Grouped package updates pending minimumReleaseAge are not listed in Pending Status Checks

[cflee]

How are you running Renovate?

Self-hosted Renovate

Which platform you running Renovate on?

GitLab (.com or self-hosted)

Which version of Renovate are you using?

42.34.0

Please tell us more about your question or problem

Current state: When minimumReleaseAge is configured, package that are not in a group will have their pending-minimumReleaseAge updates listed on the Dependency Dashboard's Pending Status Checks, so it's possible to force the creation of the update.

However, for packages that are in a group (such as all-minor-patch updates, or any other kind of group) and the group contains other non-pending updates (I'm not sure what happens if it does not have any other updates), the pending-minimumReleaseAge updates are not listed on the Pending Status Checks, so it's not possible to force the creation of the update.

Ask: Can these be made available on the Pending Status Checks so that we can manually force creation where desired?

Use case: We prefer to group all minor/patch updates together. However, for some urgent updates where we have separately manually evaluated a specific package version (typically for security vulnerability remediation) and want to trigger the update creation, we would like to do so from the Dependency Dashboard without having to edit the Renovate config to exclude that package version from the minimumReleaseAge.

This was initially observed on self-hosted with GitLab, but I've reproduced it on GitHub with Mend.io: https://github.com/cflee/renovatebot-reproduce-grouped-minimumReleaseAge

Logs (if relevant)

Logs (from Renovate App)

INFO: Dependency extraction complete
{
  "baseBranch": "main",
  "stats": {
    "managers": {
      "mise": {
        "fileCount": 1,
        "depCount": 1
      },
      "npm": {
        "fileCount": 1,
        "depCount": 3
      }
    },
    "total": {
      "fileCount": 2,
      "depCount": 4
    }
  }
}

DEBUG: 4 flattened updates found: @opentelemetry/semantic-conventions, @sentry/core, import-in-the-middle, import-in-the-middle
DEBUG: Returning 3 branch(es)
DEBUG: Branch is not pending, removing pending upgrades (branch="renovate/grouped")
DEBUG: config.repoIsOnboarded=true
DEBUG: packageFiles with updates
{
  "baseBranch": "main",
  "config": {
    "mise": [
      {
        "deps": [
          {
            "depName": "node",
            "currentValue": "24",
            "packageName": "nodejs",
            "datasource": "node-version",
            "updates": [],
            "versioning": "node",
            "warnings": [],
            "sourceUrl": "https://github.com/nodejs/node",
            "registryUrl": "https://nodejs.org/dist",
            "homepage": "https://nodejs.org",
            "currentVersion": "v24.11.1",
            "currentVersionTimestamp": "2025-11-11T00:00:00.000Z",
            "currentVersionAgeInDays": 23
          }
        ],
        "packageFile": "mise.toml"
      }
    ],
    "npm": [
      {
        "deps": [
          {
            "depType": "dependencies",
            "depName": "@opentelemetry/semantic-conventions",
            "currentValue": "^1.37.0",
            "datasource": "npm",
            "prettyDepType": "dependency",
            "lockedVersion": "1.37.0",
            "updates": [
              {
                "bucket": "non-major",
                "newVersion": "1.38.0",
                "newValue": "^1.37.0",
                "releaseTimestamp": "2025-11-06T18:00:02.237Z",
                "newVersionAgeInDays": 27,
                "newMajor": 1,
                "newMinor": 38,
                "newPatch": 0,
                "updateType": "minor",
                "isBreaking": false,
                "isRange": true,
                "isLockfileUpdate": true,
                "libYears": 0.17739649927067477,
                "branchName": "renovate/grouped"
              }
            ],
            "packageName": "@opentelemetry/semantic-conventions",
            "versioning": "npm",
            "warnings": [],
            "sourceUrl": "https://github.com/open-telemetry/opentelemetry-js",
            "registryUrl": "https://registry.npmjs.org",
            "homepage": "https://github.com/open-telemetry/opentelemetry-js/tree/main/semantic-conventions",
            "mostRecentTimestamp": "2025-11-06T18:00:02.237Z",
            "currentVersion": "1.37.0",
            "currentVersionTimestamp": "2025-09-03T00:00:26.236Z",
            "currentVersionAgeInDays": 92,
            "isSingleVersion": true,
            "fixedVersion": "1.37.0"
          },
          {
            "depType": "dependencies",
            "depName": "@sentry/core",
            "currentValue": "^10.27.0",
            "datasource": "npm",
            "prettyDepType": "dependency",
            "lockedVersion": "10.27.0",
            "updates": [
              {
                "bucket": "non-major",
                "newVersion": "10.28.0",
                "newValue": "^10.27.0",
                "releaseTimestamp": "2025-12-02T14:56:03.106Z",
                "newVersionAgeInDays": 1,
                "newMajor": 10,
                "newMinor": 28,
                "newPatch": 0,
                "updateType": "minor",
                "isBreaking": false,
                "isRange": true,
                "isLockfileUpdate": true,
                "pendingChecks": true,
                "libYears": 0.021414819032217147,
                "branchName": "renovate/grouped"
              }
            ],
            "packageName": "@sentry/core",
            "versioning": "npm",
            "warnings": [],
            "sourceUrl": "https://github.com/getsentry/sentry-javascript",
            "registryUrl": "https://registry.npmjs.org",
            "homepage": "https://github.com/getsentry/sentry-javascript/tree/master/packages/core",
            "mostRecentTimestamp": "2025-12-02T14:56:03.106Z",
            "currentVersion": "10.27.0",
            "currentVersionTimestamp": "2025-11-24T19:20:25.373Z",
            "currentVersionAgeInDays": 9,
            "isSingleVersion": true,
            "fixedVersion": "10.27.0"
          },
          {
            "depType": "dependencies",
            "depName": "import-in-the-middle",
            "currentValue": "^1.14.2",
            "datasource": "npm",
            "prettyDepType": "dependency",
            "lockedVersion": "1.14.2",
            "updates": [
              {
                "bucket": "non-major",
                "newVersion": "1.15.0",
                "newValue": "^1.14.2",
                "releaseTimestamp": "2025-10-10T16:26:46.454Z",
                "newVersionAgeInDays": 54,
                "newMajor": 1,
                "newMinor": 15,
                "newPatch": 0,
                "updateType": "minor",
                "isBreaking": false,
                "isRange": true,
                "isLockfileUpdate": true,
                "pendingChecks": true,
                "libYears": 0.32621101981862,
                "branchName": "renovate/import-in-the-middle-1.x-lockfile"
              },
              {
                "bucket": "major",
                "newVersion": "2.0.0",
                "newValue": "^2.0.0",
                "releaseTimestamp": "2025-10-16T16:20:55.828Z",
                "newVersionAgeInDays": 48,
                "newMajor": 2,
                "newMinor": 0,
                "newPatch": 0,
                "updateType": "major",
                "isBreaking": true,
                "isRange": true,
                "pendingChecks": true,
                "libYears": 0.34263825770547945,
                "branchName": "renovate/import-in-the-middle-2.x"
              }
            ],
            "packageName": "import-in-the-middle",
            "versioning": "npm",
            "warnings": [],
            "sourceUrl": "https://github.com/nodejs/import-in-the-middle",
            "registryUrl": "https://registry.npmjs.org",
            "mostRecentTimestamp": "2025-10-16T16:20:55.828Z",
            "currentVersion": "1.14.2",
            "currentVersionTimestamp": "2025-06-13T14:50:15.733Z",
            "currentVersionAgeInDays": 173,
            "isSingleVersion": true,
            "fixedVersion": "1.14.2"
          }
        ],
        "extractedConstraints": {
          "npm": ">=7"
        },
        "packageFileVersion": "0.0.0",
        "managerData": {
          "packageJsonName": "renovatebot-reproduce-slash-glob-match",
          "hasPackageManager": false,
          "npmLock": "package-lock.json",
          "yarnZeroInstall": false,
          "npmrcFileName": null
        },
        "skipInstalls": true,
        "packageFile": "package.json",
        "lockFiles": [
          "package-lock.json"
        ]
      }
    ]
  }
}

DEBUG: syncBranchState() (branch="renovate/grouped")
DEBUG: syncBranchState(): Branch cache not found, creating minimal branchState (branch="renovate/grouped")
DEBUG: branchExists=false (branch="renovate/grouped")
DEBUG: dependencyDashboardCheck=undefined (branch="renovate/grouped")
DEBUG: Check for closed PR because recreating closed PRs is disabled. (branch="renovate/grouped")
DEBUG: findPr(renovate/grouped, Update dependency @opentelemetry/semantic-conventions to v1.38.0, !open) (branch="renovate/grouped")
DEBUG: prAlreadyExisted=false (branch="renovate/grouped")
DEBUG: Branch needs creating (branch="renovate/grouped")
DEBUG: Using reuseExistingBranch: false (branch="renovate/grouped")
DEBUG: Setting current branch to main (branch="renovate/grouped")
DEBUG: latest commit (branch="renovate/grouped")
{
  "branchName": "main",
  "latestCommitDate": "2025-12-04T15:52:07+08:00",
  "sha": "3a128fc9281d2e6790798b9b280914dec8bc9cf5"
}

DEBUG: manager.getUpdatedPackageFiles() reuseExistingBranch=false (branch="renovate/grouped")
DEBUG: npm.updateLockedDependency: @opentelemetry/semantic-conventions@1.37.0 -> 1.38.0 [package-lock.json] (branch="renovate/grouped")
DEBUG: Executing command (branch="renovate/grouped")
{
  "command": "npm install --package-lock-only --no-audit --ignore-scripts @opentelemetry/semantic-conventions@1.38.0"
}

DEBUG: exec completed (branch="renovate/grouped")
{
  "durationMs": 656,
  "stdout": "\nup to date in 516ms\n",
  "stderr": "npm warn Unknown env config \"store\". This will stop working in the next major version of npm.\n"
}

[jamietanna]

@cflee can you please enable the Dependency Dashboard for the repo? I.e. with an extends of https://docs.renovatebot.com/presets-default/#dependencydashboard

[cflee]

@jamietanna Sure, here is the Dependency Dashboard issue: cflee/renovatebot-reproduce-grouped-minimumReleaseAge#2

[jamietanna]

@RahulGautamSingh are you able to take a look? I wonder if maybe this is an unintended side effect of some of the "filtering" we've added in to make sure PRs aren't created