[secustors-renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
renovate (source)		minor	44.164.3 → 44.188.4
renovate (source)	dependencies	minor	44.164.3 → 44.188.4

---

Release Notes

renovatebot/renovate (renovate)

v44.188.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.145.2 (main) (#​47480) (78734cb)

v44.188.3

Compare Source

Documentation

• config: clarify assignees does not support teams (#​47452) (a087e64)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.1 (main) (#​47474) (8c785fd)

Tests

• vulnerabilities: document that lockfile-only deps don't get vulnerability updates (#​47478) (24e8b99), closes #​46377

Build System

• deps: update dependency cronstrue to v3.37.0 (main) (#​47481) (7eb4bb7)

v44.188.2

Compare Source

Build System

• deps: update dependency @​renovatebot/osv-offline to v4.1.2 (main) (#​47473) (d3d7d20)

v44.188.1

Compare Source

Build System

• deps: update dependency @​renovatebot/osv-offline to v4 (main) (#​47472) (8616389)

v44.188.0

Compare Source

Features

• deps: update renovate-base-image to v13.145.1 (main) (#​47471) (8827a45)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.0 (main) (#​47470) (0a947f8)

v44.187.0

Compare Source

Features

• deps: update renovate-base-image to v13.144.0 (main) (#​47464) (0816305)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.54.0 (main) (#​47463) (5b17347)
• deps: update jdx/mise-action action to v5.2.4 (main) (#​47468) (e8df1f2)

Build System

• deps: update dependency @​renovatebot/osv-offline to v3.1.0 (main) (#​47467) (7a726aa)

v44.186.8

Compare Source

Bug Fixes

• config: allow prerelease for bumpVersions.bumpType (#​47460) (f80c5dd)

v44.186.7

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.143.3 (main) (#​47457) (6a32832)

v44.186.6

Compare Source

Build System

• deps: update dependency cronstrue to v3.36.0 (main) (#​47455) (7688dcb)

v44.186.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.143.2 (main) (#​47453) (3c91a90)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.13.6 (main) (#​47449) (3dd616b)
• deps: update dependency github/gh-stack to v0.3.0 (main) (#​47448) (93c6fc0)
• deps: update dependency uv to v0.13.6 (main) (#​47450) (13e5a47)

v44.186.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.143.1 (main) (#​47447) (0a1b802)

v44.186.3

Compare Source

Miscellaneous Chores

• deps: update dependency knip to v6.42.1 (main) (#​47442) (7272966)

Build System

• deps: update dependency cronstrue to v3.35.0 (main) (#​47446) (e5a4e76)

v44.186.2

Compare Source

Bug Fixes

• instrumentation: remove mergeChildConfig span (#​47440) (6151f9b)

v44.186.1

Compare Source

Bug Fixes

• manager/kustomize: skip helm charts without repo as local charts (#​47430) (52fcc78)

v44.186.0

Compare Source

Features

• deps: update renovate-base-image to v13.143.0 (main) (#​47432) (c9ee474)

Build System

• deps: update dependency ignore to v7.0.13 (main) (#​47437) (1bd6040)

v44.185.0

Compare Source

Features

• manager/github-actions: extract runs.image in Docker container actions (#​47423) (04d4aec)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.53.0 (main) (#​47431) (2dc18ca)
• deps: update python docker tag to v3.15.1 (main) (#​47287) (37fdce6)

v44.184.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.13 (main) (#​47422) (03ec267)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.9 (main) (#​47421) (b0118df)

v44.184.0

Compare Source

Features

• manager/github-actions: report gh actions-lock findings when it fails (#​47375) (dfae938)

Bug Fixes

• manager/github-actions: only re-pin updated refs in actions.lock and parse findings (#​47373) (e15cd52)

Miscellaneous Chores

• renovate: keep the documented ghActionsLock version up to date (#​47377) (a077a46)

v44.183.0

Compare Source

Features

• static-data: add 2 new mise tools (#​47416) (fbdb315)

Code Refactoring

• tools/static-data: introduce a StaticDataSource interface (#​47407) (52cfc71), closes #​47251

Continuous Integration

• static-data: start on a new branch (#​47411) (ac19b98)
• tools/static-data: commit each static data update separately (#​47408) (f514563), closes #​47251
• update-data: create PRs with the commit's title and body (906cf0e)
• update-data: raise a stack of PRs via gh stack (#​47409) (1860261), closes #​47251
• update-data: run on Monday mornings (#​47406) (3505937), closes #​47251

v44.182.2

Compare Source

Bug Fixes

• manager/mise: look up swift releases in swiftlang/swift (#​47374) (548f5c7)

v44.182.1

Compare Source

Build System

• deps: update dependency @​renovatebot/pgp to v2.0.4 (main) (#​47403) (2b767e0)

v44.182.0

Compare Source

Features

• presets: add @biomejs/** packages to packages:linters (#​47382) (0ed40fd)

v44.181.12

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.11 (main) (#​47402) (3b6f01f)

Build System

• deps: update dependency node-html-parser to v9.0.5 (main) (#​47401) (2605537)

v44.181.11

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.10 (main) (#​47399) (510538e)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.7 (main) (#​47398) (7f15352)

v44.181.10

Compare Source

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.6 (main) (#​47396) (d5c729a)

Build System

• deps: update dependency cronstrue to v3.33.0 (main) (#​47397) (51fa5b9)

v44.181.9

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.9 (main) (#​47395) (37e7bc1)

Documentation

• update references to renovatebot/github-action to v46.3.10 (main) (#​47394) (3c2913a)

v44.181.8

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.8 (main) (#​47393) (422350b)

Documentation

• update references to astral-sh/setup-uv to v10.3.2 (main) (#​47389) (add8a72)
• update references to otel/opentelemetry-collector-contrib to v0.163.2 (main) (#​47390) (3698963)
• update references to prom/prometheus to v3.15.1 (main) (#​47391) (d2f2ba3)
• update references to python to 90bdf58 (main) (#​47388) (7642f37)
• update references to renovatebot/github-action to v46.3.9 (main) (#​47392) (e38a673)

v44.181.7

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.7 (main) (#​47387) (297e253)

Miscellaneous Chores

• renovate: don't automerge breaking gh-actions-lock updates (#​47379) (9e0bc64)

v44.181.6

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.6 (main) (#​47380) (635e70e)

Miscellaneous Chores

• deps: update dependency knip to v6.42.0 (main) (#​47381) (d298a62)
• deps: update pnpm/setup action to v3.1.2 (main) (#​47371) (5a6fb72)

v44.181.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.5 (main) (#​47367) (d58ffdb)

v44.181.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.142.4 (main) (#​47365) (27bf60b)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.5 (main) (#​47366) (d3c1a16)

v44.181.3

Compare Source

Bug Fixes

• workers/repository: include tool constraints and installTools in branch commit fingerprint (#​47348) (3842ec0), closes #​46438
• workers/repository: use the updated constraints value when processing a branch (#​47350) (f735b01), closes #​46438

v44.181.2

Compare Source

Bug Fixes

• deps: update dependency mkdocs-material to v9.8.0 (main) (#​47364) (01d7fb8)
• deps: update renovate-base-image to v13.142.3 (main) (#​47363) (7fc75ac)

Miscellaneous Chores

• deps: update dependency @​containerbase/istanbul-reports-html to v2.0.23 (main) (#​47358) (4c3c233)
• deps: update dependency @​ls-lint/ls-lint to v2.3.2 (main) (#​47359) (c11332b)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.4 (main) (#​47361) (c4c70ad)
• deps: update jdx/mise-action action to v5.2.3 (main) (#​47362) (070bc2b)

v44.181.1

Compare Source

Bug Fixes

• deps: update dependency github/gh-actions-lock to v0.4.0 (main) (#​47355) (578dc84)
• deps: update renovate-base-image to v13.142.1 (main) (#​47347) (bec17bf)
• deps: update renovate-base-image to v13.142.2 (main) (#​47354) (f69dd1d)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.3 (main) (#​47346) (2d1059c)

