Deno manager failed to update frozen lock file

[5ouma]

How are you running Renovate?

A Mend.io-hosted app

Which platform you running Renovate on?

GitHub.com

Which version of Renovate are you using?

43.159.2

Please tell us more about your question or problem

When I enforce the lock file to be frozen in deno.json, Renovate fails to update it.
That's because Renovate updates deno.lock with deno install, which can't update the lock file.
Should change the command to deno install --frozen=false.

https://github.com/5ouma/reproxy/blob/e17c7f50/deno.json#L10
https://github.com/renovatebot/renovate/blob/dd7c8750/lib/modules/manager/deno/artifacts.ts#L93

Logs (if relevant)

Logs

WARN: Failed to update lock file (branch="renovate/lock-file-maintenance")
{
  "lockfile": "deno.lock",
  "err": {
    "cmd": "deno install",
    "stderr": "Download https://octokit/request-error\nDownload https://octokit/rest\nDownload https://octokit/types\nDownload https://octokit/core\nDownload https://octokit/plugin-paginate-rest\nDownload https://octokit/plugin-request-log\nDownload https://octokit/plugin-rest-endpoint-methods\nDownload https://octokit/openapi-types\nDownload https://octokit/auth-token\nDownload https://octokit/graphql\nDownload https://octokit/request\nDownload https://octokit/endpoint\nDownload https://octokit/request-error@7.1.0\": \"7.1.0\",\n  5 | +    \"npm:@octokit/rest@22.0.1\": \"22.0.1\"\n  6 | +  },\n  7 | +  \"npm\": {\n  8 | +    \"@octokit/auth-token@6.0.0\": {\n  9 | +      \"integrity\": \"sha512-P4YJBPdPSpWTQ1NU4XYdvHvXJJDxM6YwpS0FZHRgP7YFkdVxsWcpWGy/NVqlAA7PcPCnMacXlRm1y2PFZRWL/w==\"\n 10 | +    },\n 11 | +    \"@octokit/core@7.0.6\": {\n 12 | +      \"integrity\": \"sha512-DhGl4xMVFGVIyMwswXeyzdL4uXD5OGILGX5N8Y+f6W7LhC1Ze2poSNrkF/fedpVDHEEZ+PHFW0vL14I+mm8K3Q==\",\n 13 | +      \"dependencies\": [\n 14 | +        \"@octokit/auth-token\",\n 15 | +        \"@octokit/graphql\",\n 16 | +        \"@octokit/request\",\n 17 | +        \"@octokit/request-error\",\n 18 | +        \"@octokit/types\",\n 19 | +        \"before-after-hook\",\n 20 | +        \"universal-user-agent\"\n 21 | +      ]\n 22 | +    },\n 23 | +    \"@octokit/endpoint@11.0.3\": {\n 24 | +      \"integrity\": \"sha512-FWFlNxghg4HrXkD3ifYbS/IdL/mDHjh9QcsNyhQjN8dplUoZbejsdpmuqdA76nxj2xoWPs7p8uX2SNr9rYu0Ag==\",\n 25 | +      \"dependencies\": [\n 26 | +        \"@octokit/types\",\n 27 | +        \"universal-user-agent\"\n 28 | +      ]\n 29 | +    },\n 30 | +    \"@octokit/graphql@9.0.3\": {\n 31 | +      \"integrity\": \"sha512-grAEuupr/C1rALFnXTv6ZQhFuL1D8G5y8CN04RgrO4FIPMrtm+mcZzFG7dcBm+nq+1ppNixu+Jd78aeJOYxlGA==\",\n 32 | +      \"dependencies\": [\n 33 | +        \"@octokit/request\",\n 34 | +        \"@octokit/types\",\n 35 | +        \"universal-user-agent\"\n 36 | +      ]\n 37 | +    },\n 38 | +    \"@octokit/openapi-types@27.0.0\": {\n 39 | +      \"integrity\": \"sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==\"\n 40 | +    },\n 41 | +    \"@octokit/plugin-paginate-rest@14.0.0_@octokit+core@7.0.6\": {\n 42 | +      \"integrity\": \"sha512-fNVRE7ufJiAA3XUrha2omTA39M6IXIc6GIZLvlbsm8QOQCYvpq/LkMNGyFlB1d8hTDzsAXa3OKtybdMAYsV/fw==\",\n 43 | +      \"dependencies\": [\n 44 | +        \"@octokit/core\",\n 45 | +        \"@octokit/types\"\n 46 | +      ]\n 47 | +    },\n 48 | +    \"@octokit/plugin-request-log@6.0.0_@octokit+core@7.0.6\": {\n 49 | +      \"integrity\": \"sha512-UkOzeEN3W91/eBq9sPZNQ7sUBvYCqYbrrD8gTbBuGtHEuycE4/awMXcYvx6sVYo7LypPhmQwwpUe4Yyu4QZN5Q==\",\n 50 | +      \"dependencies\": [\n... 67 more lines omitted ...\n",
    "stdout": "",
    "options": {
      "cwd": "/tmp/renovate/repos/github/5ouma/reproxy",
      "env": [
        "HOME",
        "PATH",
        "LC_ALL",
        "LANG",
        "CONTAINERBASE_CACHE_DIR"
      ],
      "maxBuffer": 10485760,
      "timeout": 900000,
      "stdin": "pipe",
      "stdout": "pipe",
      "stderr": "pipe"
    },
    "exitCode": 1,
    "name": "ExecError",
    "message": "Command failed: deno install\nDownload https://octokit/request-error\nDownload https://octokit/rest\nDownload https://octokit/types\nDownload https://octokit/core\nDownload https://octokit/plugin-paginate-rest\nDownload https://octokit/plugin-request-log\nDownload https://octokit/plugin-rest-endpoint-methods\nDownload https://octokit/openapi-types\nDownload https://octokit/auth-token\nDownload https://octokit/graphql\nDownload https://octokit/request\nDownload https://octokit/endpoint\nDownload https://octokit/request-error@7.1.0\": \"7.1.0\",\n  5 | +    \"npm:@octokit/rest@22.0.1\": \"22.0.1\"\n  6 | +  },\n  7 | +  \"npm\": {\n  8 | +    \"@octokit/auth-token@6.0.0\": {\n  9 | +      \"integrity\": \"sha512-P4YJBPdPSpWTQ1NU4XYdvHvXJJDxM6YwpS0FZHRgP7YFkdVxsWcpWGy/NVqlAA7PcPCnMacXlRm1y2PFZRWL/w==\"\n 10 | +    },\n 11 | +    \"@octokit/core@7.0.6\": {\n 12 | +      \"integrity\": \"sha512-DhGl4xMVFGVIyMwswXeyzdL4uXD5OGILGX5N8Y+f6W7LhC1Ze2poSNrkF/fedpVDHEEZ+PHFW0vL14I+mm8K3Q==\",\n 13 | +      \"dependencies\": [\n 14 | +        \"@octokit/auth-token\",\n 15 | +        \"@octokit/graphql\",\n 16 | +        \"@octokit/request\",\n 17 | +        \"@octokit/request-error\",\n 18 | +        \"@octokit/types\",\n 19 | +        \"before-after-hook\",\n 20 | +        \"universal-user-agent\"\n 21 | +      ]\n 22 | +    },\n 23 | +    \"@octokit/endpoint@11.0.3\": {\n 24 | +      \"integrity\": \"sha512-FWFlNxghg4HrXkD3ifYbS/IdL/mDHjh9QcsNyhQjN8dplUoZbejsdpmuqdA76nxj2xoWPs7p8uX2SNr9rYu0Ag==\",\n 25 | +      \"dependencies\": [\n 26 | +        \"@octokit/types\",\n 27 | +        \"universal-user-agent\"\n 28 | +      ]\n 29 | +    },\n 30 | +    \"@octokit/graphql@9.0.3\": {\n 31 | +      \"integrity\": \"sha512-grAEuupr/C1rALFnXTv6ZQhFuL1D8G5y8CN04RgrO4FIPMrtm+mcZzFG7dcBm+nq+1ppNixu+Jd78aeJOYxlGA==\",\n 32 | +      \"dependencies\": [\n 33 | +        \"@octokit/request\",\n 34 | +        \"@octokit/types\",\n 35 | +        \"universal-user-agent\"\n 36 | +      ]\n 37 | +    },\n 38 | +    \"@octokit/openapi-types@27.0.0\": {\n 39 | +      \"integrity\": \"sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==\"\n 40 | +    },\n 41 | +    \"@octokit/plugin-paginate-rest@14.0.0_@octokit+core@7.0.6\": {\n 42 | +      \"integrity\": \"sha512-fNVRE7ufJiAA3XUrha2omTA39M6IXIc6GIZLvlbsm8QOQCYvpq/LkMNGyFlB1d8hTDzsAXa3OKtybdMAYsV/fw==\",\n 43 | +      \"dependencies\": [\n 44 | +        \"@octokit/core\",\n 45 | +        \"@octokit/types\"\n 46 | +      ]\n 47 | +    },\n 48 | +    \"@octokit/plugin-request-log@6.0.0_@octokit+core@7.0.6\": {\n 49 | +      \"integrity\": \"sha512-UkOzeEN3W91/eBq9sPZNQ7sUBvYCqYbrrD8gTbBuGtHEuycE4/awMXcYvx6sVYo7LypPhmQwwpUe4Yyu4QZN5Q==\",\n 50 | +      \"dependencies\": [\n... 67 more lines omitted ...\n",
