070bc2baab
chore(deps): update jdx/mise-action action to v5.2.3 (main) ( #47362 )
...
chore(deps): update jdx/mise-action action to v5.2.3
| datasource | package | from | to |
| ----------- | --------------- | ------ | ------ |
| github-tags | jdx/mise-action | v5.2.2 | v5.2.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-24 12:19:46 +00:00
7e6d97973d
chore(deps): update astral-sh/setup-uv action to v10.3.2 (main) ( #47299 )
...
chore(deps): update astral-sh/setup-uv action to v10.3.2
| datasource | package | from | to |
| ----------- | ------------------ | ------- | ------- |
| github-tags | astral-sh/setup-uv | v10.3.1 | v10.3.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-22 09:27:13 +00:00
4698530a0d
chore(deps): update dependency astral-sh/uv to v0.13.5 (main) ( #47288 )
...
chore(deps): update dependency astral-sh/uv to v0.13.5
| datasource | package | from | to |
| --------------- | ------------ | ------ | ------ |
| github-releases | astral-sh/uv | 0.13.4 | 0.13.5 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-22 09:04:42 +00:00
f5adf17942
chore(deps): update astral-sh/setup-uv action to v10.3.1 (main) ( #47281 )
...
chore(deps): update astral-sh/setup-uv action to v10.3.1
| datasource | package | from | to |
| ----------- | ------------------ | ------- | ------- |
| github-tags | astral-sh/setup-uv | v10.3.0 | v10.3.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-22 09:04:39 +00:00
43af5fa756
chore(deps): update github/codeql-action action to v4.39.1 (main) ( #47273 )
...
chore(deps): update github/codeql-action action to v4.39.1
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.39.0 | v4.39.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-21 16:33:58 +00:00
719bd35cb7
chore(deps): update jdx/mise-action action to v5.2.2 (main) ( #47250 )
...
chore(deps): update jdx/mise-action action to v5.2.2
| datasource | package | from | to |
| ----------- | --------------- | ------ | ------ |
| github-tags | jdx/mise-action | v5.2.1 | v5.2.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-21 10:46:29 +00:00
320108ec1a
chore(deps): update dependency astral-sh/uv to v0.13.4 (main) ( #47225 )
...
chore(deps): update dependency astral-sh/uv to v0.13.4
| datasource | package | from | to |
| --------------- | ------------ | ------ | ------ |
| github-releases | astral-sh/uv | 0.13.3 | 0.13.4 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-20 16:20:02 +00:00
e2e9f7fd70
chore(deps): update dependency astral-sh/uv to v0.13.3 (main) ( #47191 )
...
chore(deps): update dependency astral-sh/uv to v0.13.3
| datasource | package | from | to |
| --------------- | ------------ | ------ | ------ |
| github-releases | astral-sh/uv | 0.13.1 | 0.13.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-20 08:17:59 +00:00
d78ef08178
chore(deps): update jdx/mise-action action to v5.2.1 (main) ( #47156 )
...
chore(deps): update jdx/mise-action action to v5.2.1
| datasource | package | from | to |
| ----------- | --------------- | ------ | ------ |
| github-tags | jdx/mise-action | v5.2.0 | v5.2.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-19 10:20:39 +00:00
9e354ff18b
ci: fail tests that read the repository config.js ( #46999 )
...
Write a canary config.js before the unit tests, and fail any test that
imports it, so tests can't depend on a config.js in the working
directory again.
Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
2026-10-19 08:18:23 +00:00
0423ab2460
build: detect unused dependencies with knip ( #47129 )
...
Add knip, run it in lint and CI, and remove the dependencies it reports
as unused.
