problems deleting repository secret that overrides org secret and is used

[tripodsan]

How are you running Renovate?

A Mend.io-hosted app

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

github

Please tell us more about your question or problem

we have a repository level secret that overrides an org level secret. we rotated the org secret and now want to use it also for the repository secret.

when we try to delete the repository level secret (override), the UI shows an error:

Delete secret
It is not possible to delete secret ORG_NPM_TOKEN while it is being used in host rules.

List of host rules using this secret:

- NPM

Logs (if relevant)

No response

[justo-mend]

The workaround is to delete (or edit) the host rule.