[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
renovate/renovate (source)	container	minor	44.168.4 → 44.181.0	44.186.2 (+21)

---

Release Notes

renovatebot/renovate (renovate/renovate)

v44.181.0

Compare Source

Features

• deps: update renovate-base-image to v13.142.0 (main) (#​47343) (a45ee25)

Bug Fixes

• manager/npm: detect yarnZeroInstall from any upgrade on mixed branches (#​44886) (8dd4386)
• manager/npm: hash yarn.js for yarn berry corepack hash (#​46771) (0701e54)
• platform/gitlab: set branch status on merged results pipelines (#​47064) (419feea)
• workers/branch: dedupe updatedArtifacts by path (#​46626) (1c61ebe)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.0 (main) (#​47342) (4022153)

v44.180.0

Compare Source

Features

• util/exec: look up jb versions from containerbase/jb-prebuild (#​47303) (4ebd20e)

Tests

• workers/repository: use a temp cache dir in init specs (#​47339) (0db8910)

v44.179.2

Compare Source

Bug Fixes

• config/validation: allow top-level custom manager config (#​47318) (596ab9a), closes #​47311
• config/validation: always allow options which can be used anywhere (#​47319) (b295e59), closes #​47311
• config/validation: improve nested/array parent option names in messages (#​47320) (5f1e110), closes #​47311
• deps: update renovate-base-image to v13.141.2 (#​47335) (f14fee7)
• manager/gomod: allow modules with an older go directive (#​47317) (4086667), closes #​47313

Documentation

• introduce "buckets" and "audience" labels (#​47020) (4caf57e)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.2 (main) (#​47336) (1ae0592)

v44.179.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.141.1 (main) (#​47332) (f847006)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.1 (main) (#​47331) (0377d27)

v44.179.0

Compare Source

Features

• deps: update renovate-base-image to v13.141.0 (main) (#​47330) (e7abaf4)

v44.178.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.140.2 (main) (#​47327) (002bfb5)

v44.178.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.140.1 (main) (#​47326) (261f59e)

v44.178.3

Compare Source

Build System

• deps: update dependency google-auth-library to v11.3.1 (main) (#​47325) (2fb5da1)

v44.178.2

Compare Source

Build System

• deps: update dependency @​opentelemetry/resource-detector-github to v0.33.0 (main) (#​47323) (2ffb4cb)

v44.178.1

Compare Source

Bug Fixes

• deps: update dependency github/gh-actions-lock to v0.3.0 (main) (#​47315) (985282b)

Miscellaneous Chores

• deps: update dependency uv to v0.13.5 (main) (#​47289) (e6bb569)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.0 (main) (#​47312) (dc9d8e5)
• deps: update vitest monorepo to v4.1.12 (main) (#​47310) (e05ea0d)

v44.178.0

Compare Source

Features

• presets: add PHP2Shell security updates (#​47283) (f911008)
• validate the containerbase image version on startup (#​47248) (ef96e4d)

Miscellaneous Chores

• deps: update dependency pnpm to v11.28.6 (main) (#​47307) (53c30e1)
• util/exec: correct typo in constraints (#​47304) (1deb80e)

v44.177.0

Compare Source

Features

• deps: update renovate-base-image to v13.140.0 (main) (#​47306) (acb2504)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.50.0 (main) (#​47305) (3383372)

v44.176.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.139.3 (main) (#​47291) (bd8f755)

Miscellaneous Chores

• deps: update astral-sh/setup-uv action to v10.3.1 (main) (#​47281) (f5adf17)
• deps: update astral-sh/setup-uv action to v10.3.2 (main) (#​47299) (7e6d979)
• deps: update dependency astral-sh/uv to v0.13.5 (main) (#​47288) (4698530)

Build System

• deps: update dependency got to v16.1.0 (main) (#​47214) (1a80c53)

v44.176.3

Compare Source

Bug Fixes

• config/validation: allow patterns for allowedValues of patternMatch options (#​47297) (c11b614)
• dependency-dashboard: ignore dashboard checkboxes when mode=silent (#​47271) (8b2ff8b)
• manager/github-actions: relock when regenerating actions.lock (#​47294) (64aa649), closes #​47292

v44.176.2

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.139.1 (main) (#​47282) (bafa1fa)

v44.176.1

Compare Source

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.49.0 (main) (#​47278) (2413b2b)

Build System

• deps: update markdown-it to v15.0.3 (#​47259) (1a242a8)

v44.176.0

Compare Source

Features

• deps: update renovate-base-image to v13.139.0 (main) (#​47275) (11db0f2)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.48.0 (main) (#​47272) (6924b7b)
• deps: update github/codeql-action action to v4.39.1 (main) (#​47273) (43af5fa)

v44.175.5

Compare Source

Bug Fixes

• config/validation: don't warn on repo options in inherited onboardingConfig (#​47269) (b4ee9aa), closes #​47266

v44.175.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.138.2 (main) (#​47265) (1d9aae3)

v44.175.3

Compare Source

Bug Fixes

• workers/repository/lookup: warn when a tag is missing its v prefix (#​47155) (b91f928)

Documentation

• mend-hosted: Enterprise users can specify forkProcessing and onboardingNoDeps (#​47246) (bd4ba3b)

Build System

• deps: update dependency node to v24.22.1 (main) (#​47264) (8ca0fec)

v44.175.2

Compare Source

Bug Fixes

• manager/kustomize: handle helm charts without repo (#​47255) (06d7f77)
• manager/npm: omit unresolved npmrc from extracted package files (#​47258) (25d7295)
• workers: keep absent registry URLs absent when detaching credentials (#​47256) (571a269)

v44.175.1

Compare Source

Bug Fixes

• config/validation: remove custom validation for allowedValues (#​43833) (e6cdac8)
• config/validation: validate allowedValues for arrays (#​39076) (e5ae141)
• config/validation: validate customDatasources generically (#​47195) (b4de4ca)
• config/validation: validate the entries of arrays of strings (#​47194) (e49ca6a)
• config: document all valid customDatasources[].formats (#​47204) (a19c6bc)
• workers/repository/init: massage inherited config before validating (#​47201) (2a3a481)
• workers/repository/init: massage static repo config before validating (#​47202) (fea2346)

Miscellaneous Chores

• deps: update jdx/mise-action action to v5.2.2 (main) (#​47250) (719bd35)

Code Refactoring

• util/exec: use isContainerbase from the base image package directly (#​47247) (dff2bd5)

Tests

• workers/repository/init: document validation of unmassaged config (#​47200) (de17a09)

Build System

• deps: update node.js to v24.22.1 (main) (#​47253) (9222a5d)

v44.175.0

Compare Source

Features

• deps: update renovate-base-image to v13.138.1 (main) (#​47245) (2e55bee)

Bug Fixes

• config/validation: correct misleading message for non-string customDatasources values (#​47184) (b7feac6)
• config/validation: don't throw for invalid types of enabledManagers and schedule (#​47193) (ba23989)
• config/validation: require hostRules[].headers to be an object (#​47185) (a01e305)
• config/validation: validate templates in global config (#​47186) (e98ddc3)
• config: allow lockfileUpdate in matchUpdateTypes (#​47182) (d2d9f17)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.46.0 (main) (#​47243) (61d2fc7)

Tests

• config/validation: document existing validation behaviour (#​47183) (e857db2)

v44.174.0

Compare Source

Features

• deps: update renovate-base-image to v13.137.0 (main) (#​47241) (f9b9036)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.45.0 (main) (#​47240) (da3366e)

v44.173.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.136.1 (main) (#​47236) (5c2a683)

v44.173.0

Compare Source

Features

• deps: update renovate-base-image to v13.136.0 (main) (#​47234) (482cf61)

v44.172.2

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.6 (main) (#​47232) (e698ff5)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.44.4 (main) (#​47231) (fc2a9d0)

v44.172.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.5 (main) (#​47228) (124e0e1)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.13.4 (main) (#​47225) (320108e)
• deps: update dependency uv to v0.13.4 (main) (#​47226) (7f7021a)

v44.172.0

Compare Source

Features

• workarounds: add helm-docs workaround for old tags from 2019 (#​46838) (33483f9)

v44.171.9

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.4 (main) (#​47218) (1f75e11)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.44.3 (main) (#​47217) (32306c6)
• deps: update linters to v1.88.0 (main) (#​47222) (6e01ad1)

v44.171.8

Compare Source

Bug Fixes

• vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts (#​47211) (dc71c78)

Build System

• deps: update dependency google-auth-library to v11.3.0 (main) (#​47213) (85acb08)

v44.171.7

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.3 (main) (#​47210) (fce3625)

v44.171.6

Compare Source

Build System

• deps: update dependency @​renovatebot/detect-tools to v4.0.23 (main) (#​47209) (1584a8e)

v44.171.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.2 (main) (#​47208) (7fd1380)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.44.2 (main) (#​47207) (b0abab7)

v44.171.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.1 (main) (#​47199) (8b9ac8b)

Miscellaneous Chores

• deps: update dependency uv to v0.13.3 (main) (#​47198) (182ce5e)

v44.171.3

Compare Source

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.13.3 (main) (#​47191) (e2e9f7f)

Build System

• deps: update dependency execa to v10.1.1 (main) (#​47190) (230474a)

v44.171.2

Compare Source

Bug Fixes

• cache: hash URL credentials in cache keys (320f770)
• extract: resolve npmrc again instead of caching it with package files (061e9ba)
• http: persist only an allow-list of response headers in the http caches (9e46e31)
• workers: keep URL credentials of dependencies out of the repository cache and generated texts (71d4f95)

v44.171.1

Compare Source

Build System

• deps: update dependency zod to v4.6.7 (main) (#​47175) (c6ef797)

v44.171.0

Compare Source

Features

• datasource/github-runners: add xcode-27 (#​47116) (ea1c9a7)
• json-schema: suggest the host types we know about (#​46718) (7bd4864)
• json-schema: suggest the managers, datasources and categories we know (#​46713) (500620a), closes #​40450

Bug Fixes

• config: document where our git and environment options can be used (#​46709) (d7d72a0), closes #​43020
• config: document which options can be set anywhere (#​46712) (2eda8fb), closes #​43020
• json-schema: only allow the managers we support in enabledManagers (#​46717) (ab776b8)

Miscellaneous Chores

• config: document where a manager's config object can be used (#​46711) (3a0b65f), closes #​43020

Code Refactoring

• config: add generic suggestedValues hint (#​46959) (2599cfa)
• config: require an option to document where it can be used (#​46714) (7d2a296), closes #​43020

v44.170.0

Compare Source

Features

• datasource/github-runners: add releaseTimestamps (#​46885) (15fb543), closes #​46806
• manager/flux: set HelmChart depType on Helm charts (#​47174) (7678a47)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.44.0 (main) (#​47172) (e378ba9)

v44.169.0

Compare Source

Features

• deps: update renovate-base-image to v13.135.0 (main) (#​47173) (0085709)

Bug Fixes

• config: document where packageRules can be used (#​46705) (c103f2b), closes #​43020
• config: document where our branch and reporting options can be used (#​46708) (3f54883), closes #​43020
• config: document where remaining lookup options can be used (#​46707) (480260a), closes #​43020
• config: document where top-level config can be used (#​46706) (4b7d5af), closes #​43020

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[erikgb]

/lgtm
/approve

[cert-manager-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: erikgb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [erikgb]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment