Skip to content

chore: ensure that pnpm also enforces minimumReleaseAge - #40476

Merged
jamietanna merged 1 commit into
mainfrom
chore/pnpm-mra
Apr 23, 2026
Merged

chore: ensure that pnpm also enforces minimumReleaseAge#40476
jamietanna merged 1 commit into
mainfrom
chore/pnpm-mra

Conversation

@jamietanna

@jamietanna jamietanna commented Jan 16, 2026

Copy link
Copy Markdown
Contributor

Changes

On top of our Renovate configuration0 not allowing Renovate to prepare
updates until npm packages have been available for 7 days, we can
provide "defence in depth" by also wiring in pnpm's configuration.

This takes the rules from 0 and applies them to explicitly allowlist
our packages, as well as set the limit to 7 days.

Context

Please select one of the below:

  • This closes an existing Issue: Closes #
  • This doesn't close an Issue, but I accept the risk that this PR may be closed if maintainers disagree with its opening or implementation

AI assistance disclosure

Did you use AI tools to create any part of this pull request?

Please select one option and, if yes, briefly describe how AI was used (e.g., code, tests, docs) and which tool(s) you used.

  • No — I did not use AI for this contribution.
  • Yes — minimal assistance (e.g., IDE autocomplete, small code completions, grammar fixes).
  • Yes — substantive assistance (AI generated non‑trivial portions of code, tests, or documentation).
  • Yes — other (please describe):

Documentation (please check one with an [x])

  • I have updated the documentation, or
  • No documentation update is required

How I've tested my work (please select one)

I have verified these changes via:

  • Code inspection only, or
  • Newly added/modified unit tests, or
  • No unit tests but ran on a real repository, or
  • Both unit tests + ran on a real repository

The public repository:

viceice
viceice previously approved these changes Jan 16, 2026
View reviewed changes
@jamietanna

jamietanna commented Jan 16, 2026

Copy link
Copy Markdown
Contributor Author

OK, E2Es are failing becasue:

> renovate@0.0.0-semantic-release test-e2e:install /home/runner/work/renovate/renovate
> cd test/e2e && pnpm --ignore-workspace install --no-lockfile --prod
                      ^^^^^^^^^^^^^^^^^^

@jamietanna jamietanna mentioned this pull request Jan 26, 2026
Merged
3 tasks
@jamietanna

jamietanna commented Apr 13, 2026

Copy link
Copy Markdown
Contributor Author

@viceice thoughts on what we should do here?

viceice
viceice previously approved these changes Apr 14, 2026
View reviewed changes

@viceice viceice left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we can try it

@jamietanna

jamietanna commented Apr 14, 2026

Copy link
Copy Markdown
Contributor Author

The trouble is that the E2Es don't seem to work with it:

# https://github.com/renovatebot/renovate/actions/runs/24401534360/job/71273345474?pr=40476
 ERR_PNPM_NO_MATURE_MATCHING_VERSION  Version 2.4.1 (released 6 days ago) of @renovatebot/osv-offline does not meet the minimumReleaseAge constraint

@viceice

viceice commented Apr 14, 2026

Copy link
Copy Markdown
Member

The trouble is that the E2Es don't seem to work with it:

# https://github.com/renovatebot/renovate/actions/runs/24401534360/job/71273345474?pr=40476
 ERR_PNPM_NO_MATURE_MATCHING_VERSION  Version 2.4.1 (released 6 days ago) of @renovatebot/osv-offline does not meet the minimumReleaseAge constraint

maybe we need to copy the e2e test to a tmp folder so we're out of the repo workspace?

@jamietanna jamietanna changed the title build: ensure that pnpm also enforces minimumReleaseAge chore: ensure that pnpm also enforces minimumReleaseAge Apr 23, 2026
@jamietanna

jamietanna commented Apr 23, 2026

Copy link
Copy Markdown
Contributor Author

Weirdly this works locally 🤔

@jamietanna
jamietanna marked this pull request as draft April 23, 2026 13:21
@jamietanna

jamietanna commented Apr 23, 2026

Copy link
Copy Markdown
Contributor Author

Could be worth waiting for pnpm/pnpm#11224

@jamietanna
jamietanna marked this pull request as ready for review April 23, 2026 13:43
@github-actions
github-actions Bot requested a review from viceice April 23, 2026 13:43
@jamietanna
jamietanna removed the request for review from viceice April 23, 2026 13:43
@jamietanna
chore: ensure that pnpm also enforces minimumReleaseAge
59a27b3 
On top of our Renovate configuration[0] not allowing Renovate to prepare
updates until npm packages have been available for 7 days, we can
provide "defence in depth" by also wiring in pnpm's configuration.

