d6c4b46f44
docs: fix grammar ( #40286 )
...
Two minor spelling/grammar issues
2026-01-06 13:10:49 +00:00
8aae225e99
chore(deps): update dependency renovatebot/github-action to v44.2.3 (main) ( #40272 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.3
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.2 | v44.2.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-05 05:29:51 +00:00
807bc9a686
docs: update references to renovate/renovate (main) ( #40266 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | -------- | ------- |
| docker | renovate/renovate | 42.66.11 | 42.71.0 |
| docker | renovate/renovate | 42.66 | 42.71 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-05 00:31:38 +00:00
6298a49dd6
chore(deps): update jaegertracing/jaeger docker tag to v2.14.1 (main) ( #40258 )
...
chore(deps): update jaegertracing/jaeger docker tag to v2.14.1
| datasource | package | from | to |
| ---------- | -------------------- | ------ | ------ |
| docker | jaegertracing/jaeger | 2.14.0 | 2.14.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-02 19:26:07 +00:00
d3b84c4538
chore(deps): update jaegertracing/jaeger docker tag to v2.14.0 (main) ( #40249 )
...
chore(deps): update jaegertracing/jaeger docker tag to v2.14.0
| datasource | package | from | to |
| ---------- | -------------------- | ------ | ------ |
| docker | jaegertracing/jaeger | 2.13.0 | 2.14.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-02 03:29:19 +00:00
cbe1d049c6
feat(self-hosted): allow choice of shell: true for postUpgradeTasks ( #40229 )
...
As part of hardening the configuration around executing
`postUpgradeTasks` with `shell: true`, we can give self-hosted
administrators the opportunity to configure this.
This continues to be on-by-default to be non-breaking, but in the next
major version can be flipped to the safer option.
2025-12-31 11:55:04 +00:00
d2872e29f1
docs(self-hosting): note risk of postUpgradeTasks with shell execution
2025-12-31 10:45:58 +00:00
151d78f37f
feat(typst): Update datasource to use official registry API ( #38982 )
...
* feat(typst): Update datasource to use official registry API
* Fix
* Update self-hosted-configuration.md
* Update rate-limits.ts
2025-12-30 10:25:03 +00:00
9ef65b93c1
chore(deps): update dependency renovatebot/github-action to v44.2.2 (main) ( #40195 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.2
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.1 | v44.2.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-29 05:26:51 +00:00
f31798adb2
docs: update references to renovate/renovate (main) ( #40188 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | -------- |
| docker | renovate/renovate | 42.64.1 | 42.66.11 |
| docker | renovate/renovate | 42.64 | 42.66 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-29 00:29:13 +00:00
65a961cceb
refactor(github): add GraphQL branch query adapter ( #40177 )
...
* refactor(github): add GraphQL branch query adapter
Add infrastructure for querying GitHub branches via GraphQL:
- Add branches-query-adapter following the tags-query-adapter pattern
- Add GithubBranchItem type
- Export queryBranches function
- Register cache namespace
* style: fix prettier formatting
* test: add queryBranches coverage
* Refactor undefined checks to use `is.undefined`
Replace direct comparison of `undefined` with the `is.undefined` helper for consistency.
* refactor: use maxItems instead of maxPages
2025-12-28 17:16:19 +00:00
a3a3c92109
chore(deps): update dependency renovatebot/github-action to v44.2.1 (main) ( #40106 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.1
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.0 | v44.2.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 05:29:28 +00:00
b68c9b87c6
docs: update references to renovate/renovate (main) ( #40099 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | ------- |
| docker | renovate/renovate | 42.52.8 | 42.64.1 |
| docker | renovate/renovate | 42.52 | 42.64 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 00:31:52 +00:00
f50470985c
feat: add allowedUnsafeExecutions for ./gradlew ( #39945 )
...
We recently introduced the ability for self-hosted administrators to
control execution of possibly unsafe commands with
`allowedUnsafeExecutions`.
An existing attack vector of Gradle Wrapper commands being executed
(i.e. for Verification Metadata or lockfile updates) needs to be
retrofit into `allowedUnsafeExecutions` as part of #39657 .
This will be kept on-by-default until the next breaking change, after
which self-hosted administrators will be able to opt-in to enabling this
functionality is required.
