ZodError: Schema error at Object.get error [as error]

[steled]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

GitHub Action @v43.0.2

Please tell us more about your question or problem

I previously opened an issue at the github-action repo but it was clsoed with the comment that I should open a discussion here: renovatebot/github-action#946

So my issue is the following.

Since version 41.0.21 I'm getting the following error on my action (see logs below), see the action log also at: https://github.com/steled/argocd-apps/actions/runs/16065302436/job/45338649590#step:3:702

Before this version it looked like (see logs below), see the action log also at: https://github.com/steled/argocd-apps/actions/runs/14693231051/job/41231411631#step:3:522

Logs (if relevant)

since version 41.0.21:

Logs

DEBUG: Dependency atmoz/sftp has unsupported/unversioned value alpine (versioning=docker) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: getDigest(https://index.docker.io,/ atmoz/sftp, alpine) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: getManifestResponse(https://index.docker.io,/ atmoz/sftp, sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f, head) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: http cache: saving https://auth.docker.io/token?scope=repository%3Aatmoz%2Fsftp%3Apull&service=registry.docker.io (etag=undefined, lastModified=undefined) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: http cache: saving https://index.docker.io/v2/atmoz/sftp/manifests/sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f (etag="sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f", lastModified=undefined) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: getManifestResponse(https://index.docker.io,/ atmoz/sftp, sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f, getText) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: Invalid manifest response (repository=steled/argocd-apps, baseBranch=main)
       "registry": "https://index.docker.io/",
       "dockerRepository": "atmoz/sftp",
       "tag": "sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f",
       "body": "",
       "headers": {
         "content-length": "1362",
         "content-type": "application/vnd.docker.distribution.manifest.v2+json",
         "docker-content-digest": "sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f",
         "docker-distribution-api-version": "registry/2.0",
         "etag": "\"sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f\"",
         "date": "Thu, 01 May 2025 03:13:19 GMT",
         "strict-transport-security": "max-age=31[536](https://github.com/steled/argocd-apps/actions/runs/14768935391/job/41465536686#step:3:537)000",
         "ratelimit-limit": "100;w=21600",
         "ratelimit-remaining": "83;w=21600",
         "docker-ratelimit-source": "20.57.47.199"
       },
       "err": {
         "message": "Schema error",
         "stack": "ZodError: Schema error\n    at Object.get error [as error] (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/zod/lib/types.js:55:31)\n    at DockerDatasource.getManifest (/usr/local/renovate/lib/modules/datasource/docker/index.ts:311:23)\n    at processTicksAndRejections (node:internal/process/task_queues:105:5)\n    at DockerDatasource.getConfigDigest (/usr/local/renovate/lib/modules/datasource/docker/index.ts:277:8)\n    at DockerDatasource.getImageArchitecture (/usr/local/renovate/lib/modules/datasource/docker/index.ts:400:28)\n    at /usr/local/renovate/lib/util/cache/package/decorator.ts:131:20\n    at DockerDatasource.getDigest (/usr/local/renovate/lib/modules/datasource/docker/index.ts:842:24)\n    at /usr/local/renovate/lib/util/cache/package/decorator.ts:131:20\n    at lookupUpdates (/usr/local/renovate/lib/workers/repository/process/lookup/index.ts:684:14)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:79:12\n    at Function.wrap (/usr/local/renovate/lib/util/stats.ts:38:20)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:125:23\n    at /usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/p-map/index.js:57:22",
         "issues": "Invalid JSON"
       }
DEBUG: getManifestResponse(https://index.docker.io, atmoz/sftp, alpine, head) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: http cache: saving https://index.docker.io/v2/atmoz/sftp/manifests/alpine (etag="sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f", lastModified=undefined) (repository=steled/argocd-apps, baseBranch=main)

pre version 41.0.21:

Logs

DEBUG: Dependency atmoz/sftp has unsupported/unversioned value alpine (versioning=docker) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: getDigest(https://index.docker.io,/ atmoz/sftp, alpine) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: getManifestResponse(https://index.docker.io,/ atmoz/sftp, sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f, head) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: http cache: saving https://auth.docker.io/token?scope=repository%3Aatmoz%2Fsftp%3Apull&service=registry.docker.io (etag=undefined, lastModified=undefined) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: getManifestResponse(https://index.docker.io,/ atmoz/sftp, sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f, getText) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: Current digest sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f relates to architecture amd64 (repository=steled/argocd-apps, baseBranch=main)
DEBUG: Architecture-specific digest or missing docker-content-digest header - pulling full manifest (repository=steled/argocd-apps, baseBranch=main)
       "registryHost": "https://index.docker.io/",
       "dockerRepository": "atmoz/sftp"
DEBUG: getManifestResponse(https://index.docker.io,/ atmoz/sftp, alpine, getText) (repository=steled/argocd-apps, baseBranch=main)
DEBUG: Got docker digest sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f (repository=steled/argocd-apps, baseBranch=main)

[github-actions[bot]]

Hi there,

Please help this Discussion progress by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. Discussions without reproductions are less likely to be converted to Issues.

Please follow these steps:

1. Read our guide on creating a minimal reproduction.
2. Go to our minimal reproduction template repository.
3. Select the Use this template button to create a new repository based on the template.
4. Work on the minimal reproduction in your own repository.
5. Fill out the information in your repository's README.md.
6. Add the link to your reproduction to the first post of your Discussion. If you are not the original author, you can post a new comment with the link.

If you need help with running Renovate on your minimal reproduction repository, please refer to our Running Renovate guide.
Good luck,

The Renovate team

[rarkins]

Please see if this reproduces in a simplied manner, e.g. a boilerplate repo with a Dockerfile containing "FROM <problematic package/tag/sha from your repo>"

[rarkins]

You can install the hosted renovate github app so no need to set up an action

[steled]

I created a minimal repo: #36830
The error can also be found there: https://github.com/steled/minimal-reproduction-36830/actions/runs/16689125406/job/47243959431#step:3:469

[github-actions[bot]]

Hi there,

We appreciate the effort you put into creating a reproduction. But your reproduction is not minimal yet, or is missing fields we ask for in our template.

Please re-read the steps and documentation given in the previous message, and try again to create a minimal reproduction.

Thanks, the Renovate team

[steled]

the minimal repo is updated, hope it's correct now

[rarkins]

It's not minimal at all. I won't be looking a third time.

[github-actions[bot]]

Hi there,

This is a semi-automated message to let you know that maintainers do not believe that they can help further with this Discussion.

This may be because the discussion is missing information, or because the discussion is too complex, or because the discussion is not actionable. It might also be because you've indicated that you don't have the time or willingness to provide information or perform steps requested of you.

Please do not chase maintainers for updates or ask for more information. If you have new information, or are willing to provide more information, please reply to this message with that information. Actively or passively aggressive responses to this message will result in blocking.

Thanks, the Renovate team

[RahulGautamSingh]

@steled It seems we are getting no response for the package from docker.io. In the logs, I see an empty body. Can you please check and confirm if the api returns releases for the package in question.

Debug logs

DEBUG: Invalid manifest response (repository=steled/argocd-apps, baseBranch=main)
       "registry": "https://index.docker.io/",
       "dockerRepository": "atmoz/sftp",
       "tag": "sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f",
       "body": "",         <----
       "headers": {
         "content-length": "1362",
         "content-type": "application/vnd.docker.distribution.manifest.v2+json",
         "docker-content-digest": "sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f",
         "docker-distribution-api-version": "registry/2.0",
         "etag": "\"sha256:93d2d9c0e8e3d619e01321bd0eabaf746c9700115f92db5038d2d54b277ed22f\"",
         "date": "Fri, 04 Jul 2025 03:40:28 GMT",
         "strict-transport-security": "max-age=31536000",
         "ratelimit-limit": "100;w=21600",
         "ratelimit-remaining": "96;w=21600",
         "docker-ratelimit-source": "13.64.234.35"
       },
       "err": {
         "message": "Schema error",
         "stack": "ZodError: Schema error\n    at Object.get error [as error] (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/zod/dist/cjs/v3/types.js:45:31)\n    at DockerDatasource.getManifest (/usr/local/renovate/lib/modules/datasource/docker/index.ts:312:23)\n    at processTicksAndRejections (node:internal/process/task_queues:105:5)\n    at DockerDatasource.getConfigDigest (/usr/local/renovate/lib/modules/datasource/docker/index.ts:278:8)\n    at DockerDatasource.getImageArchitecture (/usr/local/renovate/lib/modules/datasource/docker/index.ts:401:28)\n    at /usr/local/renovate/lib/util/cache/package/decorator.ts:131:20\n    at DockerDatasource.getDigest (/usr/local/renovate/lib/modules/datasource/docker/index.ts:857:24)\n    at /usr/local/renovate/lib/util/cache/package/decorator.ts:131:20\n    at lookupUpdates (/usr/local/renovate/lib/workers/repository/process/lookup/index.ts:690:14)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:79:12\n    at Function.wrap (/usr/local/renovate/lib/util/stats.ts:38:20)\n    at /usr/local/renovate/lib/workers/repository/process/fetch.ts:125:23\n    at file:///usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/p-map/index.js:139:20",
         "issues": "Invalid JSON"
       }

[steled]

Good morning @RahulGautamSingh and thanks for the reply.
I did a cleanup of my repo again and also tried it with github action version v43.0.7 but still the same problem, see my last run: https://github.com/steled/minimal-reproduction-36830/actions/runs/16955606512/job/48057104391#step:3:649

[rarkins]

Please install the hosted app instead of using GitHub actions

[philippe-granet]

I also reproduce the same error with a self-hosted instance of Renovate, and I think it's a problem of cache.
In the logs, there is an empty body because it reuse a response of a preceding HEAD request, which have no body.
I have made a local patch replacing this:

renovate/lib/modules/datasource/docker/index.ts

Line 127 in 41d7ece

cacheProvider: memCacheProvider,

by

cacheProvider: null,

and no more errors

memory-http-cache-provider is a cache with a key only on URL (without HTTP verb GET or HEAD).
As getManifestResponse method is first called with HEAD mode (in getImageArchitecture method), it is put in cache without body

[viceice]

@zharinov can you check the cache behavior for head request? looks like a bug to me to not take the method into account

[philippe-granet]

@zharinov can you check the cache behavior for head request? looks like a bug to me to not take the method into account

any news on this problem ?

[dhess]

We're getting the exact same error with a self-hosted instance of Renovate (ghcr.io/renovatebot/renovate:41.81.1), using our self-hosted Forgejo instance's package repo.

[dh-harald]

I'm getting the same error with a self-hosted instance of Renovate 41.97.4, using on self-hosted Gitea instance.
The "invalid" json came from a docker image manifest from a Harbour (2.12.1) image registry (selfhosted)

[philippe-granet]

Fixed in #37862 ?

[dhess]

@philippe-granet Yes, looks like. Unfortunately, in our case, we're still getting a 404 and Renovate is complaining that "Docker Manifest is unknown", but the Zod error is gone.