0a86cc5e9a
ci(auto-prs): handle draft PRs better ( #42686 )
...
* ci(auto-pr): also request reviews on "ready" status
Per request from Michael.
Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io >
* ci(auto-pr): remove review requests when converted to draft
Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io >
---------
Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io >
2026-04-16 11:08:45 +00:00
6a0e718714
ci: auto-label needs-discussion on externally-raised Issues ( #42656 )
...
We're seeing an increase in (LLM-generated) Issues being created on the
project, which is not our contribution model.
As a way to reduce the time of maintainers to manually label these when
we see them, we can automagically determine this based on existing
access to the repo.
Using Triage+ allows any collaborators on the Renovate project to raise
Issues unimpeded.
Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io >
2026-04-15 16:21:06 +00:00
9e33c20510
chore(deps): update containerbase/internal-tools action to v4.5.22 (main) ( #42658 )
...
chore(deps): update containerbase/internal-tools action to v4.5.22
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.21 | v4.5.22 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-15 16:20:23 +00:00
3891a11514
chore(deps): update containerbase/internal-tools action to v4.5.21 (main) ( #42654 )
...
chore(deps): update containerbase/internal-tools action to v4.5.21
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.20 | v4.5.21 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-15 15:22:52 +00:00
40100d03d4
chore(deps): update github/codeql-action action to v4.35.2 (main) ( #42650 )
...
chore(deps): update github/codeql-action action to v4.35.2
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.1 | v4.35.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-15 12:35:06 +00:00
61947e273f
chore(deps): update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1 (main) ( #42642 )
...
chore(deps): update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1
| datasource | package | from | to |
| ---------- | ------------------------- | ------ | ------ |
| docker | ghcr.io/zizmorcore/zizmor | 1.23.1 | 1.24.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-15 08:49:11 +00:00
d2d8297148
chore(deps): update slackapi/slack-github-action action to v3 (main) ( #42619 )
...
chore(deps): update slackapi/slack-github-action action to v3
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | slackapi/slack-github-action | v2.1.1 | v3.0.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 10:04:40 +00:00
1fac64bfa0
chore(deps): update actions/github-script action to v9 (main) ( #42613 )
...
chore(deps): update actions/github-script action to v9
| datasource | package | from | to |
| ----------- | --------------------- | ------ | ------ |
| github-tags | actions/github-script | v8.0.0 | v9.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 10:04:04 +00:00
cf79688e1e
chore(deps): update actions/upload-pages-artifact action to v5 (main) ( #42614 )
...
chore(deps): update actions/upload-pages-artifact action to v5
| datasource | package | from | to |
| ----------- | ----------------------------- | ------ | ------ |
| github-tags | actions/upload-pages-artifact | v4.0.0 | v5.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-14 10:02:12 +00:00
c815d30c53
chore(deps): update zizmorcore/zizmor-action action to v0.5.3 (main) ( #42607 )
...
chore(deps): update zizmorcore/zizmor-action action to v0.5.3
| datasource | package | from | to |
| ----------- | ------------------------ | ------ | ------ |
| github-tags | zizmorcore/zizmor-action | v0.5.2 | v0.5.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 23:28:35 +00:00
d2131a7e1a
chore(deps): update containerbase/internal-tools action to v4.5.20 (main) ( #42602 )
...
chore(deps): update containerbase/internal-tools action to v4.5.20
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.19 | v4.5.20 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 17:26:34 +00:00
a808338132
chore(deps): update actions/cache action to v5.0.5 (main) ( #42598 )
...
chore(deps): update actions/cache action to v5.0.5
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.4 | v5.0.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 16:30:03 +00:00
f31e3d4d4b
chore(deps): update containerbase/internal-tools action to v4.5.19 (main) ( #42574 )
...
chore(deps): update containerbase/internal-tools action to v4.5.19
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.17 | v4.5.19 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-13 02:30:01 +00:00
dc158ab03b
chore(deps): update containerbase/internal-tools action to v4.5.17 (main) ( #42560 )
...
chore(deps): update containerbase/internal-tools action to v4.5.17
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.15 | v4.5.17 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-12 08:26:17 +00:00
87cbb93cb2
chore(deps): update containerbase/internal-tools action to v4.5.15 (main) ( #42551 )
...
chore(deps): update containerbase/internal-tools action to v4.5.15
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.14 | v4.5.15 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 21:29:09 +00:00
3e1524a965
chore(deps): update peter-evans/create-pull-request action to v8.1.1 (main) ( #42539 )
...
chore(deps): update peter-evans/create-pull-request action to v8.1.1
| datasource | package | from | to |
| ----------- | ------------------------------- | ------ | ------ |
| github-tags | peter-evans/create-pull-request | v8.1.0 | v8.1.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 18:31:01 +00:00
501e7b9bc3
chore(deps): update actions/upload-artifact action to v7.0.1 (main) ( #42538 )
...