2025-12-18 10:28:39 +00:00
ccc0929efc
chore(deps): update prom/prometheus docker tag to v3.8.1 (main) ( #40022 )
...
chore(deps): update prom/prometheus docker tag to v3.8.1
| datasource | package | from | to |
| ---------- | --------------- | ------ | ------ |
| docker | prom/prometheus | v3.8.0 | v3.8.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 10:20:49 +00:00
6befa87177
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.142.0 (main) ( #40019 )
...
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.142.0
| datasource | package | from | to |
| ---------- | ------------------------------------ | ------- | ------- |
| docker | otel/opentelemetry-collector-contrib | 0.141.0 | 0.142.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 05:25:00 +00:00
ef0ff99f37
feat(self-hosted): onboardingAutoCloseAge ( #39876 )
...
* init
* prevent multiple closed comments
* add tests
* test + types
* doxcs
* revert createdAt type change
* revert inhertited config support
2025-12-15 16:53:13 +00:00
61f6865bdf
chore(deps): update dependency renovatebot/github-action to v44.2.0 (main) ( #40001 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.0
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.1.0 | v44.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-15 12:27:53 +00:00
a67d6af6ac
docs(npm-unpublish): Correct npm unpublish time frame 24h -> 72h ( #39941 )
...
docs(npm): Correct npm unpublish time frame in documentation
Updated the time frame for npm package unpublishing from 24 to 72 hours for accuracy. Updating link to where the policy is described.
2025-12-15 08:46:46 +00:00
f31419ad64
docs: update references to renovate/renovate (main) ( #39986 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | ------- |
| docker | renovate/renovate | 42.39.2 | 42.52.8 |
| docker | renovate/renovate | 42.39 | 42.52 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-15 00:34:25 +00:00
346632a508
chore(deps): update dependency renovatebot/github-action to v44.1.0 (main) ( #39948 )
...
chore(deps): update dependency renovatebot/github-action to v44.1.0
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.0.5 | v44.1.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-12 15:27:54 +00:00
8557157edb
feat: add support for go:generate directives in gomod ( #39163 )
...
* feat: add support for go:generate directives in gomod
This change adds a `goGenerate` postUpdateOption which enables
running `go generate ./...` after a dependency update.
Frequently when dependencies are brought in via tools or using
vendored code, and those dependencies are used for go:generate
instructions, we want to update the generated code after the dependency
has been updated.
Adding this as a postUpdateCommand wasn't really satisfactory since that
necessarily requires making a change in two spots (one in the allowed
commands, one in the postUpdateCommand). The other reason this was
undesirable was it would cause generate to run after every dependency
update, regardless of language.
* Updates
* Update fixes
* Self PR
* Fix docs link
* Trying to find the right path
* Fix
* Add deleted
* Fix
* And fix test...
* docs: tweak wording for `goGenerate`
* fix(types): don't default GlobalConfig
In a future change, `GlobalConfig.get` will correctly pull in the
defaults.
---------
Co-authored-by: Jamie Tanna <jamie.tanna@mend.io >
2025-12-12 12:43:54 +00:00
fab941c432
docs: Add note to pinDigestDisabled ( #39707 )
...
* docs: Add note to pinDigestDisabled
About not being able to revert docker:pinDigests
* docs: Update instruction for reverting pinDigests
* docs: Use md notes syntax
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
* docs: indent whole note content
* chore: Remove markdownlint exception
* Revert "chore: Remove markdownlint exception"
This reverts commit 4b47c0b51drahultesnik@gmail.com >
* docs: Update note for pinDigestsDisabled
* Apply suggestions from code review
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
---------
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
2025-12-12 10:03:55 +00:00
214e1da38d
feat(config): allow template fields in allowedVersions ( #38922 )
...
* handlebars: regsiter add helper
* allow template fields in allowedVersions
* fix test
* fix doc example
* remove comments
* Apply Suggestions
* use empty object instead of undefined
* template(helpers/add): handle undefined/null
* Apply Suggestions
* Apply suggestion from @RahulGautamSingh
* Apply suggestion from @RahulGautamSingh
* fix conflict
* remove unused function
* fix lint issue
* fix test
* Update docs/usage/configuration-options.md
Co-authored-by: Anne Stellingwerf <1637358+astellingwerf@users.noreply.github.com >
* prettier
* throw error if invalid inputs used
---------
Co-authored-by: Anne Stellingwerf <1637358+astellingwerf@users.noreply.github.com >
2025-12-11 14:52:15 +00:00
01801296a7
fix(composer): do not use --minimal-changes with lockFileMaintenance and add postUpdateOption for not using it ( #39824 )
...
