gsadmin/renovate
1
0
Fork 0
mirror of https://github.com/renovatebot/renovate.git synced 2026-10-24 14:34:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
28,040 Commits 291 Branches 12,576 Tags
main
Commit Graph

28040 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
renovate[bot] 01d7fb8fcf fix(deps): update dependency mkdocs-material to v9.8.0 (main) (#47364) 
fix(deps): update dependency mkdocs-material to v9.8.0

| datasource | package         | from  | to    |
| ---------- | --------------- | ----- | ----- |
| pypi       | mkdocs-material | 9.7.7 | 9.8.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.181.2 		2026-10-24 13:21:45 +00:00
renovate[bot] 7fc75acbaa fix(deps): update renovate-base-image to v13.142.3 (main) (#47363) 
fix(deps): update renovate-base-image to v13.142.3

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.142.2 | 13.142.3 |
| docker     | ghcr.io/renovatebot/base-image | 13.142.2 | 13.142.3 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-24 13:21:28 +00:00
renovate[bot] 070bc2baab chore(deps): update jdx/mise-action action to v5.2.3 (main) (#47362) 
chore(deps): update jdx/mise-action action to v5.2.3

| datasource  | package         | from   | to     |
| ----------- | --------------- | ------ | ------ |
| github-tags | jdx/mise-action | v5.2.2 | v5.2.3 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-24 12:19:46 +00:00
renovate[bot] c4c70adc88 chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.52.4 (main) (#47361) 
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.52.4

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.52.3 | 14.52.4 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-24 12:19:35 +00:00
renovate[bot] c11332b61c chore(deps): update dependency @ls-lint/ls-lint to v2.3.2 (main) (#47359) 
chore(deps): update dependency @ls-lint/ls-lint to v2.3.2

| datasource | package          | from  | to    |
| ---------- | ---------------- | ----- | ----- |
| npm        | @ls-lint/ls-lint | 2.3.1 | 2.3.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-24 08:20:33 +00:00
renovate[bot] 4c3c2330fe chore(deps): update dependency @containerbase/istanbul-reports-html to v2.0.23 (main) (#47358) 
chore(deps): update dependency @containerbase/istanbul-reports-html to v2.0.23

| datasource | package                              | from   | to     |
| ---------- | ------------------------------------ | ------ | ------ |
| npm        | @containerbase/istanbul-reports-html | 2.0.22 | 2.0.23 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-24 08:20:21 +00:00
renovate[bot] f69dd1ded7 fix(deps): update renovate-base-image to v13.142.2 (main) (#47354) 
fix(deps): update renovate-base-image to v13.142.2

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.142.1 | 13.142.2 |
| docker     | ghcr.io/renovatebot/base-image | 13.142.1 | 13.142.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.181.1 		2026-10-24 00:23:51 +00:00
renovate[bot] 578dc84d84 fix(deps): update dependency github/gh-actions-lock to v0.4.0 (main) (#47355) 
fix(deps): update dependency github/gh-actions-lock to v0.4.0

| datasource      | package                | from   | to     |
| --------------- | ---------------------- | ------ | ------ |
| github-releases | github/gh-actions-lock | v0.3.0 | v0.4.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-24 00:23:48 +00:00
Jamie Tanna d1f6e41650 test(manager/renovate-config): document which constraints scopes are extracted (#47349) 
As part of changes towards #46438, it was noticed that there wasn't
coverage for the ability to specify `constraints` inside `packageRules`.

