Skip to content

Update npm package renovate to v44.167.2 - #12

Open
hash-dependencies[bot] wants to merge 1 commit into
mainfrom
deps/js/renovate-44.x
Open

hash-dependencies[bot] wants to merge 1 commit into
mainfrom
deps/js/renovate-44.x

Conversation

@hash-dependencies

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
renovate (source) 44.148.1 → 44.167.2 age confidence

Release Notes

renovatebot/renovate (renovate)

v44.167.2

Compare Source

Build System

v44.167.1

Compare Source

Documentation
Build System

v44.167.0

Compare Source

Features
Miscellaneous Chores

v44.166.0

Compare Source

Features

v44.165.3

Compare Source

Code Refactoring
Build System

v44.165.2

Compare Source

Bug Fixes

v44.165.1

Compare Source

Bug Fixes
Miscellaneous Chores
Build System

v44.165.0

Compare Source

Features
Miscellaneous Chores
  • deps: update dependency smol-toml@<=1.8.0 to v1.9.1 (main) (#​47104) (1a5643c)
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.42.0 (main) (#​47111) (f7e658d)
  • deps: update jdx/mise-action action to v5.2.0 (main) (#​47106) (e21b57b)
Code Refactoring
  • datasource: move the git host tags datasources onto GitHostTagsDigestDatasource (#​46896) (b8f6dbb)
  • versioning/gomod: parse the commit of pseudo-versions (#​47097) (7286ebe)

v44.164.10

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.41.1 (main) (#​47099) (fce5e50)

v44.164.9

Compare Source

Bug Fixes
  • platform/scm-manager: use a fallback username in token clone URLs (#​47084) (b634cdc)

v44.164.8

Compare Source

Bug Fixes
  • util/exec: pick tool releases compatible with their parent tool version (#​47090) (df201a9)

v44.164.7

Compare Source

Bug Fixes
Miscellaneous Chores

v44.164.6

Compare Source

Build System

v44.164.5

Compare Source

Bug Fixes

v44.164.4

Compare Source

Bug Fixes
  • util/git: use non-empty passwords for token credentials on more platforms (#​47085) (969b3cb)

v44.164.3

Compare Source

Bug Fixes
Miscellaneous Chores

v44.164.2

Compare Source

Bug Fixes
  • platform/gitea,forgejo: use a non-empty password in token clone URLs (#​47076) (99132db)
  • util/git: use a non-empty password for token-only git credentials (#​47077) (a9677c3)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.41.0 (main) (#​47074) (c49d1be)
  • deps: update github/codeql-action action to v4.39.0 (main) (#​47075) (9602e06)

v44.164.1

Compare Source

Bug Fixes
  • platform/github: use x-access-token for personal access tokens in clone URLs (#​47073) (6cc8898)

v44.164.0

Compare Source

Features
  • datasource/go: look up modules from a go-import mod proxy (#​47044) (0876273)

v44.163.0

Compare Source

Features

v44.162.0

Compare Source

Features
  • util/http: fall back to go host rules for go-proxy requests (#​47043) (1dce2f8)

v44.161.2

Compare Source

Bug Fixes
  • manager/poetry: disable implicit PyPI when primary sources exist (#​46977) (ab62282)
Miscellaneous Chores

v44.161.1

Compare Source

Bug Fixes

v44.161.0

Compare Source

Features
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.40.0 (main) (#​47057) (1f158f6)

v44.160.1

Compare Source

Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.39.0 (main) (#​47055) (69e9441)
Build System
  • deps: update dependency google-auth-library to v11.2.0 (main) (#​47056) (e2c5336)

v44.160.0

Compare Source

Features

v44.159.0

Compare Source

Features

v44.158.3

Compare Source

Bug Fixes
  • deps: update dependency github/gh-actions-lock to v0.2.0 (main) (#​46976) (129f078)

v44.158.2

Compare Source

Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.38.0 (main) (#​47051) (943658a)
Tests
  • manager/github-actions: update pinned version of gh actions-lock via Renovate (#​46987) (fc4719b)
Build System

v44.158.1

Compare Source

Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.37.0 (main) (#​47039) (6970c0b)
Build System

v44.158.0

Compare Source

Features

v44.157.1

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.36.0 (main) (#​47029) (b2e0191)

v44.157.0

Compare Source

Features
Tests
Build System

v44.156.3

Compare Source

Bug Fixes
  • datasource/go: treat modules with go host rule credentials as private (#​47031) (28ed2ee)

v44.156.2

Compare Source

Bug Fixes
Tests

v44.156.1

Compare Source

Bug Fixes

v44.156.0

Compare Source

Features
Miscellaneous Chores

v44.155.8

Compare Source

Build System

v44.155.7

Compare Source

Miscellaneous Chores
  • deps: update dependency katex@>=0.11.0 <0.18.2 to v0.19.0 (main) (#​47018) (5c074fd)
  • deps: update dependency shell-quote@>=1.8.4 <1.11.0 to v1.12.0 (main) (#​47019) (7c9f750)
Build System

v44.155.6

Compare Source

Bug Fixes
  • deps: override transitive dependencies flagged by pnpm audit (#​46996) (66c56b5)

