gsadmin/renovate
1
0
Fork 0
mirror of https://github.com/renovatebot/renovate.git synced 2026-11-06 04:11:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
27,161 Commits 327 Branches 12,674 Tags
feat/setup-node-https
Commit Graph

3913 Commits

Author SHA1 Message Date
Michael Kriese 17a1bbad96 refactor: use named simpleGit imports (#40759) 2026-01-28 16:55:14 +00:00
Sergei Zharinov c07814ca4d refactor: Remove decorators for ESM compatibility (#40736) 
* refactor: Migrate to decorator alternatives

* refactor: Remove decorators

* Fixes

* build: Remove decorator support from build pipeline

* fix: Remove extra brace in cdnjs getDigest cache key
 2026-01-28 13:22:53 +00:00
Jamie Tanna 783002c7de docs: correct references to binarySource=install for Mend-hosted (#40740) 2026-01-28 11:38:18 +00:00
Riley Saar 1db6be0d9e fix(datasource/docker): treat empty string as no architecture (#40715) 
fix: treat empty string as no architecture in docker images
 2026-01-27 22:01:24 +00:00
RahulGautamSingh e958373dbf chore: replace URL.parse (#40703) 
* replace URL.parse

* fix test

* fix import extensions

* coverage

* add tests

---------

Co-authored-by: Jamie Tanna <jamie.tanna@mend.io>
 2026-01-27 16:19:02 +00:00
Sergei Zharinov c5b0a74f82 refactor: Remove constructor parameter properties (#40712) 2026-01-27 11:16:26 +00:00
Jamie Tanna 3e70904fdd fix(gradle-wrapper): don't execute when allowedUnsafeExecutions (#40719) 
As part of changes in f50470985c, we
missed the implementation for the Gradle Wrapper.
 2026-01-27 09:48:16 +00:00
Sergei Zharinov 930cf6633c refactor: Rewrite imports with .ts extensions (#40700) 
fix: Additional vi.mock path corrections and prettier formatting
 2026-01-26 22:48:17 +00:00
Ron Waldon-Howe a7ddfcc893 chore: extract KubernetesResource schema for future broader usage (#40264) 
♻️ chore: extract KubernetesResource schema for future broader usage
 2026-01-26 19:16:28 +00:00
RahulGautamSingh 18bd32166b chore: replace URL.resolve (#40702) 
replace URL.resolve
 2026-01-26 18:59:54 +00:00
Benjamin Debeerst e5c2caac65 fix(sbt): consider html hrefs in absolute and root-relative format (#39464) 
* fix(sbt): consider html hrefs in absolute and root-relative format

* Use .at(-1) instead of .reverse()[0]

Co-authored-by: Michael Kriese <michael.kriese@gmx.de>

* Use non-null assertion

---------

Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
 2026-01-26 17:57:35 +00:00
Michael Kriese 5c796e1a47 refactor: replace nanoid with crypto.randomUUID (#40695) 
refactor: replace nanoid with `crypto.randomUUID`
 2026-01-26 16:40:12 +00:00
Antony David cd044ee0ca fix(manager/bun): run bun from lock file directory (#40274) 
fix(39586): run bun from lock file directory

Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
 2026-01-26 15:04:58 +00:00
Sergei Zharinov ae49b7af38 chore(deps): switch to @renovatebot/good-enough-parser (#40623) 
* chore(deps): switch to @jrnv/good-enough-parser

* chore(deps): switch to @renovatebot/good-enough-parser

* chore(deps): update @renovatebot/good-enough-parser to 1.2.0
 2026-01-26 12:44:11 +00:00
Johannes Feichtner 74401317ec refactor(manager/gradle): rewrite reorderFiles() for performance (#40318) 2026-01-23 18:44:14 +00:00
Marsel Mavletkulov b40c8f3556 fix(datasource/cpan): Handle modules with missing version (#40430) 
* Update cpan datasource to handle modules with missing version

* Get rid of empty-version.json fixture

* Add cpan schema tests
 2026-01-23 13:16:15 +00:00
Sharon Yogev ace27f8675 fix(manager/mise): expand file patterns to match mise's config search (#40094) 
* fix(manager/mise): expand file patterns to match mise's config search

Updates mise manager file patterns to align with the official mise configuration file search patterns. The patterns now include:
- Additional config locations (.config/mise/, .config/mise.toml)
- Legacy rtx.toml files
- Environment-specific configs (e.g., mise.production.toml)
- Local configs (e.g., mise.local.toml)

This ensures Renovate detects all mise configuration files that mise itself recognizes.

