525f80d6df
fix(package-rules): respect each dep update's fetchChangeLogs value ( #42671 )
...
* fix(package-rules): respect each dep update's fetchChangeLogs value
Ensures that changelog fetching respects each dep update's specific `fetchChangeLogs` value.
Given the following renovate configuration: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/blob/fb9e070d0f9a4d6fc742c4a22edee2c9b055fece/.github/renovate.json5#L42-L61
My expectation is that Renovate would never fetch changelogs for `lodash`. However, when grouped
together with `chalk` and `tar` under `group of unrelated packages`, we find that
renovate fetches changelogs all packages, including `lodash`.
Before this change (`lodash` logs fetched):
- Run: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/actions/runs/24480887343/job/71544876893
- (wrong) lodash, tar, and chalk all have changelogs: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/pull/9
After this change, the PR created by renovate only contains changelogs for `chalk` and `tar`, but not `lodash`:
- Run: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/actions/runs/24481738609/job/71547632550
- (expected) lodash does not have changelogs, but tar and chalk have changelogs: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/pull/10
----
We can further explore the effectiveness of the change with a more elaborate configuration, where the top-level has `fetchChangeLogs: off`: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/blob/0ea69c18b9171e38c56440c762faa68109d3d0d5/.github/renovate.json5#L41-L95
Before the change:
- Run: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/actions/runs/24482213234/job/71549162174
- (wrong) lodash, tar, and chalk all have changelogs: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/pull/15
- (expected) typescript (inherited `off`) does not have changelogs: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/pull/17
- (expected) grunt (overridden `pr`) has changelogs: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/pull/13
After the change::
- Run: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/actions/runs/24482561172/job/71550255278
- (expected) lodash does not have changelogs, but tar and chalk have changelogs: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/pull/22
- (expected) typescript (inherited `off`) does not have changelogs: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/pull/24
- (expected) grunt (overridden `pr`) has changelogs: https://github.com/justfalter/renovate-test-packagerules-fetchchangelogs/pull/20
Portions of this PR previously appeared in #42368
* pre feedback: just use fetchChangeLogs from upgrade
* revert documentation.spec.ts changes
They've already been integrated with #42846
2026-04-27 15:28:15 +00:00
4faa847896
chore(types): add skipStage=enrichment ( #42585 )
...
As part of future changes, it will be useful to make it clear that a
dependency was skipped during an Enrichment module.
2026-04-14 10:04:40 +00:00
a945d8bc5a
chore(workers/repository): split malicious dependency checks ( #42508 )
...
* chore(workers/repository): report malicious packages before `packageFiles with updates`
As part of future changes, we may modify the `skipReason`s before the
update phase, which means that we should ensure these are correct before
logging out `packageFiles with updates`.
* chore(workers/repository): split malicious dependency checks
We will likely run into two specific cases of malicious dependencies -
you're currently using one, or you're receiving an update to one.
We should make these separate, explicit, cases so users are aware what
`malicious` actually means, and what the path forward is.
2026-04-09 19:06:50 +00:00
61463553bd
chore(types): add a skipReason: malicious ( #42500 )
...
As part of future work, we'll need this to mark explicitly malicious
packages as skipped, with their own distinct reason.
2026-04-09 10:29:44 +00:00
3a05ade06b
refactor(github/vulnerability): use Zod-inferred types as single source of truth ( #42494 )
...
* refactor(github/vulnerability): use Zod-inferred types as single source of truth
* revert to false, since undefined means something else on GHES
2026-04-09 08:36:40 +00:00
eda8c595bd
chore(types): export additional types for downstream log consumers ( #40930 )
...
