How to get around GitLab's Registry Dependency Proxy limitation of not listing tags

[mhagnumdw]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

GitLab CE 17.5.0, renovatebot/renovate:40.19.2

Please tell us more about your question or problem

I've already researched a lot and I continue to research, somehow these discussions are related: #26847, #27917, #35833

In my repos that have Dockerfile that use GitLab's Dependency Proxy, eg:

FROM git.mydomain/mygroup/dependency_proxy/containers/nginx:1.25.2-alpine
# ...
CMD ["nginx", "-g", "daemon off;"]

are not notified of nginx update. I tried removing the -alpine suffix for testing and it works the same.

I also get the warn in the Renovate configuration merge request:

After adding the below customManagers, I now receive updates for nginx:1.25.2-alpine, but the above warn persists:

"customManagers": [
  {
    "customType": "regex",
    "managerFilePatterns": ["/Dockerfile$/"],
    "matchStringsStrategy": "any",
    "matchStrings": [
      "FROM git\.mydomain\/.*\/dependency_proxy\/containers\/(?<depName>.*?):(?<currentValue>\S*)"
    ],
    "datasourceTemplate": "docker"
  }
]

The warn (see logs) must be because GitLab's dependency proxy does not support the /tags/list endpoint, see here.

Since GitLab's dependency proxy downloads images from Docker Hub, would it be possible to configure Renovate to list images from Docker Hub? Would this count towards Docker Hub accesses?

Another thing: although customManagers solved part of my problem, I wonder if it is really necessary or if there is already another solution.

Tks!

Logs (if relevant)

Logs

DEBUG: Page Not Found https://git.mydomain/v2/mygroup/dependency_proxy/containers/nginx/tags/list?n=10000 (repository=mygroup/jarvishq/jarvis-front2)
DEBUG: Datasource unknown error (repository=mygroup/jarvishq/jarvis-front2)
       "datasource": "docker",
       "packageName": "git.mydomain/mygroup/dependency_proxy/containers/nginx",
       "err": {
         "message": "page-not-found",
         "stack": "Error: page-not-found\n    at getAuthHeaders (/usr/local/renovate/lib/modules/datasource/docker/common.ts:77:13)\n    at processTicksAndRejections (node:internal/process/task_queues:105:5)\n    at DockerDatasource.getDockerApiTags (/usr/local/renovate/lib/modules/datasource/docker/index.ts:662:21)\n    at DockerDatasource.getTags (/usr/local/renovate/lib/modules/datasource/docker/index.ts:737:16)\n    at /usr/local/renovate/lib/util/cache/package/decorator.ts:131:20\n    at DockerDatasource.getReleases (/usr/local/renovate/lib/modules/datasource/docker/index.ts:1092:36)\n    at getRegistryReleases (/usr/local/renovate/lib/modules/datasource/index.ts:86:15)\n    at fetchReleases (/usr/local/renovate/lib/modules/datasource/index.ts:361:15)\n    at lookupUpdates (/usr/local/renovate/lib/workers/repository/process/lookup/index.ts:157:56)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:79:12\n    at Function.wrap (/usr/local/renovate/lib/util/stats.ts:38:20)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:125:23\n    at /usr/local/renovate/node_modules/.pnpm/p-map@4.0.0/node_modules/p-map/index.js:57:22"
       }
DEBUG: Failed to look up docker package git.mydomain/mygroup/dependency_proxy/containers/nginx (repository=mygroup/jarvishq/jarvis-front2, packageFile=docker/Dockerfile, dependency=git.mydomain/mygroup/dependency_proxy/containers/nginx)

[viceice]

use registry alias