Kim Gustyr eee64df614 fix(workers/repository/extract): pass vulnerability alert state to managers (#46385) ...

* fix(extract): pass vulnerability alert state to managers

Managers cannot tell whether vulnerability remediation is active, so they
cannot decide to extract dependencies which are only useful to a security
update, e.g. transitive dependencies in a lock file.

Add `hasVulnerabilityAlertsRules` to `ExtractConfig`, derived from any
vulnerability source: `osvVulnerabilityAlerts`, or platform alerts, which
are turned into `isVulnerabilityAlert` package rules during init.

The flag is part of the extraction fingerprint, so cached extract results
are invalidated when it changes.

* refactor: drop redundant JSDoc on hasVulnerabilityAlertsRules

* docs(manager): document hasVulnerabilityAlertsRules on ExtractConfig

* fix(extract): omit hasVulnerabilityAlertsRules from fingerprint when false

Keeps the extract config hash unchanged for repositories which have no
vulnerability alerts, so they do not re-extract once on upgrade.

2026-09-22 17:43:43 +00:00

..

ansible

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

ansible-galaxy

refactor(manager): remove unreachable branches (#46206)

2026-09-15 08:36:30 +00:00

ant

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

apm

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

argocd

feat(manager): share OCI Helm chart resolution across managers (#45760)

2026-09-09 13:51:30 +00:00

asdf

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

azure-pipelines

docs: update references to python to be8ccd0 (main) (#46349)

2026-09-21 00:24:13 +00:00

batect

test: use expect().resolves instead of awaiting inside expect (#45672)

2026-09-04 10:40:46 +00:00

batect-wrapper

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

bazel

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

bazel-module

feat(manager): pass extracted constraints to updateArtifacts (#45826)

2026-09-14 11:09:07 +00:00

bazelisk

feat(manager): pass extracted constraints to updateArtifacts (#45826)

2026-09-14 11:09:07 +00:00

bicep

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

bitbucket-pipelines

fix(linters): add linting rule to enforce usage of our regEx utility (#44690)

2026-08-14 14:30:46 +00:00

bitrise

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

buildkite

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

buildpacks

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

bun

feat(manager): share the .npmrc host-rule wrapper between bun, deno and npm (#46131)

2026-09-18 09:30:27 +00:00

bun-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

bundler

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

cake

test: use expect().resolves instead of awaiting inside expect (#45672)

2026-09-04 10:40:46 +00:00

cargo

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

cdnurl

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

circleci

refactor(linters): add prefer-coerce-object rule (#45493)

2026-08-28 09:27:59 +00:00

cloudbuild

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

cocoapods

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

composer

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

conan

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

copier

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

cpanfile

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

crossplane

fix(linters): add linting rule to enforce usage of our regEx utility (#44690)

2026-08-14 14:30:46 +00:00

crow

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

custom

fix(config/validation): allow only capturing currentDigest in Custom Managers (#45671)

2026-09-04 11:30:15 +00:00

deno

feat(manager): share the .npmrc host-rule wrapper between bun, deno and npm (#46131)

2026-09-18 09:30:27 +00:00

deps-edn

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

devbox

feat(manager): share the .npmrc host-rule wrapper between bun, deno and npm (#46131)

2026-09-18 09:30:27 +00:00

devcontainer

feat(manager/devcontainer): add folder pattern to list of managerFilePatterns (#45377)

2026-08-21 08:49:52 +00:00

docker-compose

test(manager): cover the pre-commit warning switch and drop unreachable fallbacks (#46221)

2026-09-16 06:43:02 +00:00

dockerfile

fix(manager/dockerfile): don't attempt to update apk/apt for unknown image families (#46325)

2026-09-18 15:59:58 +00:00

droneci

test(manager): close more branch coverage gaps (#45972)

2026-09-16 06:43:00 +00:00

fleet

fix(manager): share one local Helm chart path check (#46181)

2026-09-22 11:59:41 +00:00

flux

fix(manager): share one local Helm chart path check (#46181)

2026-09-22 11:59:41 +00:00

fvm

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

git-submodules

test(manager): cover the pre-commit warning switch and drop unreachable fallbacks (#46221)

2026-09-16 06:43:02 +00:00

github-actions

refactor(constants): add a platform family capability table (#46191)

2026-09-21 15:27:50 +00:00

gitlabci

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

gitlabci-include

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

glasskube

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

gleam

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

gomod

fix(manager/gomod): match gofmt-style unindented closing paren in block end regex (#45781)

2026-09-21 08:54:34 +00:00

gradle

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

gradle-wrapper

test(manager): close long-tail branch coverage gaps (#45954)

2026-09-15 07:10:10 +00:00

haskell-cabal

refactor(linters): add rule to enforce inline single use fixtures (#45230)

2026-09-03 07:42:45 +00:00

helm-requirements

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

helm-values

feat(manager/helm-values): support version in sibling tag/version key (#46267)

2026-09-17 13:48:24 +00:00

helmfile

fix(manager): share one local Helm chart path check (#46181)

2026-09-22 11:59:41 +00:00

helmsman

feat(manager): share OCI Helm chart resolution across managers (#45760)

2026-09-09 13:51:30 +00:00

helmv3

fix(manager): share one local Helm chart path check (#46181)

2026-09-22 11:59:41 +00:00

hermit

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

homeassistant-manifest

docs: ensure that config in documentation is error and warning free (#43727)

2026-06-02 13:29:48 +00:00

homebrew

test(manager): close more branch coverage gaps (#45972)

2026-09-16 06:43:00 +00:00

html

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

jenkins

test(manager): close more branch coverage gaps (#45972)

2026-09-16 06:43:00 +00:00

jsonnet-bundler

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

kotlin-script

refactor(linters): add rule to enforce inline single use fixtures (#45230)

2026-09-03 07:42:45 +00:00

kubernetes

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

kustomize

fix(manager/helmv3): share generateHelmEnvs with kustomize (#46179)

2026-09-22 11:59:40 +00:00

leiningen

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

maven

test(manager): cover the pre-commit warning switch and drop unreachable fallbacks (#46221)

2026-09-16 06:43:02 +00:00

maven-wrapper

perf(manager/maven-wrapper): avoid matching each line twice (#46027)

2026-09-14 15:11:01 +00:00

meteor

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

mint

feat(manager/mint): add support for fully qualified urls for Mint packages (#44305)

2026-07-08 12:25:54 +00:00

mise

feat(manager/mise): support pypi backend (#46359)

2026-09-22 12:06:07 +00:00

mix

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

nix

feat(manager): pass extracted constraints to updateArtifacts (#45826)

2026-09-14 11:09:07 +00:00

nodenv

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

npm

feat(manager): share the .npmrc host-rule wrapper between bun, deno and npm (#46131)

2026-09-18 09:30:27 +00:00

nuget

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

nvm

fix(linters): add linting rule to enforce usage of our regEx utility (#44690)

2026-08-14 14:30:46 +00:00

ocb

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

osgi

refactor(linters): add rule to enforce inline single use fixtures (#45230)

2026-09-03 07:42:45 +00:00

pep621

fix(python): share PyPI index credential resolution (#46127)

2026-09-18 10:53:11 +00:00

pep723

test(manager): mark remaining unreachable manager guards (#46082)

2026-09-16 06:43:01 +00:00

pip_requirements

feat(manager): pass extracted constraints to updateArtifacts (#45826)

2026-09-14 11:09:07 +00:00

pip_setup

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

pip-compile

fix(manager): stop logging credential-bearing env and commands (#46129)

2026-09-18 10:53:13 +00:00

pipenv

fix(python): share PyPI index credential resolution (#46127)

2026-09-18 10:53:11 +00:00

pixi

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

poetry

fix(python): share PyPI index credential resolution (#46127)

2026-09-18 10:53:11 +00:00

pre-commit

refactor(constants): add a platform family capability table (#46191)

2026-09-21 15:27:50 +00:00

proto

refactor(lint): add types-location rule and enable it for lib/modules (#45497)

2026-08-27 19:52:09 +00:00

pub

refactor(manager): share the lock file updateArtifacts skeleton (#46093)

2026-09-16 13:13:42 +00:00

puppet

refactor(linters): enable oxlint rule prefer-named-capture-group (#44714)

2026-09-03 09:54:40 +00:00

pyenv

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

quadlet

fix(manager/quadlet): make Image optional for volume (#44959)

2026-09-21 08:56:36 +00:00

renovate-config

test(manager/renovate-config): guard supportedPresetSources against drift (#46256)

2026-09-16 15:31:57 +00:00

ruby-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

runtime-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

rust-toolchain

fix(manager/rust-toolchain): report skipReason instead of dropping deps (#45144)

2026-08-10 07:52:31 +00:00

sbt

test(manager/sbt,swift): close branch coverage gaps (#45946)

2026-09-15 07:10:09 +00:00

scalafmt

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

setup-cfg

test(manager): replace file snapshots with explicit assertions (#45656)

2026-09-04 06:36:39 +00:00

smithy

feat(managers): add support for the Smithy framework (#44737)

2026-07-22 07:50:04 +00:00

sveltos

feat(manager): share OCI Helm chart resolution across managers (#45760)

2026-09-09 13:51:30 +00:00

swift

fix(manager/swift): don't rewrite Package.resolved pins in unrelated packages (#44317)

2026-09-18 11:02:17 +00:00

tekton

test: shrink oversized fixtures to representative examples (#45666)

2026-09-04 10:40:45 +00:00

terraform

fix(manager): share one local Helm chart path check (#46181)

2026-09-22 11:59:41 +00:00

terraform-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

terragrunt

feat(manager/terragrunt): detect forgejo-tags datasource for git-tag sources (#46202)

2026-09-16 13:15:37 +00:00

terragrunt-version

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

tflint-plugin

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

travis

test(manager): reach 100% branch coverage by closing the else-if chains (#46222)

2026-09-16 06:43:03 +00:00

typst

fix(datasource/typst): set cacheable explicitly (#46126)

2026-09-16 12:13:48 +00:00

unity3d

fix(manager): add missing categories exports (#42800)

2026-05-08 07:01:27 +00:00

velaci

refactor(linters): add prefer-coerce-object rule (#45493)

2026-08-28 09:27:59 +00:00

vendir

refactor(manager): build artifact results with the shared helpers (#46092)

2026-09-16 13:13:41 +00:00

woodpecker

refactor(linters): add prefer-coerce-object rule (#45493)

2026-08-28 09:27:59 +00:00

xcodegen

chore: migrate from zod/v3 to zod/v4 (#43691)

2026-05-30 16:01:58 +00:00

api.ts

feat(manager): add apm manager for Agent Package Manager (#44390)

2026-09-02 16:17:15 +00:00

fingerprint.spec.ts

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

index.spec.ts

test: use expect().resolves instead of awaiting inside expect (#45672)

2026-09-04 10:40:46 +00:00

index.ts

refactor(linters): enabled oxlints func-style (#44691)

2026-07-19 11:14:22 +00:00

metadata.spec.ts

refactor(linters): enable node/no-sync and migrate to async calls (#44693)

2026-07-20 14:28:26 +00:00

range.spec.ts

refactor: Rewrite imports with .ts extensions (#40700)

2026-01-26 22:48:17 +00:00

types.ts

fix(workers/repository/extract): pass vulnerability alert state to managers (#46385)

2026-09-22 17:43:43 +00:00

util.spec.ts

feat(manager): share the .npmrc host-rule wrapper between bun, deno and npm (#46131)

2026-09-18 09:30:27 +00:00

util.ts

feat(manager): share the .npmrc host-rule wrapper between bun, deno and npm (#46131)

2026-09-18 09:30:27 +00:00