Migrate Renovate config PR fails DCO signoff check

[robobario]

How are you running Renovate?

Self-hosted Renovate CLI

Which platform you running Renovate on?

GitHub.com

Which version of Renovate are you using?

43.64.1

Please tell us more about your question or problem

Hi, we have been happily running Renovate to keep docker images up to date. These PRs are created with commits that include the Signed-off-by: that our PR checks require. We just recently had a PR created by renovate to migrate the config file and this PR failed checks due to this commit not having a Signed-off-by: trailer.

Here is our renovate.json.

We extend:

  "extends": [
    "config:best-practices",
    "docker:enableMajor",
    ":gitSignOff"
  ],

Here's the GitHub action run that generated the PR.

Notably the same renovate run produced this commit for a dependency upgrade which does have the signoff.

Thank you!

Logs (if relevant)

Logs

DEBUG: Config Migration PR does not exist (repository=kroxylicious/kroxylicious)
DEBUG: Need to create migration PR (repository=kroxylicious/kroxylicious)
DEBUG: createConfigMigrationBranch() (repository=kroxylicious/kroxylicious)
DEBUG: Creating config migration branch (repository=kroxylicious/kroxylicious)
DEBUG: Setting current branch to main (repository=kroxylicious/kroxylicious)
DEBUG: latest commit (repository=kroxylicious/kroxylicious)
       "branchName": "main",
       "latestCommitDate": "2026-03-11T17:10:56.000Z",
       "sha": "b8930cd6f1238867c0e70aa1bd243a0ec3fab1d3"
DEBUG: Preparing files for committing to branch renovate/migrate-config (repository=kroxylicious/kroxylicious)
DEBUG: git commit (repository=kroxylicious/kroxylicious)
       "deletedFiles": [],
       "ignoredFiles": [],
       "result": {
         "author": null,
         "branch": "renovate/migrate-config",
         "commit": "a4e55dfeeac169e318c25a6a205cd636f95fb2bc",
         "root": false,
         "summary": {"changes": 1, "insertions": 2, "deletions": 0}
       }
DEBUG: Pushing refSpec renovate/migrate-config:renovate/migrate-config (repository=kroxylicious/kroxylicious)
DEBUG: git push (repository=kroxylicious/kroxylicious)
       "result": {
         "pushed": [
           {
             "deleted": false,
             "tag": false,
             "branch": true,
             "new": true,
             "alreadyUpdated": false,
             "local": "refs/heads/renovate/migrate-config",
             "remote": "refs/heads/renovate/migrate-config"
           }
         ],
         "ref": {"local": "refs/remotes/origin/renovate/migrate-config"},
         "remoteMessages": {
           "all": [
             "Create a pull request for 'renovate/migrate-config' on GitHub by visiting:",
             "https://github.com/kroxylicious/kroxylicious/pull/new/renovate/migrate-config"
           ],
           "pullRequestUrl": "https://github.com/kroxylicious/kroxylicious/pull/new/renovate/migrate-config"
         }
       }
DEBUG: Setting current branch to renovate/migrate-config (repository=kroxylicious/kroxylicious)
DEBUG: latest commit (repository=kroxylicious/kroxylicious)
       "branchName": "renovate/migrate-config",
       "latestCommitDate": "2026-03-11T18:38:52.000Z",
       "sha": "a4e55dfeeac169e318c25a6a205cd636f95fb2bc"

[robobario]

At a guess the migrate-config create needs some code added like this, where the config.commitBody is appended after the commit message is created here.

[jamietanna]

Yep, this is currently not implemented - we've got #40124 to track it, which we're looking for outside support for :)

[robobario]

thanks Jamie