This takes the rules from [0] and applies them to explicitly allowlist
our packages, as well as set the limit to 7 days.

To make sure our E2E tests still operate, we can - in a slightly hacky
manner - disable `minimumReleaseAge` by deleting the
`pnpm-workspace.yaml`, as it doesn't seem to be possible to
`--ignore-workspace` while using `minimumReleaseAge`, as it still
requires the `minimumReleaseAge` to pass.

[0]: https://github.com/renovatebot/.github/blob/095f454e8b1141edb1045dd389bee4c59c51613e/default.json
@jamietanna
jamietanna requested review from a team and viceice April 23, 2026 13:53
@jamietanna
jamietanna added this pull request to the merge queue Apr 23, 2026
Merged via the queue into main with commit 88098b9 Apr 23, 2026
46 checks passed
@jamietanna
jamietanna deleted the chore/pnpm-mra branch April 23, 2026 15:21
@github-actions

github-actions Bot commented Apr 23, 2026

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 43.140.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

@jamietanna jamietanna mentioned this pull request Apr 24, 2026
Merged
renovate Bot added a commit to sdwilsh/ansible-playbooks that referenced this pull request Apr 28, 2026
@renovate
chore(deps): update dependency renovatebot/renovate to v43.146.0
31c02e6 
##### [\`43.146.0\`](https://github.com/renovatebot/renovate/releases/tag/43.146.0)

##### Features

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.40.0 (main) ([#42951](renovatebot/renovate#42951)) ([ab62bd5](renovatebot/renovate@ab62bd5))

---
##### [\`43.145.0\`](https://github.com/renovatebot/renovate/releases/tag/43.145.0)

##### Features

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.39.0 (main) ([#42950](renovatebot/renovate#42950)) ([0073e1f](renovatebot/renovate@0073e1f))

##### Miscellaneous Chores

- **deps:** update dependency [@smithy/util-stream](https://github.com/smithy/util-stream) to v4.5.24 (main) ([#42947](renovatebot/renovate#42947)) ([887fb02](renovatebot/renovate@887fb02))
- **deps:** update dependency nock to v14.0.13 (main) ([#42949](renovatebot/renovate#42949)) ([7e38d70](renovatebot/renovate@7e38d70))

---
##### [\`43.144.0\`](https://github.com/renovatebot/renovate/releases/tag/43.144.0)

##### Features

- **manager/gomod:** improve `commitMessageTopic` for `go`/`toolchain` directive bumps ([#42891](renovatebot/renovate#42891)) ([01a01f6](renovatebot/renovate@01a01f6)), closes [#42519](renovatebot/renovate#42519)

---
##### [\`43.143.2\`](https://github.com/renovatebot/renovate/releases/tag/43.143.2)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.38.4 (main) ([#42942](renovatebot/renovate#42942)) ([28e4144](renovatebot/renovate@28e4144))
- **package-rules:** respect each dep update's fetchChangeLogs value ([#42671](renovatebot/renovate#42671)) ([525f80d](renovatebot/renovate@525f80d))

##### Code Refactoring

- **datasource/npm:** extract defaultRegistryUrl constant ([#42794](renovatebot/renovate#42794)) ([3afa385](renovatebot/renovate@3afa385))

---
##### [\`43.143.1\`](renovatebot/renovate@43.143.0...43.143.1)


---
##### [\`43.143.0\`](https://github.com/renovatebot/renovate/releases/tag/43.143.0)

##### Features

- **manager/mise:** add support for clang-format ([#42912](renovatebot/renovate#42912)) ([c1e1255](renovatebot/renovate@c1e1255))

##### Miscellaneous Chores

- **datasource:** add trace logging for `applyConstraintsFiltering` ([#42929](renovatebot/renovate#42929)) ([a8310d0](renovatebot/renovate@a8310d0))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.9.5 (main) ([#42931](renovatebot/renovate#42931)) ([1aec8c9](renovatebot/renovate@1aec8c9))
- don't include worktrees in `markdownlint` checks ([#42930](renovatebot/renovate#42930)) ([12c5981](renovatebot/renovate@12c5981))
- **pr:** make truncation notice more prominent ([#42823](renovatebot/renovate#42823)) ([b4d2286](renovatebot/renovate@b4d2286))

##### Tests

- **datasource/jenkins-plugins:** use correct versioning ([#42923](renovatebot/renovate#42923)) ([5022244](renovatebot/renovate@5022244))
- **util:** add coverage of new GitHub Installation Access Token format ([#42928](renovatebot/renovate#42928)) ([5042d74](renovatebot/renovate@5042d74))

##### Continuous Integration

- never cancel in-progress release jobs ([#42817](renovatebot/renovate#42817)) ([dcabdfd](renovatebot/renovate@dcabdfd)), closes [#42809](renovatebot/renovate#42809)
- use explicit repo URL for checking commits ([#42939](renovatebot/renovate#42939)) ([858e708](renovatebot/renovate@858e708))

---
##### [\`43.142.1\`](renovatebot/renovate@43.142.0...43.142.1)


---
##### [\`43.142.0\`](renovatebot/renovate@43.141.6...43.142.0)


---
##### [\`43.141.6\`](https://github.com/renovatebot/renovate/releases/tag/43.141.6)

##### Bug Fixes

- **data:** automatic update of static data ([#42905](renovatebot/renovate#42905)) ([f0baacd](renovatebot/renovate@f0baacd))

##### Documentation

- **shell-executor:** move code comment to docs ([#42898](renovatebot/renovate#42898)) ([d6834c5](renovatebot/renovate@d6834c5))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v4.6.4 (main) ([#42895](renovatebot/renovate#42895)) ([8816d08](renovatebot/renovate@8816d08))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.9.2 (main) ([#42897](renovatebot/renovate#42897)) ([cde4f00](renovatebot/renovate@cde4f00))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.9.3 (main) ([#42904](renovatebot/renovate#42904)) ([8042ae1](renovatebot/renovate@8042ae1))

---
##### [\`43.141.5\`](https://github.com/renovatebot/renovate/releases/tag/43.141.5)

##### Bug Fixes

- **datasource/npm:** catch invalid `homepage` ([#42892](renovatebot/renovate#42892)) ([e0ede06](renovatebot/renovate@e0ede06))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.9.1 (main) ([#42893](renovatebot/renovate#42893)) ([af4d43a](renovatebot/renovate@af4d43a))

---
##### [\`43.141.4\`](https://github.com/renovatebot/renovate/releases/tag/43.141.4)

##### Bug Fixes

- **data:monorepo:** add dotnet org URL for aspnet-api-versioning monorepo ([#42857](renovatebot/renovate#42857)) ([9e889a0](renovatebot/renovate@9e889a0))
- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.38.2 (main) ([#42889](renovatebot/renovate#42889)) ([9f460bf](renovatebot/renovate@9f460bf))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.9.0 (main) ([#42890](renovatebot/renovate#42890)) ([60c7883](renovatebot/renovate@60c7883))
- **workers/repository:** provide more detail when rolling back ([#42818](renovatebot/renovate#42818)) ([300035a](renovatebot/renovate@300035a))

---
##### [\`43.141.3\`](https://github.com/renovatebot/renovate/releases/tag/43.141.3)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.38.1 (main) ([#42882](renovatebot/renovate#42882)) ([fd969ee](renovatebot/renovate@fd969ee))

##### Miscellaneous Chores

- **deps:** update dependency tsdown to v0.21.9 (main) ([#42872](renovatebot/renovate#42872)) ([45bafba](renovatebot/renovate@45bafba))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.8.2 (main) ([#42881](renovatebot/renovate#42881)) ([08f9f3a](renovatebot/renovate@08f9f3a))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.8.3 (main) ([#42886](renovatebot/renovate#42886)) ([da40020](renovatebot/renovate@da40020))

##### Build System

- bump lodash-es to v4.18.1 ([#42883](renovatebot/renovate#42883)) ([acbb16f](renovatebot/renovate@acbb16f))
- bump protobufjs to 7.5.5 ([#42879](renovatebot/renovate#42879)) ([2c7a9a1](renovatebot/renovate@2c7a9a1))
- **deps:** update opentelemetry-js monorepo (main) ([#42884](renovatebot/renovate#42884)) ([2480076](renovatebot/renovate@2480076))
- **deps:** update opentelemetry-js-contrib monorepo (main) ([#42877](renovatebot/renovate#42877)) ([3bd8fe0](renovatebot/renovate@3bd8fe0))

---
##### [\`43.141.2\`](https://github.com/renovatebot/renovate/releases/tag/43.141.2)

##### Documentation

- **mend-hosted:** add FAQ for memory limits ([#42856](renovatebot/renovate#42856)) ([6526b38](renovatebot/renovate@6526b38))

##### Miscellaneous Chores

- **deps:** update dependency [@smithy/util-stream](https://github.com/smithy/util-stream) to v4.5.23 (main) ([#42876](renovatebot/renovate#42876)) ([d584b46](renovatebot/renovate@d584b46))
- **deps:** update dependency memfs to v4.57.2 (main) ([#42858](renovatebot/renovate#42858)) ([1aea11e](renovatebot/renovate@1aea11e))
- **deps:** update dependency type-fest to v5.6.0 (main) ([#42870](renovatebot/renovate#42870)) ([104d913](renovatebot/renovate@104d913))
- **deps:** update dependency typescript to v6.0.3 (main) ([#42860](renovatebot/renovate#42860)) ([cb06500](renovatebot/renovate@cb06500))
- Revert "chore(deps): update dependency [@smithy/util-stream](https://github.com/smithy/util-stream) to v4.5.23 (main)" ([#42875](renovatebot/renovate#42875)) ([6b6ecc2](renovatebot/renovate@6b6ecc2))

##### Build System

- **deps:** update dependency [@yarnpkg/core](https://github.com/yarnpkg/core) to v4.7.0 (main) ([#42851](renovatebot/renovate#42851)) ([f3722e9](renovatebot/renovate@f3722e9))

---
##### [\`43.141.1\`](https://github.com/renovatebot/renovate/releases/tag/43.141.1)

##### Bug Fixes

- **changelog:** skip link reference definitions in body matcher ([#42868](renovatebot/renovate#42868)) ([b875eef](renovatebot/renovate@b875eef))

##### Miscellaneous Chores

- **deps): Revert "chore(deps:** update dependency tsdown to v0.21.9 (main)" ([#42871](renovatebot/renovate#42871)) ([3268bf4](renovatebot/renovate@3268bf4)), closes [#42842](renovatebot/renovate#42842)
- **deps:** update containerbase/internal-tools action to v4.6.2 (main) ([#42869](renovatebot/renovate#42869)) ([7be9b66](renovatebot/renovate@7be9b66))

---
##### [\`43.141.0\`](https://github.com/renovatebot/renovate/releases/tag/43.141.0)

##### Features

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.38.0 (main) ([#42862](renovatebot/renovate#42862)) ([43dddb9](renovatebot/renovate@43dddb9))

##### Bug Fixes

- **git:** support repo cache with `getBranchUpdateDate` ([#42852](renovatebot/renovate#42852)) ([ec921a6](renovatebot/renovate@ec921a6)), closes [#41953](https://github.com/renovatebot/renovate/issues/41953)

##### Documentation

- mark child options as code blocks ([#42854](renovatebot/renovate#42854)) ([5c4f65c](renovatebot/renovate@5c4f65c))
- **mend-hosted:** correct memory limits ([#42855](renovatebot/renovate#42855)) ([99a5e1f](renovatebot/renovate@99a5e1f))

##### Miscellaneous Chores

- **azure:** simplify calculation for `getMergeMethod` ([#42849](renovatebot/renovate#42849)) ([6fb038b](renovatebot/renovate@6fb038b))

---
##### [\`43.140.0\`](https://github.com/renovatebot/renovate/releases/tag/43.140.0)

##### Features

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.37.0 (main) ([#42853](renovatebot/renovate#42853)) ([3b97b7e](renovatebot/renovate@3b97b7e))

##### Documentation

- **json-schema:** add `constraints` and `installTools` ([#42834](renovatebot/renovate#42834)) ([f391c50](renovatebot/renovate@f391c50))
- show all Managers in sidebar ([#42155](renovatebot/renovate#42155)) ([fb418d6](renovatebot/renovate@fb418d6))

