[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
renovate (source)	43.262.2 → 43.288.0

---

Release Notes

renovatebot/renovate (renovate)

v43.288.0

Compare Source

Features

• exec: support custom stream output writers (#​44910) (5ff2229)
• manager/pixi: gate pixi.lock updates behind allowedUnsafeExecutions (#​44939) (f60995a)

v43.287.0

Compare Source

Features

• copier: convert ssh _src_path to https URL for datasource lookup (#​44552) (932b7b2), closes #​44528

Bug Fixes

• github: include commitTrailers in platform-native commits (#​44918) (d32e38e)

Miscellaneous Chores

• deps: update dependency lint-staged to v17.1.1 (main) (#​44935) (736438b)
• deps: update dependency oxlint-tsgolint to v7 (main) (#​44907) (1809104)

v43.286.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.78.1 (main) (#​44932) (648b7a8)

v43.286.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.78.0 (main) (#​44931) (db1b150)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.12.0 (main) (#​44927) (5b56a5a)
• deps: update dependency tsdown to v0.22.13 (main) (#​44925) (05f36d5)
• deps: update dependency uv to v0.12.0 (main) (#​44928) (9fe51ed)

Build System

• deps: update opentelemetry-js monorepo (main) (#​44930) (59dca2b)

v43.285.7

Compare Source

Bug Fixes

• packagist: Throw on transient errors (#​44328) (2a5308b)

Code Refactoring

• types: make currentVersionTimestamp a Timestamp (#​44917) (12f5fde)

v43.285.6

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.9 (main) (#​44919) (18c59f8)

v43.285.5

Compare Source

Bug Fixes

• datasource/go: resolve sourceUrl from GOPROXY Origin (#​44902) (feeb236)

Documentation

• manager: indicate where lockFileMaintenance runs external commands (#​44914) (5ffc308)

Miscellaneous Chores

• deps: update dependency @​biomejs/biome to v2.5.5 (main) (#​44906) (9c1fe2c)
• deps: update dependency astral-sh/uv to v0.11.33 (main) (#​44912) (e41e315)
• deps: update dependency oxlint-tsgolint to v0.25.0 (main) (#​44424) (196101a)
• deps: update dependency uv to v0.11.33 (main) (#​44913) (9c7d468)

Code Refactoring

• move checkMinimumReleaseAge to lib/util/minimum-release-age.ts (#​44904) (5173de0)

v43.285.4

Compare Source

Build System

• deps: update dependency re2 to v1.26.1 (main) (#​44903) (48399bc)

v43.285.3

Compare Source

Build System

• deps: update dependency p-map to v7.0.6 (main) (#​44893) (352c728)

v43.285.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.8 (main) (#​44892) (dfc9a0a)

v43.285.1

Compare Source

Bug Fixes

• gerrit: use max available Code-Review vote value for autoApprove (#​44425) (d83651c)

Miscellaneous Chores

• deps: update dependency @​smithy/util-stream to v4.7.11 (main) (#​44891) (707c440)

v43.285.0

Compare Source

Features

• managers/mise: set depType for tools and task tools (#​44868) (0ad45c5)

v43.284.1

Compare Source

Bug Fixes

• post-upgrade: skip executable detection for directories (#​44884) (3f46080)

Miscellaneous Chores

• vscode: enable TypeScript 7 (#​44883) (27b4832)

v43.284.0

Compare Source

Features

• github-actions: update mise checksums (#​44876) (7700d62)

Tests

• util/git: reference default branch (#​44877) (a44bbfa)

v43.283.0

Compare Source

Features

• add commitTrailers option (#​44651) (ddbbb68)

v43.282.0

Compare Source

Features

• manager/mise: run mise lock in safe mode without allowedUnsafeExecutions (#​44749) (94f0219), closes jdx/mise#11146 jdx/mise#11145 jdx/mise#11151

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.7 (main) (#​44872) (8971306)

Documentation

• update references to jaegertracing/jaeger to v2.20.0 (main) (#​44864) (20a51f8)
• update references to otel/opentelemetry-collector-contrib to v0.157.0 (main) (#​44865) (1cae2cc)
• update references to python to 5f1cdbc (main) (#​44863) (f9532ad)
• update references to renovate/renovate (main) (#​44866) (011c0b4)
• update references to renovatebot/github-action to v46.1.21 (main) (#​44870) (5c7f980)

