[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
renovate (source)	44.112.2 → 44.198.3

---

Release Notes

renovatebot/renovate (renovate)

v44.198.3

Compare Source

Bug Fixes

• workers: share the config file commit between onboarding and config migration (#​46153) (7137993)

Code Refactoring

• manager: report out-of-band file updates from updateDependency instead of special-casing git-submodules (#​46151) (3c3b346)
• workers/branch: pass the fetched PR and modified state to the branch helpers (#​46150) (1ccc08a)
• workers/branch: split processBranch into testable stages (#​46149) (3fa708e)
• workers: share onboarding and config migration PR handling (#​46152) (e8e44a0), closes #N

v44.198.2

Compare Source

Bug Fixes

• platform/azure: refresh the auto-complete merge message on title changes (#​47584) (d9c02cd)

v44.198.1

Compare Source

Bug Fixes

• datasource/go: treat modules with go-proxy host rule credentials as private (#​47045) (9594e41)

Code Refactoring

• cache: separate privacy and result caching decisions (#​47166) (a854b70)

v44.198.0

Compare Source

Features

• deps: update renovate-base-image to v13.149.0 (main) (#​47569) (01e87b7)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.57.1 (main) (#​47567) (4b34d0c)
• deps: update jdx/jactionlint action to v2.4.0 (main) (#​47568) (218c428)

v44.197.1

Compare Source

Miscellaneous Chores

• deps: update dependency npm-run-all2 to v9.0.4 (main) (#​47565) (00857ba)

Build System

• deps: update dependency @​renovatebot/osv-offline to v4.4.0 (main) (#​47566) (47db020)

v44.197.0

Compare Source

Features

• report: surface additional repository metadata in report (#​44683) (2ab1bb5)

Miscellaneous Chores

• deps: update linters (main) (#​47441) (c12fb01)

Build System

• deps: update dependency node to v24.22.2 (main) (#​47564) (d003cdf)

v44.196.1

Compare Source

Documentation

• minimum-release-age: document package manager integrations (#​47531) (5608a40)

Miscellaneous Chores

• minimum-release-age: add minimumReleaseAgeExtracted and manager enforcement (#​47501) (cf6c3de)

Build System

• replace the exec release commands with a local semantic-release plugin (#​47563) (d27a0fe)

v44.196.0

Compare Source

Features

• presets/monorepos: add logtape (#​46882) (9b2e538)
• presets/replacements: add replacement for de.monochromata.cucumber:reporting-plugin (#​47509) (0f0d0a4)
• presets: add SimpleWebAuthn monorepo group (#​44625) (4319d9c)

Bug Fixes

• manager/cargo: detect an unchanged lock file (#​47561) (c4ed070)
• manager/conan: detect an unchanged lock file (#​47560) (1430baf)
• presets/monorepo: add prisma/orm and prisma/prisma-cli to prisma (#​47192) (cf82b5d)

Documentation

• FAQ: clarify Azure DevOps and GitLab.com support on Mend-hosted apps (#​47003) (de04d5e)
• manager/pre-commit: document frozen rev behavior (#​46440) (50f6e84)
• opentelemetry: handle ingesting large lines of JSONL (#​46607) (c080b98)

Miscellaneous Chores

• pr-template: require humans fill in "why no minimal repro" (#​47556) (a4ca4f3)
• workers/repository: fix typo in log message (#​46988) (cc5ad6a)

v44.195.1

Compare Source

Bug Fixes

• platform/codecommit: use default import for aws4 (#​47549) (cc35d3f)
• util/markdown: support four-backtick fences when sanitizing mentions (#​47550) (50e260a)

Documentation

• config: document the osv-offline environment variables (#​47515) (80787f1)

Miscellaneous Chores

• use reproduction checkboxes in PR template and add auto:pr-reproduction label action (#​46887) (2cc2e9c)

Code Refactoring

• vulnerabilities: use default import for ae-cvss-calculator (#​47551) (e20d797)

Tests

• import CommonJS packages like Node in vitest (#​47553) (edfcc93)