##### Miscellaneous Chores

- **azure:** log the resolved `MergeMethod` for a given branch ([#42847](renovatebot/renovate#42847)) ([b81a6ad](renovatebot/renovate@b81a6ad))
- **deps:** update dependency [@smithy/util-stream](https://github.com/smithy/util-stream) to v4.5.23 (main) ([#42848](renovatebot/renovate#42848)) ([254b9ba](renovatebot/renovate@254b9ba))
- **deps:** update dependency oxlint-tsgolint to v0.21.1 (main) ([#42844](renovatebot/renovate#42844)) ([03cc426](renovatebot/renovate@03cc426))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.8.0 (main) ([#42850](renovatebot/renovate#42850)) ([f45d70b](renovatebot/renovate@f45d70b))
- ensure that `pnpm` also enforces `minimumReleaseAge` ([#40476](renovatebot/renovate#40476)) ([88098b9](renovatebot/renovate@88098b9))

##### Tests

- **docs:** improve option filtering in specs ([#42846](renovatebot/renovate#42846)) ([a9ae8ee](renovatebot/renovate@a9ae8ee)), closes [#42671](renovatebot/renovate#42671)

---
##### [\`43.139.8\`](https://github.com/renovatebot/renovate/releases/tag/43.139.8)

##### Bug Fixes

- **validation:** validate `installTools` ([#42838](renovatebot/renovate#42838)) ([2f8bc73](renovatebot/renovate@2f8bc73))

##### Documentation

- wrap config options in `<code>` tags ([#42836](renovatebot/renovate#42836)) ([982a021](renovatebot/renovate@982a021))

##### Miscellaneous Chores

- clarify "Mend Renovate" in PRs ([#42841](renovatebot/renovate#42841)) ([72968d3](renovatebot/renovate@72968d3)), closes [#29885](https://github.com/renovatebot/renovate/issues/29885) [#26838](renovatebot/renovate#26838) [#39305](renovatebot/renovate#39305)
- **deps:** update dependency tsdown to v0.21.9 (main) ([#42842](renovatebot/renovate#42842)) ([45d36dc](renovatebot/renovate@45d36dc))

##### Code Refactoring

- **github-actions:** simplify comunity action schema ([#42784](renovatebot/renovate#42784)) ([21b15d5](renovatebot/renovate@21b15d5))

---
##### [\`43.139.7\`](https://github.com/renovatebot/renovate/releases/tag/43.139.7)

##### Bug Fixes

- **versioning/github-actions:** don't parse `allowedVersion`-style ranges as a range ([#42831](renovatebot/renovate#42831)) ([b81bf5d](renovatebot/renovate@b81bf5d)), closes [#42824](https://github.com/renovatebot/renovate/issues/42824)

##### Miscellaneous Chores

- **deps:** update slackapi/slack-github-action action to v3.0.2 (main) ([#42833](renovatebot/renovate#42833)) ([a5d2832](renovatebot/renovate@a5d2832))

---
##### [\`43.139.6\`](https://github.com/renovatebot/renovate/releases/tag/43.139.6)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.8 (main) ([#42832](renovatebot/renovate#42832)) ([bcaed60](renovatebot/renovate@bcaed60))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.7.4 (main) ([#42830](renovatebot/renovate#42830)) ([b7f5021](renovatebot/renovate@b7f5021))

---
##### [\`43.139.5\`](https://github.com/renovatebot/renovate/releases/tag/43.139.5)

##### Bug Fixes

- **homebrew:** allow subdirectories for Homebrew Formulas ([#42542](renovatebot/renovate#42542)) ([eb22aa0](renovatebot/renovate@eb22aa0))

---
##### [\`43.139.4\`](https://github.com/renovatebot/renovate/releases/tag/43.139.4)

##### Bug Fixes

- **versioning/github-actions:** treat floating tags as equal ([#42809](renovatebot/renovate#42809)) ([498a50f](renovatebot/renovate@498a50f)), closes [#42662](https://github.com/renovatebot/renovate/issues/42662)

##### Miscellaneous Chores

- **types:** add a stronger type for `ReleaseResult.tags` ([#42812](renovatebot/renovate#42812)) ([192c11e](renovatebot/renovate@192c11e))