Co-authored-by: Claude Opus 5.5 <jamie.tanna+claude-code@mend.io>
 2026-10-23 17:01:46 +00:00
renovate[bot] bec17bf19a fix(deps): update renovate-base-image to v13.142.1 (main) (#47347) 
fix(deps): update renovate-base-image to v13.142.1

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.142.0 | 13.142.1 |
| docker     | ghcr.io/renovatebot/base-image | 13.142.0 | 13.142.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-23 16:21:27 +00:00
renovate[bot] 2d1059c832 chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.52.3 (main) (#47346) 
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.52.3

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.52.0 | 14.52.3 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-23 16:19:54 +00:00
renovate[bot] a45ee254dc feat(deps): update renovate-base-image to v13.142.0 (main) (#47343) 
feat(deps): update renovate-base-image to v13.142.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.141.2 | 13.142.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.141.2 | 13.142.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.181.0 		2026-10-23 13:54:16 +00:00
renovate[bot] 4022153803 chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.52.0 (main) (#47342) 
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.52.0

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.51.2 | 14.52.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-23 13:46:53 +00:00
RahulGautamSingh 0701e54c3b fix(manager/npm): hash yarn.js for yarn berry corepack hash (#46771) 2026-10-23 13:32:34 +00:00
RahulGautamSingh 1c61ebe76a fix(workers/branch): dedupe updatedArtifacts by path (#46626) 2026-10-23 13:26:37 +00:00
RahulGautamSingh 8dd4386525 fix(manager/npm): detect yarnZeroInstall from any upgrade on mixed branches (#44886) 
* fix(manager/npm): detect yarnZeroInstall from first upgrade on mixed branches

* apply suggestions
 2026-10-23 13:25:45 +00:00
RahulGautamSingh 419feea7c8 fix(platform/gitlab): set branch status on merged results pipelines (#47064) 2026-10-23 13:24:01 +00:00
Michael Kriese 4ebd20edc9 feat(util/exec): look up jb versions from containerbase/jb-prebuild (#47303) 
Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
44.180.0 		2026-10-23 11:28:22 +00:00
Michael Kriese 0db8910569 test(workers/repository): use a temp cache dir in init specs (#47339) 
Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
 2026-10-23 11:13:07 +00:00
Jamie Tanna 4086667eba fix(manager/gomod): allow modules with an older go directive (#47317) 
* fix(manager/gomod): allow modules with an older `go` directive

As noted in #47313, when using `constraintsFiltering=strict`, any Go
modules which declare a `go` directive on an /older/ minor version than
the repository's are filtered out, even though they would not require
bumping the repository's `go` directive.

This seems to have been documented as the intent in
0e5e384237 - hence the test added to note
the behaviour - but this leads to us not updating versions we should do.

We can instead convert it into the range `<=1.26.x`, which allows the
same or older minor versions, and continues to filter out newer ones,
which applies with the `semver-coerced` versioning scheme.

Co-authored-by: Claude Opus 5.5 <jamie.tanna+amp@mend.io>

* fixup! fix(manager/gomod): allow modules with an older `go` directive

---------

Co-authored-by: Claude Opus 5.5 <jamie.tanna+amp@mend.io>
44.179.2 		2026-10-23 10:14:22 +00:00
Jamie Tanna 5f1e110999 fix(config/validation): improve nested/array parent option names in messages (#47320) 
As noted in #47311, when an option is used somewhere it can't be, the
warning only names the type of object it was found in, i.e.

> "hostRules" can't be used in "packageRules", as it can only be used
> at the top level of a config.

This isn't ideal when there are many `packageRules` or `customManagers`,
so we should improve this to include an index (`packageRules[53]`), and
the `customType` (`custom.regex[25]`) or the nested parent
(`npm.minor`).

Co-authored-by: Claude Opus 5.5 <jamie.tanna+amp@mend.io>
 2026-10-23 10:13:56 +00:00
Jamie Tanna b295e59beb fix(config/validation): always allow options which can be used anywhere (#47319) 
As noted in #47311, the `description` option - which can be used
anywhere - was being flagged as invalid inside the `regex` custom
manager config, with the confusing message:

> "description" can't be used in "regex", as it can only be used
> anywhere in a config.

A separate change fixes that specific case, but more generally, if we
have an `any` scope, that should be allowed regardless, and we should
skip the check for where it's used.

We still expand the `any` scope to its parents, as that's needed to
generate the JSON Schema and the default config.

To test this in a case that provides us confidence - given we don't
currently have any options that are mislabeled, we need to mock the
import, which seems a bit hacky, but works.

Co-authored-by: Claude Opus 5.5 <jamie.tanna+amp@mend.io>
 2026-10-23 10:13:56 +00:00
Jamie Tanna 596ab9a167 fix(config/validation): allow top-level custom manager config (#47318) 
As noted in #47311, when we added validation for what parent an option
could be used with, if you configured a Manager-specific config for a
Custom Manager i.e.

```json
{
  "regex": {
    "ignorePaths": []
  }
}
```

this would now raises a warning that `ignorePaths` can't be used in
`regex`, even though at runtime, we would merge this config in. same as
any other manager.

We can add the missing Custom Manager names to the known managers
allowed at top-level.

Co-authored-by: Claude Opus 5.5 <jamie.tanna+amp@mend.io>
 2026-10-23 10:13:55 +00:00
renovate[bot] 1ae05924c2 chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.51.2 (main) (#47336) 
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.51.2

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.51.1 | 14.51.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-23 10:05:37 +00:00
Michael Kriese f14fee7462 fix(deps): update renovate-base-image to v13.141.2 (#47335) 
Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
 2026-10-23 09:59:58 +00:00
Jamie Tanna 4caf57e58d docs: introduce "buckets" and "audience" labels (#47020) 
As part of ongoing efforts to understand how the Renovate project's many
backlogs of work come in, as well as providing a better means to
prioritise incoming requests, we can introduce some new label types, and
some cross-cutting labels too.

Co-authored-by: Claude Fable 5.1 <jamie.tanna+claude-code@mend.io>
 2026-10-23 09:40:32 +00:00
renovate[bot] f8470061f1 fix(deps): update renovate-base-image to v13.141.1 (main) (#47332) 
fix(deps): update renovate-base-image to v13.141.1

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.141.0 | 13.141.1 |
| docker     | ghcr.io/renovatebot/base-image | 13.141.0 | 13.141.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.179.1 		2026-10-23 09:20:58 +00:00
renovate[bot] 0377d278ba chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.51.1 (main) (#47331) 
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.51.1

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.51.0 | 14.51.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-23 09:20:17 +00:00
renovate[bot] e7abaf401d feat(deps): update renovate-base-image to v13.141.0 (main) (#47330) 
feat(deps): update renovate-base-image to v13.141.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.140.2 | 13.141.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.140.2 | 13.141.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.179.0 		2026-10-23 08:20:44 +00:00
renovate[bot] 002bfb5ad6 fix(deps): update renovate-base-image to v13.140.2 (main) (#47327) 
fix(deps): update renovate-base-image to v13.140.2

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.140.1 | 13.140.2 |
| docker     | ghcr.io/renovatebot/base-image | 13.140.1 | 13.140.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.178.5 		2026-10-23 02:20:58 +00:00
renovate[bot] 261f59ec59 fix(deps): update renovate-base-image to v13.140.1 (main) (#47326) 
fix(deps): update renovate-base-image to v13.140.1

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.140.0 | 13.140.1 |
| docker     | ghcr.io/renovatebot/base-image | 13.140.0 | 13.140.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.178.4 		2026-10-23 01:21:40 +00:00
renovate[bot] 2fb5da1f01 build(deps): update dependency google-auth-library to v11.3.1 (main) (#47325) 
build(deps): update dependency google-auth-library to v11.3.1

| datasource | package             | from   | to     |
| ---------- | ------------------- | ------ | ------ |
| npm        | google-auth-library | 11.3.0 | 11.3.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.178.3 		2026-10-22 22:37:19 +00:00
renovate[bot] 2ffb4cb5e5 build(deps): update dependency @opentelemetry/resource-detector-github to v0.33.0 (main) (#47323) 
build(deps): update dependency @opentelemetry/resource-detector-github to v0.33.0