Continuous Integration

• docs: cache mkdocs external assets (#​47557) (71713f2)

v44.195.0

Compare Source

Features

• presets: keep Guava on its jre or android variant (#​47554) (e602628)

v44.194.0

Compare Source

Features

• managers: add Paket manager support (#​37287) (bdf434d), closes #​44914

v44.193.1

Compare Source

Bug Fixes

• dashboard: keep dependencyDashboardIssue in sync with the open dashboard (#​47324) (f269819)

v44.193.0

Compare Source

Features

• presets: add oxfmt to packages:linters (#​47383) (e39f379)

Documentation

• types: add supportsTransitiveRemediation (#​47505) (4f92c59), closes #​46377
• types: add a type for Vulnerability Alerts' sources (#​47504) (6bdc798), closes #​44153 #​45486 #​46378

v44.192.2

Compare Source

Build System

• deps: update dependency cronstrue to v3.38.0 (main) (#​47536) (16a786a)

v44.192.1

Compare Source

Code Refactoring

• types: add MinimumReleaseAgeConfig (#​47526) (5555687)

Build System

• deps: update dependency @​renovatebot/good-enough-parser to v3 (main) (#​47533) (03d2709)

v44.192.0

Compare Source

Features

• deps: update renovate-base-image to v13.147.0 (main) (#​47528) (859ad0d)

Miscellaneous Chores

• deps: update dependency markdownlint-cli2 to v0.24.0 (main) (#​47525) (cf0190b)
• deps: update dependency pnpm to v11.28.7 (main) (#​47524) (3587f0c)

v44.191.0

Compare Source

Features

• manager/maven-wrapper: add private packages support (#​38879) (323dfce), closes #​25805 #​25805 #​25805 #​25805 #​25805 #​40700

Bug Fixes

• datasource: validate release constraints with the constraint versioning (#​47518) (2daf5fc)
• manager/composer: quote update arguments once (#​47503) (d1dcbfd)

Miscellaneous Chores

• deps: update astral-sh/setup-uv action to v10.3.3 (main) (#​47523) (55708d6)
• deps: update dependency vite to v8.3.5 (main) (#​47499) (57ac5e7)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.56.0 (main) (#​47496) (036fb1e)

Code Refactoring

• manager/composer: build update arguments with a template literal (#​47512) (e7c8a5c)

Tests

• datasource: cover release constraints with an overridden constraint versioning (#​47519) (eacbb33)
• manager/composer: cover quoting of update arguments (#​47511) (05f65d2)

Build System

• deps: update dependency @​renovatebot/osv-offline to v4.2.0 (main) (#​47516) (d02cec7)

v44.190.2

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.145.4 (main) (#​47498) (18d5a5e)

v44.190.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.145.3 (main) (#​47494) (c20d945)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.2 (main) (#​47493) (9d6f3d3)

v44.190.0

Compare Source

Features

• static-data: update Node.js release schedule (#​47417) (ec10d67)

v44.189.0

Compare Source

Features

• vulnerabilities: allow performing lockfile only transitive security updates (#​46391) (4718945), closes #​47478

Miscellaneous Chores

• deps: migrate to jactionlint (#​47427) (3fd9c27)
• deps: pin GitHub Actions lockfile (#​47429) (331056f)
• deps: use self-repository reference for Actions (#​47428) (839eab1)

Continuous Integration

• actions/setup-docker: remove useless use of cat (#​47425) (f629d9c)
• actions/setup-node: ignore SC2016 findings (#​47426) (70366a8)

v44.188.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.145.2 (main) (#​47480) (78734cb)

v44.188.3

Compare Source

Documentation

• config: clarify assignees does not support teams (#​47452) (a087e64)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.1 (main) (#​47474) (8c785fd)

Tests

• vulnerabilities: document that lockfile-only deps don't get vulnerability updates (#​47478) (24e8b99), closes #​46377

