Skip to content

Commit 9064156

Browse files
authored
Merge branch 'main' into fix/go-mod-toolchain
2 parents 6f2afba + a87dea4 commit 9064156

File tree

191 files changed

+7614
-3178
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

191 files changed

+7614
-3178
lines changed

.devcontainer/Dockerfile

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
1-
FROM ghcr.io/containerbase/devcontainer:13.8.5
1+
FROM ghcr.io/containerbase/devcontainer:13.8.9
22

33
# https://github.com/pnpm/pnpm/issues/8971
44
# renovate: datasource=npm
5-
RUN install-tool pnpm 10.6.0
5+
RUN install-tool pnpm 10.6.5

.github/actions/calculate-prefetch-matrix/action.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ runs:
3434
3535
- name: Check cache miss for MacOS
3636
id: macos-cache
37-
uses: actions/cache/restore@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
37+
uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
3838
with:
3939
path: node_modules
4040
key: ${{ env.MACOS_KEY }}
@@ -43,7 +43,7 @@ runs:
4343

4444
- name: Check cache miss for Windows
4545
id: windows-cache
46-
uses: actions/cache/restore@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
46+
uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
4747
with:
4848
path: node_modules
4949
key: ${{ env.WINDOWS_KEY }}

.github/actions/setup-node/action.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ runs:
3434
3535
- name: Restore `node_modules`
3636
id: node-modules-restore
37-
uses: actions/cache/restore@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
37+
uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
3838
with:
3939
path: node_modules
4040
key: ${{ env.CACHE_KEY }}
@@ -53,7 +53,7 @@ runs:
5353
standalone: true
5454

5555
- name: Setup Node
56-
uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
56+
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
5757
with:
5858
node-version: ${{ inputs.node-version }}
5959

@@ -64,7 +64,7 @@ runs:
6464
6565
- name: Cache and restore `pnpm store`
6666
if: env.CACHE_HIT != 'true'
67-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
67+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
6868
with:
6969
path: ${{ env.PNPM_STORE }}
7070
key: |
@@ -87,7 +87,7 @@ runs:
8787

8888
- name: Write `node_modules` cache
8989
if: inputs.save-cache == 'true' && env.CACHE_HIT != 'true'
90-
uses: actions/cache/save@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
90+
uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
9191
with:
9292
path: node_modules
9393
key: ${{ env.CACHE_KEY }}

.github/label-actions.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -632,10 +632,10 @@
632632
Hi there,
633633
634634
635-
You are seeing this message because someone - maybe you - has suggested that the documentation should be improved.
635+
Someone (maybe even you) suggested the documentation should be improved.
636636
637637
638-
The good news is that essentially all Renovate documentation is Open Source in this repository and can be improved by you too! If you have a suggestion for improvement, please consider opening a PR to improve the documentation, instead of just complaining about it (however subtlely or politely you intended it). Even if English isn't your first language or you're not _sure_ what to write, take a shot at it and we will guide you during the PR review. Documentation updates can be done easily in your browser on GitHub.com and do not require you to clone any code.
638+
Good news, nearly all Renovate documentation is Open Source. This means you can improve the docs yourself! Please consider opening a PR to improve our documentation, instead of complaining (however subtly or politely). Even if English isn't your first language, or you're not _sure_ what to write, please open a PR anyway. We will help you to finish the PR. You can make changes to our docs in your browser on GitHub.com. You don't need to clone any code with Git.
639639
640640
641641
Thanks, the Renovate

.github/workflows/build.yml

+19-19
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ env:
3434
# are we on a release branch?
3535
DO_REALEASE: ${{ github.ref_name == github.event.repository.default_branch || github.ref_name == 'next' || startsWith(github.ref_name, 'maint/')}}
3636
NODE_VERSION: 22
37-
PDM_VERSION: 2.22.4 # renovate: datasource=pypi depName=pdm
37+
PDM_VERSION: 2.23.0 # renovate: datasource=pypi depName=pdm
3838
DRY_RUN: true
3939
TEST_LEGACY_DECRYPTION: true
4040
SPARSE_CHECKOUT: |-
@@ -209,7 +209,7 @@ jobs:
209209
os: ${{ runner.os }}
210210

211211
- name: Restore eslint cache
212-
uses: actions/cache/restore@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
212+
uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
213213
with:
214214
path: .cache/eslint
215215
key: eslint-cache
@@ -220,7 +220,7 @@ jobs:
220220

221221
- name: Save eslint cache
222222
if: github.event_name == 'push'
223-
uses: actions/cache/save@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
223+
uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
224224
with:
225225
path: .cache/eslint
226226
key: eslint-cache-${{ github.run_id }}-${{ github.run_attempt }}
@@ -244,7 +244,7 @@ jobs:
244244
os: ${{ runner.os }}
245245

