Commit Graph

79 Commits

Author SHA1 Message Date
Jamie Tanna b62fe59594 fix: remove references to "bot" (#39305)
We dropped the "bot" from our terminology long ago, but it looks like
we've got some outdated docs + code that reference it.

We should remove this to keep things consistent.

A `fix`, as we're changing the commit author's name, and log lines.

Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-09-02 08:56:20 +00:00
Jamie Tanna 7d2335ed07 fix(datasource/nuget): don't follow Link headers with different hosts
To prevent potential SSRF attempts, we can ignore a
misconfigured/malicious `next` link, and log a warning.

Co-authored-by: Claude Opus 4.8 <jamie.tanna+claude-code@mend.io>
2026-08-04 08:56:59 +01:00
Jamie Tanna 8a9f9cd9fe fix(datasource/docker): don't follow Link headers with different hosts
To prevent potential SSRF attempts, we can ignore a
misconfigured/malicious `next` link, and log a warning.

For self-hosted users, we can provide an experimental override if they
need to opt back in.

Co-authored-by: Claude Opus 4.8 <jamie.tanna+claude-code@mend.io>
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io>
2026-08-04 08:54:23 +01:00
Sebastian Poxhofer 9a27d7aa78 ci(prettier): add prettier plugin for admonitions (#43615)
* ci: add local mkdocs-admonitions plugin for prettier to allow admonition preservation

* docs: remove uses of `prettier-ignore` for admonitions

* test: rather use await expect

* chore: use named group exclusively
2026-05-27 09:39:52 +00:00
Jamie Tanna 4b0146ab7b docs: use 2-space indentation for Markdown (#43537)
As noted in #39090, MkDocs requires 4 spaces for indentation (in
particular, for nested lists) whereas our Prettier/markdownlint
configuration expects 2 spaces.

This means that when trying to use i.e. nested lists, we need to ignore
prettier and markdownlint, otherwise it fails.

To handle this, we can add a Markdown hook to override the indentation
level to 2 spaces.

This also requires we update:

- admonitions
- indented text in `index.md`

Co-authored-by: Claude Sonnet 4.6 <jamie.tanna+claude-code@mend.io>
2026-05-26 09:05:42 +00:00
Sergei Zharinov 0f0ed55725 fix(cache): increase SQLite busy timeout from 100ms to 5000ms (#43309)
* fix(cache): increase SQLite busy timeout from 100ms to 5000ms

* Update sqlite.ts

* Update self-hosted-experimental.md

* Update self-hosted-experimental.md
2026-05-13 12:59:19 +00:00
Florian Greinacher 21c011ad44 fix(gitlab): skip branch status when no pipeline found, retry after PR creation (#41130)
* fix(gitlab): skip branch status when no pipeline found, retry after PR creation

On GitLab with MR pipelines, posting a commit status without a
pipeline_id causes GitLab to create an unwanted branch pipeline.

Skip posting the status in setBranchStatus() when no pipeline is found
after retries. Retry setting branch statuses after ensurePr() in the
with-pr block so that the MR pipeline created by GitLab can be found.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* fix(gitlab): gate skip-status-without-pipeline behind experimental flag

Move the behavior that skips setting a branch status check when no
pipeline is found behind the RENOVATE_X_GITLAB_SKIP_STATUS_WITHOUT_PIPELINE
experimental environment variable. Without the flag, the original
behavior of always posting the status is preserved.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* test(gitlab): restore original 'sets branch status' test case

Keep the original test that verifies branch status is set without
the experimental flag alongside the new skip-behavior test.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(docs): sort experimental env var headers alphabetically

Move RENOVATE_X_GITLAB_SKIP_STATUS_WITHOUT_PIPELINE after
RENOVATE_X_GITLAB_MERGE_REQUEST_DELAY to satisfy alphabetical
ordering requirement in self-hosted-experimental.md.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(gitlab): address PR review comments for skip-status-without-pipeline

Use strict `=== 'true'` check for env var, update docs wording, and
add test coverage for the new experimental flag behavior.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-27 16:45:46 +00:00
Jamie Tanna 067a19490b feat: promote repositoryCacheForceLocal out of experimental (#41207)
We've been happily using this with Mend Renovate Self-Hosted customers
since introduction in 2024, and so we're happy making this
non-experimental now.

This follows other changes where we've promoted an experimental option
to non-experimental, and heavily driven by Claude Sonnet 4.5.

We can also rename config item to use the same `repositoryCache` prefix.

Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io>
2026-02-16 11:20:30 +00:00
Michael Kriese 4e19e7c122 feat!: use wasm-java build of Bouncy Castle (#40678) 2026-01-29 13:28:04 +00:00
RahulGautamSingh baf1f8831e docs: fix empty notes (#39662) 2025-12-02 10:03:47 +00:00
Michael Kriese 6de0097dc8 feat: replace kbpgp with bcpgp (#39032)
Replace kbpgp with our own bouncy castle bassed pgp lib.

Co-authored-by: Sebastian Poxhofer <secustor@users.noreply.github.com>
2025-11-06 10:16:45 +00:00
Jamie Tanna ff0c360e6b docs(experimental): correct markup for warning (#38489) 2025-10-14 10:06:37 +00:00
matteosilv 5136633811 feat(gitlab): allow overriding token used to set pr as approved (#36066)
Co-authored-by: Rhys Arkins <rhys@arkins.net>
2025-08-07 12:47:42 +00:00
Gabriel-Ladzaretti 3b72c7b6fe feat: replace env based static repo config with file based support (#37115)
Co-authored-by: Nabeel Saabna <48175656+nabeelsaabna@users.noreply.github.com>
Co-authored-by: Rhys Arkins <rhys@arkins.net>
2025-08-07 09:56:31 +00:00
Patrick Schratz 6c2bd9d197 feat: add forgejo as a standalone platform (#37075)
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2025-07-21 14:24:07 +00:00
Michael Kriese df1af911d4 fix(gitea): allow overriding platform version (#34019) 2025-02-04 08:41:26 +00:00
Philippe GRANET 78f389ac55 feat(gitlab): add branch status check attemps (#32692)
Co-authored-by: Rhys Arkins <rhys@arkins.net>
Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
2025-01-31 08:11:49 +00:00
Gabriel-Ladzaretti 19a99d2ca9 feat(config): add repo phase enviorment config (#33360) 2025-01-07 06:56:48 +00:00
Rhys Arkins 44c83b0901 feat: raise error when encrypted + no privateKey (#33085) 2024-12-13 11:31:15 +00:00
Sergei Zharinov f182fb3ea7 feat(maven): Use release post-fetch processing (#31261)
Co-authored-by: Rhys Arkins <rhys@arkins.net>
2024-09-26 13:20:54 +00:00
RahulGautamSingh 8ec8391310 feat(self-hosted): convert experimental vars to config options (#29137)
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com>
2024-08-19 15:45:49 +00:00
RahulGautamSingh 3857332a9e feat(self-hosted): convert experimental env vars to config options (#29154)
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com>
2024-08-07 07:28:34 +00:00
Rhys Arkins 23eb2dec84 feat(npm)!: remove RENOVATE_CACHE_NPM_MINUTES (#28715) 2024-07-25 15:28:16 +02:00
Rhys Arkins adcffd2b6b feat(datasource/docker)!: prefer hub.docker.com over index.docker.io for tag lookups (#28400)
Changes default Docker Hub lookups from index.docker.io to hub.docker.com, which is more efficient. If you are configuring a Docker Hub token for docker.io then you should now configure it for docker.com as well.

Closes #24666

BREAKING CHANGE: Docker Hub lookups prefer hub.docker.com over index.docker.io. Set RENOVATE_X_DOCKER_HUB_TAGS_DISABLE=true in env to revert behavior.
2024-07-25 15:28:16 +02:00
Rhys Arkins e3175a3557 fix(config)!: globalExtends merge order (#28145)
Previously, config from globalExtends was incorrectly merged _after_ other global config. This meant for example that packageRules in a config.js could not override packageRules from within globalExtends, because they were applied after. Now, globalExtends content will be merged first, and remaining global config merged second.

Fixes #28131

BREAKING CHANGE: order of globalExtends resolution is changed so that it is applied first and remaining global config takes precedence.
2024-07-25 15:28:16 +02:00
Raphael Zöllner 5092366359 feat: add variable to skip getting labels from docker hub (#29624) 2024-06-28 08:10:32 +00:00
RahulGautamSingh 03f5c5cb98 feat: remove RENOVATE_X_IGNORE_NODE_WARN (#29835) 2024-06-25 12:00:44 +00:00
RahulGautamSingh 044dc0fa28 feat(self-hosted): mergeConfidenceEndpoint and mergeConfidenceDatasources (#28880)
Co-authored-by: Rhys Arkins <rhys@arkins.net>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com>
2024-05-21 13:57:56 +00:00
RahulGautamSingh 10a4a8bb26 feat(self-hosted): autodiscoverRepoSort and autodiscoverRepoOrder (#28738)
Co-authored-by: Rhys Arkins <rhys@arkins.net>
2024-05-06 18:16:01 +00:00
Michael Kriese 60ceb65cca docs: validate relative links (#28690)
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com>
2024-04-30 10:56:15 +00:00
RahulGautamSingh 5558b0d3da feat(config/self-hosted): userAgent (#28737)
Co-authored-by: Rhys Arkins <rhys@arkins.net>
2024-04-29 16:16:35 +00:00
mikaello b61eb4e38b docs: improve merge confidence api base url variable doc (#28532)
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com>
2024-04-29 04:49:29 +00:00
Michael Kriese 452ade3d77 feat(config/encrypt): replace pgp library (#28312) 2024-04-22 13:57:19 +02:00
Florian Greinacher a94466c4ee feat(nuget): allow detecting source URLs via package contents (#28071)
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2024-04-20 06:21:19 +00:00
Michael Kriese b357e4d21c fix(npm): don't delete lockfiles early (#28472) 2024-04-18 06:22:03 +00:00
Philip 2d9305f250 feat(cache): RENOVATE_X_REPO_CACHE_FORCE_LOCAL (#28291)
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2024-04-11 16:40:59 +00:00
Rhys Arkins dffa7b5f06 fix(config): RENOVATE_X_EAGER_GLOBAL_EXTENDS (#28144) 2024-03-26 16:53:10 +00:00
Rhys Arkins 792bbb4e87 fix(yarn): revert default proxy behavior (#28100) 2024-03-24 08:51:57 +00:00
RahulGautamSingh 25ae92d631 feat(platform/bitbucket-server): allow blobless clone (#27975) 2024-03-21 06:08:28 +00:00
Rhys Arkins 814d2ec657 fix(yarn): improve yarn proxy configuration (#27984) 2024-03-18 21:48:02 +00:00
Rhys Arkins 8fe2b23553 feat(pre-commit): add ability to suppress warning for self-hosted (#27664) 2024-03-02 07:06:08 +00:00
Oleksandr Redko 1ffa44c4fe docs: fix typos and improve documentation consistency (#27418) 2024-02-19 12:36:39 +00:00
Sergei Zharinov 0378bf7652 feat: SQLite-based package cache (#26608)
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2024-01-30 07:50:24 +00:00
Lauris BH f634b9c988 feat(platform/gitea): autodiscover repos by topic (#26676)
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2024-01-21 09:08:25 +00:00
javaxiss 31dc0fd078 feat(platform/gitlab): handle detailed_merge_status to proceed with automerge (#26438)
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2024-01-05 10:56:21 +00:00
Gabriel-Ladzaretti 84270beec4 fix(matchConfidence): align supported datasources list with internal preset (#26420)
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2023-12-27 08:03:30 +00:00
Michael Kriese 6400145fdb docs(datasource/docker): add RENOVATE_X_DOCKER_HUB_TAGS (#26185)
Co-authored-by: Rhys Arkins <rhys@arkins.net>
2023-12-07 11:15:13 +00:00
Michael Kriese 4d60390554 docs: enforce alphabetically sorted experimental options (#26032) 2023-11-29 13:08:37 +00:00
Michael Kriese 8b4bfbd77d feat(gitlab): allow override mergeable check attemps and use exponential backoff (#26008) 2023-11-28 09:11:59 +00:00
Michael Kriese 2daf10e4e8 feat(datasource/docker): allow override max pages (experimental /self-hosted) (#23700) 2023-08-04 07:46:22 +00:00