---
##### [\`43.139.3\`](https://github.com/renovatebot/renovate/releases/tag/43.139.3)

##### Build System

- **deps:** update dependency [@renovatebot/pgp](https://github.com/renovatebot/pgp) to v1.3.7 (main) ([#42811](renovatebot/renovate#42811)) ([2d5b757](renovatebot/renovate@2d5b757))

---
##### [\`43.139.2\`](https://github.com/renovatebot/renovate/releases/tag/43.139.2)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.7 (main) ([#42808](renovatebot/renovate#42808)) ([9107a00](renovatebot/renovate@9107a00))

---
##### [\`43.139.1\`](https://github.com/renovatebot/renovate/releases/tag/43.139.1)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.6 (main) ([#42806](renovatebot/renovate#42806)) ([a280649](renovatebot/renovate@a280649))

---
##### [\`43.139.0\`](https://github.com/renovatebot/renovate/releases/tag/43.139.0)

##### Features

- **gerrit:** Add gitUrl support ([#42672](renovatebot/renovate#42672)) ([777b884](renovatebot/renovate@777b884))

##### Documentation

- don't re-add Platform README on experimental ([#42799](renovatebot/renovate#42799)) ([98765b3](renovatebot/renovate@98765b3)), closes [#42798](https://github.com/renovatebot/renovate/issues/42798)

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v4.6.1 (main) ([#42804](renovatebot/renovate#42804)) ([05d36b7](renovatebot/renovate@05d36b7))
- **deps:** update dependency [@biomejs/biome](https://github.com/biomejs/biome) to v2.4.12 (main) ([#42801](renovatebot/renovate#42801)) ([8ca175c](renovatebot/renovate@8ca175c))

---
##### [\`43.138.3\`](https://github.com/renovatebot/renovate/releases/tag/43.138.3)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.5 (main) ([#42797](renovatebot/renovate#42797)) ([c4b0389](renovatebot/renovate@c4b0389))

---
##### [\`43.138.2\`](https://github.com/renovatebot/renovate/releases/tag/43.138.2)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.4 (main) ([#42795](renovatebot/renovate#42795)) ([c933fd6](renovatebot/renovate@c933fd6))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.7.3 (main) ([#42793](renovatebot/renovate#42793)) ([fa6a593](renovatebot/renovate@fa6a593))

---
##### [\`43.138.1\`](https://github.com/renovatebot/renovate/releases/tag/43.138.1)

##### Documentation

- **mise:** render sorted table of short-names for tools ([#42789](renovatebot/renovate#42789)) ([5a1f587](renovatebot/renovate@5a1f587))

##### Miscellaneous Chores

- **deps:** update dependency oxlint-tsgolint to v0.21.0 (main) ([#42787](renovatebot/renovate#42787)) ([3d6af73](renovatebot/renovate@3d6af73))

##### Tests

- **datasource/pypi:** tighten typing with partial helper ([#42790](renovatebot/renovate#42790)) ([b41b31e](renovatebot/renovate@b41b31e))

##### Build System

- **deps:** update dependency [@redis/client](https://github.com/redis/client) to v5.12.1 (main) ([#42791](renovatebot/renovate#42791)) ([76467fb](renovatebot/renovate@76467fb))

---
##### [\`43.138.0\`](https://github.com/renovatebot/renovate/releases/tag/43.138.0)

##### Features

- **manager/github-actions:** use `github-actions` versioning by default ([#42713](renovatebot/renovate#42713)) ([57d5fb3](renovatebot/renovate@57d5fb3)), closes [#42331](renovatebot/renovate#42331)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.3 (main) ([#42785](renovatebot/renovate#42785)) ([c1d2f07](renovatebot/renovate@c1d2f07))
- **versioning/github-actions:** correctly handle `major.minor` and `major` ([#42769](renovatebot/renovate#42769)) ([413d941](renovatebot/renovate@413d941))

##### Miscellaneous Chores

- **types:** add missing `ConstraintName` enforcement ([#42745](renovatebot/renovate#42745)) ([c5a87ef](renovatebot/renovate@c5a87ef))

##### Build System

- **deps:** update dependency [@redis/client](https://github.com/redis/client) to v5.12.0 (main) ([#42786](renovatebot/renovate#42786)) ([8e4cd34](renovatebot/renovate@8e4cd34))

---
##### [\`43.137.0\`](https://github.com/renovatebot/renovate/releases/tag/43.137.0)

##### Features

- **github-actions:** add aquasecurity trivy actions ([#42782](renovatebot/renovate#42782)) ([70895fa](renovatebot/renovate@70895fa))

##### Performance Improvements

- **workers/repository:** use a Set for `allReleaseVersions` ([#42779](renovatebot/renovate#42779)) ([0c21df1](renovatebot/renovate@0c21df1))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.7.2 (main) ([#42781](renovatebot/renovate#42781)) ([9108576](renovatebot/renovate@9108576))

##### Code Refactoring

- **github-actions:** simplify community action schema ([#42778](renovatebot/renovate#42778)) ([a277aad](renovatebot/renovate@a277aad))

---
##### [\`43.136.3\`](https://github.com/renovatebot/renovate/releases/tag/43.136.3)

##### Bug Fixes

- **datasource/pypi:** sanitize GAR userinfo for authenticated lookups ([#42541](renovatebot/renovate#42541)) ([459db80](renovatebot/renovate@459db80))

---
##### [\`43.136.2\`](https://github.com/renovatebot/renovate/releases/tag/43.136.2)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.2 (main) ([#42777](renovatebot/renovate#42777)) ([63dcc7f](renovatebot/renovate@63dcc7f))

##### Miscellaneous Chores

- **deps:** update dependency pdm to v2.26.8 (main) ([#42776](renovatebot/renovate#42776)) ([ac4837b](renovatebot/renovate@ac4837b))

---
##### [\`43.136.1\`](https://github.com/renovatebot/renovate/releases/tag/43.136.1)

##### Bug Fixes

- **config:** resolve repository entry presets in correct order ([#41477](renovatebot/renovate#41477)) ([b24b88b](renovatebot/renovate@b24b88b))
- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.1 (main) ([#42775](renovatebot/renovate#42775)) ([950182f](renovatebot/renovate@950182f))

##### Miscellaneous Chores

- **deps:** update dependency [@biomejs/biome](https://github.com/biomejs/biome) to v2.4.11 (main) ([#42034](renovatebot/renovate#42034)) ([a561b74](renovatebot/renovate@a561b74))
- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.7.1 (main) ([#42774](renovatebot/renovate#42774)) ([4f3e19f](renovatebot/renovate@4f3e19f))
- move from volta.sh to mise ([#40567](renovatebot/renovate#40567)) ([3237a4c](renovatebot/renovate@3237a4c))

---
##### [\`43.136.0\`](https://github.com/renovatebot/renovate/releases/tag/43.136.0)

##### Features

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v13.36.0 (main) ([#42773](renovatebot/renovate#42773)) ([1f3648a](renovatebot/renovate@1f3648a))

---
##### [\`43.135.0\`](https://github.com/renovatebot/renovate/releases/tag/43.135.0)

##### Features

- **mise:** add pnpm and yarn tools ([#42764](renovatebot/renovate#42764)) ([f484b8f](renovatebot/renovate@f484b8f))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to v14.7.0 (main) ([#42771](renovatebot/renovate#42771)) ([65a5d0c](renovatebot/renovate@65a5d0c))

---
##### [\`43.134.1\`](https://github.com/renovatebot/renovate/releases/tag/43.134.1)

##### Bug Fixes

- **vulnerability:** use datasource default versioning instead of hardcoded map ([#42743](renovatebot/renovate#42743)) ([08031af](renovatebot/renovate@08031af))

---
##### [\`43.134.0\`](https://github.com/renovatebot/renovate/releases/tag/43.134.0)

##### Features

- **nuget:** update lock files when `Directory.Build.props` is changed ([#42735](renovatebot/renovate#42735)) ([945acf6](renovatebot/renovate@945acf6)), closes [#15696](renovatebot/renovate#15696) [#8010](renovatebot/renovate#8010)

##### Bug Fixes

- **workers/repository:** correctly pass all version numbers to versioning ([#42767](renovatebot/renovate#42767)) ([a11f338](renovatebot/renovate@a11f338))

##### Miscellaneous Chores

- **deps:** update dependency tsdown to v0.21.8 (main) ([#42765](renovatebot/renovate#42765)) ([e22b060](renovatebot/renovate@e22b060))