| datasource | package                                 | from   | to     |
| ---------- | --------------------------------------- | ------ | ------ |
| npm        | @opentelemetry/resource-detector-github | 0.32.0 | 0.33.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.178.2 		2026-10-22 22:20:28 +00:00
renovate[bot] 985282b0df fix(deps): update dependency github/gh-actions-lock to v0.3.0 (main) (#47315) 
fix(deps): update dependency github/gh-actions-lock to v0.3.0

| datasource      | package                | from   | to     |
| --------------- | ---------------------- | ------ | ------ |
| github-releases | github/gh-actions-lock | v0.2.0 | v0.3.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.178.1 		2026-10-22 16:57:06 +00:00
renovate[bot] dc9d8e58bc chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.51.0 (main) (#47312) 
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.51.0

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.50.0 | 14.51.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-22 16:35:57 +00:00
renovate[bot] e05ea0d04a chore(deps): update vitest monorepo to v4.1.12 (main) (#47310) 
chore(deps): update vitest monorepo to v4.1.12

| datasource | package             | from   | to     |
| ---------- | ------------------- | ------ | ------ |
| npm        | @vitest/coverage-v8 | 4.1.11 | 4.1.12 |
| npm        | vitest              | 4.1.11 | 4.1.12 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-22 16:24:27 +00:00
renovate[bot] e6bb569515 chore(deps): update dependency uv to v0.13.5 (main) (#47289) 
chore(deps): update dependency uv to v0.13.5

| datasource      | package      | from   | to     |
| --------------- | ------------ | ------ | ------ |
| github-releases | astral-sh/uv | 0.13.4 | 0.13.5 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-22 15:03:51 +00:00
Jamie Tanna 1deb80ecaa chore(util/exec): correct typo in constraints (#47304) 44.178.0 2026-10-22 14:45:43 +00:00
renovate[bot] 53c30e10f2 chore(deps): update dependency pnpm to v11.28.6 (main) (#47307) 
chore(deps): update dependency pnpm to v11.28.6

| datasource | package | from    | to      |
| ---------- | ------- | ------- | ------- |
| npm        | pnpm    | 11.28.5 | 11.28.6 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-22 14:29:56 +00:00
Michael Kriese ef96e4da50 feat: validate the containerbase image version on startup (#47248) 
* feat: validate the containerbase image version on startup

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

* fix: read the containerbase version check bypass from the process environment only

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

* refactor: use isContainerbase from the base image package in the version check

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

* fix: explain the containerbase image version check errors

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

* test: read the containerbase version file from memfs

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>

* fix: address review feedback for the containerbase version check

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>

---------

Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
 2026-10-22 14:02:27 +00:00
Sergei Zharinov f911008ea4 feat(presets): add PHP2Shell security updates (#47283) 
* feat(presets): add PHP2Shell security updates

Amp-Thread-ID: https://ampcode.com/threads/T-01a1601f-c5b2-745d-bc92-275ec139e3af

* Apply batched suggestions from code review

Co-authored-by: Sergei Zharinov <zharinov@users.noreply.github.com>

* fix(presets): preserve normal PHP update policies

Amp-Thread-ID: https://ampcode.com/threads/T-01a1601f-c5b2-745d-bc92-275ec139e3af

* refactor(presets): clarify PHP2Shell version checks

Amp-Thread-ID: https://ampcode.com/threads/T-01a1601f-c5b2-745d-bc92-275ec139e3af

* fix(presets): mark PHP2Shell fixes as security updates

Amp-Thread-ID: https://ampcode.com/threads/T-01a1601f-c5b2-745d-bc92-275ec139e3af

* fix(config): avoid adding absent vulnerability severity

Amp-Thread-ID: https://ampcode.com/threads/T-01a1601f-c5b2-745d-bc92-275ec139e3af
 2026-10-22 13:58:29 +00:00
renovate[bot] acb2504158 feat(deps): update renovate-base-image to v13.140.0 (main) (#47306) 
feat(deps): update renovate-base-image to v13.140.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.139.3 | 13.140.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.139.3 | 13.140.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.177.0 		2026-10-22 13:21:23 +00:00
renovate[bot] 338337230f chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.50.0 (main) (#47305) 
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.50.0

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.49.0 | 14.50.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-22 13:20:09 +00:00
renovate[bot] bd8f755bc1 fix(deps): update renovate-base-image to v13.139.3 (main) (#47291) 
fix(deps): update renovate-base-image to v13.139.3

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.139.1 | 13.139.3 |
| docker     | ghcr.io/renovatebot/base-image | 13.139.1 | 13.139.3 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.176.4 		2026-10-22 12:20:42 +00:00
renovate[bot] 1a80c538f8 build(deps): update dependency got to v16.1.0 (main) (#47214) 
* build(deps): update dependency got to v16.1.0

| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | got     | 16.0.0 | 16.1.0 |

* fix(util/http): adapt to got 16.1 types

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@mend.io>
Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
 2026-10-22 11:30:06 +00:00
renovate[bot] 7e6d97973d chore(deps): update astral-sh/setup-uv action to v10.3.2 (main) (#47299) 
chore(deps): update astral-sh/setup-uv action to v10.3.2

| datasource  | package            | from    | to      |
| ----------- | ------------------ | ------- | ------- |
| github-tags | astral-sh/setup-uv | v10.3.1 | v10.3.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-22 09:27:13 +00:00
renovate[bot] 4698530a0d chore(deps): update dependency astral-sh/uv to v0.13.5 (main) (#47288) 
chore(deps): update dependency astral-sh/uv to v0.13.5

| datasource      | package      | from   | to     |
| --------------- | ------------ | ------ | ------ |
| github-releases | astral-sh/uv | 0.13.4 | 0.13.5 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-22 09:04:42 +00:00
renovate[bot] f5adf17942 chore(deps): update astral-sh/setup-uv action to v10.3.1 (main) (#47281) 
chore(deps): update astral-sh/setup-uv action to v10.3.1

| datasource  | package            | from    | to      |
| ----------- | ------------------ | ------- | ------- |
| github-tags | astral-sh/setup-uv | v10.3.0 | v10.3.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-10-22 09:04:39 +00:00
Jamie Tanna c11b6146f6 fix(config/validation): allow patterns for allowedValues of patternMatch options (#47297) 
As noted in [0], the stricter validation we now perform with
`allowedValues` has provided a little too-strict validation with
`matchUpdateTypes`, which is matched as a regex or glob.

If we don't treat them as a pattern, we see i.e.:

    Invalid packageRules[2].matchUpdateTypes: matchUpdateTypes had
    invalid values `["!major"]` which are not part of the allowedValues

For options with `patternMatch` set, we can instead treat a value as
valid if it can match any of the `allowedValues`, once any leading `!`
has been removed. This still catches typos such as `!majr`.

Currently `matchUpdateTypes` is the only option with both `allowedValues`
and `patternMatch`, but this will apply to any future options.

Co-authored-by: Claude Sonnet 5.5 <jamie.tanna+claude-code@mend.io>

[0]: https://github.com/renovatebot/renovate/pull/39076#issuecomment-6334467901
44.176.3 		2026-10-22 08:49:24 +00:00
Jamie Tanna 64aa6497b9 fix(manager/github-actions): relock when regenerating actions.lock (#47294) 
As noted in #47292, since `gh actions-lock` v0.2.0 locked pins are
sticky: running `gh actions-lock` only resolves refs that the lockfile
doesn't record yet.

If a ref updates (i.e. `pnpm/setup@v3.0.0` to `pnpm/setup@v3.1.1`), then
`gh actions-lock` fails with a `Ref changed` error and `Unused lockfile
entry`, and writes nothing out, leaving the branch in an unusable state.

Per v0.2.0's release notes, we should use `--relock` to re-resolve every
ref and rebuilds the lockfile graph.

This updates floating tags i.e. `@v4` when occurring, because they are
technically a floating tag that has now updated.

Co-authored-by: Claude Sonnet 5.5 <jamie.tanna+claude-code@mend.io>
 2026-10-22 08:01:28 +00:00