4e19e7c122
feat!: use wasm-java build of Bouncy Castle ( #40678 )
2026-01-29 13:28:04 +00:00
dcdd1c3bce
feat!: require node v24 ( #40675 )
2026-01-29 11:47:11 +00:00
cd0426babd
feat(sidecar): use renovatebot/base-image instead of containerbase/sidecar ( #40772 )
...
* feat(sidecar): use `renovatebot/base-image` instead of `containerbase/sidecar`
* refactor: simplify sidecar handling
* test: fixup
* docs: fixup
2026-01-29 10:05:24 +00:00
783002c7de
docs: correct references to binarySource=install for Mend-hosted ( #40740 )
2026-01-28 11:38:18 +00:00
1edb6c337f
docs(json-schema): add separate documentation page ( #40722 )
...
As noted in #40716 , we should provide more in-depth documentation about
Renovate's JSON Schemas as they are very useful for editor/agent
autocomplete.
Additionally, as part of the Renovate 43 release, it's something that
would be useful to link out to.
2026-01-27 14:40:03 +00:00
30b74215cb
docs(config-validation): note the behaviour of --no-global ( #40584 )
2026-01-26 19:11:19 +00:00
0b42055fbe
fix(json-schema): add a separate schema for Inherit Config ( #40683 )
...
In shared preset repositories, some users will use a mix of Inherit
Config and Repo Config options with the existing JSON Schema.
As part of Renovate 43, we're removing the ability for any global
options to be usable in Repo Config, which would also mean that it's now
either a case of "ignoring warnings in my editor" and "using Global
Config JSON Schema", which isn't a great option.
We can instead create a third JSON Schema, one which is focussed on
shared presets that can include Inherit Config options.
This makes it clear that the repo config's JSON Schema should not be
used for anything Inherit Config.
2026-01-26 15:44:54 +00:00
b5ef5ed804
chore(deps): update dependency renovatebot/github-action to v44.2.6 (main) ( #40671 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.6
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.5 | v44.2.6 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-26 06:27:13 +00:00
3fe8d2cc69
docs: update references to renovate/renovate (main) ( #40661 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | ------- |
| docker | renovate/renovate | 42.84.2 | 42.92.4 |
| docker | renovate/renovate | 42.84 | 42.92 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-26 00:30:23 +00:00
7063c1a797
docs(bot-comparison): drop the "monthly" qualifier for the GitHub Pulse ( #40265 )
...
As it looks like this now isn't possible to provide a permalink to the
monthly pulse.
2026-01-23 18:45:00 +00:00
89db243cbd
docs(config-validation): clarify reconfigure branch works only on base repo ( #40452 )
2026-01-23 18:41:12 +00:00
ace27f8675
fix(manager/mise): expand file patterns to match mise's config search ( #40094 )
...
* fix(manager/mise): expand file patterns to match mise's config search
Updates mise manager file patterns to align with the official mise configuration file search patterns. The patterns now include:
- Additional config locations (.config/mise/, .config/mise.toml)
- Legacy rtx.toml files
- Environment-specific configs (e.g., mise.production.toml)
- Local configs (e.g., mise.local.toml)
This ensures Renovate detects all mise configuration files that mise itself recognizes.
* CR
* Use brace expansions in the patterns
* Fix stupid typo
2026-01-23 13:14:10 +00:00
3110c83e1d
docs(onboarding): mention what happens when closing the onboarding PR ( #40624 )
...
* docs: Mention closing the onboarding PR
Resolves https://github.com/renovatebot/renovate/discussions/40605
* Mention opting in after closing the PR
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
---------
Co-authored-by: Jamie Tanna <github@jamietanna.co.uk >
2026-01-23 08:58:38 +00:00
015ce80baa
chore(tools): Add check script ( #40185 )
...
* base: pile foundation
* refactor(tools): Split check.ts into modular components
- Separate files for types, coverage, git, tui, execution, test-filter
- Fix signal handler timing (register at module load)
- Export getMatchingShards/getTestPatternsForShards from test-shards.ts
2026-01-23 01:12:10 +00:00
239b94f655
feat(renovate-config-validator): detect global environment options ( #40534 )
...
feat(renovate-config-validator): automagically detect global configuration
A long-standing issue with `renovate-config-validator` has been that
setting global configuration options such as `RENOVATE_ALLOWED_ENV` or
`RENOVATE_ALLOWED_COMMANDS` has no effect.
To make it possible to validate alongside the `config.js` (or other
self-hosted global configuration) as well as setting environment
variables while performing validation, we can ensure that we partially
initialise the `GlobalConfig`.
We can also make sure that this is documented as part of this change.
Functionality such as authenticating to the platform to retrieve remote
presets will be done at a future point.
2026-01-22 19:58:12 +00:00
f7685921dc
docs(major-release): add new JSON schema requirements ( #40548 )
...
As per #37994 .
2026-01-20 21:13:55 +00:00
ce3ec35408
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.144.0 (main) ( #40558 )
...
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.144.0
| datasource | package | from | to |
| ---------- | ------------------------------------ | ------- | ------- |
| docker | otel/opentelemetry-collector-contrib | 0.143.1 | 0.144.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-20 17:45:53 +00:00
dfa043f1a6
chore(deps): update dependency renovatebot/github-action to v44.2.5 (main) ( #40537 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.5
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.4 | v44.2.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-19 18:25:42 +00:00
8046291e4a
docs: use Go to refer to Go ( #40514 )
...
But keep `Golang` for folks who search by it.
2026-01-19 13:15:15 +00:00
f1ef446928
docs: update references to renovate/renovate (main) ( #40505 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | ------- |
| docker | renovate/renovate | 42.71.0 | 42.84.2 |
| docker | renovate/renovate | 42.71 | 42.84 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-19 00:34:56 +00:00
cad42c5ec0
docs(security): clarify no GHSAs for wrapper script ( #40408 )
...
docs: clarify no GHSAs for wrapper script
This isn't related to #40403 directly, but
it's worth clarifying.
2026-01-13 18:09:45 +00:00
fe1573fed9
chore(lint): add oxlint for faster syntax linting ( #40236 )
...
feat(lint): add oxlint for faster syntax linting
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2026-01-13 14:43:43 +00:00
20c0662fc9
fix(bazel-module): registryAliases for bazel-module oci.pull ( #38511 )
...
* registryAlias for bazel-module oci.pull
* use getDep from dockerfile manager instead
* expand testing for oci.pull
* test: merge autoReplaceStringTemplate assertion into registryAliases test
* move assertion to other test
* Update lib/modules/manager/bazel-module/extract.spec.ts
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
---------
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2026-01-13 10:21:10 +00:00
61ed156aa7
chore(deps): update dependency renovatebot/github-action to v44.2.4 (main) ( #40386 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.4
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.3 | v44.2.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-12 14:24:59 +00:00
efda1ababf
chore(deps): update prom/prometheus docker tag to v3.9.1 (main) ( #40313 )
...
chore(deps): update prom/prometheus docker tag to v3.9.1
| datasource | package | from | to |
| ---------- | --------------- | ------ | ------ |
| docker | prom/prometheus | v3.9.0 | v3.9.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-07 18:24:40 +00:00
1272688411
docs: add note for no backslashes in matchStrings ( #40061 )
...
* docs: add note for backslashes in matchStrings
* apply suggestions
2026-01-07 16:04:31 +00:00
d300868f37
docs: Use matchPackageNames in dependencyDashboardApproval example ( #40301 )
...
fix(docs): Use "matchPackageNames" in dependencyDashboardApproval example
2026-01-07 10:42:31 +00:00
03551259c8
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.143.1 (main) ( #40297 )
...
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.143.1
| datasource | package | from | to |
| ---------- | ------------------------------------ | ------- | ------- |
| docker | otel/opentelemetry-collector-contrib | 0.143.0 | 0.143.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-06 19:26:46 +00:00
88aa5eb383
chore(deps): update prom/prometheus docker tag to v3.9.0 (main) ( #40296 )
...
chore(deps): update prom/prometheus docker tag to v3.9.0
| datasource | package | from | to |
| ---------- | --------------- | ------ | ------ |
| docker | prom/prometheus | v3.8.1 | v3.9.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-06 18:26:45 +00:00
80f0335ca3
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.143.0 (main) ( #40295 )
...
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.143.0
| datasource | package | from | to |
| ---------- | ------------------------------------ | ------- | ------- |
| docker | otel/opentelemetry-collector-contrib | 0.142.0 | 0.143.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-06 17:27:02 +00:00
d6c4b46f44
docs: fix grammar ( #40286 )
...
Two minor spelling/grammar issues
2026-01-06 13:10:49 +00:00
8aae225e99
chore(deps): update dependency renovatebot/github-action to v44.2.3 (main) ( #40272 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.3
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.2 | v44.2.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-05 05:29:51 +00:00
807bc9a686
docs: update references to renovate/renovate (main) ( #40266 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | -------- | ------- |
| docker | renovate/renovate | 42.66.11 | 42.71.0 |
| docker | renovate/renovate | 42.66 | 42.71 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-05 00:31:38 +00:00
6298a49dd6
chore(deps): update jaegertracing/jaeger docker tag to v2.14.1 (main) ( #40258 )
...
chore(deps): update jaegertracing/jaeger docker tag to v2.14.1
| datasource | package | from | to |
| ---------- | -------------------- | ------ | ------ |
| docker | jaegertracing/jaeger | 2.14.0 | 2.14.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-02 19:26:07 +00:00
d3b84c4538
chore(deps): update jaegertracing/jaeger docker tag to v2.14.0 (main) ( #40249 )
...
chore(deps): update jaegertracing/jaeger docker tag to v2.14.0
| datasource | package | from | to |
| ---------- | -------------------- | ------ | ------ |
| docker | jaegertracing/jaeger | 2.13.0 | 2.14.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-02 03:29:19 +00:00
cbe1d049c6
feat(self-hosted): allow choice of shell: true for postUpgradeTasks ( #40229 )
...
