howto automerge with type branch when using Mend.io with Bitbucket cloud where write access is restricted

[bob-rohan]

How should Bitbucket/Mend/Renovate be configured to automerge with autoMergeType branch when write access is restricted?

I've explored adding a user/group to branch restrictions, but can't identify the renovate-bot user.

I've explored adding a bitbucket app password as a mend token, and referencing that in renovate configuration.

  "hostRules": [
    {
      "matchHost": "api.bitbucket.org",
      "token": "MEND_BITBUCKET"
    }
  ]

I've confirmed when write access is permitted to everyone, renovate will merge/rebase to main as expected.

renovate-bot permission denied error

```DEBUG: Git function thrown (branch="renovate/all") { "err": { "task": { "commands": [ "push", "origin", "main", "--verbose", "--porcelain" ], "format": "utf-8", "parser": "[function]" }, "message": "To https://bitbucket.org/gamstop/rohanb.git\n!\trefs/heads/main:refs/heads/main\t[remote rejected] (pre-receive hook declined)\nDone\nPushing to https://bitbucket.org/gamstop/rohanb.git\nPOST git-receive-pack (211 bytes)\nremote: Permission denied to update branch main.\nerror: failed to push some refs to 'https://bitbucket.org/gamstop/rohanb.git'\n", "stack": "Error: To https://**redacted**@3.25.0/node_modules/simple-git/src/lib/plugins/error-detection.plugin.ts:42:29)\n at PluginStore.exec (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/plugins/plugin-store.ts:54:29)\n at /usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:124:42\n at new Promise ()\n at GitExecutorChain.handleTaskData (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:121:14)\n at GitExecutorChain. (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:97:40)\n at Generator.next ()\n at fulfilled (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/dist/cjs/index.js:52:24)\n at processTicksAndRejections (node:internal/process/task_queues:95:5)" } }

DEBUG: mergeBranch error (branch="renovate/all")
{
"baseBranch": "main"
"baseSha": "7c785d5ac9ffda05b250bdade56ca9327821e843"
"branchName": "renovate/all"
"branchSha": "42d0a7949c85acf89f9ab4ce8f30efb5fd1569fb"
"status": {
"not_added": [],
"conflicted": [],
"created": [],
"deleted": [],
"modified": [],
"renamed": [],
"files": [],
"staged": [],
"ahead": 0,
"behind": 0,
"current": "main",
"tracking": "origin/main",
"detached": false,
"isClean": "[function]"
}
"err": {
"task": {
"commands": [
"push",
"origin",
"main",
"--verbose",
"--porcelain"
],
"format": "utf-8",
"parser": "[function]"
},
"message": "To https://bitbucket.org/gamstop/rohanb.git\n!\trefs/heads/main:refs/heads/main\t[remote rejected] (pre-receive hook declined)\nDone\nPushing to https://bitbucket.org/gamstop/rohanb.git\nPOST git-receive-pack (211 bytes)\nremote: Permission denied to update branch main.\nerror: failed to push some refs to 'https://bitbucket.org/gamstop/rohanb.git'\n",
"stack": "Error: To https://redacted@3.25.0/node_modules/simple-git/src/lib/plugins/error-detection.plugin.ts:42:29)\n at PluginStore.exec (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/plugins/plugin-store.ts:54:29)\n at /usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:124:42\n at new Promise ()\n at GitExecutorChain.handleTaskData (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:121:14)\n at GitExecutorChain. (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:97:40)\n at Generator.next ()\n at fulfilled (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/dist/cjs/index.js:52:24)\n at processTicksAndRejections (node:internal/process/task_queues:95:5)"
}
}

WARN: Unknown error when attempting branch automerge (branch="renovate/all")
{
"err": {
"task": {
"commands": [
"push",
"origin",
"main",
"--verbose",
"--porcelain"
],
"format": "utf-8",
"parser": "[function]"
},
"message": "To https://bitbucket.org/gamstop/rohanb.git\n!\trefs/heads/main:refs/heads/main\t[remote rejected] (pre-receive hook declined)\nDone\nPushing to https://bitbucket.org/gamstop/rohanb.git\nPOST git-receive-pack (211 bytes)\nremote: Permission denied to update branch main.\nerror: failed to push some refs to 'https://bitbucket.org/gamstop/rohanb.git'\n",
"stack": "Error: To https://redacted@3.25.0/node_modules/simple-git/src/lib/plugins/error-detection.plugin.ts:42:29)\n at PluginStore.exec (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/plugins/plugin-store.ts:54:29)\n at /usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:124:42\n at new Promise ()\n at GitExecutorChain.handleTaskData (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:121:14)\n at GitExecutorChain. (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/src/lib/runners/git-executor-chain.ts:97:40)\n at Generator.next ()\n at fulfilled (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/simple-git/dist/cjs/index.js:52:24)\n at processTicksAndRejections (node:internal/process/task_queues:95:5)"
}
}

DEBUG: mergeStatus=failed (branch="renovate/all")
DEBUG: Branch automerge not possible, mergeStatus:failed (branch="renovate/all")

</details>

[rarkins]

How exactly are you running Renovate?

[bob-rohan]

via mend.io

[rarkins]

If it's the Mend Bitbucket App (which Mend hosts, instead of you) then you've in the wrong repo

[bob-rohan]

sorry, can you link me where to go please?

[rarkins]

https://github.com/renovatebot/renovate/discussions