Commit Graph

3688 Commits

Author SHA1 Message Date
Michael Kriese 07c6e733bd chore(instrumentation): instrument osv getVulnerabilities (#41480) 2026-02-25 09:38:07 +00:00
Johannes Feichtner f52ed03963 fix(vulnerability): handle alerts with null or missing firstPatchedVersion (#41338) 2026-02-24 21:57:40 +00:00
RahulGautamSingh 54547c97fc refactor: move onboarding to InheritConfig (#41377)
* refactor: move  to

* fix test
2026-02-24 21:52:41 +00:00
RahulGautamSingh af14f83a05 refactor: move onboardingNoDeps to InheritConfig (#41384)
refactor: move onboardingNoDeps to InheritConfig
2026-02-24 21:45:05 +00:00
Jamie Tanna 0e1ef6e0b0 fix(workers-repository): don't allow <> in branch names (#41406)
Per #41402.

Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io>
2026-02-24 21:32:45 +00:00
RahulGautamSingh da50c75c49 refactor: move onboardingPrTitle to InheritConfig (#41376)
* refactor: move onboardingPrTitle to InheritConfig

* remove unwanted flat clone
2026-02-22 18:32:16 +00:00
Adam Setch 579ff4c2ba feat: hyperlink warnings to dep dashboard (#40395)
* feat: hyperlink warnings to dep dashboard

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat: hyperlink warnings to dep dashboard

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat: hyperlink warnings to dep dashboard

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat: hyperlink warnings to dep dashboard

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* add tests

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* update tests

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* Merge branch 'main' into feat/hyperlink-dashboard

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* updated forgejo smartLinks

Signed-off-by: Adam Setch <adam.setch@outlook.com>

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
2026-02-20 15:19:35 +00:00
Michael Kriese 50d8f010b4 fix: log renovate version on startup (#41346) 2026-02-20 09:13:05 +00:00
Felipe Santos 7ebba26236 feat: add commitHourlyLimit (#36226)
* feat: add `commitHourlyLimit`

Signed-off-by: Felipe Santos <felipe.santos@ericsson.com>

* Update docs/usage/configuration-options.md

Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>

* Remove date optionality

* Fix lint comment

* Fix coverage

* Restore contents of commit.spec.ts

* Use ! somewhere else too

* Change optional parameter to nullish

* Refactor `!` to use proper check

* Fix set-branch-commit.spec.ts lint

* Fix test coverage

* Apply suggestions from code review

Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>

* Split commit-limit-reached into two

* Fix review comments

* Use toUTC() where applicable

* Simplify another test to utc()

---------

Signed-off-by: Felipe Santos <felipe.santos@ericsson.com>
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2026-02-19 18:00:32 +00:00
Felipe Santos 530d2efc3c fix(config): presets in repositories array are merged in wrong order (#40898)
* fix(config): presets in repositories array are merged in wrong order

* Simplify test to a single match
2026-02-19 17:55:04 +00:00
Jamie Tanna 57f01ae0a1 chore(workers/global): improve error message on parsing environment vars (#41324)
As part of #41323, we noticed that the error that's thrown isn't super
helpful, as it doesn't include the environment variable name.

To improve this, we can wrap the `Error` with the environment variable
name that's in use, as well as the error message.

In the future we can improve this further.
2026-02-19 11:59:28 +00:00
Jamie Tanna 2536f535c0 fix(workers/global): migrate string-based repositoryCacheForceLocal (#41323)
* fix(workers/global): migrate string-based `repositoryCacheForceLocal`

For users who had previously set `RENOVATE_X_REPO_CACHE_FORCE_LOCAL` to
a non-empty string, we can make sure to auto-migrate them to the
expected value of `true`.

Because this is an environment variable, we cannot use a migration, and
so instead need to handle it when we're performing the manual migration.

* test(workers/global): clarify empty `X_REPO_CACHE_FORCE_LOCAL` does not get migrated
2026-02-19 11:55:22 +00:00
renovate[bot] 6f64ce68c9 build(deps): update dependency croner to v10 (main) (#41283)
* build(deps): update dependency croner to v10

| datasource | package | from  | to     |
| ---------- | ------- | ----- | ------ |
| npm        | croner  | 9.1.0 | 10.0.1 |

* fix: migration

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2026-02-18 09:28:19 +00:00
Adam Setch ea8ff660bd feat(dependency-dashboard): hyperlink packages (#41116)
* feat(dependency-dashboard): hyperlink packages

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat(dependency-dashboard): hyperlink packages

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* Update dependency-dashboard.ts

* Update dependency-dashboard.ts

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
2026-02-18 08:48:44 +00:00
renovate[bot] 645a28c77c build(deps): update dependency prettier to v3.8.1 (main) (#39779)
* build(deps): update dependency prettier to v3.8.1

| datasource | package  | from  | to    |
| ---------- | -------- | ----- | ----- |
| npm        | prettier | 3.6.2 | 3.8.1 |

* fixup prettier

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: secustor <sebastian@poxhofer.at>
2026-02-18 08:41:34 +00:00
renovate[bot] 4a2578d18d build(deps): update dependency zod to v4 (main) (#41225)
* build(deps): update dependency zod to v4

| datasource | package | from    | to    |
| ---------- | ------- | ------- | ----- |
| npm        | zod     | 3.25.76 | 4.3.6 |

* fix: zod migration

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2026-02-18 07:37:50 +00:00
RahulGautamSingh fbb564c196 fix: allow grouping of lockFileMaintenance updates (#41240)
* allow grouping of multiplt lockfile prs

* add test

* refactor docs and presets desc

* add tests

* refactor docs
2026-02-17 11:37:24 +00:00
Jamie Tanna 067a19490b feat: promote repositoryCacheForceLocal out of experimental (#41207)
We've been happily using this with Mend Renovate Self-Hosted customers
since introduction in 2024, and so we're happy making this
non-experimental now.

This follows other changes where we've promoted an experimental option
to non-experimental, and heavily driven by Claude Sonnet 4.5.

We can also rename config item to use the same `repositoryCache` prefix.

Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io>
2026-02-16 11:20:30 +00:00
RahulGautamSingh 7a8dcdbd01 refactor(config/inherit): move onboardingBranch to InheritConfig (#40865)
* move onboardingBranch to InheritConfig

* fix lint issue

* fix import order

* more fixrs

* fix import

* fix imports
2026-02-15 08:17:11 +00:00
Sergei Zharinov b02897fab1 refactor(lint): Fix lint violations (#40965)
* refactor(lint): Fix lint violations

* Update lib/modules/versioning/versioning-metadata.spec.ts

Co-authored-by: Michael Kriese <michael.kriese@visualon.de>

---------

Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2026-02-06 15:34:33 +00:00
Sergei Zharinov 9d857c1f68 refactor(lint): Organize imports with biome (#40966) 2026-02-06 13:40:01 +00:00
Sergei Zharinov c531748f09 refactor(presets): Rename to *.preset.ts and enforce sort-keys via oxlint (#40976) 2026-02-06 13:39:02 +00:00
Johannes Feichtner c396b58e35 fix(workers): re-attempt platform automerge only in case of new commits (#40028) 2026-02-03 10:08:12 +00:00
Jamie Tanna dc9f86873d fix(onboardingAutoCloseAge): don't allow higher inherited value than global (#40810) (#40817)
Our intent for `onboardingAutoCloseAge` would be that the global
config would take precedence over the inherited config value.

Our implementation missed this, which means that inherited config could
then override the value, including disabling it.

To correct this, we can make sure that when using `getInheritedOrGlobal`
we only allow the inherit config option if it is lower than the global
option.

