renovate

mirror of https://github.com/renovatebot/renovate.git synced 2026-10-27 15:58:48 +00:00

Files

T

Jamie Tanna 223e6efd4e fix(config): enforce allowedHeaders when applying headers

As an additional defence-in-depth, we can make sure that when applying
the `headers` configuration (from repo config, or presets) we
re-validate it.

We allow any admin-supplied configuration regardless, and then any
user-supplied settings are re-filtered according to `allowedHeaders`.

Due to the existing way that header merging incorrectly merges the repo
(or preset) `headers` over the admin config, we don't currently handle
this explicitly, unlike `filterAllowedEnv`.

If a user-supplied setting is filtered, we log a WARN message to inform
the user - and the admin - that this is ignored.

At this point, we don't try and explain which preset(s) this may have
come from, only that there is an issue.

Co-authored-by: Claude Opus 4.8 <jamie.tanna+claude-code@mend.io>
Co-authored-by: Claude Opus 5 <jamie.tanna+claude-code@mend.io>

2026-09-03 08:01:41 +01:00

config

fix(config): enforce allowedHeaders when applying headers

2026-09-03 08:01:41 +01:00

constants

fix(platform/github): abort branch update when PR is in merge queue (#45252 )

2026-08-14 07:05:12 +00:00

data

feat(preset): group vite+ (#45631 )

2026-09-02 16:05:33 +00:00

instrumentation

feat(instrumentation): add support for protobuf + gRPC exporter (#45527 )