* Make --minimal-config configurable.
* Fix accidental remove.
* Remove composerMinimalChange from wrong file
* Update docs/usage/configuration-options.md
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
* Add composerMinimalChanges to the renovateconfig interface.
* Use postupdateoptions.
* Remove the lock file before lock file maintenance upgrade.
* Import
* Flip to use composerNoMinimalChanges
* Minor fixes.
* Update artifacts.spec.ts
* Ignore tests for exception during lock file deletion (similar to npm, pnpm, etc)
* Move v8 comment.
* Remove composer lock removal
* docs(composer): reword `composerNoMinimalChanges`
* Fix Markdown formatting
---------
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
2025-12-11 11:17:28 +00:00
d32eedbb10
feat(lookup): add maxMajorIncrement ( #38854 )
...
* feat(lookup): add `maxMajorIncrement`
Signed-off-by: Felipe Santos <felipe.santos@ericsson.com >
* Update lib/workers/repository/process/lookup/filter.ts
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
---------
Signed-off-by: Felipe Santos <felipe.santos@ericsson.com >
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
2025-12-10 22:32:05 +00:00
d1ba25028d
docs: Add 'uv.lock' to supported lock files table ( #39819 )
2025-12-08 20:17:35 +00:00
03c31d1a1f
docs: update references to renovate/renovate (main) ( #39845 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | ------- |
| docker | renovate/renovate | 42.27.0 | 42.39.2 |
| docker | renovate/renovate | 42.27 | 42.39 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-08 00:26:42 +00:00
16ea48d86d
feat(gitlab): add support for autodiscovery repo sort/order ( #39680 )
2025-12-04 16:04:17 +00:00
bf3ec649db
docs: clarify Mend-hosted log retention ( #39405 )
...
As it's likely changed to 2 weeks of logs, since we last updated this.
Co-authored-by: Nabeel Saabna <48175656+nabeelsaabna@users.noreply.github.com >
2025-12-03 19:43:30 +00:00
cdb84e5c44
chore(deps): update jaegertracing/jaeger docker tag to v2.13.0 (main) ( #39774 )
...
chore(deps): update jaegertracing/jaeger docker tag to v2.13.0
| datasource | package | from | to |
| ---------- | -------------------- | ------ | ------ |
| docker | jaegertracing/jaeger | 2.12.0 | 2.13.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-03 19:27:24 +00:00
2ea785569f
chore(deps): update dependency markdownlint-cli2 to v0.19.1 (main) ( #39425 )
...
* chore(deps): update dependency markdownlint-cli2 to v0.19.1
| datasource | package | from | to |
| ---------- | ----------------- | ------ | ------ |
| npm | markdownlint-cli2 | 0.18.1 | 0.19.1 |
* docs: define table style and fixup docs
* build: fix markdownlint
* fix: ignore
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: secustor <sebastian@poxhofer.at >
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2025-12-02 12:30:18 +00:00
ce4f315660
chore(deps): update prom/prometheus docker tag to v3.8.0 (main) ( #39691 )
...
chore(deps): update prom/prometheus docker tag to v3.8.0
| datasource | package | from | to |
| ---------- | --------------- | ------ | ------ |
| docker | prom/prometheus | v3.7.3 | v3.8.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-02 12:04:36 +00:00
6cacf79dd7
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.141.0 (main) ( #39690 )
...
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.141.0
| datasource | package | from | to |
| ---------- | ------------------------------------ | ------- | ------- |
| docker | otel/opentelemetry-collector-contrib | 0.140.1 | 0.141.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-02 11:29:06 +00:00
baf1f8831e
docs: fix empty notes ( #39662 )
2025-12-02 10:03:47 +00:00
4f9d970ad6
feat: Add allowedUnsafeExecution to the global configuration ( #39573 )
...
As part of #39458 , we want to introduce a new self-hosetd configuration
item, to restrict what commands can be run as part of artifact upgrades.
2025-12-01 13:37:22 +00:00
0f2c68ae47
chore(deps): update dependency renovatebot/github-action to v44.0.5 (main) ( #39651 )
...
chore(deps): update dependency renovatebot/github-action to v44.0.5
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.0.4 | v44.0.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 10:17:41 +00:00
452ffdd174
docs: update references to renovate/renovate (main) ( #39637 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | ------- |
| docker | renovate/renovate | 42.19.3 | 42.27.0 |
| docker | renovate/renovate | 42.19 | 42.27 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-01 00:35:22 +00:00
d5f1c61c9b
fix(docs): correct broken link ( #39616 )
...
As it was renamed in #39406 , but looks like there were warnings we
didn't spot, which are now failing when the docs attempt to build with
these new changes.
2025-11-28 16:26:51 +00:00
4429e8f754
docs(mra): clarify support for the Crate datasource ( #39592 )
2025-11-28 09:13:27 +00:00
70c1075010
docs(constraints): clarify that binarySource=global ignores them ( #39561 )
...
* docs(constraints): clarify that `binarySource=global` ignores them
Although this is a somewhat commonly known behaviour, it's worth making
this more clear, by clarifying this in the `constraints` docs, as well
as add a debug log.
* docs(constraints): simplify message
As noted by Michael, these may not be user-facing `constraints`, but the
constraints a Manager sets.
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
---------
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2025-11-27 17:41:39 +00:00
254f821259
docs(self-hosting): further clarify the supply chain security risks ( #39456 )
...
As part of ongoing efforts I'm taking to make Renovate have more
secure-by-default settings, we should document some of the additional
risks that can occur when self-hosting.
This primarily focusses on outsider attacks (i.e. from a malicious
dependency) as we're finding is increasing in frequency in the recent
years.
2025-11-27 17:23:26 +00:00
6058acd86e
docs(self-hosting): make RENOVATE_GITHUB_COM_TOKEN requirement more clear ( #39406 )
...
As seen in #37685 and #39399 , it appears that these users have run into
the non-GitHub.com rate limits.
We can make this clearer by putting this in a more prominent position
for self-hosting users.
2025-11-27 12:01:04 +00:00
61c943c028
feat: prBodyHeadingDefinitons ( #39460 )
...
* feat: prBodyHeadingDefinitons
* Apply Suggestions
* Apply suggestions
* Update docs/usage/configuration-options.md
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
---------
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
Co-authored-by: Jamie Tanna <jamie.tanna@mend.io >
2025-11-26 10:15:41 +00:00
93b1bac02e
docs: update documentation on branchConcurrentLimit ( #39526 )
...
* Update documentation on branchConcurrentLimit
Clarified the explanation of concurrent branch limits and their default values.
* Update docs/usage/configuration-options.md
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
* Apply suggestion from @RahulGautamSingh
---------
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
2025-11-25 20:00:56 +00:00
77de384ba7
fix(forgejo): properly handle team reviewers ( #39533 )
...
* fix(forgejo): properply handle team reviewers
* fix(forgejo): properply handle team reviewers like github
2025-11-25 14:36:30 +00:00
58612b9f4a
fix(presets): don't override prCreation on security:minimumReleaseAgeNpm ( #39536 )
...
Since rolling out the v42 Renovate release to the Mend Developer
Platform, we've been watching out for user reports for issues following
the addition of `security:minimumReleaseAgeNpm` in
`config:best-practices`.
In particular, two Discussions #39525 and #39477 are interesting cases
where a change from #39066 around `prCreation` has inadvertently caused
impact to PRs being created, as the CI needs to pass on the branch
before a PR is created (as intended by `prCreation=not-pending`).
However, these branches do not get CI running until there is a PR, which
means PRs will never be raised.
This partially reverts changes from #39066 , #39116 and #38873 , which
have been re-investigated since the reports.
Slightly surprising is the fact that the changes from #39066 have been
live on the Mend Developer Platform for a few weeks, but it wasn't
noticed until now, after the full rollout of v42.
2025-11-25 13:32:52 +00:00
a216ed1121
docs(minimumReleaseAge): explicitly note 0 days is treated as null ( #39495 )
...
As part of a change in #39494 , which made for a "rough edge".
2025-11-24 21:29:36 +00:00
186793e472
docs(self-hosting): Fix typo in self-hosting documentation : duplicate "to" ( #39506 )
...
Fix typo in self-hosting documentation
Fix duplicate "to" in doc
2025-11-24 12:07:44 +00:00
f9542d0ebc
chore(deps): update dependency renovatebot/github-action to v44.0.4 (main) ( #39490 )
...
chore(deps): update dependency renovatebot/github-action to v44.0.4
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.0.3 | v44.0.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-24 06:25:12 +00:00
bvdboom