chore(deps): update actions/upload-artifact action to v7.0.1
| datasource | package | from | to |
| ----------- | ----------------------- | ------ | ------ |
| github-tags | actions/upload-artifact | v7.0.0 | v7.0.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 18:30:56 +00:00
2605d956f2
chore(deps): update containerbase/internal-tools action to v4.5.14 (main) ( #42484 )
...
chore(deps): update containerbase/internal-tools action to v4.5.14
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.13 | v4.5.14 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-08 16:32:30 +00:00
ab3157f6be
chore(deps): update codecov/codecov-action action to v6 (main) ( #42431 )
...
chore(deps): update codecov/codecov-action action to v6
| datasource | package | from | to |
| ----------- | ---------------------- | ------ | ------ |
| github-tags | codecov/codecov-action | v5.5.4 | v6.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-07 15:43:28 +00:00
6c194045cf
chore(deps): update actions/deploy-pages action to v5 (main) ( #42430 )
...
chore(deps): update actions/deploy-pages action to v5
| datasource | package | from | to |
| ----------- | -------------------- | ------ | ------ |
| github-tags | actions/deploy-pages | v4.0.5 | v5.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-07 15:42:40 +00:00
a67a96eab5
refactor(lint): Switch to Oxlint ( #42384 )
...
* refactor(lint): Switch to Oxlint
* Update .oxlintrc.json
* Fix CI
---------
Co-authored-by: Jamie Tanna <jamie.tanna@mend.io >
2026-04-07 14:42:23 +00:00
eff00fb695
ci: add Zizmor for GitHub Actions linting ( #42346 )
...
Although we're generally in a positive place with our Actions, we also
do currently have some findings from Zizmor.
We should integrate it into our CI for better visibility.
We can pin to a specific version of Zizmor to ensure that we get updates
through `minimumReleaseAge` compliant means, rather than always pulling
`latest`.
This feeds findings into GitHub Advanced Security's Security tab by
default.
2026-04-07 11:16:16 +00:00
a97e0d60e0
chore(deps): update containerbase/internal-tools action to v4.5.13 (main) ( #42390 )
...
chore(deps): update containerbase/internal-tools action to v4.5.13
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.12 | v4.5.13 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-06 02:29:23 +00:00
5e6a921dae
chore(deps): update containerbase/internal-tools action to v4.5.12 (main) ( #42382 )
...
chore(deps): update containerbase/internal-tools action to v4.5.12
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.11 | v4.5.12 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-05 23:26:25 +00:00
655449d435
chore(deps): update containerbase/internal-tools action to v4.5.11 (main) ( #42378 )
...
chore(deps): update containerbase/internal-tools action to v4.5.11
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | containerbase/internal-tools | v4.5.10 | v4.5.11 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-05 19:26:50 +00:00
a74b4d78de
chore(deps): update containerbase/internal-tools action to v4.5.10 (main) ( #42369 )
...
chore(deps): update containerbase/internal-tools action to v4.5.10
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------- |
| github-tags | containerbase/internal-tools | v4.5.9 | v4.5.10 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-05 03:26:24 +00:00
21d4a0462f
chore(deps): update pdm-project/setup-pdm action to v4.5 (main) ( #42298 )
...
chore(deps): update pdm-project/setup-pdm action to v4.5
| datasource | package | from | to |
| ----------- | --------------------- | ---- | ---- |
| github-tags | pdm-project/setup-pdm | v4.4 | v4.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 03:27:34 +00:00
de777a2d70
ci: skip issues when not enabled ( #42274 )
...
Set `SKIP_GITHUB_ISSUES=true` when issues are disabled (e.g. in a fork).
2026-03-31 10:26:47 +00:00
528117316c
chore(deps): update rhysd/actionlint docker tag to v1.7.12 (main) ( #42262 )
...
chore(deps): update rhysd/actionlint docker tag to v1.7.12
| datasource | package | from | to |
| ---------- | ---------------- | ------ | ------ |
| docker | rhysd/actionlint | 1.7.11 | 1.7.12 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-31 08:50:41 +00:00
5e3680b7a7
chore(deps): update containerbase/internal-tools action to v4.5.9 (main) ( #42232 )
...
chore(deps): update containerbase/internal-tools action to v4.5.9
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.5.8 | v4.5.9 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 03:26:04 +00:00
4d2382589c
chore(deps): update containerbase/internal-tools action to v4.5.8 (main) ( #42230 )
...
chore(deps): update containerbase/internal-tools action to v4.5.8
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.5.6 | v4.5.8 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 02:28:20 +00:00
d8500274d0
chore(deps): update containerbase/internal-tools action to v4.5.6 (main) ( #42219 )
...
chore(deps): update containerbase/internal-tools action to v4.5.6
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.5.5 | v4.5.6 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-28 19:27:12 +00:00
b6fa4995dc
chore(deps): update github/codeql-action action to v4.35.1 (main) ( #42209 )
...
