[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
renovate (source)	^44.52.1 → ^44.181.7

---

Release Notes

renovatebot/renovate (renovate)

v44.181.7

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.7 (main) (#​47387) (297e253)

Miscellaneous Chores

• renovate: don't automerge breaking gh-actions-lock updates (#​47379) (9e0bc64)

v44.181.6

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.6 (main) (#​47380) (635e70e)

Miscellaneous Chores

• deps: update dependency knip to v6.42.0 (main) (#​47381) (d298a62)
• deps: update pnpm/setup action to v3.1.2 (main) (#​47371) (5a6fb72)

v44.181.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.5 (main) (#​47367) (d58ffdb)

v44.181.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.4 (main) (#​47365) (27bf60b)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.5 (main) (#​47366) (d3c1a16)

v44.181.3

Compare Source

Bug Fixes

• workers/repository: include tool constraints and installTools in branch commit fingerprint (#​47348) (3842ec0), closes #​46438
• workers/repository: use the updated constraints value when processing a branch (#​47350) (f735b01), closes #​46438

v44.181.2

Compare Source

Bug Fixes

• deps: update dependency mkdocs-material to v9.8.0 (main) (#​47364) (01d7fb8)
• deps: update renovate-base-image to v13.142.3 (main) (#​47363) (7fc75ac)

Miscellaneous Chores

• deps: update dependency @​containerbase/istanbul-reports-html to v2.0.23 (main) (#​47358) (4c3c233)
• deps: update dependency @​ls-lint/ls-lint to v2.3.2 (main) (#​47359) (c11332b)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.4 (main) (#​47361) (c4c70ad)
• deps: update jdx/mise-action action to v5.2.3 (main) (#​47362) (070bc2b)

v44.181.1

Compare Source

Bug Fixes

• deps: update dependency github/gh-actions-lock to v0.4.0 (main) (#​47355) (578dc84)
• deps: update renovate-base-image to v13.142.1 (main) (#​47347) (bec17bf)
• deps: update renovate-base-image to v13.142.2 (main) (#​47354) (f69dd1d)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.3 (main) (#​47346) (2d1059c)

Tests

• manager/renovate-config: document which constraints scopes are extracted (#​47349) (d1f6e41), closes #​46438

v44.181.0

Compare Source

Features

• deps: update renovate-base-image to v13.142.0 (main) (#​47343) (a45ee25)

Bug Fixes

• manager/npm: detect yarnZeroInstall from any upgrade on mixed branches (#​44886) (8dd4386)
• manager/npm: hash yarn.js for yarn berry corepack hash (#​46771) (0701e54)
• platform/gitlab: set branch status on merged results pipelines (#​47064) (419feea)
• workers/branch: dedupe updatedArtifacts by path (#​46626) (1c61ebe)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.0 (main) (#​47342) (4022153)

v44.180.0

Compare Source

Features

• util/exec: look up jb versions from containerbase/jb-prebuild (#​47303) (4ebd20e)

Tests

• workers/repository: use a temp cache dir in init specs (#​47339) (0db8910)

v44.179.2

Compare Source

Bug Fixes

• config/validation: allow top-level custom manager config (#​47318) (596ab9a), closes #​47311
• config/validation: always allow options which can be used anywhere (#​47319) (b295e59), closes #​47311
• config/validation: improve nested/array parent option names in messages (#​47320) (5f1e110), closes #​47311
• deps: update renovate-base-image to v13.141.2 (#​47335) (f14fee7)
• manager/gomod: allow modules with an older go directive (#​47317) (4086667), closes #​47313

