ef9662a563
fix(datasource/dart): Use npm versioning to make rangeStrategy=bump work again ( #42115 )
2026-03-29 08:06:56 +00:00
f340b1a9e9
feat(datasource): add elm-package datasource ( #41000 )
...
* feat(datasource): add elm-package datasource
* refactor(elm): inline test fixtures
* fix(elm): correct import ordering in test file
* fix(elm): use zod/v3 import to match codebase conventions
* refactor(elm): rename types.ts to schema.ts
Follow project convention of using schema.ts for zod schema files.
* test(elm): add test for invalid JSON response
Use v8 ignore if directive and add test covering the null result
path when the API returns invalid JSON.
* refactor(elm): remove unreachable null check
* test(elm): add test for default registry URL fallback
* refactor(elm): guard against missing registryUrl instead of fallback
* fix(elm): handle ZodError gracefully instead of throwing
* feat(elm): add package cache for elm-package datasource
2026-03-28 13:23:00 +00:00
a2043d5b1d
test(rpm): use codeBlock in spec fixtures ( #41899 )
2026-03-13 13:15:30 +00:00
74233b1696
feat(git-refs): use dereferenced commit hash for annotated tags ( #41560 )
...
* feat(git-refs): use dereferenced commit hash for annotated tags
When git ls-remote lists annotated tags, it returns two entries:
1. The tag object hash: refs/tags/v1.0.0 -> abc123
2. The dereferenced commit hash: refs/tags/v1.0.0^{} -> def456
Previously, Renovate used the tag object hash (abc123). However, `git submodule status` returns the actual commit hash (def456). This mismatch caused false-positive dependency updates that resulted in empty commits, since the tag object and commit hash differ even when pointing to the same version.
This feature:
- Parses both entries from git ls-remote into allRefs
- Builds a lookup map of tag names to their dereferenced commit hashes
- For annotated tags, replaces the tag object hash with the commit hash
- Lightweight tags are unaffected (they already return the commit hash)
This ensures Renovate's detected digest matches what git submodule operations actually use, preventing unnecessary update PRs.
* Apply suggestions from code review
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
* fix typo in dereferencedTags variable name
---------
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
2026-03-12 20:10:11 +00:00
9175699b66
fix(datasource/rpm): accept repomd.xml without xml declaration ( #41850 )
2026-03-12 15:14:35 +00:00
a065a3dd41
fix(datasource/docker): use custom www-authenticate parser ( #41813 )
...
* fix(datasource/docker): use custom `www-authenticate` parser
* chore: drop license comments
* test: extend test
* fix: wrong regex
* test: fix tests
* Update lib/util/http/www-authenticate.ts
Co-authored-by: Jamie Tanna <jamie.tanna@mend.io >
* test: add more tests
---------
Co-authored-by: Jamie Tanna <jamie.tanna@mend.io >
2026-03-11 16:48:15 +00:00
b35d7c9cad
chore(tools): use async execa ( #41712 )
...
* chore(tools): use async execa
* chore: fix lint errors
2026-03-10 16:55:44 +00:00
41bfb8678e
refactor(lint): use oxlint for type-aware rules ( #41739 )
...
* feat: enable oxlint type-aware linting
Move type-aware typescript-eslint rules from ESLint to oxlint,
leveraging oxlint-tsgolint for type information. This removes
the need for ESLint's projectService and parserOptions.
- Add `options.typeAware: true` to .oxlintrc.json with all
type-aware rules (recommendedTypeChecked + stylisticTypeChecked)
- Switch ESLint to non-type-aware configs (recommended, stylistic)
- Remove projectService/parserOptions from ESLint config
- Drop @typescript-eslint/naming-convention (no oxlint equivalent)
- Update oxlint/eslint-plugin-oxlint to 1.51.0
- Add oxlint-tsgolint dependency
- Convert eslint-disable comments to oxlint-disable for type-aware rules
- Fix prefer-optional-chain violations newly caught by oxlint
* fix: revert unnecessary code changes, suppress with oxlint-disable instead
* fix: suppress remaining prefer-optional-chain violations
* fix: suppress last prefer-optional-chain violation
* fix: remove redundant --type-aware CLI flag, use config instead
2026-03-09 12:51:12 +00:00
753fc46859
fix(crate): dont log warning if metadata fetch fails ( #41601 )
...
