chore(deps): update dependency renovate to v37.440.7 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
renovate (source)	37.105.3 -> 37.440.7

---

Release Notes

renovatebot/renovate (renovate)

v37.440.7

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.28.1 (#​30356) (622497c)

Miscellaneous Chores

• deps: update dependency husky to v9.1.0 (#​30353) (08a63b6)
• deps: update dependency husky to v9.1.1 (#​30355) (6a2e131)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v10.17.0 (#​30351) (32c2622)

v37.440.6

Compare Source

Miscellaneous Chores

• deps: update dependency type-fest to v4.22.0 (#​30343) (874b260)
• deps: update dependency type-fest to v4.23.0 (#​30344) (fa87062)

Build System

• fix node args (#​30347) (b9c46b9)

v37.440.5

Compare Source

Documentation

• config options: clarify silent mode behavior (#​29866) (aebdc9f)

Miscellaneous Chores

• deps: pin docker/dockerfile docker tag to fe40cf4 (#​30330) (cdd7457)
• deps: update containerbase/internal-tools action to v3.3.11 (#​30331) (ffa3d20)
• deps: update dependency @​types/node to v18.19.40 (#​30338) (4daa0e5)
• deps: update dependency @​types/node to v18.19.42 (#​30340) (9036c46)

Build System

• deps: update dependency semver to v7.6.3 (#​30337) (c5b8d67)

v37.440.4

Compare Source

Build System

• improve docker build step (#​30327) (db18662)

v37.440.3

Compare Source

Bug Fixes

• bitbucket-server: replace multiline html comments (#​30328) (69563d3)

v37.440.2

Compare Source

Documentation

• fix typo on datasource (#​30325) (81248c3)

Build System

• fix docker cache overwrite (#​30326) (59fc3b4)

v37.440.1

Compare Source

Documentation

• fix changelogUrl description (#​30305) (c219c8f)

Miscellaneous Chores

• deps: update dependency @​types/lodash to v4.17.7 (#​30317) (99c52f9)
• deps: update dependency typescript to v5.5.4 (#​30314) (730ff7b)

Build System

• use static node binary on docker images (#​30324) (e13247e)

v37.440.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.28.0 (#​30311) (8fdfa13)

v37.439.0

Compare Source

Features

• http: Force default rate limits for some known hosts (#​30207) (8d183d6)

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v10.16.0 (#​30309) (e286902)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v3.3.10 (#​30289) (5c28898)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v10.16.0 (#​30308) (e76d96e)

v37.438.5

Compare Source

Bug Fixes

• bitbucket-server: Clarify error when both BB password and access token are set (#​30296) (3a35375)
• nuget: always coalesce sourceUrl and homepage if homepage available (#​30227) (7dd6325)

Documentation

• datasource/custom: rewrite debugging section (#​30250) (94e333f)
• migrating secrets: rewrite (#​30302) (9817dde)

v37.438.4

Compare Source

Build System

• deps: update dependency git-url-parse to v14.1.0 (#​30300) (6ef9445)

v37.438.3

Compare Source

Documentation

• update references to renovate/renovate to v37.438.2 (#​30287) (80f134e)

Miscellaneous Chores

• deps: lock file maintenance (#​30288) (b7a521b)
• deps: update containerbase/internal-tools action to v3.3.9 (#​30286) (5ee3649)

Code Refactoring

• lib/data: replacements (#​30259) (d814d1e)

Build System

• allow es2023 (#​30292) (17eacd2)

v37.438.2

Compare Source

Bug Fixes

• mise: add config filenames (#​30283) (bd181d5)

v37.438.1

Compare Source

Bug Fixes

• helmfile: support case with oci repository in different document (#​30215) (0e330ea)

v37.438.0

Compare Source

Features

• package-rules: set skipStage (#​30264) (b6b85eb)

Miscellaneous Chores

• deps: update dependency typescript to v5.5.3 (#​29906) (1a1e1ac)
• improve logging for constraintsFiltering (#​30280) (e2a7586)

v37.437.3

Compare Source

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v10.15.6 (#​30276) (b542841)
• deps: update ghcr.io/renovatebot/base-image docker tag to v2.27.5 (#​30277) (120710f)

v37.437.2

Compare Source

Bug Fixes

• presets: do not pin pyenv docker (#​30270) (444a111)

Documentation

• added docs for migrating encrypted secrets (#​30132) (7ccebcc)
• Fix trailing punctuation lint (#​30275) (6f2acf7)

Miscellaneous Chores

• trace logging for versionCompatibility (#​30261) (e54a56f)

v37.437.1

Compare Source

Build System

• deps: update dependency prettier to v3.3.3 (#​30272) (be0bd3d)

v37.437.0

Compare Source

Features

• npm: handle github dependencies with semver versions (#​28261) (8dfb34b)

v37.436.0

Compare Source

Features

• managers/npm: add entries with protocol prefix in temporary .yarnrc.yml file (#​30058) (ca904f7)

Bug Fixes

• git/auth: fix insteadOf for bitbucket-server (#​29951) (f3ef173)
• platform: don't log if issues are disabled when closing (#​30267) (702ffbc)

Code Refactoring

• gomod: rename depName (#​30030) (50191de)

v37.435.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.27.4 (#​30263) (963c882)

Documentation

• manager/woodpecker: Fix outdated hyperlinks (#​30244) (56b4da1)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v10.15.6 (#​30262) (69495a1)

v37.435.0

Compare Source

Features

• asdf: Add gleam to asdf manager (#​30119) (107aff2)

v37.434.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.27.3 (#​30258) (5899144)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v3.3.8 (#​30257) (ca638ef)

Code Refactoring

• lib/data: monorepo (#​30210) (3384e68)

v37.434.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.27.2 (#​30254) (07ad2e4)

Miscellaneous Chores

• deps: update github/codeql-action action to v3.25.13 (#​30253) (bff53d1)

v37.434.1

Compare Source

Bug Fixes

• manager/circleci: optional jobs parameter (#​30251) (7272dd2)

v37.434.0

Compare Source

Features

• presets: group flyway dependencies (add to 'recommended') (#​30248) (8a5e291)

v37.433.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.27.1 (#​30245) (3d54939)

v37.433.1

Compare Source

Miscellaneous Chores

• datasource/custom: log data before jsonata processing (#​30241) (a13ab2c)

Build System

• deps: update dependency cacache to v18.0.4 (#​30239) (1c0fc37)

v37.433.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.27.0 (#​30237) (c833b85)

Miscellaneous Chores

• enabled json imports (#​30223) (2dfc542)

Tests

• changelog: Move fixture files (#​30225) (6907de1)

v37.432.0

Compare Source

Features

• presets: Add pothos as a monorepo (#​30196) (1b3cc58)

Miscellaneous Chores

• deps: update dependency ts-jest to v29.2.2 (#​30192) (81c980e)
• deps: update linters to v7.16.1 (#​30193) (b7d051e)

Code Refactoring

• rename platformOptions -> platformPrOptions (#​30173) (4b50202)
• Split error handling helpers for promise utils (#​30195) (ee3ad7f)

v37.431.7

Compare Source

Bug Fixes

• datasource/go: support go proxy with abortOnError (#​29823) (38582c1)

Miscellaneous Chores

• deps: update dependency ts-jest to v29.2.0 (#​30190) (4b58930)
• deps: update linters to v7.16.0 (#​30191) (d6c6d83)

v37.431.6

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.26.1 (#​30188) (79ba047)

v37.431.5

Compare Source

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v10.15.5 (#​30186) (ef1cae7)

Documentation

• config options: example to limit registryAliases to one manager (#​30038) (911e211)
• update references to renovate/renovate to v37.431.4 (#​30175) (2ea6632)