2026-10-17 09:10:20 +00:00
e21b57bbef
chore(deps): update jdx/mise-action action to v5.2.0 (main) ( #47106 )
...
chore(deps): update jdx/mise-action action to v5.2.0
| datasource | package | from | to |
| ----------- | --------------- | ------ | ------ |
| github-tags | jdx/mise-action | v5.1.2 | v5.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-16 12:24:57 +00:00
501a2a0f42
chore(deps): update zizmor (main) ( #47095 )
...
chore(deps): update zizmor
| datasource | package | from | to |
| ----------- | ------------------------- | ------ | ------ |
| docker | ghcr.io/zizmorcore/zizmor | 1.31.0 | 1.31.1 |
| github-tags | zizmorcore/zizmor-action | v0.7.0 | v0.7.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-15 23:38:21 +00:00
9602e06986
chore(deps): update github/codeql-action action to v4.39.0 (main) ( #47075 )
...
chore(deps): update github/codeql-action action to v4.39.0
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.38.3 | v4.39.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-15 12:24:12 +00:00
278f43fcec
chore(deps): update zizmor (main) ( #47065 )
...
chore(deps): update zizmor
| datasource | package | from | to |
| ----------- | ------------------------- | ------ | ------ |
| docker | ghcr.io/zizmorcore/zizmor | 1.30.1 | 1.31.0 |
| github-tags | zizmorcore/zizmor-action | v0.6.4 | v0.7.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-15 05:23:53 +00:00
53b419bf72
chore(deps): update dependency astral-sh/uv to v0.13.1 (main) ( #47024 )
...
chore(deps): update dependency astral-sh/uv to v0.13.1
| datasource | package | from | to |
| --------------- | ------------ | ------ | ------ |
| github-releases | astral-sh/uv | 0.13.0 | 0.13.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-14 06:23:24 +00:00
fe98b6b0a5
chore(deps): update jdx/mise-action action to v5.1.2 (main) ( #46950 )
...
chore(deps): update jdx/mise-action action to v5.1.2
| datasource | package | from | to |
| ----------- | --------------- | ------ | ------ |
| github-tags | jdx/mise-action | v5.1.1 | v5.1.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-12 11:47:38 +00:00
fa413478bf
chore(deps): update ossf/scorecard-action action to v2.5.0 (main) ( #46933 )
...
chore(deps): update ossf/scorecard-action action to v2.5.0
| datasource | package | from | to |
| ----------- | --------------------- | ------ | ------ |
| github-tags | ossf/scorecard-action | v2.4.4 | v2.5.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-12 03:23:49 +00:00
f52a8ae5cf
chore(deps): update pnpm/setup action to v3.1.1 (main) ( #46906 )
...
chore(deps): update pnpm/setup action to v3.1.1
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v3.0.0 | v3.1.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 20:30:51 +00:00
0f667f98ee
chore(deps): update astral-sh/setup-uv action to v10.3.0 (main) ( #46893 )
...
chore(deps): update astral-sh/setup-uv action to v10.3.0
| datasource | package | from | to |
| ----------- | ------------------ | ------- | ------- |
| github-tags | astral-sh/setup-uv | v10.2.0 | v10.3.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 09:44:53 +00:00
43b9758d7b
chore(deps): update dependency astral-sh/uv to v0.13.0 (main) ( #46891 )
...
chore(deps): update dependency astral-sh/uv to v0.13.0
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------ |
| github-releases | astral-sh/uv | 0.12.24 | 0.13.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-09 20:32:40 +00:00
f829aa933e
chore(deps): update dependency astral-sh/uv to v0.12.24 (main) ( #46851 )
...
chore(deps): update dependency astral-sh/uv to v0.12.24
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.23 | 0.12.24 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 20:25:36 +00:00
a9097d3b79
chore(deps): update github/codeql-action action to v4.38.3 (main) ( #46846 )
...
chore(deps): update github/codeql-action action to v4.38.3
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.38.2 | v4.38.3 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 13:26:09 +00:00
250498bd30
chore(deps): update jlumbroso/free-disk-space action to v2 (main) ( #46787 )
...
* chore(deps): update jlumbroso/free-disk-space action to v2
| datasource | package | from | to |
| ----------- | ------------------------- | ------ | ------ |
| github-tags | jlumbroso/free-disk-space | v1.3.2 | v2.0.0 |
* chore(deps): migrate free-disk-space tool-cache input to preinstalled-runtimes
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: secustor <sebastian@poxhofer.at >
2026-10-08 07:51:53 +00:00
ef0c32bbed
chore(deps): update actions/download-artifact action to v8.0.2 (main) ( #46813 )
...
