Node option `--use-openssl-ca` causes artifact upload errors #33935

philprime · 2025-01-30T09:35:12Z

philprime
Jan 30, 2025

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

GitHub

Please tell us more about your question or problem

We originally used the Mend.io-hosted Renvoate App but recently migrated to self-hosted. We already faced the issue of artifact upload errors of yarn.lock files before, but now the errors became "more clear".

We are using Node.js v22.13.1 and Yarn 4.6.0 and it works fine in updating the package.json files, but it fails to install the dependencies and update the yarn.lock files.

In particular this error appears for all packages:

➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @opentelemetry/instrumentation@npm:0.57.1: Initiated Worker with invalid execArgv flags: --use-openssl-ca

The reason this flag is set seems to be the explicit argument in the Docker script:

renovate/tools/docker/bin/renovate

Line 13 in 97ace64

    
           /usr/local/renovate/node --use-openssl-ca "${RENOVATE_NODE_ARGS[@]}" /usr/local/renovate/dist/renovate.js "$@"

I was able to reproduce the error by creating a simple package.json and trying to install it in the Docker image 39.144-full:

# on host system >
$ docker run -it --rm --entrypoint /bin/bash -v /tmp/workdir:/tmp/workdir renovate/renovate:39.144-full

# in docker container >
/usr/src/app$ node -v
v22.13.1
/usr/src/app$ yarn -v
4.6.0
/usr/src/app$ mkdir -p /tmp/workdir && cd /tmp/workdir
/tmp/workdir$ cat <<EOF > package.json
{
  "name": "test",
  "engines": {
    "node": ">=22"
  },
  "packageManager": "[email protected]",
  "dependencies": {
    "@sentry/cli": "2.41.1"
  }
}
EOF
/tmp/workdir$ NODE_OPTIONS=--use-openssl-ca yarn install
➤ YN0000: · Yarn 4.6.0
➤ YN0000: ┌ Resolution step
➤ YN0085: │ + @sentry/cli@npm:2.41.1, @sentry/cli-darwin@npm:2.41.1, @sentry/cli-linux-arm64@npm:2.41.1, @sentry/cli-linux-arm@npm:2.41.1, @sentry/cli-linux-i686@npm:2.41.1, @sentry/cli-linux-x64@npm:2.41.1, and 14 more.
➤ YN0000: └ Completed in 0s 477ms
➤ YN0000: ┌ Fetch step
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: progress@npm:2.0.3: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: node-fetch@npm:2.7.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: https-proxy-agent@npm:5.0.1: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: agent-base@npm:6.0.2: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: debug@npm:4.4.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: ms@npm:2.1.3: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: isexe@npm:2.0.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: webidl-conversions@npm:3.0.1: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: tr46@npm:0.0.3: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: proxy-from-env@npm:1.1.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: whatwg-url@npm:5.0.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @sentry/cli@npm:2.41.1: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: which@npm:2.0.2: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @sentry/cli-linux-arm64@npm:2.41.1: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.1/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0000: └ Completed in 0s 295ms
➤ YN0000: · Failed with errors in 0s 780ms

I do not have enough understanding to propose a fix, because I do not know the --use-openssl-ca flag.

Logs (if relevant)

This is the GitHub comment created by Renovate:

GitHub Comment

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

➤ YN0000: · Yarn 4.6.0
➤ YN0000: ┌ Resolution step
➤ YN0085: │ + @prisma/client@npm:6.3.0, @prisma/instrumentation@npm:6.3.0, prisma@npm:6.3.0, @opentelemetry/api-logs@npm:0.57.1, and 6 more.
➤ YN0085: │ - @prisma/client@npm:6.2.1, @prisma/debug@npm:6.2.1, @prisma/engines-version@npm:6.2.0-14.4123509d24aa4dede1e864b46351bf2790323b69, and 5 more.
➤ YN0000: └ Completed in 7s 434ms
➤ YN0000: ┌ Post-resolution validation
➤ YN0060: │ @nestjs/common is listed by your project with version 11.0.5 (pf8c2b), which doesn't satisfy what @sentry/nestjs and other dependencies request (but they have non-overlapping ranges!).
➤ YN0060: │ @nestjs/core is listed by your project with version 11.0.5 (pcffab), which doesn't satisfy what @sentry/nestjs and other dependencies request (but they have non-overlapping ranges!).
➤ YN0002: │ @repo/database@workspace:packages/database doesn't provide @opentelemetry/api (p141fb), requested by @prisma/instrumentation.
➤ YN0002: │ @repo/eslint-config@workspace:packages/eslint-config doesn't provide turbo (p329e2), requested by eslint-plugin-turbo.
➤ YN0086: │ Some peer dependencies are incorrectly met by your project; run yarn explain peer-requirements <hash> for details, where <hash> is the six-letter p-prefixed code.
➤ YN0086: │ Some peer dependencies are incorrectly met by dependencies; run yarn explain peer-requirements for details.
➤ YN0000: └ Completed
➤ YN0000: ┌ Fetch step
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @opentelemetry/instrumentation@npm:0.57.1: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @opentelemetry/api-logs@npm:0.57.1: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @prisma/engines@npm:6.3.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @prisma/debug@npm:6.3.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @prisma/engines-version@npm:6.3.0-17.acc0b9dd43eb689cbd20c9470515d719db10d0b0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @prisma/instrumentation@npm:6.3.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @prisma/get-platform@npm:6.3.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @prisma/fetch-engine@npm:6.3.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @prisma/client@npm:6.3.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: prisma@npm:6.3.0: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @sentry/cli-linux-arm64@npm:2.41.1: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: turbo-linux-arm64@npm:2.3.4: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0001: │ Error [ERR_WORKER_INVALID_EXEC_ARGV]: @next/swc-linux-arm64-gnu@npm:15.1.6: Initiated Worker with invalid execArgv flags: --use-openssl-ca
    at new Worker (node:internal/worker:222:13)
    at B2.createWorker (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53159)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:192:53649
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3740
    at new Promise (<anonymous>)
    at OJ.exports (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3722)
    at a (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:3962)
    at n (/opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4011)
    at /opt/containerbase/tools/yarn/4.6.0/22.13.0/node_modules/@yarnpkg/cli-dist/bin/yarn.js:132:4081
    at new Promise (<anonymous>)
➤ YN0000: └ Completed in 2s 804ms
➤ YN0000: · Failed with errors in 10s 269ms

rarkins · 2025-02-01T07:17:17Z

rarkins
Feb 1, 2025
Maintainer

The flag was added by @viceice in #30347

That was in response to someone's GitLab problem, which appeared to be caused by #30324

According to ChatGPT:

The Flag:
The --use-openssl-ca flag was originally added (in the Docker script) here so that Node would use the OpenSSL certificate store instead of its built-in one. In older Node versions this worked fine.

The Problem in Node v22:
In Node.js v22, passing --use-openssl-ca (or certain other flags) to a worker thread isn’t allowed. When Yarn (running under Node v22) spawns a worker thread, it automatically inherits the parent's exec arguments (which include --use-openssl-ca). This inheritance triggers the error:

javascript
Copy
Error [ERR_WORKER_INVALID_EXEC_ARGV]: ... Initiated Worker with invalid execArgv flags: --use-openssl-ca

ChatGPT also suggestions something like NODE_OPTIONS="" yarn install. I guess the question is: should we remove this flag from our Docker entrypoint altogether for Node 22, or should we override it when we call Yarn and any other subprocess which uses worker threads?

Related Node issues:

2 replies

viceice Feb 1, 2025
Maintainer

I see it as a.bug of newer node versions. Worker threads should simply ignore such flags as mentioned in the linked issue.

I'll try to move that flag to NODE_OPTIONS in containerbase, so it's no longer inferring.

I don't like to fully drop it, because it'll cause consumer TLS errors.
Older node would then depend on old ca certificates and fail with weird TLS errors.

viceice Feb 1, 2025
Maintainer

move use-openssl-ca to NODE_OPTIONS containerbase/base#4033

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Node option `--use-openssl-ca` causes artifact upload errors #33935

{{title}}

⚠️ Artifact update problem

File name: yarn.lock

Replies: 1 comment 2 replies

{{title}}

{{title}}

{{title}}

Select a reply

Node option --use-openssl-ca causes artifact upload errors #33935

philprime Jan 30, 2025

How are you running Renovate?

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

Please tell us more about your question or problem

Logs (if relevant)

⚠️ Artifact update problem

File name: yarn.lock

Replies: 1 comment · 2 replies

rarkins Feb 1, 2025 Maintainer

viceice Feb 1, 2025 Maintainer

viceice Feb 1, 2025 Maintainer

Node option `--use-openssl-ca` causes artifact upload errors #33935

philprime
Jan 30, 2025

Replies: 1 comment 2 replies

rarkins
Feb 1, 2025
Maintainer

viceice Feb 1, 2025
Maintainer

viceice Feb 1, 2025
Maintainer