feat: support updateLockFiles for all managers

docs/usage/configuration-options.md

@@ -4275,6 +4275,14 @@ By default, Renovate skips versions in between, like `[email protected]`.
 
 But if you set `separateMultipleMinor=true` then you get separate PRs for each minor stream, like `[email protected]`, `[email protected]` and `[email protected]`, etc.
 
+## skipArtifactUpdating
+
+Use this option in cases where automatic artifact updating can be problematic, or when you would like to customize how artifacts (such as lock files) are updated. When this option is set, you should update artifacts (such as lock files), via `postUpgradeTasks` or another method such as a CI workflow.
+
+<!-- prettier-ignore -->
+!!! note
+    When this option is set against individual package rules, and upgrades are grouped, artifact updating will only be skipped if every upgrade in a branch wants to skip it.
+
 ## skipInstalls
 
 By default, Renovate will use the most efficient approach to updating package files and lock files, which in most cases skips the need to perform a full module install by the bot.

lib/config/options/index.ts

@@ -3120,6 +3120,13 @@ const options: RenovateOptions[] = [
     default: false,
     globalOnly: true,
   },
+  {
+    name: 'skipArtifactUpdating',
+    description: "Skip Renovate's automatic artifact updating.",
+    type: 'boolean',
+    default: false,
+    globalOnly: false,
+  },
 ];
 
 export function getOptions(): RenovateOptions[] {

lib/config/types.ts

@@ -93,6 +93,7 @@ export interface RenovateSharedConfig {
   semanticCommitScope?: string | null;
   semanticCommitType?: string;
   semanticCommits?: 'auto' | 'enabled' | 'disabled';
+  skipArtifactUpdating?: boolean;
   stopUpdatingLabel?: string;
   suppressNotifications?: string[];
   timezone?: string;

lib/modules/manager/npm/post-update/index.spec.ts

@@ -559,6 +559,37 @@ describe('modules/manager/npm/post-update/index', () => {
       });
     });
 
+    it('skip artifact updating', async () => {
+      expect(
+        await getAdditionalFiles(
+          {
+            ...updateConfig,
+            updateLockFiles: true,
+            reuseExistingBranch: true,
+            skipArtifactUpdating: true,
+            upgrades: [
+              {
+                depName: 'postcss',
+                isRemediation: true,
+                managerData: {
+                  npmLock: 'package-lock.json',
+                },
+                rangeStrategy: 'widen',
+              },
+            ],
+          },
+          additionalFiles,
+        ),
+      ).toStrictEqual({
+        artifactErrors: [],
+        updatedArtifacts: [],
+      });
+      expect(spyNpm).not.toHaveBeenCalled();
+      expect(logger.logger.debug).toHaveBeenCalledWith(
+        'Skipping lock file generation',
+      );
+    });
+
     it('reuse existing up-to-date', async () => {
       expect(
         await getAdditionalFiles(

lib/modules/manager/npm/post-update/index.ts

@@ -371,7 +371,7 @@ export async function getAdditionalFiles(
   if (!packageFiles.npm?.length) {
     return { artifactErrors, updatedArtifacts };
   }
-  if (!config.updateLockFiles) {
+  if (!config.updateLockFiles || config.skipArtifactUpdating) {
     logger.debug('Skipping lock file generation');
     return { artifactErrors, updatedArtifacts };
   }

lib/modules/manager/types.ts

@@ -45,6 +45,7 @@ export interface UpdateArtifactsConfig {
   newVersion?: string;
   newMajor?: number;
   registryAliases?: Record<string, string>;
+  skipArtifactUpdating?: boolean;
   lockFiles?: string[];
 }
 
@@ -324,4 +325,5 @@ export interface PostUpdateConfig<T = Record<string, any>>
   reuseExistingBranch?: boolean;
 
   isLockFileMaintenance?: boolean;
+  skipArtifactUpdating?: boolean;
 }

lib/workers/repository/update/branch/get-updated.spec.ts

@@ -713,6 +713,147 @@ describe('workers/repository/update/branch/get-updated', () => {
       });
     });
 
+    it('does not update artifacts when skipArtifactUpdating=true', async () => {
+      const branchName = 'renovate/wheel-0.x';
+      const updateType = 'patch';
+      const lockedVersion = '0.45.0';
+      const newVersion = '0.45.1';
+      const currentValue = '==0.45.0';
+      const newRegexValue = newVersion;
+      const newValue = '==0.45.1';
+
+      const packageFile = 'requirements.in';
+      const lockFile = 'requirements.txt';
+
+      const regexWheelLookup: LookupUpdate = {
+        newVersion,
+        newValue: newRegexValue,
+        updateType,
+        branchName,
+      };
+
+      const pipCompileWheelLookup: LookupUpdate = {
+        ...regexWheelLookup,
+        newValue,
+      };
+      const pipCompileWheelDep = {
+        currentValue,
+        lockedVersion,
+        updates: [pipCompileWheelLookup],
+      };
+
+      config.manager = 'pip-compile';
+      config.branchName = branchName;
+      config.skipArtifactUpdating = true;
+      config.upgrades.push({
+        packageFile,
+        lockFiles: [lockFile],
+        manager: 'pip-compile',
+        updateType,
+        depName: 'alpha',
+        currentValue,
+        newVersion,
+        branchName,
+      });
+      config.upgrades.push({
+        packageFile,
+        lockFiles: [lockFile],
+        manager: 'pip-compile',
+        updateType,
+        depName: 'beta',
+        currentValue,
+        newVersion,
+        branchName,
+      });
+
+      config.packageFiles = {
+        'pip-compile': [
+          {
+            packageFile,
+            lockFiles: [lockFile],
+            deps: [pipCompileWheelDep],
+          },
+        ],
+      };
+
+      pipCompile.updateArtifacts.mockResolvedValue([]);
+      autoReplace.doAutoReplace.mockResolvedValue('new content');
+
+      await getUpdatedPackageFiles(config);
+
+      expect(pipCompile.updateArtifacts).not.toHaveBeenCalled();
+    });
+
+    it('updates artifacts when skipArtifactUpdating=false', async () => {
+      const branchName = 'renovate/wheel-0.x';
+      const updateType = 'patch';
+      const lockedVersion = '0.45.0';
+      const newVersion = '0.45.1';
+      const currentValue = '==0.45.0';
+      const newRegexValue = newVersion;
+      const newValue = '==0.45.1';
+
+      const packageFile = 'requirements.in';
+      const lockFile = 'requirements.txt';
+
+      const regexWheelLookup: LookupUpdate = {
+        newVersion,
+        newValue: newRegexValue,
+        updateType,
+        branchName,
+      };
+
+      const pipCompileWheelLookup: LookupUpdate = {
+        ...regexWheelLookup,
+        newValue,
+      };
+      const pipCompileWheelDep = {
+        currentValue,
+        lockedVersion,
+        updates: [pipCompileWheelLookup],
+      };
+
+      config.manager = 'pip-compile';
+      config.branchName = branchName;
+      config.upgrades.push({
+        packageFile,
+        lockFiles: [lockFile],
+        manager: 'pip-compile',
+        updateType,
+        depName: 'alpha',
+        currentValue,
+        newVersion,
+        branchName,
+      });
+      config.upgrades.push({
+        packageFile,
+        lockFiles: [lockFile],
+        manager: 'pip-compile',
+        updateType,
+        depName: 'beta',
+        currentValue,
+        newVersion,
+        branchName,
+      });
+
+      config.packageFiles = {
+        'pip-compile': [
+          {
+            packageFile,
+            lockFiles: [lockFile],
+            deps: [pipCompileWheelDep],
+          },
+        ],
+      };
+
+      pipCompile.updateArtifacts.mockResolvedValue([]);
+      autoReplace.doAutoReplace.mockResolvedValue('new content');
+
+      await getUpdatedPackageFiles(config);
+
+      expect(pipCompile.updateArtifacts).toHaveBeenCalledTimes(1);
+    });
+
     it('attempts updateLockedDependency and handles unsupported', async () => {
       config.upgrades.push({
         packageFile: 'package.json',

lib/workers/repository/update/branch/get-updated.ts

@@ -472,6 +472,14 @@ async function managerUpdateArtifacts(
   manager: string,
   updateArtifact: UpdateArtifact,
 ): Promise<UpdateArtifactsResult[] | null> {
+  if (updateArtifact.config.skipArtifactUpdating) {
+    logger.debug(
+      { manager, packageFileName: updateArtifact.packageFileName },
+      'skipping artifact updating',
+    );
+    return null;
+  }
+
   const updateArtifacts = get(manager, 'updateArtifacts');
   if (updateArtifacts) {
     return await updateArtifacts(updateArtifact);

lib/workers/repository/updates/__snapshots__/generate.spec.ts.snap

@@ -27,6 +27,7 @@ exports[`workers/repository/updates/generate > generateBranchConfig() > handles
   "prettyDepType": "dependency",
   "recreateClosed": false,
   "releaseTimestamp": undefined,
+  "skipArtifactUpdating": false,
   "skipInstalls": true,
   "upgrades": [
     {
@@ -117,6 +118,7 @@ exports[`workers/repository/updates/generate > generateBranchConfig() > handles
   "prettyDepType": "dependency",
   "recreateClosed": false,
   "releaseTimestamp": undefined,
+  "skipArtifactUpdating": false,
   "skipInstalls": true,
   "upgrades": [
     {
@@ -197,6 +199,7 @@ exports[`workers/repository/updates/generate > generateBranchConfig() > handles
   "prettyDepType": "dependency",
   "recreateClosed": true,
   "releaseTimestamp": undefined,
+  "skipArtifactUpdating": false,
   "skipInstalls": true,
   "upgrades": [
     {
@@ -244,6 +247,7 @@ exports[`workers/repository/updates/generate > generateBranchConfig() > handles
   "prettyNewVersion": "v1.0.1",
   "recreateClosed": false,
   "releaseTimestamp": undefined,
+  "skipArtifactUpdating": false,
   "skipInstalls": true,
   "upgrades": [
     {