Build System

• deps: update dependency cronstrue to v3.37.0 (main) (#​47481) (7eb4bb7)

v44.188.2

Compare Source

Build System

• deps: update dependency @​renovatebot/osv-offline to v4.1.2 (main) (#​47473) (d3d7d20)

v44.188.1

Compare Source

Build System

• deps: update dependency @​renovatebot/osv-offline to v4 (main) (#​47472) (8616389)

v44.188.0

Compare Source

Features

• deps: update renovate-base-image to v13.145.1 (main) (#​47471) (8827a45)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.0 (main) (#​47470) (0a947f8)

v44.187.0

Compare Source

Features

• deps: update renovate-base-image to v13.144.0 (main) (#​47464) (0816305)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.54.0 (main) (#​47463) (5b17347)
• deps: update jdx/mise-action action to v5.2.4 (main) (#​47468) (e8df1f2)

Build System

• deps: update dependency @​renovatebot/osv-offline to v3.1.0 (main) (#​47467) (7a726aa)

v44.186.8

Compare Source

Bug Fixes

• config: allow prerelease for bumpVersions.bumpType (#​47460) (f80c5dd)

v44.186.7

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.143.3 (main) (#​47457) (6a32832)

v44.186.6

Compare Source

Build System

• deps: update dependency cronstrue to v3.36.0 (main) (#​47455) (7688dcb)

v44.186.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.143.2 (main) (#​47453) (3c91a90)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.13.6 (main) (#​47449) (3dd616b)
• deps: update dependency github/gh-stack to v0.3.0 (main) (#​47448) (93c6fc0)
• deps: update dependency uv to v0.13.6 (main) (#​47450) (13e5a47)

v44.186.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.143.1 (main) (#​47447) (0a1b802)

v44.186.3

Compare Source

Miscellaneous Chores

• deps: update dependency knip to v6.42.1 (main) (#​47442) (7272966)

Build System

• deps: update dependency cronstrue to v3.35.0 (main) (#​47446) (e5a4e76)

v44.186.2

Compare Source

Bug Fixes

• instrumentation: remove mergeChildConfig span (#​47440) (6151f9b)

v44.186.1

Compare Source

Bug Fixes

• manager/kustomize: skip helm charts without repo as local charts (#​47430) (52fcc78)

v44.186.0

Compare Source

Features

• deps: update renovate-base-image to v13.143.0 (main) (#​47432) (c9ee474)

Build System

• deps: update dependency ignore to v7.0.13 (main) (#​47437) (1bd6040)

v44.185.0

Compare Source

Features

• manager/github-actions: extract runs.image in Docker container actions (#​47423) (04d4aec)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.53.0 (main) (#​47431) (2dc18ca)
• deps: update python docker tag to v3.15.1 (main) (#​47287) (37fdce6)

v44.184.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.13 (main) (#​47422) (03ec267)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.9 (main) (#​47421) (b0118df)

v44.184.0

Compare Source

Features

• manager/github-actions: report gh actions-lock findings when it fails (#​47375) (dfae938)

Bug Fixes

• manager/github-actions: only re-pin updated refs in actions.lock and parse findings (#​47373) (e15cd52)

Miscellaneous Chores

• renovate: keep the documented ghActionsLock version up to date (#​47377) (a077a46)

v44.183.0

Compare Source

Features

• static-data: add 2 new mise tools (#​47416) (fbdb315)

Code Refactoring

• tools/static-data: introduce a StaticDataSource interface (#​47407) (52cfc71), closes #​47251

Continuous Integration

• static-data: start on a new branch (#​47411) (ac19b98)
• tools/static-data: commit each static data update separately (#​47408) (f514563), closes #​47251
• update-data: create PRs with the commit's title and body (906cf0e)
• update-data: raise a stack of PRs via gh stack (#​47409) (1860261), closes #​47251
• update-data: run on Monday mornings (#​47406) (3505937), closes #​47251

v44.182.2

Compare Source

Bug Fixes

• manager/mise: look up swift releases in swiftlang/swift (#​47374) (548f5c7)

v44.182.1

Compare Source

Build System

• deps: update dependency @​renovatebot/pgp to v2.0.4 (main) (#​47403) (2b767e0)

v44.182.0

Compare Source

Features

• presets: add @biomejs/** packages to packages:linters (#​47382) (0ed40fd)

v44.181.12

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.11 (main) (#​47402) (3b6f01f)

Build System

• deps: update dependency node-html-parser to v9.0.5 (main) (#​47401) (2605537)

v44.181.11

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.10 (main) (#​47399) (510538e)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.7 (main) (#​47398) (7f15352)

v44.181.10

Compare Source

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.6 (main) (#​47396) (d5c729a)

Build System

• deps: update dependency cronstrue to v3.33.0 (main) (#​47397) (51fa5b9)

v44.181.9

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.9 (main) (#​47395) (37e7bc1)

Documentation

• update references to renovatebot/github-action to v46.3.10 (main) (#​47394) (3c2913a)

v44.181.8

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.8 (main) (#​47393) (422350b)

Documentation

• update references to astral-sh/setup-uv to v10.3.2 (main) (#​47389) (add8a72)
• update references to otel/opentelemetry-collector-contrib to v0.163.2 (main) (#​47390) (3698963)
• update references to prom/prometheus to v3.15.1 (main) (#​47391) (d2f2ba3)
• update references to python to 90bdf58 (main) (#​47388) (7642f37)
• update references to renovatebot/github-action to v46.3.9 (main) (#​47392) (e38a673)

v44.181.7

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.7 (main) (#​47387) (297e253)

Miscellaneous Chores

• renovate: don't automerge breaking gh-actions-lock updates (#​47379) (9e0bc64)

v44.181.6

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.6 (main) (#​47380) (635e70e)

Miscellaneous Chores

• deps: update dependency knip to v6.42.0 (main) (#​47381) (d298a62)
• deps: update pnpm/setup action to v3.1.2 (main) (#​47371) (5a6fb72)

v44.181.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.5 (main) (#​47367) (d58ffdb)

v44.181.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.4 (main) (#​47365) (27bf60b)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.5 (main) (#​47366) (d3c1a16)

v44.181.3

Compare Source

Bug Fixes

• workers/repository: include tool constraints and installTools in branch commit fingerprint (#​47348) (3842ec0), closes #​46438
• workers/repository: use the updated constraints value when processing a branch (#​47350) (f735b01), closes #​46438

v44.181.2

Compare Source

Bug Fixes

• deps: update dependency mkdocs-material to v9.8.0 (main) (#​47364) (01d7fb8)
• deps: update renovate-base-image to v13.142.3 (main) (#​47363) (7fc75ac)

Miscellaneous Chores

• deps: update dependency @​containerbase/istanbul-reports-html to v2.0.23 (main) (#​47358) (4c3c233)
• deps: update dependency @​ls-lint/ls-lint to v2.3.2 (main) (#​47359) (c11332b)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.4 (main) (#​47361) (c4c70ad)
• deps: update jdx/mise-action action to v5.2.3 (main) (#​47362) (070bc2b)

v44.181.1

Compare Source

Bug Fixes

• deps: update dependency github/gh-actions-lock to v0.4.0 (main) (#​47355) (578dc84)
• deps: update renovate-base-image to v13.142.1 (main) (#​47347) (bec17bf)
• deps: update renovate-base-image to v13.142.2 (main) (#​47354) (f69dd1d)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.3 (main) (#​47346) (2d1059c)

Tests

• manager/renovate-config: document which constraints scopes are extracted (#​47349) (d1f6e41), closes #​46438

v44.181.0

Compare Source

Features

• deps: update renovate-base-image to v13.142.0 (main) (#​47343) (a45ee25)

Bug Fixes

• manager/npm: detect yarnZeroInstall from any upgrade on mixed branches (#​44886) (8dd4386)
• manager/npm: hash yarn.js for yarn berry corepack hash (#​46771) (0701e54)
• platform/gitlab: set branch status on merged results pipelines (#​47064) (419feea)
• workers/branch: dedupe updatedArtifacts by path (#​46626) (1c61ebe)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.0 (main) (#​47342) (4022153)

v44.180.0

Compare Source

Features

• util/exec: look up jb versions from containerbase/jb-prebuild (#​47303) (4ebd20e)

Tests

• workers/repository: use a temp cache dir in init specs (#​47339) (0db8910)

v44.179.2

Compare Source

Bug Fixes

• config/validation: allow top-level custom manager config (#​47318) (596ab9a), closes #​47311
• config/validation: always allow options which can be used anywhere (#​47319) (b295e59), closes [#&#820

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.