* feat(types): export additional types for downstream log consumers
Export types commonly needed by downstream consumers parsing Renovate logs:
- BunyanRecord: Log entry structure
- RepositoryResult, ProcessStatus, ProcessResult: Repository processing outcomes
- ValidationMessage, RenovateSplit: Validation/error types
- BranchResult, PrBlockedBy: Branch processing outcomes
- UpdateType, MergeStrategy: Update and merge configuration
- MergeConfidence: Merge confidence levels
- BranchUpgradeCache, BranchCache: Branch info from logs
These types enable tools like log ingesters to parse Renovate output
without redefining types locally.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
* style(types): consolidate export comments into single section header
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* chore: remove unnecessary types
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
Co-authored-by: Jamie Tanna <jamie.tanna@mend.io >
2026-03-31 17:36:30 +00:00
3eb6f5a31b
feat(vulnerabilities): add support for github-actions vulnerability alerts ( #40175 )
...
* feat(vulnerabilities): add support for github-actions vulnerability alerts
* fix failed merge from main
* now for real
* review comments
* remove no longer needed assertion
2026-02-26 08:11:14 +00:00
9d857c1f68
refactor(lint): Organize imports with biome ( #40966 )
2026-02-06 13:40:01 +00:00
930cf6633c
refactor: Rewrite imports with .ts extensions ( #40700 )
...
fix: Additional vi.mock path corrections and prettier formatting
2026-01-26 22:48:17 +00:00
8651fe1a1e
refactor: fix preset api types ( #37137 )
2025-07-24 09:15:36 +00:00
55845508b6
chore(deps): update eslint monorepo to v9 (major) ( #33573 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2025-02-20 11:31:13 +00:00
07c005869c
feat: extend skipStage to extract, lookup ( #33108 )
2024-12-14 10:32:51 +00:00
b775d83830
fix(vulnerability-alerts): fix handling of first_patched_version: null ( #31447 )
2024-09-17 16:34:15 +00:00
09824b1bef
build!: require node v20 ( #30291 )
2024-07-25 15:28:16 +02:00
2eb7c76027
feat(http)!: remove dnsCache option ( #29449 )
...
BREAKING CHANGE: dnsCache is now removed
2024-07-25 15:28:16 +02:00
5ed97aa738
refactor(vulnerability-alerts): move to REST API ( #27378 )
2024-07-25 15:28:16 +02:00
b6b85eb69e
feat(package-rules): set skipStage ( #30264 )
2024-07-21 10:29:13 +00:00
bf22e13e90
feat(packageRules): set skipReason=package-rules ( #28952 )
2024-05-09 10:04:58 +00:00
5c0628bf3b
feat(host-rules): Support readOnly request matching ( #28562 )
...
Co-authored-by: Rhys Arkins <rhys@arkins.net >
2024-04-23 03:26:20 +00:00
a39ca89101
refactor: Host rule types ( #28454 )
2024-04-17 05:00:00 +00:00
db9d485227
feat(config): implement custom header field inside HostRules ( #26225 )
2024-01-17 09:22:19 +00:00
3aaa3e57e2
feat(http): Support for Retry-After header ( #25859 )
...
Co-authored-by: Rhys Arkins <rhys@arkins.net >
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com >
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
Co-authored-by: Sebastian Poxhofer <secustor@users.noreply.github.com >
2023-12-14 07:10:50 +00:00
8c78b5a733
fix(keep-alive): use camlcase for option name ( #26018 )
2023-11-28 22:31:18 +00:00
667f137081
feat: add options to host rules to enable mTLS calls to host ( #24155 )
...
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com >
Co-authored-by: Rhys Arkins <rhys@arkins.net >
2023-09-06 12:02:34 +00:00
fe739befbf
chore(deps): update linters to v6 (major) ( #23325 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2023-08-02 15:07:49 +00:00
8f793259f9
refactor: replace our custom @breejs/later types with upstream types ( #22665 )
2023-06-12 23:09:00 +00:00
0417c111ac
refactor: Merged multiple skipReasons into unspecified-version. ( #22409 )
2023-05-25 05:48:11 +00:00
62b57aa27c
feat: disable setting COMPOSER_AUTH for gitlab ( #20634 )
...
