Renovate hostRules silently ignored? Check your config level

A developer troubleshooting a 401 Unauthorized error when Renovate tried to update NuGet dependencies from an internal Azure DevOps feed discovers that hostRules is a global-only Renovate config option. Placing it in renovate.json (a repository-level config) causes Renovate to silently drop it, resulting in unauthenticated requests. The fix is moving hostRules into global config, either via config.js or the RENOVATE_HOST_RULES environment variable, while keeping other settings like extends and packageRules in renovate.json. The same restriction applies to other global-only options such as platform, endpoint, and autodiscover.

Source: https://bartwullems.blogspot.com/2026/08/renovate-hostrules-silently-ignored.html. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.