Miscellaneous Chores

• deps: lock file maintenance (main) (#​44867) (34e99c6)
• deps: update dependency @​smithy/util-stream to v4.7.10 (main) (#​44804) (8333627)
• deps: update dependency pnpm to v11.15.1 (main) (#​44862) (d701006)
• deps: update dependency tsdown to v0.22.12 (main) (#​44861) (9d3b990)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.11 (main) (#​44869) (2249f86)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.12 (main) (#​44871) (c15ebab)

v43.281.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.6 (main) (#​44860) (866dd56)

Miscellaneous Chores

• deps: update dependency tsdown to v0.22.11 (main) (#​44857) (1d8c976)

v43.281.0

Compare Source

Features

• data: automatic update of static data (#​44850) (bd8f885)

v43.280.5

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.5 (main) (#​44842) (be2ff0d)
• linters: add rules for filesystem helpers and Date (#​44685) (716baf6)
• platform/gitlab: retry MR creation on transient source_branch race. (#​44502) (12b2f4f)

Miscellaneous Chores

• deps: update dependency lint-staged to v17.1.0 (main) (#​44845) (d610624)
• deps: update dependency pnpm to v11.15.0 (main) (#​44844) (510a850)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.10 (main) (#​44841) (439bdd2)

Code Refactoring

• workers/repository: extract minimumReleaseAge/minimumConfidence checks (#​44825) (927b094)

Continuous Integration

• do not verfiy lockfile policies on matrix run (#​44847) (c99196d)

v43.280.4

Compare Source

Miscellaneous Chores

• deps: update dependency pnpm to v11.14.0 (main) (#​44839) (04930f4)
• deps: update dependency tar to v7.5.21 [security] (main) (#​44838) (4f9359a)

Build System

• deps: update dependency semantic-release to v25.0.8 (main) (#​44840) (53223e3)

v43.280.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.4 (main) (#​44837) (558fb51)

Miscellaneous Chores

• deps: update jdx/mise-action action to v4.2.3 (main) (#​44836) (5a1925f)

Code Refactoring

• workers/repository: add isMinimumReleaseAgeApplicable/isMinimumConfidenceApplicable (#​44824) (f1cd516)

v43.280.2

Compare Source

Bug Fixes

• presets/helpers: ensure that pinGitHubActionDigestsToSemver preset only applies to actions (#​44830) (c33364d)

v43.280.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.3 (main) (#​44829) (5c316be)

Documentation

• minimum-release-age: correctly reference lockfileUpdate (#​44823) (52fc547)
• minimum-release-age: indicate which Datasources support releaseTimestamp (#​44822) (f7bf437), closes #​30714

Miscellaneous Chores

• deps: update jdx/mise-action action to v4.2.2 (main) (#​44826) (98d45b7)

v43.280.0

Compare Source

Features

• azure: make issue work item type configurable (#​44736) (e0714e0)

Documentation

• minimum-release-age: link to separate issue for pinDigest (#​44821) (6e15862)

v43.279.2

Compare Source

Bug Fixes

• git: surface GitHub GH013 ruleset rejections as config errors (#​44819) (3cba608)

v43.279.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.2 (main) (#​44816) (ee7285a)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.11.32 (main) (#​44813) (d9f4492)
• deps: update dependency markdownlint-cli2 to v0.23.1 (main) (#​44814) (3ecb103)
• deps: update dependency uv to v0.11.32 (main) (#​44815) (6026442)
• deps: update ossf/scorecard-action action to v2.4.4 (main) (#​44811) (9a48b68)
• deps: update zizmor (main) (#​44812) (bc8843e)

v43.279.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.0 (main) (#​44802) (609a1be)

Documentation

• mend-hosted: correctly note "Community (OSS)" vCPUs (#​44798) (996dfbb)

Miscellaneous Chores

• deps: update dependency tsdown to v0.22.9 (main) (#​44801) (5b5dea6)
• gitlab: tidy up around gitlab codeowner role support (#​44796) (e59b10a)