chore(deps): update github/codeql-action action to v4.35.1
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.0 | v4.35.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-27 18:29:13 +00:00
860230fe64
chore(deps): update github/codeql-action action to v4.35.0 (main) ( #42200 )
...
chore(deps): update github/codeql-action action to v4.35.0
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.34.1 | v4.35.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-27 12:46:58 +00:00
8729a3e5f3
chore(deps): update containerbase/internal-tools action to v4.5.5 (main) ( #42192 )
...
chore(deps): update containerbase/internal-tools action to v4.5.5
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.5.4 | v4.5.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-27 09:31:40 +00:00
cdf6ffee1a
chore(deps): update codecov/codecov-action action to v5.5.4 (main) ( #42157 )
...
chore(deps): update codecov/codecov-action action to v5.5.4
| datasource | package | from | to |
| ----------- | ---------------------- | ------ | ------ |
| github-tags | codecov/codecov-action | v5.5.3 | v5.5.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-26 14:31:23 +00:00
697491a0c7
chore(deps): update sigstore/cosign-installer action to v4.1.1 (main) ( #42149 )
...
chore(deps): update sigstore/cosign-installer action to v4.1.1
| datasource | package | from | to |
| ----------- | ------------------------- | ------ | ------ |
| github-tags | sigstore/cosign-installer | v4.1.0 | v4.1.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-26 06:28:48 +00:00
2a3ea2c48e
chore(deps): update dependency pdm to v2.26.7 (main) ( #42103 )
...
chore(deps): update dependency pdm to v2.26.7
| datasource | package | from | to |
| ---------- | ------- | ------ | ------ |
| pypi | pdm | 2.26.6 | 2.26.7 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-24 07:29:08 +00:00
f1681c5c55
ci: remove unused Trivy workflow ( #42067 )
...
Off the back of [0], a review of Renovate's usages of Trivy has
highlighted a single GitHub Workflow.
This workflow has no previous runs (according to the GitHub UI) since it
was added in 5ca375a97ehttps://www.stepsecurity.io/blog/trivy-compromised-a-second-time---malicious-v0-69-4-release
2026-03-23 09:44:52 +00:00
c3afa1a5d7
chore(deps): update containerbase/internal-tools action to v4.5.4 (main) ( #42060 )
...
chore(deps): update containerbase/internal-tools action to v4.5.4
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.5.2 | v4.5.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-23 02:28:02 +00:00
462113dbcd
chore(deps): update github/codeql-action action to v4.34.1 (main) ( #42035 )
...
chore(deps): update github/codeql-action action to v4.34.1
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.34.0 | v4.34.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 19:34:54 +00:00
be4e914da6
chore(deps): update github/codeql-action action to v4.34.0 (main) ( #42030 )
...
chore(deps): update github/codeql-action action to v4.34.0
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.33.0 | v4.34.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 12:35:45 +00:00
bd8609bf9d
ci: fix typo in environment variable ( #39500 )
2026-03-19 09:43:07 +00:00
1c289bd4b4
chore(deps): update codecov/codecov-action action to v5.5.3 (main) ( #41999 )
...
chore(deps): update codecov/codecov-action action to v5.5.3
| datasource | package | from | to |
| ----------- | ---------------------- | ------ | ------ |
| github-tags | codecov/codecov-action | v5.5.2 | v5.5.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 19:36:57 +00:00
2512ad57e8
chore(deps): update containerbase/internal-tools action to v4.5.2 (main) ( #41992 )
...
chore(deps): update containerbase/internal-tools action to v4.5.2
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.5.1 | v4.5.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 16:35:04 +00:00
e19e094603
chore(deps): update actions/cache action to v5.0.4 (main) ( #41991 )
...
chore(deps): update actions/cache action to v5.0.4
| datasource | package | from | to |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.3 | v5.0.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 15:34:30 +00:00
fcab80fcf3
chore(deps): update pnpm/action-setup action to v5 (main) ( #41988 )
...
chore(deps): update pnpm/action-setup action to v5
| datasource | package | from | to |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.4.0 | v5.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-18 12:52:07 +00:00
5594a3ab36
chore(deps): update containerbase/internal-tools action to v4.5.1 (main) ( #41979 )
...
chore(deps): update containerbase/internal-tools action to v4.5.1
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.5.0 | v4.5.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-17 14:35:07 +00:00
f46fa613e3
chore(deps): update github/codeql-action action to v4.33.0 (main) ( #41948 )
...
chore(deps): update github/codeql-action action to v4.33.0
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.32.6 | v4.33.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 11:56:34 +00:00
b0aaa135d2
chore(deps): update containerbase/internal-tools action to v4.5.0 (main) ( #41947 )
...
chore(deps): update containerbase/internal-tools action to v4.5.0
| datasource | package | from | to |
| ----------- | ---------------------------- | ------ | ------ |
| github-tags | containerbase/internal-tools | v4.4.6 | v4.5.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 10:39:38 +00:00
Jamie Tanna