Tests

• manager/renovate-config: document which constraints scopes are extracted (#​47349) (d1f6e41), closes #​46438

v44.181.0

Compare Source

Features

• deps: update renovate-base-image to v13.142.0 (main) (#​47343) (a45ee25)

Bug Fixes

• manager/npm: detect yarnZeroInstall from any upgrade on mixed branches (#​44886) (8dd4386)
• manager/npm: hash yarn.js for yarn berry corepack hash (#​46771) (0701e54)
• platform/gitlab: set branch status on merged results pipelines (#​47064) (419feea)
• workers/branch: dedupe updatedArtifacts by path (#​46626) (1c61ebe)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.52.0 (main) (#​47342) (4022153)

v44.180.0

Compare Source

Features

• util/exec: look up jb versions from containerbase/jb-prebuild (#​47303) (4ebd20e)

Tests

• workers/repository: use a temp cache dir in init specs (#​47339) (0db8910)

v44.179.2

Compare Source

Bug Fixes

• config/validation: allow top-level custom manager config (#​47318) (596ab9a), closes #​47311
• config/validation: always allow options which can be used anywhere (#​47319) (b295e59), closes #​47311
• config/validation: improve nested/array parent option names in messages (#​47320) (5f1e110), closes #​47311
• deps: update renovate-base-image to v13.141.2 (#​47335) (f14fee7)
• manager/gomod: allow modules with an older go directive (#​47317) (4086667), closes #​47313

Documentation

• introduce "buckets" and "audience" labels (#​47020) (4caf57e)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.2 (main) (#​47336) (1ae0592)

v44.179.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.141.1 (main) (#​47332) (f847006)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.1 (main) (#​47331) (0377d27)

v44.179.0

Compare Source

Features

• deps: update renovate-base-image to v13.141.0 (main) (#​47330) (e7abaf4)

v44.178.5

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.140.2 (main) (#​47327) (002bfb5)

v44.178.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.140.1 (main) (#​47326) (261f59e)

v44.178.3

Compare Source

Build System

• deps: update dependency google-auth-library to v11.3.1 (main) (#​47325) (2fb5da1)

v44.178.2

Compare Source

Build System

• deps: update dependency @​opentelemetry/resource-detector-github to v0.33.0 (main) (#​47323) (2ffb4cb)

v44.178.1

Compare Source

Bug Fixes

• deps: update dependency github/gh-actions-lock to v0.3.0 (main) (#​47315) (985282b)

Miscellaneous Chores

• deps: update dependency uv to v0.13.5 (main) (#​47289) (e6bb569)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.51.0 (main) (#​47312) (dc9d8e5)
• deps: update vitest monorepo to v4.1.12 (main) (#​47310) (e05ea0d)

v44.178.0

Compare Source

Features

• presets: add PHP2Shell security updates (#​47283) (f911008)
• validate the containerbase image version on startup (#​47248) (ef96e4d)

Miscellaneous Chores

• deps: update dependency pnpm to v11.28.6 (main) (#​47307) (53c30e1)
• util/exec: correct typo in constraints (#​47304) (1deb80e)

v44.177.0

Compare Source

Features

• deps: update renovate-base-image to v13.140.0 (main) (#​47306) (acb2504)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.50.0 (main) (#​47305) (3383372)

v44.176.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.139.3 (main) (#​47291) (bd8f755)

Miscellaneous Chores

• deps: update astral-sh/setup-uv action to v10.3.1 (main) (#​47281) (f5adf17)
• deps: update astral-sh/setup-uv action to v10.3.2 (main) (#​47299) (7e6d979)
• deps: update dependency astral-sh/uv to v0.13.5 (main) (#​47288) (4698530)

Build System

• deps: update dependency got to v16.1.0 (main) (#​47214) (1a80c53)

v44.176.3

Compare Source

Bug Fixes

• config/validation: allow patterns for allowedValues of patternMatch options (#​47297) (c11b614)
• dependency-dashboard: ignore dashboard checkboxes when mode=silent (#​47271) (8b2ff8b)
• manager/github-actions: relock when regenerating actions.lock (#​47294) (64aa649), closes #​47292

v44.176.2

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.139.1 (main) (#​47282) (bafa1fa)

v44.176.1

Compare Source

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.49.0 (main) (#​47278) (2413b2b)

Build System

• deps: update markdown-it to v15.0.3 (#​47259) (1a242a8)

v44.176.0

Compare Source

Features

• deps: update renovate-base-image to v13.139.0 (main) (#​47275) (11db0f2)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.48.0 (main) (#​47272) (6924b7b)
• deps: update github/codeql-action action to v4.39.1 (main) (#​47273) (43af5fa)

v44.175.5

Compare Source

Bug Fixes

• config/validation: don't warn on repo options in inherited onboardingConfig (#​47269) (b4ee9aa), closes #​47266

v44.175.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.138.2 (main) (#​47265) (1d9aae3)

v44.175.3

Compare Source

Bug Fixes

• workers/repository/lookup: warn when a tag is missing its v prefix (#​47155) (b91f928)

Documentation

• mend-hosted: Enterprise users can specify forkProcessing and onboardingNoDeps (#​47246) (bd4ba3b)

Build System

• deps: update dependency node to v24.22.1 (main) (#​47264) (8ca0fec)

v44.175.2

Compare Source

Bug Fixes

• manager/kustomize: handle helm charts without repo (#​47255) (06d7f77)
• manager/npm: omit unresolved npmrc from extracted package files (#​47258) (25d7295)
• workers: keep absent registry URLs absent when detaching credentials (#​47256) (571a269)

v44.175.1

Compare Source

Bug Fixes

• config/validation: remove custom validation for allowedValues (#​43833) (e6cdac8)
• config/validation: validate allowedValues for arrays (#​39076) (e5ae141)
• config/validation: validate customDatasources generically (#​47195) (b4de4ca)
• config/validation: validate the entries of arrays of strings (#​47194) (e49ca6a)
• config: document all valid customDatasources[].formats (#​47204) (a19c6bc)
• workers/repository/init: massage inherited config before validating (#​47201) (2a3a481)
• workers/repository/init: massage static repo config before validating (#​47202) (fea2346)

Miscellaneous Chores

• deps: update jdx/mise-action action to v5.2.2 (main) (#​47250) (719bd35)

Code Refactoring

• util/exec: use isContainerbase from the base image package directly (#​47247) (dff2bd5)

Tests

• workers/repository/init: document validation of unmassaged config (#​47200) (de17a09)

Build System

• deps: update node.js to v24.22.1 (main) (#​47253) (9222a5d)

v44.175.0

Compare Source

Features

• deps: update renovate-base-image to v13.138.1 (main) (#​47245) (2e55bee)

Bug Fixes

• config/validation: correct misleading message for non-string customDatasources values (#​47184) (b7feac6)
• config/validation: don't throw for invalid types of enabledManagers and schedule (#​47193) (ba23989)
• config/validation: require hostRules[].headers to be an object (#​47185) (a01e305)
• config/validation: validate templates in global config (#​47186) (e98ddc3)
• config: allow lockfileUpdate in matchUpdateTypes (#​47182) (d2d9f17)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.46.0 (main) (#​47243) (61d2fc7)

Tests

• config/validation: document existing validation behaviour (#​47183) (e857db2)

v44.174.0

Compare Source

Features

• deps: update renovate-base-image to v13.137.0 (main) (#​47241) (f9b9036)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.45.0 (main) (#​47240) (da3366e)

v44.173.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.136.1 (main) (#​47236) (5c2a683)

v44.173.0

Compare Source

Features

• deps: update renovate-base-image to v13.136.0 (main) (#​47234) (482cf61)

v44.172.2

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.135.6 (main) ([#​47232](https://redirect.github.com/ren

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.