Co-authored-by: Claude Sonnet 4.5 <jamie.tanna+github-copilot@mend.io>
2026-02-02 08:55:23 +00:00
Zack Kanter 7373eae466 chore(logging): include PR number when detecting existing branch PR (#40832)
feat(logging): include PR number when detecting existing branch PR

Include the PR number in debug log messages when:
- An existing open branch PR is found ("Found existing branch PR #123")
- A closed PR already exists ("Closed PR #123 already exists")

This aids debugging by making it easier to correlate log entries with
specific PRs when reviewing Renovate logs.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 08:07:48 +00:00
Jamie Tanna 991fdbfd6b chore(onboarding): capitalise the prHourlyLimit (#39443)
As that is the correct name.
2026-01-29 17:58:45 +00:00
Jamie Tanna d1e3f13874 chore: use updateType in log message 2026-01-29 14:21:42 +00:00
Michael Kriese 3ed1817e2b fix!: prevent grouping of lockfile maintenance updates (#40781) 2026-01-29 14:21:42 +00:00
Sergei Zharinov 2b0e80b884 feat!: Switch to ESM modules (#40756) 2026-01-29 14:21:41 +00:00
RahulGautamSingh c7222c643d fix!: prevent grouping of replacement updates (#40758)
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2026-01-29 13:28:06 +00:00
Jamie Tanna cb49754391 fix(self-hosted)!: don't use shell: true for postUpgradeTasks (#40230)
To make sure that we're using secure defaults, we can make sure that
this is off-by-default.

Self-hosted administrators will be able to turn this back in if they
wish.
2026-01-29 13:28:05 +00:00
RahulGautamSingh c58c16f82d feat: inherit support for onboardingAutoCloseAge (#40086)
* feat: inherit support for onboardingAutoCloseAge

* reduce changes

* onboardingAutoCloseAgeLimit

* use global onboardingAutoCloseAge as limiter

* update

* revert extra changes

* afterAll
2026-01-27 16:36:44 +00:00
RahulGautamSingh e958373dbf chore: replace URL.parse (#40703)
* replace URL.parse

* fix test

* fix import extensions

* coverage

* add tests

---------

Co-authored-by: Jamie Tanna <jamie.tanna@mend.io>
2026-01-27 16:19:02 +00:00
Sergei Zharinov c5b0a74f82 refactor: Remove constructor parameter properties (#40712) 2026-01-27 11:16:26 +00:00
Teemu Matilainen bde55d5462 fix: workingDirTemplate must be relative to the repo root (#40068)
* fix: `workingDirTemplate` must be relative to the repo root

The `postUpgradeTasks.workingDirTemplate` did not work correctly,
as the working directory is the directory where Renovate is executed.

Thus prepend the paths with `localDir`, i.e. the repository root.

* refactor: use the return value of ensureLocalDir

The function already expands the path.
2026-01-27 06:59:26 +00:00
Sergei Zharinov 930cf6633c refactor: Rewrite imports with .ts extensions (#40700)
fix: Additional vi.mock path corrections and prettier formatting
2026-01-26 22:48:17 +00:00
RahulGautamSingh 7eb1ee9ed7 fix(reconfigure): migrate before validating (#40647)
migrate before validating
2026-01-26 19:09:10 +00:00
Jamie Tanna e799a4cf76 chore(types): document ProcessStatus (#40637)
As it's useful to have this more explicitly described, even though it
may be generally straightforward to guess what they each mean.
2026-01-23 18:36:40 +00:00
Jamie Tanna 0326bd60cd fix(onboardingAutoCloseAge): mark repositories as "closed-onboarding" after close (#40633)
As noted in #40631, when autoclosing an onboarding PR due to age, we're
not marking the repository status as `closed-onboarding`, which means
the repository cache (and current status fo the repo) is not
appropriately updated, and a repository needs to be scanned again to
update accordingly.

We should throw this error when we've performed the auto-close, so
Renovate can then mark the status correctly.
2026-01-23 15:08:40 +00:00
Jamie Tanna 95efe12f8a fix(onboardingAutoCloseAge): close PRs when onboarding cache is up-to-date (#40629)
As noted in #40627, when using a Repository Cache, the
onboardingAutoCloseAge does not trigger if the repository already has
its onboarding state already cached.

This is most prevalent in the Mend Developer Platform, where we heavily
cache our users' repositories, but leads to the fact that turning on
`onboardingAutoCloseAge` will take no effect.