* CR

* Use brace expansions in the patterns

* Fix stupid typo
 2026-01-23 13:14:10 +00:00
Mathieu Kniewallner 69d80fd144 feat(datasource/crate): use pubtime when available (#40621) 
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
 2026-01-23 13:04:43 +00:00
Sergei Zharinov 5e56e2a636 refactor(github-actions): Simplify line parsing (#40096) 
* base: pile foundation

* docs(github-actions): add comments to parsing functions
 2026-01-23 12:58:33 +00:00
Tobias Bieniek b637846579 feat(versioning): Add rust-release-channel versioning scheme (#39859) 
* feat(rust-version): Implement `rust-release-channel` versioning scheme

* refactor(rust-version): Adjust `isCompatible()` to return `false` for differing `host` values

* refactor(rust-version): Simplify comparisons in `sortParsed()` fn

* refactor(rust-version): Extract `sortParsed()` fn to `util.ts`
 2026-01-23 12:58:19 +00:00
Christoffer 2b6dbf4871 feat(flux): map Helm sourceRef names via registryAliases (#40158) 
* feat(flux): map Helm sourceRef names via registryAliases

* fix: update docs with packageRules for registryAliases showcase

* fix: add tests to fill coverage

* fix: test for isOCIRegistry
 2026-01-23 11:52:02 +00:00
Jamie Tanna 30eece1f61 fix(pnpm): de-duplicate version numbers in minimumReleaseAgeExclude (#40613) 
As noted in #40611, we shouldn't reference the same version multiple
times in the same exclude directive.

This also handles the case where we could end up with multiple comments
for a given package.

This is slightly more complex logic, and slightly simplifes by
extracting out to a new helper method.

We also need to make sure that we use `getIn` so we get the raw node, so
we can look at the comment inside the `minimumReleaseAgeExclude`'s list,
but before the first element.
 2026-01-23 08:54:20 +00:00
Jamie Tanna 8752c280fc fix(pnpm): use exact versions in minimumReleaseAgeExclude (#40612) 
As noted in #40610, when `newVersion` contains a caret (or other
npm-specific versioning constraints) a generated
`minimumReleaseAgeExclude` directive will result in

    ERR_PNPM_INVALID_MINIMUM_RELEASE_AGE_EXCLUDE  Invalid value in
    minimumReleaseAgeExclude: Invalid versions union. Found: "...". Use
    exact versions only.

To handle this better, we can make sure we use `newVersion` over
`newValue`, as it'll provide the raw version number.

We also need to update an unrelated to test to make sure it's using
`newVersion`.
 2026-01-22 17:17:41 +00:00
RahulGautamSingh 5922ab6ae4 feat(pnpm): update minimumReleaseAgeExclude for security updates (#40020) 
* pnpm mra exclude

* move logic to npm:updateArtifacts

* only update pnpm workspace if security upgrade

* handle no matching setting found case

* refactor: minor

* fix tests

* variable name change

* in-between

* add tests

* refacto

* add test

* update helper function

* fix coverage

* fix coverage

* use AST based approach

makes the code more maintainable & readable

* add tests

* remove lockFileName

---------

Co-authored-by: Jamie Tanna <jamie.tanna@mend.io>
 2026-01-22 09:36:43 +00:00
renovate[bot] 742854c004 chore(deps): update python:3.14 docker digest to 17bc9f1 (main) (#40582) 
chore(deps): update python:3.14 docker digest to 17bc9f1

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-21 16:27:16 +00:00
mikaello 9a1a5e93f8 docs(homebrew): fix typo (#40569) 2026-01-21 15:13:32 +00:00
Michael Miller d366df5ac2 feat(manager/mise): add support for caddy (#40276) 
feat(manager/mise): add caddy
 2026-01-21 08:21:11 +00:00
Jamie Tanna 8a6cb4742c fix(git-submodules): infer the sourceUrl from the packageName (#40472) 
As noted in #30231, it would be useful to present a changelog URL for
Git submodule PRs, which is possible with
`helpers:githubDigestChangelogs`.