Code Refactoring

• linters: add linters for Json.pipe and schema location (#​44684) (ac0407b)

Tests

• exclude .claude/worktrees from vitest and prettier (#​44799) (943f917)

v43.278.5

Compare Source

Bug Fixes

• changelog: re-add old facebook/react URL (#​44792) (9c98086)

Miscellaneous Chores

• deps: update dependency vite to v8.1.5 (main) (#​44791) (d4d3c55)

v43.278.4

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.12 (main) (#​44790) (5a400e2)

Miscellaneous Chores

• deps: update dependency pnpm to v11.13.1 (main) (#​44789) (e70b316)

Tests

• util/exec: remove deprecated reference to trust level (#​44244) (a72dc7e)

v43.278.3

Compare Source

Miscellaneous Chores

• deps: update dependency vitest-mock-extended to v5 (main) (#​44786) (d6f2426)

Build System

• deps: update dependency typescript to v7 (main) (#​44785) (b01c6db)

v43.278.2

Compare Source

Bug Fixes

• preset/monorepo: re-add old facebook/react URL (#​44782) (da47cb0)

v43.278.1

Compare Source

Build System

• deps: update dependency @​opentelemetry/otlp-transformer to v0.220.0 (main) (#​44783) (89b60af)

v43.278.0

Compare Source

Features

• instrumentation: allow exporting OTLP JSON file (#​42284) (adbc20e)

v43.277.1

Compare Source

Bug Fixes

• presets/monorepo: update react and react-native source URLs to react/react org (#​44780) (61e4c9c)

Documentation

• manager: make sure that Supported Datasources are de-duped and sorted (#​44765) (3888247), closes #​44764

v43.277.0

Compare Source

Features

• gitlab: add gitlab codeowners role support (#​44621) (2f9735f)

Bug Fixes

• schedule: match cron schedules on the edge of an hour (#​44757) (54acab0)

v43.276.0

Compare Source

Features

• github-actions: support sigstore/cosign-installer version input (#​44766) (f01f1b5)
• managers: add support for the Smithy framework (#​44737) (8708834)

Bug Fixes

• manager/npm: don't include versions in extracted Yarn resolutions' depName# (#​44776) (476d10a), closes #​44768

Miscellaneous Chores

• deps: update dependency tsdown to v0.22.8 (main) (#​44778) (d2ef8e8)
• deps: update dependency uv to v0.11.31 (main) (#​44770) (2bebe63)

v43.275.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.11 (main) (#​44775) (381a5b4)

Miscellaneous Chores

• deps: update dependency @​biomejs/biome to v2.5.4 (main) (#​44773) (df82d39)
• deps: update github/codeql-action action to v4.37.3 (main) (#​44774) (a04cf91)

v43.275.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.10 (main) (#​44771) (5586073)

Miscellaneous Chores

• deps: update dependency @​smithy/util-stream to v4.7.9 (main) (#​44767) (6894228)
• deps: update dependency astral-sh/uv to v0.11.31 (main) (#​44769) (f31eedd)

v43.275.0

Compare Source

Features

• onboarding: use summary view if hitting platform limits (#​44256) (969d1a1), closes #​41502

v43.274.0

Compare Source

Features

• datasource/docker: Read Official Image annotations (#​44755) (572554f)

Miscellaneous Chores

• deps: update github/codeql-action action to v4.37.2 (main) (#​44760) (2f7284f)

Code Refactoring

• onboarding: add functions to summarise "What to expect" (#​43764) (4fbfc60), closes #​41502

v43.273.0

Compare Source

Features

• platform: get all branch update dates in a more performant manner (#​44582) (f932d52)

Code Refactoring

• config/global: improve type restrictions for GlobalConfig.OPTIONS (#​44636) (d16dc9a)

v43.272.9

Compare Source

Bug Fixes

• manager/dockerfile: handle single-quoted empty ARG default value (#​44522) (1f5f6da)

v43.272.8

Compare Source

Bug Fixes

• git-submodule: handle ./ relative paths in URL resolution (#​44742) (bad5e22)

v43.272.7

Compare Source

Bug Fixes

• gomod: pseudo-version digest updates produce no change when module is absent from go proxy (#​44477) (e5ace74)

v43.272.6

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.8 (main) (#​44747) (a00c621)
• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.9 (main) (#​44748) (d2aa7e3)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.11.30 (main) (#​44745) (451ed1c)
• deps: update dependency uv to v0.11.30 (main) (#​44746) (984cb43)

Tests

• replace deprecated Biome recommended with preset (#​44735) (73d21dd)

v43.272.5

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.7 (main) (#​44743) (1e7391f)

Miscellaneous Chores

• deps: update actions/checkout action to v6.1.0 (main) (#​44741) (e3541c1)
• deps: update dependency astral-sh/uv to v0.11.29 (main) (#​44619) (75d2ca1)
• deps: update dependency protobufjs@​8.0.1 to v8.7.1 (main) (#​44733) (f3e5741)
• deps: update github/codeql-action action to v4.37.1 (main) (#​44647) (5a06fc9)

Code Refactoring

• linters: enable node/no-sync and migrate to async calls (#​44693) (2dbfd85)

Tests

• linters: add linting rule to enforce v8 ignore reason declaration (#​44726) (91e068f)

Continuous Integration

• periodically check for "too many releases" (#​44734) (c7be6f1), closes #​42965

v43.272.4

Compare Source

Documentation

• fix outdated statement that Docker major updates are disabled by default (#​44524) (b0bc33c)
• wrap preset names in code blocks (#​44234) (6959107)

Tests

• add linter for as LongCommitSha in test files (#​44681) (1e03699)

Build System

• deps: update dependency protobufjs to v8.7.1 (main) (#​44732) (52907ef)

v43.272.3

Compare Source

Bug Fixes

• docker: include global and inherited JSON schemas (#​44674) (29ca969)

v43.272.2

Compare Source

Bug Fixes

• platform/azure: evaluate policies before attempting to merge PR (#​44631) (7ac677d)

Code Refactoring

• types: document localDir isn't a globalOnly option (#​44635) (0e6429b)

v43.272.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.6 (main) (#​44724) (37372a1)

Documentation

• update references to python to 311ea5b (main) (#​44716) (ac6614e)
• update references to renovate/renovate (main) (#​44717) (6f577f0)
• update references to renovatebot/github-action to v46.1.20 (main) (#​44721) (c898019)

Miscellaneous Chores

• deps: lock file maintenance (main) (#​44719) (4d42538)
• deps: update dependency tsdown to v0.22.7 (main) (#​44720) (90697a2)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.9 (main) (#​44723) (863d11b)

Build System

• deps: update dependency semantic-release to v25.0.7 (main) (#​44722) (365a407)

v43.272.0

Compare Source

Features

• platform-azure: initial bearer token auth support for Azure DevOps (#​43888) (0f06e63), closes #​22198

v43.271.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.5 (main) (#​44712) (3200bd4)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.8 (main) (#​44711) (37d4dd2)

v43.271.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.4 (main) (#​44710) (ac8e1d7)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.7 (main) (#​44709) (61d5247)

Code Refactoring

• linters: enabled oxlints func-style (#​44691) (58771bb)

Tests

• linters: add linting rule to enforce usage of host rules test util (#​44692) (5ad36a2)

v43.271.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.3 (main) (#​44708) (55df4c7)

Miscellaneous Chores

• deps: update dependency @​containerbase/istanbul-reports-html to v2.0.13 (main) (#​44706) (806133b)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.6 (main) (#​44707) (5e626a7)

v43.271.0

Compare Source

Features

• data: automatic update of static data (#​44699) (fc68aea)

v43.270.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.2 (main) (#​44705) (54d839d)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.5 (main) (#​44704) (fed170a)

v43.270.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.1 (main) (#​44703) (efe4c69)

Miscellaneous Chores

• deps: update dependency tar to v7.5.20 (main) (#​44702) (aa18088)
• deps: update dependency tsdown to v0.22.5 (main) (#​44696) (ffa5bbb)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.4 (main) (#​44700) (aae1338)

v43.270.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: bd45869c-945e-462f-8c86-3f4aa29c5c00

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}