chore(deps): update actions/download-artifact action to v8.0.2
| datasource | package | from | to |
| ----------- | ------------------------- | ------ | ------ |
| github-tags | actions/download-artifact | v8.0.1 | v8.0.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-07 11:09:21 +00:00
f6a6e41816
chore(deps): update actions/upload-artifact action to v7.0.2 (main) ( #46814 )
...
chore(deps): update actions/upload-artifact action to v7.0.2
| datasource | package | from | to |
| ----------- | ----------------------- | ------ | ------ |
| github-tags | actions/upload-artifact | v7.0.1 | v7.0.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-07 11:07:18 +00:00
12848fdf9c
chore(deps): update jdx/mise-action action to v5 (main) ( #46786 )
...
chore(deps): update jdx/mise-action action to v5
| datasource | package | from | to |
| ----------- | --------------- | ------ | ------ |
| github-tags | jdx/mise-action | v4.3.0 | v5.1.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-06 08:39:23 +00:00
dcd8efae1a
chore(deps): update pnpm/setup action to v3 (main) ( #46788 )
...
chore(deps): update pnpm/setup action to v3
| datasource | package | from | to |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.1.0 | v3.0.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-06 08:34:31 +00:00
d8d4c4334b
chore(deps): update cbrgm/pr-size-labeler-action action to v1.4.0 (main) ( #46778 )
...
chore(deps): update cbrgm/pr-size-labeler-action action to v1.4.0
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------ |
| github-tags | cbrgm/pr-size-labeler-action | v1.3.14 | v1.4.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-05 23:19:29 +00:00
dcfd3225b2
chore(deps): update dependency astral-sh/uv to v0.12.23 (main) ( #46728 )
...
chore(deps): update dependency astral-sh/uv to v0.12.23
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.22 | 0.12.23 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-03 18:30:26 +00:00
b12f39eed0
fix(deps): downgrade @yarnpkg/core to 4.9.1 ( #46665 )
...
* fix(deps): downgrade @yarnpkg/core to 4.9.1
@yarnpkg/core@4.9.2 was published with a yarn-only `patch:` dependency on
`got`, so `npm install renovate` fails with EUNSUPPORTEDPROTOCOL since
44.131.1. pnpm tolerates the specifier as a dangling link, which is why the
Docker image and CI were unaffected.
Downgrade to 4.9.1, block 4.9.2 in renovate.json until
yarnpkg/berry#7282 lands, and add an npm dry-run install of the packed
tarball to the e2e job so this class of publish error fails CI.
See https://github.com/renovatebot/renovate/discussions/46656
* chore: drop @yarnpkg/core version hold, CI check covers it
2026-10-02 08:00:25 +00:00
f449f8718a
chore(deps): update dependency astral-sh/uv to v0.12.22 (main) ( #46654 )
...
chore(deps): update dependency astral-sh/uv to v0.12.22
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.21 | 0.12.22 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-02 01:23:53 +00:00
3500c115dc
chore(deps): update cbrgm/pr-size-labeler-action action to v1.3.14 (main) ( #46650 )
...
chore(deps): update cbrgm/pr-size-labeler-action action to v1.3.14
| datasource | package | from | to |
| ----------- | ---------------------------- | ------- | ------- |
| github-tags | cbrgm/pr-size-labeler-action | v1.3.13 | v1.3.14 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-01 19:24:37 +00:00
c16005686d
ci: label pr size for forks via workflow_run ( #46576 )
...
* ci: label pr size for forks via pull_request_target
Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
* ci: split pr size labeler into pull_request and workflow_run
Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
* ci: ignore zizmor dangerous-triggers for pr size labeler apply
Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
* ci: download the pr number artifact to the runner temp dir
Co-Authored-By: RahulGautamSingh <76607510+RahulGautamSingh@users.noreply.github.com >
Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
---------
Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
Co-authored-by: RahulGautamSingh <76607510+RahulGautamSingh@users.noreply.github.com >
2026-10-01 13:38:40 +00:00
7035e1195b
chore: wrap "why no reproduction" in a code block ( #46606 )
...
So it's a bit more readable, and more obvious compared to the other
text.
2026-10-01 13:21:05 +00:00
13aad8030a
ci: use github.token for the workflow token everywhere ( #46591 )
...
Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
2026-09-30 11:41:39 +00:00
30ae071215
chore(deps): update dependency astral-sh/uv to v0.12.21 (main) ( #46564 )
...
chore(deps): update dependency astral-sh/uv to v0.12.21
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.20 | 0.12.21 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-29 22:28:26 +00:00
06a427cd5d
chore: require reproduction or stated reason in PR template ( #46543 )
...
* chore: require reproduction or stated reason in PR template
* chore: scope reproduction requirement to PRs without an Issue
2026-09-29 10:39:43 +00:00
9cbc72643f
chore: capture cases of PR comments coming from an agent ( #46544 )
...
We're seeing some evidence that this may be happening, so we should make
this clearer that it's possible, but not recommended.
Then, if we are seeing this causing too much friction for the humans
maintaining Renovate, we can look at blocking this behaviour.
2026-09-29 10:38:09 +00:00
0f6884dd00
chore(deps): update dependency astral-sh/uv to v0.12.20 (main) ( #46535 )
...
chore(deps): update dependency astral-sh/uv to v0.12.20
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.19 | 0.12.20 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-29 00:28:33 +00:00
33ca3e5f07
ci: add pr size labeler ( #45811 )
...
* ci: add pr size labeler
* ci: use `ubuntu-latest` for docker access
* chore: do not label draft PR's
* ci: use colon as size label separator
Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
---------
Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io >
2026-09-28 10:18:40 +00:00
08dd2f65a9
chore(deps): update dependency astral-sh/uv to v0.12.19 (main) ( #46460 )
...
chore(deps): update dependency astral-sh/uv to v0.12.19
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.18 | 0.12.19 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-25 00:40:51 +00:00
6b7b4e4f9b
chore(deps): update github/codeql-action action to v4.38.2 (main) ( #46442 )
...
chore(deps): update github/codeql-action action to v4.38.2
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.38.1 | v4.38.2 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-24 13:00:18 +00:00
83edb5d2e5
ci(undesirable-code): print added lines on failure ( #46420 )
...
To make the check more actionable, we can show which line(s) have been
added and need fixing.
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io >
2026-09-24 09:37:39 +00:00
aa76f94ac9
ci(undesirable-code): don't unnecessarily flag when behind the base branch ( #46419 )
...
When a PR is out-of-date, as is common with a somewhat fast-updating
repository - especially as we recently removed the "Update Branch" UI
button - the way we calculate the diff of "undesirable" changes can be
stale, resulting in an unnecessary failure.
Instead of checking the `base.sha`, which includes changes from other
PRs merged into the base branch after this branch diverged, we can
instead use the three-dot `...` to use the merge-base.
Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io >
2026-09-24 09:37:38 +00:00
fd6f04874c
chore(deps): update dependency astral-sh/uv to v0.12.18 (main) ( #46404 )
...
chore(deps): update dependency astral-sh/uv to v0.12.18
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.17 | 0.12.18 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-23 00:32:30 +00:00
f2a8dc2f28
chore(deps): update astral-sh/setup-uv action to v10.2.0 (main) ( #46367 )
...
chore(deps): update astral-sh/setup-uv action to v10.2.0
| datasource | package | from | to |
| ----------- | ------------------ | ------- | ------- |
| github-tags | astral-sh/setup-uv | v10.1.0 | v10.2.0 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-21 16:10:56 +00:00
6e103100c7
chore(deps): update dependency astral-sh/uv to v0.12.17 (main) ( #46331 )
...
chore(deps): update dependency astral-sh/uv to v0.12.17
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.16 | 0.12.17 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-18 19:32:07 +00:00
73913df05e
chore(deps): update github/codeql-action action to v4.38.1 (main) ( #46327 )
...
chore(deps): update github/codeql-action action to v4.38.1
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.38.0 | v4.38.1 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-18 14:00:03 +00:00
b74f51096b
chore(deps): update dependency astral-sh/uv to v0.12.16 (main) ( #46312 )
...
chore(deps): update dependency astral-sh/uv to v0.12.16
| datasource | package | from | to |
| --------------- | ------------ | ------- | ------- |
| github-releases | astral-sh/uv | 0.12.15 | 0.12.16 |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-18 02:29:42 +00:00
renovate[bot]