However, because the `sourceUrl` is not set, this doesn't get applied.

Given the `packageName` is the HTTP URL for the Git submodule, we can
use this for our `sourceUrl`.
 2026-01-20 14:28:43 +00:00
Jamie Tanna 19bd22ccff fix(util/exec): correctly pass commands around when using binarySource=docker (#40517) 
As noted in #40513, when running Composer's `lockFileMaintenance`
against a repository with `symfony/flex`[0], we hit a case[1] where
Composer needs to be installed first, which then results in a failure
when running in `binarySource=docker`, which strips any options from
`CommandWithOptions`.

This is because we were stripping the options and was inadvertently left
in as it fixed Typescript type checking, but subtly broke
implementation.

This also corrects a test that was a sign that this wasn't quite working
for Yarn, but we'd expected that it was mocked, not actually broken.

[0]: https://github.com/renovatebot/renovate/blob/795a121b5486138fd65e344ac7feaf370278d791/lib/modules/manager/composer/utils.ts#L15
[1]: https://github.com/renovatebot/renovate/blob/795a121b5486138fd65e344ac7feaf370278d791/lib/modules/manager/composer/artifacts.ts#L170
 2026-01-19 13:14:41 +00:00
Adam Setch eec42ca57d fix(bitbucket): massage codeblock markdown (#40346) 
* fix(bitbucket): /massage codeblock markdown

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* fix(bitbucket): massage codeblock markdown

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* fix(bitbucket): massage codeblock markdown

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* fix(bitbucket): massage codeblock markdown

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* Update index.ts

* fix(bitbucket): massage codeblock markdown

Signed-off-by: Adam Setch <adam.setch@outlook.com>

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
 2026-01-15 16:26:01 +00:00
Adam Setch 54d0edc750 fix(bitbucket): update indentation regex (#40359) 
* fix(bitbucket): update regex to match multiline new lines

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* fix(bitbucket): update regex to match multiline new lines

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* Update index.ts

* update test to cover unordered lists in release notes

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* update test to cover unordered lists in release notes

Signed-off-by: Adam Setch <adam.setch@outlook.com>

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
 2026-01-15 12:06:02 +00:00
renovate[bot] acacad57c6 chore(deps): update linters (main) (#40277) 
* chore(deps): update linters

| datasource | package              | from   | to     |
| ---------- | -------------------- | ------ | ------ |
| npm        | eslint-plugin-oxlint | 1.36.0 | 1.38.0 |
| npm        | typescript-eslint    | 8.50.1 | 8.52.0 |

* chore: enable oxlint gha format

* chore: fix lint

* chore: fix lint

* chore: fix lint

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
 2026-01-14 15:32:48 +00:00
renovate[bot] d633e3386b chore(deps): update python:3.14 docker digest to 37cba11 (main) (#40415) 
chore(deps): update python:3.14 docker digest to 37cba11

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-14 01:34:08 +00:00
renovate[bot] 6e59bcd7b6 chore(deps): update python:3.14 docker digest to 93c7740 (main) (#40412) 
chore(deps): update python:3.14 docker digest to 93c7740

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-13 22:25:44 +00:00
renovate[bot] 3560775ffc chore(deps): update python:3.14 docker digest to 0abd92b (main) (#40404) 
chore(deps): update python:3.14 docker digest to 0abd92b

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-13 12:33:20 +00:00
renovate[bot] 47838a1562 chore(deps): update python:3.14 docker digest to 9953689 (main) (#40401) 
chore(deps): update python:3.14 docker digest to 9953689

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-13 10:34:40 +00:00
Punsoong Khut 20c0662fc9 fix(bazel-module): registryAliases for bazel-module oci.pull (#38511) 
* registryAlias for bazel-module oci.pull