246246
- name: Restore prettier cache
247-
uses: actions/cache/restore@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
247+
uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
248248
with:
249249
path: .cache/prettier
250250
key: prettier-cache
@@ -261,7 +261,7 @@ jobs:
261261
262262
- name: Save prettier cache
263263
if: github.event_name == 'push'
264-
uses: actions/cache/save@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
264+
uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
265265
with:
266266
path: .cache/prettier
267267
key: prettier-cache-${{ github.run_id }}-${{ github.run_attempt }}
@@ -357,7 +357,7 @@ jobs:
357357
os: ${{ runner.os }}
358358

359359
- name: Cache vitest
360-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
360+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
361361
with:
362362
path: .cache/vitest
363363
key: |
@@ -394,7 +394,7 @@ jobs:
394394
395395
- name: Save coverage artifacts
396396
if: (success() || failure()) && github.event.pull_request.draft != true && matrix.coverage
397-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
397+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
398398
with:
399399
name: ${{ matrix.upload-artifact-name }}
400400
path: |
@@ -414,7 +414,7 @@ jobs:
414414
show-progress: false
415415

416416
- name: Download coverage reports
417-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
417+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
418418
with:
419419
pattern: coverage-*
420420
path: coverage
@@ -450,7 +450,7 @@ jobs:
450450
os: ${{ runner.os }}
451451

452452
- name: Download coverage reports
453-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
453+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
454454
with:
455455
pattern: coverage-*
456456
path: coverage
@@ -465,10 +465,10 @@ jobs:
465465
- name: Check coverage threshold
466466
run: |
467467
pnpm nyc check-coverage -t ./coverage/nyc \
468-
--branches 97.5 \
469-
--functions 98.98 \
470-
--lines 97.84 \
471-
--statements 97.84
468+
--branches 98.16 \
469+
--functions 99.51 \
470+
--lines 98.22 \
471+
--statements 98.22
472472
473473
# Catch-all required check for test matrix and coverage
474474
test-success:
@@ -542,7 +542,7 @@ jobs:
542542
run: pnpm build
543543

544544
- name: Upload dist
545-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
545+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
546546
with:
547547
name: renovate-dist
548548
path: dist/
@@ -560,7 +560,7 @@ jobs:
560560
show-progress: false
561561

562562
- name: Download dist
563-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
563+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
564564
with:
565565
name: renovate-dist
566566
path: dist/
@@ -605,7 +605,7 @@ jobs:
605605
os: ${{ runner.os }}
606606

607607
- name: Setup PDM
608-
uses: pdm-project/setup-pdm@b2472ca4258a9ea3aee813980a0100a2261a42fc # v4.2
608+
uses: pdm-project/setup-pdm@deb8d8a4e2a03aabcef6f2cc981923fc6b29ef99 # v4.3
609609
with:
610610
python-version-file: .python-version
611611
version: ${{ env.PDM_VERSION }}
@@ -624,7 +624,7 @@ jobs:
624624
run: pnpm test:docs
625625

626626
- name: Upload
627-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
627+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
628628
with:
629629
name: docs
630630
path: tmp/docs/
@@ -652,7 +652,7 @@ jobs:
652652
os: ${{ runner.os }}
653653

654654
- name: Download dist
655-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
655+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
656656
with:
657657
name: renovate-dist
658658
path: dist/
@@ -698,7 +698,7 @@ jobs:
698698
show-progress: false
699699

700700
- name: docker-config
701-
uses: containerbase/internal-tools@1a9a958e2982661f0baa123ce50aeba1a8726e3c # v3.10.8
701+
uses: containerbase/internal-tools@7807ec3af0a167c5733e085c55bab1e4c5d14949 # v3.10.15
702702
with:
703703
command: docker-config
704704

.github/workflows/codeql-analysis.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
4242
# Initializes the CodeQL tools for scanning.
4343
- name: Initialize CodeQL
44-
uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
44+
uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
4545
with:
4646
languages: javascript
4747

@@ -51,7 +51,7 @@ jobs:
5151
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
5252
# If this step fails, then you should remove it and run the build manually (see below)
5353
- name: Autobuild
54-
uses: github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
54+
uses: github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
5555

5656
# ℹ️ Command-line programs to run using the OS shell.
5757
# 📚 https://git.io/JvXDl
@@ -65,4 +65,4 @@ jobs:
6565
# make release
6666

6767
- name: Perform CodeQL Analysis
68-
uses: github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
68+
uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13

.github/workflows/dependency-review.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,4 +14,4 @@ jobs:
1414
show-progress: false
1515

1616
- name: 'Dependency Review'
17-
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
17+
uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0

.github/workflows/scorecard.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -43,14 +43,14 @@ jobs:
4343
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
4444
# format to the repository Actions tab.
4545
- name: 'Upload artifact'
46-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
46+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
4747
with:
4848
name: SARIF file
4949
path: results.sarif
5050
retention-days: 5
5151

5252
# Upload the results to GitHub's code scanning dashboard.
5353
- name: 'Upload to code-scanning'
54-
uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
54+
uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
5555
with:
5656
sarif_file: results.sarif

.github/workflows/trivy.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -25,13 +25,13 @@ jobs:
2525
with:
2626
show-progress: false
2727

28-
- uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # 0.29.0
28+
- uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
2929
with:
3030
image-ref: ghcr.io/renovatebot/renovate:${{ matrix.tag }}
3131
format: 'sarif'
3232
output: 'trivy-results.sarif'
3333

34-
- uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
34+
- uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
3535
with:
3636
sarif_file: trivy-results.sarif
3737
category: 'docker-image-${{ matrix.tag }}'

.github/workflows/update-data.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
standalone: true
2828

2929
- name: Set up Node.js ${{ env.NODE_VERSION }}
30-
uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
30+
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
3131
with:
3232
node-version: ${{ env.NODE_VERSION }}
3333
cache: pnpm

docs/development/docs-site.md

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
# Docs site
2+
3+
The [Renovate docs site](https://docs.renovatebot.com) is built from [a dedicated publishing repository](https://github.com/renovatebot/renovatebot.github.io) that pulls the source files from [this repository](../usage/).
4+
5+
The publishing process is triggered automatically via Renovate updates.
6+
If you have submitted a documentation PR and your changes are not published within a day feel free to ping the maintainers.

docs/usage/configuration-options.md

+20
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,14 @@ With the above config:
7979
- ESLint dependencies will have the label `linting`
8080
- All other dependencies will have the label `dependencies`
8181

82+
If you want to use dynamic labels, you can use [templates](./templates.md) such as this example using `depName` for `addLabels`:
83+
84+
```json
85+
{
86+
"addLabels": ["{{depName}}"]
87+
}
88+
```
89+
8290
<!-- prettier-ignore -->
8391
!!! note
8492
Keep your labels within the maximum character limit for your Git hosting platform.
@@ -2438,6 +2446,17 @@ In those cases a feature request needs to be implemented.
24382446
!!! warning "Warning for Maven users"
24392447
For `minimumReleaseAge` to work, the Maven source must return reliable `last-modified` headers.
24402448

2449+
<!-- markdownlint-disable MD046 -->
2450+
If your custom Maven source registry is **pull-through** and does _not_ support the `last-modified` header, like GAR (Google Artifact Registry's Maven implementation) then you can extend the Maven source registry URL with `https://repo1.maven.org/maven2` as the first item. Then the `currentVersionTimestamp` via `last-modified` will be taken from Maven central for public dependencies.
2451+
2452+
```json
2453+
"registryUrls": [
2454+
"https://repo1.maven.org/maven2",
2455+
"https://europe-maven.pkg.dev/org-artifacts/maven-virtual"
2456+
],
2457+
```
2458+
<!-- markdownlint-enable MD046 -->
2459+
24412460
<!-- prettier-ignore -->
24422461
!!! note
24432462
Configuring this option will add a `renovate/stability-days` option to the status checks.
@@ -3462,6 +3481,7 @@ Table with options:
34623481
| `gomodSkipVendor` | Never run `go mod vendor` after Go module updates. |
34633482
| `gomodVendor` | Always run `go mod vendor` after Go module updates even if vendor files aren't detected. |
34643483
| `helmUpdateSubChartArchives` | Update subchart archives in the `/charts` folder. |
3484+
| `kustomizeInflateHelmCharts` | Inflate updated helm charts referenced in the kustomization. |
34653485
| `npmDedupe` | Run `npm install` with `--prefer-dedupe` for npm >= 7 or `npm dedupe` after `package-lock.json` update for npm <= 6. |
34663486
| `pnpmDedupe` | Run `pnpm dedupe --config.ignore-scripts=true` after `pnpm-lock.yaml` updates. |
34673487
| `yarnDedupeFewer` | Run `yarn-deduplicate --strategy fewer` after `yarn.lock` updates. |

docs/usage/docker.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -307,7 +307,7 @@ Renovate will get the credentials with the [`google-auth-library`](https://www.n
307307
service_account: ${{ env.SERVICE_ACCOUNT }}
308308

309309
- name: renovate
310-
uses: renovatebot/[email protected].14
310+
uses: renovatebot/[email protected].18
311311
env:
312312
RENOVATE_HOST_RULES: |
313313
[
@@ -478,7 +478,7 @@ Make sure to install the Google Cloud SDK into the custom image, as you need the
478478
For example:
479479

480480
```Dockerfile
481-
FROM renovate/renovate:39.178.1
481+
FROM renovate/renovate:39.222.1
482482
# Include the "Docker tip" which you can find here https://cloud.google.com/sdk/docs/install
483483
# under "Installation" for "Debian/Ubuntu"
484484
RUN ...

docs/usage/examples/opentelemetry.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ services:
3636
otel-collector:
3737
# Using the Contrib version to access the spanmetrics connector.
3838
# If you don't need the spanmetrics connector, you can use the standard version
39-
image: otel/opentelemetry-collector-contrib:0.121.0
39+
image: otel/opentelemetry-collector-contrib:0.122.1
4040
volumes:
4141
- ./otel-collector-config.yml:/etc/otelcol-contrib/config.yaml
4242
ports:

0 commit comments

Comments
 (0)