Documentation

• introduce "buckets" and "audience" labels (#​47020) (4caf57e)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.2 (main) (#​47336) (1ae0592)

v44.179.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.141.1 (main) (#​47332) (f847006)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.1 (main) (#​47331) (0377d27)

v44.179.0

Compare Source

Features

• deps: update renovate-base-image to v13.141.0 (main) (#​47330) (e7abaf4)

v44.178.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.140.2 (main) (#​47327) (002bfb5)

v44.178.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.140.1 (main) (#​47326) (261f59e)

v44.178.3

Compare Source

Build System

• deps: update dependency google-auth-library to v11.3.1 (main) (#​47325) (2fb5da1)

v44.178.2

Compare Source

Build System

• deps: update dependency @​opentelemetry/resource-detector-github to v0.33.0 (main) (#​47323) (2ffb4cb)

v44.178.1

Compare Source

Bug Fixes

• deps: update dependency github/gh-actions-lock to v0.3.0 (main) (#​47315) (985282b)

Miscellaneous Chores

• deps: update dependency uv to v0.13.5 (main) (#​47289) (e6bb569)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.0 (main) (#​47312) (dc9d8e5)
• deps: update vitest monorepo to v4.1.12 (main) (#​47310) (e05ea0d)

v44.178.0

Compare Source

Features

• presets: add PHP2Shell security updates (#​47283) (f911008)
• validate the containerbase image version on startup (#​47248) (ef96e4d)

Miscellaneous Chores

• deps: update dependency pnpm to v11.28.6 (main) (#​47307) (53c30e1)
• util/exec: correct typo in constraints (#​47304) (1deb80e)

v44.177.0

Compare Source

Features

• deps: update renovate-base-image to v13.140.0 (main) (#​47306) (acb2504)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.50.0 (main) (#​47305) (3383372)

v44.176.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.139.3 (main) (#​47291) (bd8f755)

Miscellaneous Chores

• deps: update astral-sh/setup-uv action to v10.3.1 (main) (#​47281) (f5adf17)
• deps: update astral-sh/setup-uv action to v10.3.2 (main) (#​47299) (7e6d979)
• deps: update dependency astral-sh/uv to v0.13.5 (main) (#​47288) (4698530)

Build System

• deps: update dependency got to v16.1.0 (main) (#​47214) (1a80c53)

v44.176.3

Compare Source

Bug Fixes

• config/validation: allow patterns for allowedValues of patternMatch options (#​47297) (c11b614)
• dependency-dashboard: ignore dashboard checkboxes when mode=silent (#​47271) (8b2ff8b)
• manager/github-actions: relock when regenerating actions.lock (#​47294) (64aa649), closes #​47292

v44.176.2

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.139.1 (main) (#​47282) (bafa1fa)

v44.176.1

Compare Source

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.49.0 (main) (#​47278) (2413b2b)

Build System

• deps: update markdown-it to v15.0.3 (#​47259) (1a242a8)

v44.176.0

Compare Source

Features

• deps: update renovate-base-image to v13.139.0 (main) (#​47275) (11db0f2)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.48.0 (main) (#​47272) (6924b7b)
• deps: update github/codeql-action action to v4.39.1 (main) (#​47273) (43af5fa)

v44.175.5

Compare Source

Bug Fixes

• config/validation: don't warn on repo options in inherited onboardingConfig (#​47269) (b4ee9aa), closes #​47266

v44.175.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.138.2 (main) (#​47265) (1d9aae3)

v44.175.3

Compare Source

Bug Fixes

• workers/repository/lookup: warn when a tag is missing its v prefix (#​47155) (b91f928)

Documentation

• mend-hosted: Enterprise users can specify forkProcessing and onboardingNoDeps (#​47246) (bd4ba3b)

Build System

• deps: update dependency node to v24.22.1 (main) (#​47264) (8ca0fec)

v44.175.2

Compare Source

Bug Fixes

• manager/kustomize: handle helm charts without repo (#​47255) (06d7f77)
• manager/npm: omit unresolved npmrc from extracted package files (#​47258) (25d7295)
• workers: keep absent registry URLs absent when detaching credentials (#​47256) (571a269)

v44.175.1

Compare Source

Bug Fixes

• config/validation: remove custom validation for allowedValues (#​43833) (e6cdac8)
• config/validation: validate allowedValues for arrays (#​39076) (e5ae141)
• config/validation: validate customDatasources generically (#​47195) (b4de4ca)
• config/validation: validate the entries of arrays of strings (#​47194) (e49ca6a)
• config: document all valid customDatasources[].formats (#​47204) (a19c6bc)
• workers/repository/init: massage inherited config before validating (#​47201) (2a3a481)
• workers/repository/init: massage static repo config before validating (#​47202) (fea2346)

Miscellaneous Chores

• deps: update jdx/mise-action action to v5.2.2 (main) (#​47250) (719bd35)

Code Refactoring

• util/exec: use isContainerbase from the base image package directly (#​47247) (dff2bd5)

Tests

• workers/repository/init: document validation of unmassaged config (#​47200) (de17a09)

Build System

• deps: update node.js to v24.22.1 (main) (#​47253) (9222a5d)

v44.175.0

Compare Source

Features

• deps: update renovate-base-image to v13.138.1 (main) (#​47245) (2e55bee)

Bug Fixes

• config/validation: correct misleading message for non-string customDatasources values (#​47184) (b7feac6)
• config/validation: don't throw for invalid types of enabledManagers and schedule (#​47193) (ba23989)
• config/validation: require hostRules[].headers to be an object (#​47185) (a01e305)
• config/validation: validate templates in global config (#​47186) (e98ddc3)
• config: allow lockfileUpdate in matchUpdateTypes (#​47182) (d2d9f17)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.46.0 (main) (#​47243) (61d2fc7)

Tests

• config/validation: document existing validation behaviour (#​47183) (e857db2)

v44.174.0

Compare Source

Features

• deps: update renovate-base-image to v13.137.0 (main) (#​47241) (f9b9036)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.45.0 (main) (#​47240) (da3366e)

v44.173.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.136.1 (main) (#​47236) (5c2a683)

v44.173.0

Compare Source

Features

• deps: update renovate-base-image to v13.136.0 (main) (#​47234) (482cf61)

v44.172.2

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.6 (main) (#​47232) (e698ff5)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.44.4 (main) (#​47231) (fc2a9d0)

v44.172.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.5 (main) (#​47228) (124e0e1)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.13.4 (main) (#​47225) (320108e)
• deps: update dependency uv to v0.13.4 (main) (#​47226) (7f7021a)

v44.172.0

Compare Source

Features

• workarounds: add helm-docs workaround for old tags from 2019 (#​46838) (33483f9)

v44.171.9

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.4 (main) (#​47218) (1f75e11)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.44.3 (main) (#​47217) (32306c6)
• deps: update linters to v1.88.0 (main) (#​47222) (6e01ad1)

v44.171.8

Compare Source

Bug Fixes

• vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts (#​47211) (dc71c78)

Build System

• deps: update dependency google-auth-library to v11.3.0 (main) (#​47213) (85acb08)

v44.171.7

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.3 (main) (#​47210) (fce3625)

v44.171.6

Compare Source

Build System

• deps: update dependency @​renovatebot/detect-tools to v4.0.23 (main) (#​47209) (1584a8e)

v44.171.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.2 (main) (#​47208) (7fd1380)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.44.2 (main) (#​47207) (b0abab7)

v44.171.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.1 (main) (#​47199) (8b9ac8b)

Miscellaneous Chores

• deps: update dependency uv to v0.13.3 (main) (#​47198) (182ce5e)

v44.171.3

Compare Source

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.13.3 (main) (#​47191) (e2e9f7f)

Build System

• deps: update dependency execa to v10.1.1 (main) (#​47190) (230474a)

v44.171.2

Compare Source

Bug Fixes

• cache: hash URL credentials in cache keys (320f770)
• extract: resolve npmrc again instead of caching it with package files (061e9ba)
• http: persist only an allow-list of response headers in the http caches (9e46e31)
• workers: keep URL credentials of dependencies out of the repository cache and generated texts (71d4f95)

v44.171.1

Compare Source

Build System

• deps: update dependency zod to v4.6.7 (main) (#​47175) (c6ef797)

v44.171.0

Compare Source

Features

• datasource/github-runners: add xcode-27 (#​47116) (ea1c9a7)
• json-schema: suggest the host types we know about (#​46718) (7bd4864)
• json-schema: suggest the managers, datasources and categories we know (#​46713) (500620a), closes #​40450

Bug Fixes

• config: document where our git and environment options can be used (#​46709) (d7d72a0), closes #​43020
• config: document which options can be set anywhere (#​46712) (2eda8fb), closes #​43020
• json-schema: only allow the managers we support in enabledManagers (#​46717) (ab776b8)

Miscellaneous Chores

• config: document where a manager's config object can be used (#​46711) (3a0b65f), closes #​43020

Code Refactoring

• config: add generic suggestedValues hint (#​46959) (2599cfa)
• config: require an option to document where it can be used (#​46714) (7d2a296), closes #​43020

v44.170.0

Compare Source

Features

• datasource/github-runners: add releaseTimestamps (#​46885) (15fb543), closes #​46806
• manager/flux: set HelmChart depType on Helm charts (#​47174) (7678a47)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.44.0 (main) (#​47172) (e378ba9)

v44.169.0

Compare Source

Features

• deps: update renovate-base-image to v13.135.0 (main) (#​47173) (0085709)

Bug Fixes

• config: document where packageRules can be used (#​46705) (c103f2b), closes #​43020
• config: document where our branch and reporting options can be used (#​46708) (3f54883), closes #​43020
• config: document where remaining lookup options can be used (#​46707) (480260a), closes #​43020
• config: document where top-level config can be used (#​46706) (4b7d5af), closes #​43020

v44.168.4

Compare Source

Bug Fixes

• config: document where registryAliases can be set (#​46956) (8338c58), closes #​43020
• config: document where updateInternalDeps can be set (#​46955) (c08e301)
• config: document where npm config options can be used (#​46701) (f42327c), closes #​43020
• config: document where our per-update config objects can be used (#​46703) (b9ed41b), closes #​43020
• config: document where our registry options can be used (#​46700) (8d72ace), closes #​43020
• config: document where our update type config objects can be used (#​46704) (1fe224b), closes #​43020

Documentation

• config: clarify that updateInternalDeps is for the npm manager (#​46954) (8d8e430)

v44.168.3

Compare Source

Bug Fixes

• platform/azure: apply the repo's azureWorkItemType (#​47158) (aaf9d8e)

v44.168.2

Compare Source

Build System

• deps: update dependency cronstrue to v3.32.0 (main) (#​47165) (0128a09)

v44.168.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.134.1 (main) (#​47163) (6bcbe97)

Documentation

• mark hostRules.dnsCache as having no effect (#​47159) (110e3a0)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.43.0 (main) (#​47160) (37b1ec6)

v44.168.0

Compare Source

Features

• deps: update renovate-base-image to v13.134.0 (main) (#​47157) (ec15885)

Miscellaneous Chores

• deps: update jdx/mise-action action to v5.2.1 (main) (#​47156) (d78ef08)

v44.167.7

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.133.5 (main) (#​47152) (429c606)

Tests

• config: don't read a local config.js in the config file tests (#​46995) (293a29b)

Continuous Integration

• fail tests that read the repository config.js (#​46999) (9e354ff)

v44.167.6

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.133.4 (main) (#​47151) (c2532a1)

Documentation

• update references to otel/opentelemetry-collector-contrib to v0.163.1 (main) (#​47149) (8e1c91f)
• update references to python to 12d187a (main) (#​47148) (8654b52)

v44.167.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.133.1 (main) (#​47147) (675b183)

Miscellaneous Chores

• deps: update dependency protobufjs@​8.0.1 to v8.8.1 (main) (#​47146) ([598f324](https://redirect

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.