Co-authored-by: Rhys Arkins <rhys@arkins.net >
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2023-04-17 06:16:02 +00:00
34b5401812
feat(manager/bitbucket-pipelines): support docker image object ( #21102 )
2023-03-29 10:41:05 +00:00
27aae2868e
fix(presets/gitlab): directly request default branch ( #20319 )
2023-02-10 09:46:10 +00:00
eecccfa485
feat: handle workspace.dependencies in cargo ( #18831 )
2022-12-09 06:11:32 +01:00
8e4b5231f8
refactor: convert enums to unions ( #18900 )
2022-11-20 07:34:23 +00:00
af3b2038f8
refactor: replace enums with union/object ( #18903 )
2022-11-14 20:55:38 +02:00
b2d18d1110
feat(http): maxRequestsPerSecond ( #18325 )
2022-10-25 11:03:19 +00:00
c44dbae214
chore(types): fix typos in comments ( #18065 )
2022-10-01 14:01:11 +02:00
9bc8b05af3
feat: http keepalives ( #17582 )
2022-09-02 12:32:34 +02:00
13574419ba
feat(http): support dns cache ( #17533 )
2022-08-31 11:49:54 +00:00
f8c789efb4
feat(github): Log warning when GitHub token is not configured ( #16566 )
...
* feat(github): Log warning when GitHub token is not configured
* Check `sourceUrl`
* Add tests
* Fix test
* Fix
* Remove `sourceUrl` check
* Test nullable input
* Fix nulls
2022-08-01 06:16:09 +00:00
ed73d380e8
refactor: improve commit message functionality ( #13328 )
...
* refactor: improve commit message functionality
* refactor: fix test coverage
* refactor: fix by comments
* refactor: fix build
* refactor: fix linting
* refactor: fix export type
* refactor: js private fields
* refactor: static private fields
* fix: lint
* refactor: fix tsconfig
* refactor: implement method normalizeInput
* refactor: fix by comments
* Update lib/workers/repository/model/commit-message.ts
* refactor: fix by comments
* refactor: use private typescript fields again
* refactor: fix by comments
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2022-05-02 01:42:33 +00:00
fb9303c190
feat(core:changelogs): better platform detection ( #14989 )
...
Co-authored-by: Rhys Arkins <rhys@arkins.net >
2022-04-06 14:56:40 +00:00
27bfb75137
fix(manager/maven): Apply Maven properties recursively ( #14566 )
2022-03-12 15:16:07 +00:00
143c9a6751
refactor: rename lookupName -> packageName ( #14494 )
...
Renames `lookupName` to be `packageName`.
BREAKING CHANGE: Use `packageName` instead of `lookupName` if interacting with Renovate datasources directly.
2022-03-04 09:04:02 +01:00
f83c82b94f
fix: added filtering for empty depName ( #14037 )
2022-02-13 09:59:03 +01:00
5723be1ac5
refactor: add strict null checks ( #14169 )
2022-02-11 11:02:30 +01:00
3b7e9a17cb
refactor: set importsNotUsedAsValues to error ( #14052 )
2022-02-07 06:37:17 +00:00
368903ab81
feat: support new rangeStrategy=in-range-only ( #13257 )
...
Co-authored-by: HonkingGoose <34918129+HonkingGoose@users.noreply.github.com >
Co-authored-by: Rhys Arkins <rhys@arkins.net >
2022-01-30 03:46:22 +00:00
8a5be3440f
refactor: Use eslint rule to prohibit enums ( #13703 )
...
Co-authored-by: Rhys Arkins <rhys@arkins.net >
2022-01-21 15:33:23 +01:00
4f18d76320
refactor: Use union type for SkipReason ( #13702 )
...
* refactor: Use union type for SkipReason
* Fix snapshot
* Fix snapshot
2022-01-21 08:59:36 +01:00
5e0e9ac1c2
refactor: prepare esm helper ( #13250 )
...
* refactor: prepare esm helper
* chore: fix type name
2021-12-22 17:01:28 +01:00
c8f88cc421
chore: delete obsolete file ( #13242 )
2021-12-22 15:21:03 +01:00
Mike Ryan