/[MY-PRIVATE-PACKAGE]",
                     "message": "Failed to look up packagist package [MY-WORKSPACE]/[MY-PRIVATE-PACKAGE]"
                   }
                 ]
               },

[rarkins]

Is https://repo.backpackforlaravel.com/ correct or is that also incorrect?

[BernhardK91]

I think the best way would be to make sure when in composer it is not "vcs" but "bitbucket", then it should use the bitbucket-tags. From my current understanding, that would be the best and most sustainable solution.

[BernhardK91]

I have tried it locally with the docker image (didn't work) and direct from the sources (worked).

That made me think, it must work, when I have a valid SSH key with access to the repo available.

EDIT: It had nothing to do with SSH keys. Windows stored the git credentials for Bitbucket in the Windows Credential Manager. That just showed again that username and app-password work.

[BernhardK91]

I have created a PR #24096 that adds using bitbucket-tags for Bitbucket repos.

[BernhardK91]

The solution to the original problem was adding "name" attribute in the repositories config of the composer.json. Since version 36.87.0 Bitbucket repositories (also private ones) are working with Renovate as well.