Miscellaneous Chores

• deps: lock file maintenance (#​30176) (6f763dc)
• deps: lock file maintenance (#​30178) (4ecb60e)
• deps: update containerbase/internal-tools action to v3.3.7 (#​30177) (30f79e1)
• deps: update dependency @​swc/core to v1.6.13 (#​30167) (da33634)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v10.15.5 (#​30183) (904c0d0)
• deps: update pnpm to v9.5.0 (#​30172) (af5a12b)

v37.431.4

Compare Source

Bug Fixes

• manager/dockerfile: remove bom marker (#​30156) (198de58)

v37.431.3

Compare Source

Miscellaneous Chores

• deps: update dependency rimraf to v5.0.8 (#​30160) (671fa27)
• deps: update dependency rimraf to v5.0.9 (#​30162) (abfa85a)
• platform/github: add schemas for Github content REST API (#​30154) (574ca2c)

Build System

• deps: update dependency glob to v10.4.5 (#​30159) (b03ce8c)
• deps: update dependency lru-cache to v10.4.3 (#​30161) (e54b56d)

v37.431.2

Compare Source

Build System

• deps: update dependency lru-cache to v10.3.1 (#​30158) (451ab96)

v37.431.1

Compare Source

Tests

• Add tests for datasource index-level caching (#​30153) (34478a6)

Build System

• deps: update dependency glob to v10.4.3 (#​30157) (1d1cf0b)

v37.431.0

Compare Source

Features

• Support cachePrivatePackages option for datasource index level (#​30120) (4aca729)

v37.430.0

Compare Source

Features

• Support cachePrivatePackages for Maven datasource (#​30126) (7c7063d)

Miscellaneous Chores

• deps: update github/codeql-action action to v3.25.12 (#​30147) (34c56e3)

Code Refactoring

• manager/circleci: replace regex system with YAML parsing (#​30142) (8d166a3)

v37.429.1

Compare Source

Bug Fixes

• helmfile: remove templates before running updating artifacts (#​30139) (8e46980)

Miscellaneous Chores

• deps: update actions/dependency-review-action action to v4.3.4 (#​30143) (61e0c39)

v37.429.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.26.0 (#​30140) (3935cc2)

v37.428.3

Compare Source

Build System

• deps: update dependency @​opentelemetry/instrumentation-bunyan to v0.40.0 (#​30134) (911c572)

v37.428.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.25.2 (#​30130) (d280b5a)

v37.428.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.25.1 (#​30129) (fe4253d)

v37.428.0

Compare Source

Features

• gomod: Add gomodSkipVendor postUpdateOption (#​30025) (5f21e17)
• Support cachePrivatePackages for GitHub GraphQL tags and releases (#​30123) (650ac22)

Miscellaneous Chores

• deps: update dependency npm-run-all2 to v6.2.1 (#​30121) (20cca61)
• deps: update dependency npm-run-all2 to v6.2.2 (#​30122) (b4849b6)

v37.427.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.25.0 (#​30113) (1faa3be)

v37.426.5

Compare Source

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v10.15.3 (#​30110) (43e6b4d)

v37.426.4

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.24.6 (#​30106) (0af45fa)

Build System

• deps: update dependency redis to v4.6.15 (#​30107) (ceec2bc)

v37.426.3

Compare Source

Bug Fixes

• Restrict downgrade checks only to Docker versioning scheme (#​30105) (e12e493)

Documentation

• datasource/repology: fix typo (#​30097) (ea81fd2)
• update outdated docs for building Docker image (#​30096) (fc7372d)

Miscellaneous Chores

• deps: update actions/setup-node action to v4.0.3 (#​30103) (2695ca9)
• deps: update dependency type-fest to v4.21.0 (#​30100) (7846709)

v37.426.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.24.5 (#​30093) (9c0b54b)

v37.426.1

Compare Source

Bug Fixes

• azure: getRawFile not handling 404 for Azure DevOps (#​30066) (f444036)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v3.3.5 (#​30091) (057049b)
• deps: update dependency @​types/better-sqlite3 to v7.6.11 (#​30092) (d65effa)

v37.426.0

Compare Source

Features

• manager: add mise package manager (#​29950) (4a304b8)

v37.425.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.24.4 (#​30085) (0d6dfd1)

v37.425.2

Compare Source

Bug Fixes

• dependency-dashboard: fix truncated issue body (#​30081) (a02c850)