    "stack": "ExecError: Command failed: deno install\nDownload https://octokit/request-error\nDownload https://octokit/rest\nDownload https://octokit/types\nDownload https://octokit/core\nDownload https://octokit/plugin-paginate-rest\nDownload https://octokit/plugin-request-log\nDownload https://octokit/plugin-rest-endpoint-methods\nDownload https://octokit/openapi-types\nDownload https://octokit/auth-token\nDownload https://octokit/graphql\nDownload https://octokit/request\nDownload https://octokit/endpoint\nDownload https://octokit/request-error@7.1.0\": \"7.1.0\",\n  5 | +    \"npm:@octokit/rest@22.0.1\": \"22.0.1\"\n  6 | +  },\n  7 | +  \"npm\": {\n  8 | +    \"@octokit/auth-token@6.0.0\": {\n  9 | +      \"integrity\": \"sha512-P4YJBPdPSpWTQ1NU4XYdvHvXJJDxM6YwpS0FZHRgP7YFkdVxsWcpWGy/NVqlAA7PcPCnMacXlRm1y2PFZRWL/w==\"\n 10 | +    },\n 11 | +    \"@octokit/core@7.0.6\": {\n 12 | +      \"integrity\": \"sha512-DhGl4xMVFGVIyMwswXeyzdL4uXD5OGILGX5N8Y+f6W7LhC1Ze2poSNrkF/fedpVDHEEZ+PHFW0vL14I+mm8K3Q==\",\n 13 | +      \"dependencies\": [\n 14 | +        \"@octokit/auth-token\",\n 15 | +        \"@octokit/graphql\",\n 16 | +        \"@octokit/request\",\n 17 | +        \"@octokit/request-error\",\n 18 | +        \"@octokit/types\",\n 19 | +        \"before-after-hook\",\n 20 | +        \"universal-user-agent\"\n 21 | +      ]\n 22 | +    },\n 23 | +    \"@octokit/endpoint@11.0.3\": {\n 24 | +      \"integrity\": \"sha512-FWFlNxghg4HrXkD3ifYbS/IdL/mDHjh9QcsNyhQjN8dplUoZbejsdpmuqdA76nxj2xoWPs7p8uX2SNr9rYu0Ag==\",\n 25 | +      \"dependencies\": [\n 26 | +        \"@octokit/types\",\n 27 | +        \"universal-user-agent\"\n 28 | +      ]\n 29 | +    },\n 30 | +    \"@octokit/graphql@9.0.3\": {\n 31 | +      \"integrity\": \"sha512-grAEuupr/C1rALFnXTv6ZQhFuL1D8G5y8CN04RgrO4FIPMrtm+mcZzFG7dcBm+nq+1ppNixu+Jd78aeJOYxlGA==\",\n 32 | +      \"dependencies\": [\n 33 | +        \"@octokit/request\",\n 34 | +        \"@octokit/types\",\n 35 | +        \"universal-user-agent\"\n 36 | +      ]\n 37 | +    },\n 38 | +    \"@octokit/openapi-types@27.0.0\": {\n 39 | +      \"integrity\": \"sha512-whrdktVs1h6gtR+09+QsNk2+FO+49j6ga1c55YZudfEG+oKJVvJLQi3zkOm5JjiUXAagWK2tI2kTGKJ2Ys7MGA==\"\n 40 | +    },\n 41 | +    \"@octokit/plugin-paginate-rest@14.0.0_@octokit+core@7.0.6\": {\n 42 | +      \"integrity\": \"sha512-fNVRE7ufJiAA3XUrha2omTA39M6IXIc6GIZLvlbsm8QOQCYvpq/LkMNGyFlB1d8hTDzsAXa3OKtybdMAYsV/fw==\",\n 43 | +      \"dependencies\": [\n 44 | +        \"@octokit/core\",\n 45 | +        \"@octokit/types\"\n 46 | +      ]\n 47 | +    },\n 48 | +    \"@octokit/plugin-request-log@6.0.0_@octokit+core@7.0.6\": {\n 49 | +      \"integrity\": \"sha512-UkOzeEN3W91/eBq9sPZNQ7sUBvYCqYbrrD8gTbBuGtHEuycE4/awMXcYvx6sVYo7LypPhmQwwpUe4Yyu4QZN5Q==\",\n 50 | +      \"dependencies\": [\n... 67 more lines omitted ...\n\n    at ChildProcess.<anonymous> (file:///usr/local/renovate/lib/util/exec/common.ts:169:13)\n    at ChildProcess.emit (node:events:521:24)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:295:12)"
  }
}

[Hajime-san]

Thank you for trying it out so quickly!

I think that the lock file should not be updated when frozen: true is set. This is because it indicates that whoever does not want to update the lock file, regardless of the user's machine or CI environment, such as Renovate.

In this case, deno install --frozen is the desired behaviour that Renovate should execute operations according to the input in the deno.json file.

Package managers usually update lock files automatically regardless of Deno. It often provides an option to freeze lock files in their commands to prevent unintended dependencies from being introduced in CI. So, very few package managers have a property in their configuration file that instructs them to freeze lock files. Yarn also has a similar property, though.
https://yarnpkg.com/configuration/yarnrc#enableImmutableInstalls

I think it's better approach to allow the behavior of deno install to be changed in the some kind of renovate.json settings.