* fix(crate): dont log warning if metadata fetch fails
* use trace if just info
2026-03-07 20:57:30 +00:00
5ab5dfd768
fix(crate): respect config.json in indices ( #41536 )
...
* fix(crate): respect config.json in indices
* improve coverage
* improve coverage
* Apply suggestions from code review
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
* fixup
* fix import sorting
* further simplify, by merging clonepath/sparse variable
* use registryconfigschema in tests
---------
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
2026-03-01 14:16:54 +00:00
c2aa761c1e
chore(deps): update linters (main) ( #41417 )
...
* chore(deps): update linters
| datasource | package | from | to |
| ---------- | -------------------- | ------ | ------ |
| npm | @eslint/js | 9.39.2 | 9.39.3 |
| npm | eslint | 9.39.2 | 9.39.3 |
| npm | eslint-plugin-oxlint | 1.46.0 | 1.49.0 |
| npm | oxlint | 1.47.0 | 1.49.0 |
| npm | typescript-eslint | 8.55.0 | 8.56.0 |
* chore(deps): update linters
| datasource | package | from | to |
| ---------- | -------------------- | ------ | ------ |
| npm | @eslint/js | 9.39.2 | 9.39.3 |
| npm | eslint | 9.39.2 | 9.39.3 |
| npm | eslint-plugin-oxlint | 1.46.0 | 1.49.0 |
| npm | oxlint | 1.47.0 | 1.49.0 |
| npm | typescript-eslint | 8.55.0 | 8.56.0 |
* Radix rule has been deprecated
* fixup! Radix rule has been deprecated
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: secustor <sebastian@poxhofer.at >
2026-02-28 11:23:25 +00:00
44a0755b3b
feat(datasource/hex): Add V2 registry protocol support ( #40983 )
...
* feat: Add Hex V2 signature verification and public key caching
* feat: Improve Hex V2 coverage tests
* fix: Address PR review comments
* fix: Replace protobuf enum with const object for Node.js strip-only TS mode
2026-02-27 15:50:24 +00:00
11f39d5106
fix(datasource/python-version): gracefully handle python.org 429 rate limiting ( #41180 )
...
fix(datasource/python-version): gracefully handles python.org 429 rate limiting
When python.org returns HTTP 429, falls back to containerbase prebuild
releases instead of aborting the entire repository with ExternalHostError.
2026-02-20 16:54:35 +00:00
e752a3db29
build(deps): update dependency got to v14 (main) ( #41302 )
...
* build(deps): update dependency got to v14
| datasource | package | from | to |
| ---------- | ------- | ------ | ------ |
| npm | got | 12.6.1 | 14.6.6 |
* test: fix tests
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2026-02-19 17:50:48 +00:00
f05c3eed57
fix(datasource/docker): don't pass hostrule to http options ( #41317 )
2026-02-19 09:52:28 +00:00
4a2578d18d
build(deps): update dependency zod to v4 (main) ( #41225 )
...
* build(deps): update dependency zod to v4
| datasource | package | from | to |
| ---------- | ------- | ------- | ----- |
| npm | zod | 3.25.76 | 4.3.6 |
* fix: zod migration
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2026-02-18 07:37:50 +00:00
628f9a2835
fix(mutex): support per-call-site acquire timeouts ( #41259 )
...
fix(mutex): Support per-call-site acquire timeouts
Closes #41210
2026-02-17 20:27:11 +00:00
dc4d997aa2
docs: clarify pypi simple registry release timestamp behaviour ( #40916 )
2026-02-11 21:31:20 +00:00
9d857c1f68
refactor(lint): Organize imports with biome ( #40966 )
2026-02-06 13:40:01 +00:00
4a527aeae8
docs(terraform): clarify release timestamp and limitation ( #40923 )
...
clarify release timestamp and limitation in documentation for terraform provider
2026-02-04 14:34:12 +00:00
c246f814d5
feat: Add github-digest datasource ( #40226 )
...