v44.155.5

Compare Source

Bug Fixes
  • http: share concurrent identical cache provider requests (#​46627) (4dc30ea)

v44.155.4

Compare Source

Build System

v44.155.3

Compare Source

Bug Fixes
  • workers/reconfigure: pass default branch to extraction config (#​46997) (5a3bfc0)
Documentation
  • Correct platform feature support table for Dependency Dashboard (#​46777) (109fc99)

v44.155.2

Compare Source

Bug Fixes
  • datasource/gitea-tags: return no digest for a missing repo or tag (#​46984) (690da35)
  • workers/repository: keep lookup results out of the extract cache (#​46982) (ad515fb)
Miscellaneous Chores

v44.155.1

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.32.1 (main) (#​46972) (9947ade)

v44.155.0

Compare Source

Features

v44.154.1

Compare Source

Bug Fixes

v44.154.0

Compare Source

Features
Bug Fixes
  • workers/global: apply hostRules and internalHostAccess when resolving globalExtends (#​46666) (cf46a67)

v44.153.1

Compare Source

Bug Fixes
  • metadata: strip git+ scheme prefix from source urls for changelog fetching (#​45941) (476456b)
  • platform/github: replace rendered alerts after smart truncation (#​45613) (179f69c)

v44.153.0

Compare Source

Features
  • manager/apm: scope per-package tags to their own package (#​46737) (7a03427)

v44.152.0

Compare Source

Features
Bug Fixes
Miscellaneous Chores
Code Refactoring
Tests
  • json-schema: validate internal presets against the schema (#​46686) (2e22e1a)

v44.151.5

Compare Source

Bug Fixes
Code Refactoring

v44.151.4

Compare Source

Bug Fixes
  • config/validation: don't warn about a restricted option encrypted at the top level (#​46941) (67fa755), closes #​43020
  • json-schema: specify missing additionalProperties for maps of values (#​46681) (df8fe3d)

v44.151.3

Compare Source

Bug Fixes
  • datasource/gitlab-tags: don't cache failed digest lookups (#​46904) (fdedac1)
  • datasource/gitlab-tags: encode the ref of digest lookups (#​46905) (a551698)
Documentation
  • update references to astral-sh/setup-uv to v10.3.0 (main) (#​46932) (b28f4eb)
  • update references to jaegertracing/jaeger to v2.22.0 (main) (#​46934) (cb8a6d6)
  • update references to renovatebot/github-action to v46.3.8 (main) (#​46931) (9c127ee)
Miscellaneous Chores
  • deps: update ossf/scorecard-action action to v2.5.0 (main) (#​46933) (fa41347)

v44.151.2

Compare Source

Bug Fixes
Build System

v44.151.1

Compare Source

Bug Fixes
Documentation

v44.151.0

Compare Source

Features
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.31.2 (main) (#​46917) (2fa8494)

v44.150.1

Compare Source

Bug Fixes

v44.150.0

Compare Source

Features
Miscellaneous Chores

v44.149.3

Compare Source

Bug Fixes
Documentation
  • github: group App permissions by repository and organization (#​46898) (05c7494)
Miscellaneous Chores
  • deps: update dependency pnpm to v11.28.4 (main) (#​46907) (0d357aa)
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.31.1 (main) (#​46908) (324e6a1)
  • deps: update pnpm/setup action to v3.1.1 (main) (#​46906) (f52a8ae)
  • tools: allow ambient environment in agent hook simple-git (#​46899) (3fc4836)

v44.149.2

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update astral-sh/setup-uv action to v10.3.0 (main) (#​46893) (0f667f9)

v44.149.1

Compare Source

Bug Fixes
Miscellaneous Chores

v44.149.0

Compare Source

Features
Documentation
  • docker-build-process: remove Containerbase Sidecar image (#​46880) (05ec2f8)

v44.148.6

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.31.0 (main) (#​46875) (f4c5ff9)
Build System

v44.148.5

Compare Source

Bug Fixes
Miscellaneous Chores

v44.148.4

Compare Source

Bug Fixes

❗ Important

✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 4am every weekday,every weekend"
  • Automerge
    • "before 4am every weekday,every weekend"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@hash-dependencies

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: .github/actions/install-renovate/package-lock.json

npm --before could not be enforced because existing locked packages were published after the minimumReleaseAge cutoff. This will resolve after the next lock file maintenance run.

@cursor

cursor Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

PR Summary

Low Risk
CI-only dependency pin for the Renovate installer action; no runtime application changes.

Overview
Bumps the centrally pinned renovate devDependency in .github/actions/install-renovate from 44.148.1 to 44.167.2, with the matching package-lock.json refresh (including transitive updates such as OpenTelemetry, @containerbase/base, and @renovatebot/base-image).

That pin is what the Install Renovate composite action installs via npm ci, so housekeeping/dependency workflows pick up whatever fixes and behavior ship in Renovate between those versions—without changing application code.

Reviewed by Cursor Bugbot for commit 5ac08b6. Bugbot is set up for automated code reviews on this repo. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant