Add warning when auto merge is active but merge fails due to lacking permissons

[BreakBB]

Tell us more.

When running Renovate on GitLab you need to provide a RENOVATE_TOKEN with appropriate permissions. However when this token is lacking permissions to auto merge MRs, then the GitLab-API answers with 401. Renovate retries and then gives up at a certain point, but does not raise any awareness towards this issue.

I suggest to at least put the pipeline in "warning" state if not even make it fail, because the renovate configuration can not be applied due to missing permissions.

DEBUG: Automerge on PR creation failed. Retrying 1 (repository=myOrganisation/myRepository/myRepository, branch=REN-react-monorepo)
       "err": {
         "name": "HTTPError",
         "code": "ERR_NON_2XX_3XX_RESPONSE",
         "timings": {
           "start": 1733908020637,
           "socket": 1733908020637,
           "lookup": 1733908020655,
           "connect": 1733908020656,
           "secureConnect": 1733908020657,
           "upload": 1733908020657,
           "response": 1733908020763,
           "end": 1733908020763,
           "phases": {
             "wait": 0,
             "dns": 18,
             "tcp": 1,
             "tls": 1,
             "request": 0,
             "firstByte": 106,
             "download": 0,
             "total": 126
           }
         },
         "message": "Response code 401 (Unauthorized)",
         "stack": "HTTPError: Response code 401 (Unauthorized)\n    at Request.<anonymous> (/usr/local/renovate/node_modules/.pnpm/[email protected]/node_modules/got/dist/source/as-promise/index.js:118:42)\n    at processTicksAndRejections (node:internal/process/task_queues:105:5)",
         "options": {
           "headers": {
             "user-agent": "RenovateBot/39.60.0 (https://github.com/renovatebot/renovate)",
             "accept": "application/json",
             "authorization": "***********",
             "content-type": "application/json",
             "content-length": "72",
             "accept-encoding": "gzip, deflate, br"
           },
           "url": "https://some-gitlab.de/api/v4/projects/myOrganisation%2FmyRepository%2FmyRepository/merge_requests/2723/merge",
           "hostType": "gitlab",
           "username": "",
           "password": "",
           "method": "PUT",
           "http2": false
         },
         "response": {
           "statusCode": 401,
           "statusMessage": "Unauthorized",
           "body": {"message": "401 Unauthorized"},
           "headers": {
             "cache-control": "no-cache",
             "content-length": "30",
             "content-type": "application/json",
             "date": "Wed, 11 Dec 2024 09:07:00 GMT",
             "server": "GaaS",
             "vary": "Origin",
             "x-content-type-options": "nosniff",
             "x-frame-options": "SAMEORIGIN",
             "x-gaas-tenant-id": "prod/s/8738906f-e701-1e52-f1a4-38f35779f2d4",
             "x-gitlab-lb": "gitlab-rails-1",
             "x-gitlab-meta": "{\"correlation_id\":\"01JETFHFECQS9Y0APM8GGDVM5W\",\"version\":\"1\"}",
             "x-request-id": "01JETFHFECQS9Y0APM8GGDVM5W",
             "x-runtime": "0.102150"
           },
           "httpVersion": "1.1",
           "retryCount": 0
         }
       }
DEBUG: No permissions to merge PR (repository=myOrganisation/myRepository/myRepository, branch=REN-react-monorepo)

[BreakBB]

In renovatebot/config-help#639 there already was the suggestion to add a MR comment: renovatebot/config-help#639 (comment)

[rarkins]

#31869

[BreakBB]

Perfect, thanks! And sorry for the duplicate