* feat(datasource/github-digest): Add datasource for non-semver refs
* fix: Use `Promise.allSettled` to avoid dangling promises
2026-02-02 10:58:43 +00:00
2b0e80b884
feat!: Switch to ESM modules ( #40756 )
2026-01-29 14:21:41 +00:00
17a1bbad96
refactor: use named simpleGit imports ( #40759 )
2026-01-28 16:55:14 +00:00
c07814ca4d
refactor: Remove decorators for ESM compatibility ( #40736 )
...
* refactor: Migrate to decorator alternatives
* refactor: Remove decorators
* Fixes
* build: Remove decorator support from build pipeline
* fix: Remove extra brace in cdnjs getDigest cache key
2026-01-28 13:22:53 +00:00
1db6be0d9e
fix(datasource/docker): treat empty string as no architecture ( #40715 )
...
fix: treat empty string as no architecture in docker images
2026-01-27 22:01:24 +00:00
c5b0a74f82
refactor: Remove constructor parameter properties ( #40712 )
2026-01-27 11:16:26 +00:00
930cf6633c
refactor: Rewrite imports with .ts extensions ( #40700 )
...
fix: Additional vi.mock path corrections and prettier formatting
2026-01-26 22:48:17 +00:00
18bd32166b
chore: replace URL.resolve ( #40702 )
...
replace URL.resolve
2026-01-26 18:59:54 +00:00
e5c2caac65
fix(sbt): consider html hrefs in absolute and root-relative format ( #39464 )
...
* fix(sbt): consider html hrefs in absolute and root-relative format
* Use .at(-1) instead of .reverse()[0]
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
* Use non-null assertion
---------
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
2026-01-26 17:57:35 +00:00
5c796e1a47
refactor: replace nanoid with crypto.randomUUID ( #40695 )
...
refactor: replace nanoid with `crypto.randomUUID`
2026-01-26 16:40:12 +00:00
b40c8f3556
fix(datasource/cpan): Handle modules with missing version ( #40430 )
...
* Update cpan datasource to handle modules with missing version
* Get rid of empty-version.json fixture
* Add cpan schema tests
2026-01-23 13:16:15 +00:00
69d80fd144
feat(datasource/crate): use pubtime when available ( #40621 )
...
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2026-01-23 13:04:43 +00:00
acacad57c6
chore(deps): update linters (main) ( #40277 )
...
* chore(deps): update linters
| datasource | package | from | to |
| ---------- | -------------------- | ------ | ------ |
| npm | eslint-plugin-oxlint | 1.36.0 | 1.38.0 |
| npm | typescript-eslint | 8.50.1 | 8.52.0 |
* chore: enable oxlint gha format
* chore: fix lint
* chore: fix lint
* chore: fix lint
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2026-01-14 15:32:48 +00:00
5994b38695
fix(datasource): Update MetaCPAN query for new Elasticsearch version ( #40335 )
...
Update MetaCPAN query for new Elasticsearch version
2026-01-09 09:33:01 +00:00
151d78f37f
feat(typst): Update datasource to use official registry API ( #38982 )
...
* feat(typst): Update datasource to use official registry API
* Fix
* Update self-hosted-configuration.md
* Update rate-limits.ts
2025-12-30 10:25:03 +00:00
844e299638
fix(galaxy-collection): make sure that releaseTimestamp is returned correctly ( #39899 )
...
As noted in #35936 , we've been collecting this data, but hadn't been
correctly returning it when enriching the release.
Although we could also collect this data from the `rawDetailedVersion`,
we can start by wiring in the `basicRelease`'s `releaseTimestamp`, if
present.
2025-12-17 10:52:58 +00:00
1e3d87393e
fix(maven): preserve the original version when versionCompatibility is used for later lookup ( #38906 )
...
