[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
renovate (source)	44.188.4 → 44.198.0

---

Release Notes

renovatebot/renovate (renovate)

v44.198.0

Compare Source

Features

• deps: update renovate-base-image to v13.149.0 (main) (#​47569) (01e87b7)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.57.1 (main) (#​47567) (4b34d0c)
• deps: update jdx/jactionlint action to v2.4.0 (main) (#​47568) (218c428)

v44.197.1

Compare Source

Miscellaneous Chores

• deps: update dependency npm-run-all2 to v9.0.4 (main) (#​47565) (00857ba)

Build System

• deps: update dependency @​renovatebot/osv-offline to v4.4.0 (main) (#​47566) (47db020)

v44.197.0

Compare Source

Features

• report: surface additional repository metadata in report (#​44683) (2ab1bb5)

Miscellaneous Chores

• deps: update linters (main) (#​47441) (c12fb01)

Build System

• deps: update dependency node to v24.22.2 (main) (#​47564) (d003cdf)

v44.196.1

Compare Source

Documentation

• minimum-release-age: document package manager integrations (#​47531) (5608a40)

Miscellaneous Chores

• minimum-release-age: add minimumReleaseAgeExtracted and manager enforcement (#​47501) (cf6c3de)

Build System

• replace the exec release commands with a local semantic-release plugin (#​47563) (d27a0fe)

v44.196.0

Compare Source

Features

• presets/monorepos: add logtape (#​46882) (9b2e538)
• presets/replacements: add replacement for de.monochromata.cucumber:reporting-plugin (#​47509) (0f0d0a4)
• presets: add SimpleWebAuthn monorepo group (#​44625) (4319d9c)

Bug Fixes

• manager/cargo: detect an unchanged lock file (#​47561) (c4ed070)
• manager/conan: detect an unchanged lock file (#​47560) (1430baf)
• presets/monorepo: add prisma/orm and prisma/prisma-cli to prisma (#​47192) (cf82b5d)

Documentation

• FAQ: clarify Azure DevOps and GitLab.com support on Mend-hosted apps (#​47003) (de04d5e)
• manager/pre-commit: document frozen rev behavior (#​46440) (50f6e84)
• opentelemetry: handle ingesting large lines of JSONL (#​46607) (c080b98)

Miscellaneous Chores

• pr-template: require humans fill in "why no minimal repro" (#​47556) (a4ca4f3)
• workers/repository: fix typo in log message (#​46988) (cc5ad6a)

v44.195.1

Compare Source

Bug Fixes

• platform/codecommit: use default import for aws4 (#​47549) (cc35d3f)
• util/markdown: support four-backtick fences when sanitizing mentions (#​47550) (50e260a)

Documentation

• config: document the osv-offline environment variables (#​47515) (80787f1)

Miscellaneous Chores

• use reproduction checkboxes in PR template and add auto:pr-reproduction label action (#​46887) (2cc2e9c)

Code Refactoring

• vulnerabilities: use default import for ae-cvss-calculator (#​47551) (e20d797)

Tests

• import CommonJS packages like Node in vitest (#​47553) (edfcc93)

Continuous Integration

• docs: cache mkdocs external assets (#​47557) (71713f2)

v44.195.0

Compare Source

Features

• presets: keep Guava on its jre or android variant (#​47554) (e602628)

v44.194.0

Compare Source

Features

• managers: add Paket manager support (#​37287) (bdf434d), closes #​44914

v44.193.1

Compare Source

Bug Fixes

• dashboard: keep dependencyDashboardIssue in sync with the open dashboard (#​47324) (f269819)

v44.193.0

Compare Source

Features

• presets: add oxfmt to packages:linters (#​47383) (e39f379)

Documentation

• types: add supportsTransitiveRemediation (#​47505) (4f92c59), closes #​46377
• types: add a type for Vulnerability Alerts' sources (#​47504) (6bdc798), closes #​44153 #​45486 #​46378

v44.192.2

Compare Source

Build System

• deps: update dependency cronstrue to v3.38.0 (main) (#​47536) (16a786a)

v44.192.1

Compare Source

Code Refactoring

• types: add MinimumReleaseAgeConfig (#​47526) (5555687)

Build System

• deps: update dependency @​renovatebot/good-enough-parser to v3 (main) (#​47533) (03d2709)

v44.192.0

Compare Source

Features

• deps: update renovate-base-image to v13.147.0 (main) (#​47528) (859ad0d)

Miscellaneous Chores

• deps: update dependency markdownlint-cli2 to v0.24.0 (main) (#​47525) (cf0190b)
• deps: update dependency pnpm to v11.28.7 (main) (#​47524) (3587f0c)

v44.191.0

Compare Source

Features

• manager/maven-wrapper: add private packages support (#​38879) (323dfce), closes #​25805 #​25805 #​25805 #​25805 #​25805 #​40700

Bug Fixes

• datasource: validate release constraints with the constraint versioning (#​47518) (2daf5fc)
• manager/composer: quote update arguments once (#​47503) (d1dcbfd)

Miscellaneous Chores

• deps: update astral-sh/setup-uv action to v10.3.3 (main) (#​47523) (55708d6)
• deps: update dependency vite to v8.3.5 (main) (#​47499) (57ac5e7)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.56.0 (main) (#​47496) (036fb1e)

Code Refactoring

• manager/composer: build update arguments with a template literal (#​47512) (e7c8a5c)

Tests

• datasource: cover release constraints with an overridden constraint versioning (#​47519) (eacbb33)
• manager/composer: cover quoting of update arguments (#​47511) (05f65d2)

Build System

• deps: update dependency @​renovatebot/osv-offline to v4.2.0 (main) (#​47516) (d02cec7)

v44.190.2

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.145.4 (main) (#​47498) (18d5a5e)

v44.190.1

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.145.3 (main) (#​47494) (c20d945)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.55.2 (main) (#​47493) (9d6f3d3)

v44.190.0

Compare Source

Features

• static-data: update Node.js release schedule (#​47417) (ec10d67)

v44.189.0

Compare Source

Features

• vulnerabilities: allow performing lockfile only transitive security updates (#​46391) (4718945), closes #​47478

Miscellaneous Chores

• deps: migrate to jactionlint (#​47427) (3fd9c27)
• deps: pin GitHub Actions lockfile (#​47429) (331056f)
• deps: use self-repository reference for Actions (#​47428) (839eab1)

Continuous Integration

• actions/setup-docker: remove useless use of cat (#​47425) (f629d9c)
• actions/setup-node: ignore SC2016 findings (#​47426) (70366a8)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 801f1ad5-df16-40ec-8df1-20ae932a7b4e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts