27885 Commits

Author SHA1 Message Date
renovate[bot] ecc102b96d build(deps): update dependency p-map to v7.1.1 (main) (#47141)
build(deps): update dependency p-map to v7.1.1

| datasource | package | from  | to    |
| ---------- | ------- | ----- | ----- |
| npm        | p-map   | 7.1.0 | 7.1.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.167.2
2026-10-18 16:20:05 +00:00
renovate[bot] 2450b18011 build(deps): update dependency p-queue to v9.3.4 (main) (#47138)
build(deps): update dependency p-queue to v9.3.4

| datasource | package | from  | to    |
| ---------- | ------- | ----- | ----- |
| npm        | p-queue | 9.3.3 | 9.3.4 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.167.1
2026-10-18 09:23:53 +00:00
Adam Setch 7f4fa601fc docs: abandoned prs (#44984)
* docs: abandoned PRs

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* docs: abandoned PRs

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* docs: abandoned PRs

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* docs: abandoned PRs

Signed-off-by: Adam Setch <adam.setch@outlook.com>

* Update docs/usage/key-concepts/pull-requests.md

Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>

* Update docs/usage/key-concepts/pull-requests.md

Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>

* docs: clarify abandoned PR wording

Signed-off-by: Adam Setch <adam.setch@outlook.com>

---------

Signed-off-by: Adam Setch <adam.setch@outlook.com>
Co-authored-by: RahulGautamSingh <rahultesnik@gmail.com>
2026-10-18 08:10:39 +00:00
github-actions[bot] d9a9d00238 feat(data): automatic update of static data (#47137)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
44.167.0
2026-10-18 06:42:20 +00:00
renovate[bot] 6b2de57494 chore(deps): update dependency tsdown to v0.23.1 (main) (#47136)
chore(deps): update dependency tsdown to v0.23.1

| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | tsdown  | 0.23.0 | 0.23.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-17 17:28:04 +00:00
renovate[bot] 73d45548d2 chore(deps): update dependency oxlint-tsgolint to v7.0.2004 (main) (#47135)
chore(deps): update dependency oxlint-tsgolint to v7.0.2004

| datasource | package         | from     | to       |
| ---------- | --------------- | -------- | -------- |
| npm        | oxlint-tsgolint | 7.0.2003 | 7.0.2004 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-17 14:34:35 +00:00
renovate[bot] 6d36b403af feat(deps): update renovate-base-image to v13.133.0 (main) (#47133)
feat(deps): update renovate-base-image to v13.133.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.132.2 | 13.133.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.132.2 | 13.133.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.166.0
2026-10-17 12:24:23 +00:00
renovate[bot] 37e9f33ea4 build(deps): update dependency prettier to v3.9.10 (main) (#47131)
build(deps): update dependency prettier to v3.9.10

| datasource | package  | from  | to     |
| ---------- | -------- | ----- | ------ |
| npm        | prettier | 3.9.9 | 3.9.10 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.165.3
2026-10-17 09:16:31 +00:00
Sebastian Poxhofer 0423ab2460 build: detect unused dependencies with knip (#47129)
Add knip, run it in lint and CI, and remove the dependencies it reports
as unused.
2026-10-17 09:10:20 +00:00
Sebastian Poxhofer 0070fc5e6a refactor: remove unused exports and types (#47130)
Found with knip.
2026-10-17 09:10:12 +00:00
renovate[bot] 6c163bc97a fix(deps): update renovate-base-image to v13.132.2 (main) (#47128)
fix(deps): update renovate-base-image to v13.132.2

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.132.1 | 13.132.2 |
| docker     | ghcr.io/renovatebot/base-image | 13.132.1 | 13.132.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.165.2
2026-10-17 07:24:47 +00:00
renovate[bot] 9edacefbfd build(deps): update dependency p-map to v7.1.0 (main) (#47121)
build(deps): update dependency p-map to v7.1.0

| datasource | package | from  | to    |
| ---------- | ------- | ----- | ----- |
| npm        | p-map   | 7.0.8 | 7.1.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.165.1
2026-10-16 20:39:32 +00:00
renovate[bot] 568be9f0f7 fix(deps): update renovate-base-image to v13.132.1 (main) (#47120)
fix(deps): update renovate-base-image to v13.132.1

