How are you running Renovate?

Self-hosted Renovate

Which platform you running Renovate on?

GitLab (.com or self-hosted)

Which version of Renovate are you using?

42.9.1

Please tell us more about your question or problem

Hi,
we are currently starting to use uv.lock files to pin our python dependencies. Since renovate supports uv, we are using it to update the uv.lock file. If works fine for all public packages but with private package we always receive a 403 HTTP status code.

We have configured the credentials for the hostname of the private repository in a hoseRule and it works fine for private python dependencies in a requirements.txt file but not for uv:

hostRules: [
        {
            matchHost: "foo.bar.com",
            username: `${process.env.ARTIFACTORY_USER}`,
            password: `${process.env.ARTIFACTORY_TOKEN}`,
        },
]

We did find a workaround by creating a .netrc file on every pipeline run but I am wondering if this is the intended mechanism to update private python package in a uv.lock file?

I hope you can help us with this isse.

Cheers,
frogtime

Logs (if relevant)

Replace this text with your logs, between the starting and ending triple backticks