Private packages (artifactory) not found via build.sbt

[eamonnsullivan]

How are you running Renovate?

A Mend.io-hosted app

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

No response

Please tell us more about your question or problem

We use Renovate for a lot of our npm repos. I'm trying to onboard a Scala backend service that uses build.sbt. The public dependencies (via public Maven and typesafe) are found without issues and the onboarding PR says several pull requests will be raised immediately against dependencies like Scala runtimes, AWS libs, etc. However, it can't find our private packages, like the first two listed here (I've anonymised it a bit, where xxx is my organisation's name):

libraryDependencies ++= Seq(
  // core
  "xxx.shared" %% "xxx-scalatra-chassis" % "X.X",
  "xxx.shared" %% "xxx-software-domain" % "X.X",
  "commons-io" % "commons-io" % "2.6",

In the pull request, I see the error: Failed to look up sbt-package package xxx.shared:xxx-scalatra-chassis_2.13.

The bottom of my build.sbt has the following:

resolvers ++= Seq(
  "Local Ivy repository" at "file://" + Path.userHome + "/.ivy2/local",
  "XXX Maven Releases" at "https://dev.xxx.co.uk/maven2/releases/",
  "XXX Maven Snapshots" at "https://dev.xxx.co.uk/maven2/snapshots",
  "XXX Artifactory" at "https://dev.xxx.co.uk/artifactory/repo",
  "Typesafe repository" at "https://repo.typesafe.com/typesafe/releases/"
)

My renovate.json pulls mostly from a central config, which all seems to be picked up (judging by the description in the onboarding PR) and I've tried adding some hostRules at the end to pick up our artifactory credentials. The secrets are set, but I still get the same errors about being unable to look up those private deps.

{
  "extends": [
    "github>xxx/configs-core//renovate-config/default"
  ],
  "hostRules": [
    {
      "hostType": "maven",
      "matchHost": "https://dev.xxx.co.uk",
      "username": "{{ secrets.ARTIFACTORY_USERNAME }}",
      "password": "{{ secrets.ARTIFACTORY_PASSWORD}}"
    }
  ],
  "packageRules": [
    {
      "matchDatasources": ["sbt-package"],
      "matchPackagePrefixes": ["xxx.shared"],
      "registryUrls": [
        "https://dev.xxx.co.uk/maven2/releases/",
        "https://dev.xxx.co.uk/maven2/snapshots",
        "https://dev.xxx.co.uk/artifactory/repo"
      ]
    }
  ]
}

What am I doing wrong? Is build.sbt supported for this kind of thing?

Logs (if relevant)

Logs

Replace this text with your logs, between the starting and ending triple backticks