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.132.0 | 13.132.1 |
| docker     | ghcr.io/renovatebot/base-image | 13.132.0 | 13.132.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-16 20:32:55 +00:00
renovate[bot] b3e4a53ee0 chore(deps): update dependency @types/node to v24.19.2 (main) (#47119)
chore(deps): update dependency @types/node to v24.19.2

| datasource | package     | from    | to      |
| ---------- | ----------- | ------- | ------- |
| npm        | @types/node | 24.19.1 | 24.19.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-16 19:41:35 +00:00
renovate[bot] 5d905699dc feat(deps): update renovate-base-image to v13.132.0 (main) (#47112)
feat(deps): update renovate-base-image to v13.132.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.131.3 | 13.132.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.131.3 | 13.132.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.165.0
2026-10-16 15:26:07 +00:00
renovate[bot] f7e658d4fd chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.42.0 (main) (#47111)
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.42.0

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.41.1 | 14.42.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-16 15:24:27 +00:00
renovate[bot] e21b57bbef chore(deps): update jdx/mise-action action to v5.2.0 (main) (#47106)
chore(deps): update jdx/mise-action action to v5.2.0

| datasource  | package         | from   | to     |
| ----------- | --------------- | ------ | ------ |
| github-tags | jdx/mise-action | v5.1.2 | v5.2.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-16 12:24:57 +00:00
renovate[bot] 1a5643c091 chore(deps): update dependency smol-toml@<=1.8.0 to v1.9.1 (main) (#47104)
chore(deps): update dependency smol-toml@<=1.8.0 to v1.9.1

| datasource | package   | from  | to    |
| ---------- | --------- | ----- | ----- |
| npm        | smol-toml | 1.9.0 | 1.9.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-16 11:25:03 +00:00
Sebastian Poxhofer b8f6dbb83e refactor(datasource): move the git host tags datasources onto GitHostTagsDigestDatasource (#46896)
* refactor(datasource): expose the source URL of the git host tags datasources

getSourceUrl() becomes a public instance method of every git host tags datasource. github-tags and gitlab-tags gain it next to a static getSourceUrl(), and the Gitea base derives it from its default registry.

* refactor(datasource/gitea-tags): extend GitHostTagsDigestDatasource

The Gitea and Forgejo tags and releases datasources keep their cache keys and only cache lookups against the public instance, through a new isCacheable() hook of the base class. The cache key of a releases lookup now ends in ':tags' like every other one, in its own namespace.

* refactor(datasource/gitlab-tags): extend GitHostTagsDigestDatasource

The tags, digests and tag commits are cached under the '<registryUrl>:<repo>:<type>' keys of the base class, so the first lookup after the upgrade misses the package cache.

* refactor(datasource/github-tags): extend GitHostTagsDigestDatasource

getReleases() and getDigest() skip the package cache of the base class, because the GraphQL fetcher already caches the tags with their commits and the HTTP client caches the latest commit in memory. The releases now carry their registryUrl like the other tags datasources.

* fix(datasource): only cache git host tags lookups known to be public

A tags lookup may read a private repository, so GitHostTagsDatasource no longer writes it to the package cache by default. Gitea and Forgejo keep caching their public instance; Bitbucket Cloud, Bitbucket Data Center, Azure DevOps and GitLab lookups are cached only with cachePrivatePackages. The Bitbucket main branch cache follows the same rule.

* test(datasource): cover the default registry of github-tags and gitlab-tags

* docs(datasource/github-tags): drop the cache note from getDigest

* refactor(datasource): keep caching git host tags lookups by default

* refactor(datasource): keep getSourceUrl of the git host tags datasources protected

* refactor(datasource): default getRegistryUrl and resolve the URL for isCacheable

* fix(datasource/gitlab-tags): normalise the registry URL like main

* refactor(datasource): cache tag digests only once

* refactor(datasource/github-tags): skip the package cache through a base hook

* refactor(datasource): document getSourceUrl once in the base class

* refactor(datasource/bitbucket-tags): inline the static registry URL helper

* refactor(datasource): rename usePackageCache to useGitHostTagCaching

* refactor(datasource): drop isCacheableFor and useGitHostTagCaching
2026-10-16 09:52:58 +00:00
Sebastian Poxhofer 7286ebea6b refactor(versioning/gomod): parse the commit of pseudo-versions (#47097) 2026-10-16 09:52:08 +00:00
renovate[bot] 530fb9cf6a fix(deps): update renovate-base-image to v13.131.3 (main) (#47100)
fix(deps): update renovate-base-image to v13.131.3

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.131.2 | 13.131.3 |
| docker     | ghcr.io/renovatebot/base-image | 13.131.2 | 13.131.3 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.164.10
2026-10-16 09:26:19 +00:00
renovate[bot] fce5e50489 chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.41.1 (main) (#47099)
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.41.1

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.41.0 | 14.41.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-16 09:25:17 +00:00
Michael Kriese b634cdc097 fix(platform/scm-manager): use a fallback username in token clone URLs (#47084)
* fix(platform/scm-manager): use a fallback username in token clone URLs

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

* fix(platform/scm-manager): note that the fallback username is not documented by SCM-Manager

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>

---------

Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
44.164.9
2026-10-16 08:30:36 +00:00
RahulGautamSingh df201a98ff fix(util/exec): pick tool releases compatible with their parent tool version (#47090)
* fix(util/exec): pick tool releases compatible with resolved node version

* refactor(util/exec): pass resolved runtimes as an object

* refactor(util/exec): match tools against their containerbase parent

* test(util/exec): run real constraints filtering for parent versions
44.164.8
2026-10-16 08:13:04 +00:00
renovate[bot] 501a2a0f42 chore(deps): update zizmor (main) (#47095)
chore(deps): update zizmor

| datasource  | package                   | from   | to     |
| ----------- | ------------------------- | ------ | ------ |
| docker      | ghcr.io/zizmorcore/zizmor | 1.31.0 | 1.31.1 |
| github-tags | zizmorcore/zizmor-action  | v0.7.0 | v0.7.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.164.7
2026-10-15 23:38:21 +00:00
renovate[bot] df917bbcd9 fix(deps): update renovate-base-image to v13.131.2 (main) (#47094)
fix(deps): update renovate-base-image to v13.131.2

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.131.1 | 13.131.2 |
| docker     | ghcr.io/renovatebot/base-image | 13.131.1 | 13.131.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-15 23:24:37 +00:00
renovate[bot] 47886b673a build(deps): update dependency cronstrue to v3.31.0 (main) (#47091)
build(deps): update dependency cronstrue to v3.31.0

| datasource | package   | from   | to     |
| ---------- | --------- | ------ | ------ |
| npm        | cronstrue | 3.30.0 | 3.31.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.164.6
2026-10-15 17:19:22 +00:00
Jamie Tanna 08cb221f4a fix(workers/repository): pass constraints correctly when applying postUpgradeTasks (#47069)
As noted in #47068 and #43633, our implementation in
e83acfb2ef missed the case when in
`executionMode=branch`, resulting in no `constraints` being passed, and
therefore using incorrect versions of tools.

Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io>
44.164.5
2026-10-15 14:25:59 +00:00
Michael Kriese 969b3cb162 fix(util/git): use non-empty passwords for token credentials on more platforms (#47085)
* fix(util/git): use non-empty passwords for token credentials on more platforms

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>

Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

* docs: update git token host rule notes

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>

Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

---------

Co-authored-by: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>
44.164.4
2026-10-15 13:42:10 +00:00
renovate[bot] a4628c6819 fix(deps): update renovate-base-image to v13.131.1 (main) (#47078)
fix(deps): update renovate-base-image to v13.131.1

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.131.0 | 13.131.1 |
| docker     | ghcr.io/renovatebot/base-image | 13.131.0 | 13.131.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.164.3
2026-10-15 13:18:07 +00:00
renovate[bot] b1a78f3c40 chore(deps): update dependency vite to v8.3.4 (main) (#47082)
chore(deps): update dependency vite to v8.3.4

| datasource | package | from  | to    |
| ---------- | ------- | ----- | ----- |
| npm        | vite    | 8.3.3 | 8.3.4 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-15 12:47:01 +00:00
renovate[bot] 9602e06986 chore(deps): update github/codeql-action action to v4.39.0 (main) (#47075)
chore(deps): update github/codeql-action action to v4.39.0

| datasource  | package              | from    | to      |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.38.3 | v4.39.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.164.2
2026-10-15 12:24:12 +00:00
renovate[bot] c49d1be4ca chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.41.0 (main) (#47074)
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.41.0

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.40.0 | 14.41.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-15 12:23:56 +00:00
Michael Kriese a9677c36f4 fix(util/git): use a non-empty password for token-only git credentials (#47077)
* fix(util/git): use a non-empty password for token-only git credentials

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>

Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

* fix(util/git): pick token credentials from the host platform for manager host rules

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>

Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

---------

Co-authored-by: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>
2026-10-15 12:06:10 +00:00
Michael Kriese 99132db459 fix(platform/gitea,forgejo): use a non-empty password in token clone URLs (#47076)
fix(platform/gitea): use a non-empty password in token clone URLs

Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
2026-10-15 12:03:01 +00:00
Michael Kriese 6cc889803a fix(platform/github): use x-access-token for personal access tokens in clone URLs (#47073)
* fix(platform/github): use `x-access-token` for personal access tokens in clone URLs

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

* fix(platform/github): drop unreachable password fallback in clone URLs

Co-Authored-By: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
Co-Authored-By: Claude Sonnet 5.5 <michael.kriese+claude-code@mend.io>

---------

Co-authored-by: Claude Opus 5.5 <michael.kriese+claude-code@mend.io>
44.164.1
2026-10-15 11:53:08 +00:00
Jamie Tanna 0876273a37 feat(datasource/go): look up modules from a go-import mod proxy (#47044)
* feat(datasource/go): look up modules from a `go-import` `mod` proxy

When interacting with a Go module, a host can advertise that a module is
served by a Go module proxy, instead of a Version Control System (VCS),
by noting the following in the `go-import` HTML meta tag:

    <meta name="go-import" content="bsr.example.com/gen/go mod https://bsr.example.com/gen/go">

Previously, we only handled the `git` protocol, which would lead to
users integrating with a (private) Buf Schema Registry (BSR) not being
able to download generated Go modules.

When interacting with public Go modules on `buf.build`, these are served
successfully through `proxy.golang.org`, but a private BSR can't be
routed through the public proxy, and therefore fail to be looked up.

We should instead follow how `go` does it[0] and add support for
directly calling a `mod` proxy.

We leverage `getDirectReleases()`s' checks to make sure we don't
try and follow this flow when we're on a "known" host, i.e. if we're
pulling a module called `github.com/...` or a vanity domain package name
that resolves to `gitlab.com`.

The `?go-get=1` will keep the in-memory HTTP cache's result.

[0]: https://go.dev/ref/mod#serving-from-proxy

Co-Authored-By: Claude Opus 5.5 <jamie.tanna+claude-code@mend.io>

* fixup! feat(datasource/go): look up modules from a `go-import` `mod` proxy

fixup! feat(datasource/go): look up modules from a `go-import` `mod` proxy

Co-Authored-By: Claude Sonnet 5.5 <jamie.tanna+claude-code@mend.io>

* fixup! feat(datasource/go): look up modules from a `go-import` `mod` proxy

* fixup! feat(datasource/go): look up modules from a `go-import` `mod` proxy

---------

Co-authored-by: Claude Opus 5.5 <jamie.tanna+claude-code@mend.io>
44.164.0
2026-10-15 11:31:04 +00:00
renovate[bot] c6c548ea92 feat(deps): update renovate-base-image to v13.131.0 (main) (#47070)
feat(deps): update renovate-base-image to v13.131.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.130.1 | 13.131.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.130.1 | 13.131.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.163.0
2026-10-15 10:01:53 +00:00
Jamie Tanna 1dce2f8ed0 feat(util/http): fall back to go host rules for go-proxy requests (#47043)
* fix(util/http): fall back to `go` host rules for `go-proxy` requests

Prior to 5665570f0b, all requests made by
the `go` Datasource - including those to a Go module proxy - used the
`go` host type.

When we refactored them into classes, this introduced the ability to
specify a `go-proxy` host type, which would only be used for direct
access to the Go module proxy.

As this isn't documented - and may change in the future - we can add a
fallback to the credentials for `hostType: go`, similar to how i.e.
`gitea-tags` and `gitea` do the same.

Co-Authored-By: Claude Opus 5.5 <jamie.tanna+claude-code@mend.io>

* fixup! fix(util/http): fall back to `go` host rules for `go-proxy` requests

Co-Authored-By: Claude Sonnet 5.5 <jamie.tanna+claude-code@mend.io>

* fixup! fix(util/http): fall back to `go` host rules for `go-proxy` requests

---------

Co-authored-by: Claude Opus 5.5 <jamie.tanna+claude-code@mend.io>
44.162.0
2026-10-15 09:48:27 +00:00
susanpyang ab622825b5 fix(manager/poetry): disable implicit PyPI when primary sources exist (#46977)
* poetry manager respects primary source

* Retain backward poetry version compatibility

* Add test that asserts PyPI is inserted before supplemental sources

* Centralize PoetrySources logic in schema
44.161.2
2026-10-15 06:35:07 +00:00
renovate[bot] 278f43fcec chore(deps): update zizmor (main) (#47065)
chore(deps): update zizmor

| datasource  | package                   | from   | to     |
| ----------- | ------------------------- | ------ | ------ |
| docker      | ghcr.io/zizmorcore/zizmor | 1.30.1 | 1.31.0 |
| github-tags | zizmorcore/zizmor-action  | v0.6.4 | v0.7.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-15 05:23:53 +00:00
renovate[bot] 2076755140 fix(deps): update renovate-base-image to v13.130.1 (main) (#47062)
fix(deps): update renovate-base-image to v13.130.1

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.130.0 | 13.130.1 |
| docker     | ghcr.io/renovatebot/base-image | 13.130.0 | 13.130.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.161.1
2026-10-15 02:25:27 +00:00
renovate[bot] 17eb8c9fe4 feat(deps): update renovate-base-image to v13.130.0 (main) (#47058)
feat(deps): update renovate-base-image to v13.130.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.129.0 | 13.130.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.129.0 | 13.130.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.161.0
2026-10-15 00:32:44 +00:00
renovate[bot] 1f158f6b01 chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.40.0 (main) (#47057)
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.40.0

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.39.0 | 14.40.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-14 23:34:55 +00:00
renovate[bot] e2c533675e build(deps): update dependency google-auth-library to v11.2.0 (main) (#47056)
build(deps): update dependency google-auth-library to v11.2.0

| datasource | package             | from   | to     |
| ---------- | ------------------- | ------ | ------ |
| npm        | google-auth-library | 11.1.0 | 11.2.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.160.1
2026-10-14 22:35:22 +00:00
renovate[bot] 69e9441554 chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.39.0 (main) (#47055)
chore(deps): update ghcr.io/containerbase/devcontainer docker tag to v14.39.0

| datasource | package                            | from    | to      |
| ---------- | ---------------------------------- | ------- | ------- |
| docker     | ghcr.io/containerbase/devcontainer | 14.38.0 | 14.39.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-14 21:25:14 +00:00
renovate[bot] 135919fed8 feat(deps): update renovate-base-image to v13.129.0 (main) (#47054)
feat(deps): update renovate-base-image to v13.129.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.128.0 | 13.129.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.128.0 | 13.129.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.160.0
2026-10-14 20:25:10 +00:00
renovate[bot] 7819f7288d feat(deps): update renovate-base-image to v13.128.0 (main) (#47053)
feat(deps): update renovate-base-image to v13.128.0

| datasource | package                        | from     | to       |
| ---------- | ------------------------------ | -------- | -------- |
| npm        | @renovatebot/base-image        | 13.126.0 | 13.128.0 |
| docker     | ghcr.io/renovatebot/base-image | 13.126.0 | 13.128.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.159.0
2026-10-14 19:05:56 +00:00
renovate[bot] 129f078880 fix(deps): update dependency github/gh-actions-lock to v0.2.0 (main) (#46976)
fix(deps): update dependency github/gh-actions-lock to v0.2.0

| datasource      | package                | from   | to     |
| --------------- | ---------------------- | ------ | ------ |
| github-releases | github/gh-actions-lock | v0.1.6 | v0.2.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
44.158.3
2026-10-14 18:50:09 +00:00
Jamie Tanna fc4719beca test(manager/github-actions): update pinned version of gh actions-lock via Renovate (#46987)
test(manager/github-actions): update pinned version of `gh-actions-lock` via Renovate

So we can get dependency updates for the extension, without needing
manual code changes.
44.158.2
2026-10-14 18:29:17 +00:00