Documentation

• update references to renovate/renovate to v37.425.1 (#​30073) (7302656)

Miscellaneous Chores

• deps: lock file maintenance (#​30074) (8feaa98)
• deps: update containerbase/internal-tools action to v3.3.4 (#​30077) (aa1d18c)
• deps: update dependency eslint-plugin-promise to v6.4.0 (#​30078) (30eb408)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v10.15.3 (#​30084) (36a867c)
• deps: update linters to v7.15.0 (#​30080) (db638fb)
• disable swc (#​30082) (bf88709)

Code Refactoring

• extract commitMessage and prTitle functions (#​30049) (95a7af3)

Build System

• deps: update dependency @​cdktf/hcl2json to v0.20.8 (#​30083) (490e30c)

v37.425.1

Compare Source

Bug Fixes

• Use versioning comparison for release lookup filtering (#​30059) (5eacc5e)

v37.425.0

Compare Source

Features

• datasource/docker: Enable additional authentication mechansim for private ECR repositories (#​30053) (06349b9)

v37.424.4

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.24.3 (#​30070) (a1708c0)

Miscellaneous Chores

• deps: update dependency @​swc/core to v1.6.12 (#​30064) (f69b171)
• deps: update dependency @​swc/core to v1.6.6 (#​30063) (c241d04)

Code Refactoring

• extends doc migration (#​30065) (5ce4999)

v37.424.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.24.2 (#​30062) (f403b99)

v37.424.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.24.1 (#​30060) (f5dfe3f)

Miscellaneous Chores

• deps: update actions/download-artifact action to v4.1.8 (#​30056) (d724f1e)
• deps: update actions/upload-artifact action to v4.3.4 (#​30057) (8f99648)

Code Refactoring

• Lookup filtering of unstable releases (#​30054) (d88f6a4)

v37.424.1

Compare Source

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v3.3.3 (#​30047) (98d4e26)

Build System

• deps: update dependency lru-cache to v10.3.0 (#​30048) (3e3bb63)

v37.424.0

Compare Source

Features

• Add cachePrivatePackages global config option (#​30045) (8fc2a7b)

Documentation

• platform/gitlab: Mention Deploy Token (#​30042) (9666848)

Miscellaneous Chores

• deps: update dependency @​types/lodash to v4.17.6 (#​30044) (c30f7a3)

Code Refactoring

• Simplify release filtering internals (#​30021) (c55dc8e)

v37.423.1

Compare Source

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v10.15.2 (#​30028) (8f77da6)

Build System

• docker: use cross platform builds (#​29983) (a044db2)

v37.423.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.24.0 (#​30023) (c6f9b5b)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v10.15.1 (#​30024) (1d0e6ff)

Code Refactoring

• Simplify lambda function in lookup result filtering (#​30018) (a0d8d2b)

v37.422.4

Compare Source

Build System

• deps: update dependency azure-devops-node-api to v14.0.1 (#​30010) (c13315e)

v37.422.3

Compare Source

Build System

• deps: update dependency azure-devops-node-api to v14 (#​30008) (5b8ac36)
• deps: update dependency better-sqlite3 to v11.1.2 (#​30007) (a794c43)

v37.422.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.23.3 (#​30003) (862e91b)

Build System

• deps: update dependency toml-eslint-parser to v0.10.0 (#​30004) (1f56719)

v37.422.1

Compare Source

Code Refactoring

• Log release filtering caused by vulnerability alert (#​29997) (7b4798c)

Build System

• deps: update dependency minimatch to v9.0.5 (#​30001) (61aff8f)

v37.422.0

Compare Source

Features

• gerrit: use commit message footers to store source branch name (#​29802) (74aa3d7)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v10.13.1 (#​29985) (7b5809e)

v37.421.10

Compare Source

Bug Fixes

• bunyan: drop optional deps (#​29982) (161bc28)

v37.421.9

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v2.23.2 ([#

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sksat]

@namachan10777 やはりここで明示的にバージョン設定を行うのは不用意に noisy なだけです．latest にするか，検証に使うバージョンの range を緩めに指定するかにしましょう

[sksat]

注: auto-merge にするのも手段としてはありますが，このリポジトリの運用にそぐわないのでかなりナシ寄りです

[namachan10777]

@sksat

確かにpatch versionまで更新されるたびにPRが来るのはあまりにnoisy過ぎるというのは同意です。

現状だとpackage.jsonではmajor versiondだけ固定しているんですが、この手のPRを抑制するとなるとpnpm-lock.yamlを消す形が一番良さそうってことですか？

一般的にはlockfileが無いとCI環境を手元で再現するときに問題が起きがちだとは思いますが、確かにこのレベルなら然程の問題は無いですね。

[sksat]

あーこれ lockfile だけか．悩ましいところだけどこれでロックしてるの CI 環境だけだし，微妙なところですね．この CI で使ってるの renovate-config-validator と prettier だけで，このリポジトリのみで使ってる独自のなんらかのツールがあるわけでもないし．

[sksat]

• 案1: 単に lockfile の有用性が薄いので lockfile を消す
  • workflow 内で lockfile を print する step を生やす，などすれば log が残っている限り再現可能にはできる
  • CI だけの再現したいこと（しかも，lockfile を持ち出さないと再現できない状況）そんなにあるか？
  • 再現はともかく，patch version レベルでなんらかの（このリポジトリの status check が不当に落ちるような）デグレはありうる -> ある程度のバージョン固定やロールバックはしたくなりうる
  • lockfile を持ち出さないと再現できない状況 -> それはツール側で発生している問題であって，このリポジトリでしたくなるのは workaround 的回避
  • これらのツールはこのリポジトリ以外でもたくさん使っているし，それらの方が素直な使い方をしているので，ツールの側の問題調査を行うとしてもやるのはこのリポジトリではないのでは
• 案2: そもそも renovate-config-validator と prettier だけなら workflow 内でnpm i -g すればよいのでは（package.json すらいらんのでは）
  • バージョン更新は regexManager でやればいい

[namachan10777]

案1かな

[sksat]

結局やること変わらなくない？あと，renovate-config-validator は本当なら self-hosted 用と Mend Renovate 用でバージョン分けたい

[namachan10777]

結局やること変わらない、というのは？

self-hostedとMendの分離に関しては、self-hostedのrenovateバージョンでのチェックをやるとなると何らかの方でself-hosted側の事情をこちらに持ち込む必要があると思うんだけど、それはちょっと手間だしあんまりシンプルじゃないかなと思う。それやるならself-hosted側でこのリポジトリを参照してCIを回す方がシンプルで良いかなと。

[sksat]

lockfile の freeze までやらず，かつ，最終的にインストールするモノそのものを緩めにバージョン指定する，ということ > やること変わらない

[sksat]

うーん，self-hosted 側のバージョンを明示的に取り込む（事情をこちらに持ち込む）必要は無いと思うのだよな．self-hosted 側の更新に多少時間がかかることを見越してある程度大きめのバージョンの range で matrix 組んで一応 renovate-config-validator 走らせる，ぐらいでいいというか．このリポジトリはマージした瞬間から全リポジトリに影響出るまであるので，検証はこのリポジトリの PR で走らせたい．

[sksat]

あと，renovate-config と self-hosted Renovate のメンテナは同一視できる（現に既にそう）なので，明示的にバージョン合わせようとしたとしても別に大変ではない

[namachan10777]

pnpm installで一発で手元での検証出来た方が楽だなとは思ってたけど、確かにmatrixで検証した方が嬉しいね。rangeってそういうことね。

[namachan10777]

npm i -gでmatrix buildで検証する方針でいきましょう