As part of hardening the configuration around executing
`postUpgradeTasks` with `shell: true`, we can give self-hosted
administrators the opportunity to configure this.
This continues to be on-by-default to be non-breaking, but in the next
major version can be flipped to the safer option.
2025-12-31 11:55:04 +00:00
d2872e29f1
docs(self-hosting): note risk of postUpgradeTasks with shell execution
2025-12-31 10:45:58 +00:00
151d78f37f
feat(typst): Update datasource to use official registry API ( #38982 )
...
* feat(typst): Update datasource to use official registry API
* Fix
* Update self-hosted-configuration.md
* Update rate-limits.ts
2025-12-30 10:25:03 +00:00
9ef65b93c1
chore(deps): update dependency renovatebot/github-action to v44.2.2 (main) ( #40195 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.2
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.1 | v44.2.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-29 05:26:51 +00:00
f31798adb2
docs: update references to renovate/renovate (main) ( #40188 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | -------- |
| docker | renovate/renovate | 42.64.1 | 42.66.11 |
| docker | renovate/renovate | 42.64 | 42.66 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-29 00:29:13 +00:00
65a961cceb
refactor(github): add GraphQL branch query adapter ( #40177 )
...
* refactor(github): add GraphQL branch query adapter
Add infrastructure for querying GitHub branches via GraphQL:
- Add branches-query-adapter following the tags-query-adapter pattern
- Add GithubBranchItem type
- Export queryBranches function
- Register cache namespace
* style: fix prettier formatting
* test: add queryBranches coverage
* Refactor undefined checks to use `is.undefined`
Replace direct comparison of `undefined` with the `is.undefined` helper for consistency.
* refactor: use maxItems instead of maxPages
2025-12-28 17:16:19 +00:00
a3a3c92109
chore(deps): update dependency renovatebot/github-action to v44.2.1 (main) ( #40106 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.1
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.2.0 | v44.2.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 05:29:28 +00:00
b68c9b87c6
docs: update references to renovate/renovate (main) ( #40099 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | ------- |
| docker | renovate/renovate | 42.52.8 | 42.64.1 |
| docker | renovate/renovate | 42.52 | 42.64 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-22 00:31:52 +00:00
f50470985c
feat: add allowedUnsafeExecutions for ./gradlew ( #39945 )
...
We recently introduced the ability for self-hosted administrators to
control execution of possibly unsafe commands with
`allowedUnsafeExecutions`.
An existing attack vector of Gradle Wrapper commands being executed
(i.e. for Verification Metadata or lockfile updates) needs to be
retrofit into `allowedUnsafeExecutions` as part of #39657 .
This will be kept on-by-default until the next breaking change, after
which self-hosted administrators will be able to opt-in to enabling this
functionality is required.
2025-12-18 10:28:39 +00:00
ccc0929efc
chore(deps): update prom/prometheus docker tag to v3.8.1 (main) ( #40022 )
...
chore(deps): update prom/prometheus docker tag to v3.8.1
| datasource | package | from | to |
| ---------- | --------------- | ------ | ------ |
| docker | prom/prometheus | v3.8.0 | v3.8.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 10:20:49 +00:00
6befa87177
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.142.0 (main) ( #40019 )
...
chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.142.0
| datasource | package | from | to |
| ---------- | ------------------------------------ | ------- | ------- |
| docker | otel/opentelemetry-collector-contrib | 0.141.0 | 0.142.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-16 05:25:00 +00:00
ef0ff99f37
feat(self-hosted): onboardingAutoCloseAge ( #39876 )
...
* init
* prevent multiple closed comments
* add tests
* test + types
* doxcs
* revert createdAt type change
* revert inhertited config support
2025-12-15 16:53:13 +00:00
61f6865bdf
chore(deps): update dependency renovatebot/github-action to v44.2.0 (main) ( #40001 )
...
chore(deps): update dependency renovatebot/github-action to v44.2.0
| datasource | package | from | to |
| ----------- | ------------------------- | ------- | ------- |
| github-tags | renovatebot/github-action | v44.1.0 | v44.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-15 12:27:53 +00:00
a67d6af6ac
docs(npm-unpublish): Correct npm unpublish time frame 24h -> 72h ( #39941 )
...
docs(npm): Correct npm unpublish time frame in documentation
Updated the time frame for npm package unpublishing from 24 to 72 hours for accuracy. Updating link to where the policy is described.
2025-12-15 08:46:46 +00:00
f31419ad64
docs: update references to renovate/renovate (main) ( #39986 )
...
docs: update references to renovate/renovate
| datasource | package | from | to |
| ---------- | ----------------- | ------- | ------- |
| docker | renovate/renovate | 42.39.2 | 42.52.8 |
| docker | renovate/renovate | 42.39 | 42.52 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-15 00:34:25 +00:00
Michael Kriese