Without this, the Maven data source throws out all candidates in postprocessRelease as it cannot find the
releases by version which is not the original version anymore unless als extractVersion was used
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2025-12-15 09:05:33 +00:00
4429e8f754
docs(mra): clarify support for the Crate datasource ( #39592 )
2025-11-28 09:13:27 +00:00
5eb7cf082b
fix(bitbucket-server): fix schema to work with tags on bitbucket server 9.x ( #39574 )
2025-11-27 06:10:05 +00:00
050ac8d23b
chore: better code coverage ( #39518 )
2025-11-25 15:01:54 +00:00
f609b6f472
chore(deps): update vitest monorepo to v4 (main) (major) ( #39505 )
...
* chore(deps): update vitest monorepo to v4
| datasource | package | from | to |
| ---------- | ------------------- | ----- | ------ |
| npm | @vitest/coverage-v8 | 3.2.4 | 4.0.10 |
| npm | vitest | 3.2.4 | 4.0.10 |
* chore: migration
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2025-11-24 15:30:57 +00:00
195e3084e5
feat(datasource): Add Nextcloud ( #37292 )
...
* feat(datasource): Add Nextcloud
* fix tests
* fix errors
* Update lib/modules/datasource/nextcloud/readme.md
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
* Update lib/modules/datasource/nextcloud/index.ts
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
* Update lib/modules/datasource/nextcloud/index.ts
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
* Update lib/modules/datasource/nextcloud/index.ts
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
* chore: move member
* move changelogUrl assignment
* wip
* wip
* wip
* wip
* Update schema.ts
* Update lib/modules/datasource/nextcloud/index.ts
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
* chore: change homepage to sourceUrl
* chore: change backticks to single quotes
---------
Co-authored-by: Michael Kriese <michael.kriese@gmx.de >
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
2025-11-19 10:26:54 +00:00
6900f21f37
feat(datasource): azure tags datasource ( #38027 )
...
* feat: Add support for Azure Tags by using Node Azure API
* Fix imports
* Fix test
* Add some tests
* add tests for azure-tags
* add test
* refactored azure tags datasource
* fix tests
* Update lib/modules/datasource/azure-tags/index.spec.ts
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
---------
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com >
2025-11-19 07:53:21 +00:00
db566d715c
refactor(datasource/crate): Use mutex lock instead of Promise-based sync ( #39389 )
...
* refactor(datasource/crate): Use mutex lock instead of Promise-based sync
* fix: sort imports
* Remove unused import of acquireLock
2025-11-18 22:28:51 +00:00
d09a6ae9d8
feat(datasource/jsr): Support releaseTimestamp ( #39321 )
...
* work
* adding `releaseTimestampNote`
* use const `MINIMUM_RELEASE_TIMESTAMP`
* comment for test
2025-11-18 12:15:45 +00:00
558bdc159d
feat: Cleanup mutexes before each run ( #38987 )
...
* feat: Cleanup mutexes before each run
* Update setup.ts
* Update mutex.spec.ts
* Update setup.ts
* Unmock mutex in deb datasource spec to prevent race condition
* Update index.spec.ts
2025-11-15 21:24:43 +00:00
7a01aa477a
fix(datasource/pypi): sponsors URL vs sponsors in project name mixup ( #39225 )
...
Make GitHub project URL sniffing to check user/organization part for
`sponsors` only. There are a few PyPI projects for which the previous
implementation currently produces false positives.
https://pypi.org/search/?q=sponsors
2025-11-14 15:49:14 +00:00
76f911041a
refactor: use named exports ( #39196 )
...
* use named exports
* fix test
* add missing imnport
* fix prettier
2025-11-10 12:00:35 +00:00
5d36cf1d14
refactor(deb): Split DebDatasource in smaller pieces and prepare for mutli-compression feature ( #38254 )
...
refactor(deb): Split DebDatasource in smaller peaces and prepare for multi-compression feature
2025-11-07 17:48:52 +00:00
4e4a0f99b0
fix!: remove the "Bot" from user-agent header ( #37535 )
2025-11-06 08:07:40 +00:00
Kate