To make this work, we can refactor how we handle `ensureOnboardingPr`,
to make sure that we still perform auto-closing even if the cache is
up-to-date.

Although not at the "rule of there", we can reduce code duplication for
`ensureOnboardingAutoCloseAge` by extracting a function.
2026-01-23 11:41:29 +00:00
Jamie Tanna 8a9b119144 test(onboarding): clarify that if cache is valid, no onboarding PR updates (#40628)
As a prerequisite for the fix in #40627, we should make sure that this
existing behaviour is documented.
2026-01-23 10:29:19 +00:00
Jamie Tanna 9d5e9de4a9 fix(onboardingAutoCloseAge): correctly handle partial days elapsed (#40606)
As noted in #40604, we're seeing cases where we need to wait
`onboardingAutoCloseAge+1` days until the onboarding PR will be
auto-closed.

To fix this, we can refactor `getElapsedDays` to optionally return a
floating point number, which we can then perform more careful
calculations against.

As we're now being a little more careful with timings being used for our
date comparisons, we need to make sure that Vitest fakes our timer
during these tests.

Instead of long floating-point numbers, we should use a 2 decimal
place value for log messages, as they're more readable to humans.
2026-01-23 07:49:14 +00:00
Jamie Tanna dcf86569b3 test(onboardingAutoClose): add additional tests for isOnboarded (#40602)
As part of future changes, it'll be more useful to have more test
coverage to show the behaviour.
2026-01-22 17:36:30 +00:00
Jamie Tanna bab5935931 chore(onboardingAutoCloseAge): log calculations (#40600)
To provide more information around the process used to determine whether
an onboarding PR will be auto-closed by `onboardingAutoCloseAge`, we can
add some more logs.
2026-01-22 17:19:40 +00:00
RahulGautamSingh 50b5f5a900 refactor(config): add an InheritConfig class (#40449)
* init InheritConfig class

* fix imports

* fix order

* add test

* fix import order

* RepoInheritConfig -> GlobalInheritableConfig

* fix import order

* Apply suggestions from code review

Co-authored-by: Jamie Tanna <github@jamietanna.co.uk>

* handle null/undefined inherited values

* add tests

---------

Co-authored-by: Jamie Tanna <github@jamietanna.co.uk>
2026-01-19 13:45:54 +00:00
Gurvan BK 4458a78f29 chore: fix typo in onboarding autoclose debug log (#40438) 2026-01-15 16:03:15 +00:00
Jamie Tanna 6a4fa3f245 refactor(presets): return merged presets from resolveConfigPresets (#40422)
As part of future changes, we want to log the shallow configuration (the
full resolved configuration, but without any internal Renovate
configuration presets), where we'll want to note which presets have not
been merged in.

Before that, we can start with an initial refactor to indicate which
have been merged, and return them.
2026-01-14 16:52:16 +00:00
renovate[bot] acacad57c6 chore(deps): update linters (main) (#40277)
* chore(deps): update linters

| datasource | package              | from   | to     |
| ---------- | -------------------- | ------ | ------ |
| npm        | eslint-plugin-oxlint | 1.36.0 | 1.38.0 |
| npm        | typescript-eslint    | 8.50.1 | 8.52.0 |

* chore: enable oxlint gha format

* chore: fix lint

* chore: fix lint

* chore: fix lint

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2026-01-14 15:32:48 +00:00
Sergei Zharinov fe1573fed9 chore(lint): add oxlint for faster syntax linting (#40236)
feat(lint): add oxlint for faster syntax linting

Co-authored-by: Michael Kriese <michael.kriese@visualon.de>
2026-01-13 14:43:43 +00:00
Adam Setch 5c19dd608d feat(dashboard): add heading for abandoned deps section (#40381)
* feat(dashboard): heading for abandoned deps section

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* feat(dashboard): heading for abandoned deps section

Signed-off-by: Adam Setch <adam.setch@outlook.com>

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
2026-01-12 15:30:33 +00:00