* use getDep from dockerfile manager instead

* expand testing for oci.pull

* test: merge autoReplaceStringTemplate assertion into registryAliases test

* move assertion to other test

* Update lib/modules/manager/bazel-module/extract.spec.ts

Co-authored-by: Michael Kriese <michael.kriese@gmx.de>

---------

Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
 2026-01-13 10:21:10 +00:00
Adam Setch 5c19dd608d feat(dashboard): add heading for abandoned deps section (#40381) 
* feat(dashboard): heading for abandoned deps section

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat(dashboard): heading for abandoned deps section

Signed-off-by: Adam Setch <adam.setch@outlook.com>

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
 2026-01-12 15:30:33 +00:00
jana-lemke e934191bbe fix(bitbucket-server): properly support gitUrl=endpoint (#39531) 
* Fix handling of giturl

* fix handling of undefined credentials

(This was never called before and was now failing).
 2026-01-11 16:58:29 +00:00
Johannes Feichtner 47adb58433 test(manager/gradle): remove test duplicates, minor corrections (#40317) 2026-01-11 09:48:36 +00:00
Matthias Schoettle e70495f08a docs: fix indent in pre-commit hook example in Go section (#40358) 
* docs: fix indent in pre-commit hook example for Go

* use single quotes
 2026-01-11 09:38:44 +00:00
Adam Setch ec4c23e57d feat: emojify truncated notes (#40367) 
* feat: emojify truncated notes

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat: emojify truncated notes

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat: emojify truncated notes

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat: emojify dashboard notices

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat: emojify dashboard notices

Signed-off-by: Adam Setch <adam.setch@outlook.com>

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
 2026-01-11 09:34:14 +00:00
Adam Setch 330d175341 feat: caution attestation notice (#40368) 
Signed-off-by: Adam Setch <adam.setch@outlook.com>
 2026-01-11 08:03:51 +00:00
Matthias Schoettle cbcc72d552 feat(pre-commit): support golang additional dependencies (#39469) 
* add tests

* finish implementation

* update readme

* Apply suggestions from code review

Co-authored-by: Michael Kriese <michael.kriese@gmx.de>

---------

Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
 2026-01-09 11:56:19 +00:00
marselester 5994b38695 fix(datasource): Update MetaCPAN query for new Elasticsearch version (#40335) 
Update MetaCPAN query for new Elasticsearch version
 2026-01-09 09:33:01 +00:00
Adam Setch 3854945c6a fix(bitbucket): markdown massaging for release notes (#40344) 
Signed-off-by: Adam Setch <adam.setch@outlook.com>
 2026-01-09 07:36:10 +00:00
Adam Setch 75aa561d3b feat(bitbucket): increase max body length (#40345) 
* feat(bitbucket): increase max body length

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat(bitbucket): increase max body length

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat(bitbucket): increase max body length

Signed-off-by: Adam Setch <adam.setch@outlook.com>

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
 2026-01-09 07:34:17 +00:00
Jamie Tanna b48e9629d4 fix(flux): use shell semantics for file redirection (#40324) 
As reported in #40275, since f430552de4
we've seen Flux failing to update.

We can take advantage of the new `shell` option to handle this safe
shell semantics usage for file redirection.
 2026-01-08 14:46:43 +00:00
Jamie Tanna 4e6e29f74e fix(yarn): don't rely on shell semantics for ignoring command failures (#40292) 
As reported in #40294, since f430552de4
we've seen Yarn 1 failing to update.

We can take advantage of the new `ignoreFailure` option to replace the
usage of shell semantics.

We also refactor `getOptimizeCommand` to make sure this always returns
the split command-and-arguments.
 2026-01-08 12:59:44 +00:00
Jamie Tanna 7c467de395 fix(composer): don't rely on shell semantics for ignoring command failures (#40291) 
As reported in #40284, since f430552de4
we've seen Composer failing to update.

We can take advantage of the new `ignoreFailure` option to replace the
usage of shell semantics.
 2026-01-08 09:48:50 +00:00