---
##### [\`43.133.0\`](https://github.com/renovatebot/renovate/releases/tag/43.133.0)

##### Features

- **manager/gradle:** add support for implicit version catalog accessor syntax ([#42746](renovatebot/renovate#42746)) ([4dbfc7a](renovatebot/renovate@4dbfc7a))

---
##### [\`43.132.3\`](https://github.com/renovatebot/renovate/releases/tag/43.132.3)

##### Bug Fixes

- **versioning/github-actions:** allow `v1` to be treated as a version ([#42762](renovatebot/renovate#42762)) ([95a7cab](renovatebot/renovate@95a7cab))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v4.6.0 (main) ([#42763](renovatebot/renovate#42763)) ([0d1efad](renovatebot/renovate@0d1efad))

---
##### [\`43.132.2\`](https://github.com/renovatebot/renovate/releases/tag/43.132.2)

##### Bug Fixes

- **versioning/github-actions:** allow `v1.2` to be treated as a version ([#42761](renovatebot/renovate#42761)) ([673fb8e](renovatebot/renovate@673fb8e))

##### Documentation

- **community-tools:** add `renovate-pretty-log-tui` ([#42596](renovatebot/renovate#42596)) ([f9f0103](renovatebot/renovate@f9f0103))
- update references to jaegertracing/jaeger to v2.17.0 (main) ([#42749](renovatebot/renovate#42749)) ([476f42a](renovatebot/renovate@476f42a))
- update references to python to [`63fdc2b`](renovatebot/renovate@63fdc2b) (main) ([#42748](renovatebot/renovate#42748)) ([6473c40](renovatebot/renovate@6473c40))

##### Miscellaneous Chores

- **deps:** update actions/setup-node action to v6.4.0 (main) ([#42756](renovatebot/renovate#42756)) ([970113c](renovatebot/renovate@970113c))
- **deps:** update containerbase/internal-tools action to v4.5.26 (main) ([#42750](renovatebot/renovate#42750)) ([b4736d0](renovatebot/renovate@b4736d0))
- **deps:** update containerbase/internal-tools action to v4.5.27 (main) ([#42752](renovatebot/renovate#42752)) ([da01772](renovatebot/renovate@da01772))
- **deps:** update containerbase/internal-tools action to v4.5.28 (main) ([#42755](renovatebot/renovate#42755)) ([3e01ba6](renovatebot/renovate@3e01ba6))
- **deps:** update dependency [@containerbase/istanbul-reports-html](https://github.com/containerbase/istanbul-reports-html) to v1.1.44 (main) ([#42751](renovatebot/renovate#42751)) ([47a3ba2](renovatebot/renovate@47a3ba2))
- **deps:** update dependency [@containerbase/semantic-release-pnpm](https://github.com/containerbase/semantic-release-pnpm) to v1.3.34 (main) ([#42753](renovatebot/renovate#42753)) ([88c141d](renovatebot/renovate@88c141d))

---
##### [\`43.132.1\`](https://github.com/renovatebot/renovate/releases/tag/43.132.1)

##### Build System

- **deps:** update dependency better-sqlite3 to v12.9.0 (main) ([#42747](renovatebot/renovate#42747)) ([bb7e5d7](renovatebot/renovate@bb7e5d7))

---
##### [\`43.132.0\`](https://github.com/renovatebot/renovate/releases/tag/43.132.0)

##### Features

- **github-actions:** add support for jakebailey/pyright-action version option ([#42744](renovatebot/renovate#42744)) ([9510d13](renovatebot/renovate@9510d13))

---
##### [\`43.131.0\`](https://github.com/renovatebot/renovate/releases/tag/43.131.0)

##### Features

- **manager/pixi:** set currentVersion field for exact pypi dependency versions ([#42741](renovatebot/renovate#42741)) ([e70fb64](renovatebot/renovate@e70fb64))

---
##### [\`43.130.1\`](https://github.com/renovatebot/renovate/releases/tag/43.130.1)

##### Bug Fixes

- Revert "build(deps): update dependency simple-git to v3.36.0 (main)" ([#42737](renovatebot/renovate#42737)) ([243b297](renovatebot/renovate@243b297)), closes [#42736](renovatebot/renovate#42736)

---
##### [\`43.130.0\`](https://github.com/renovatebot/renovate/releases/tag/43.130.0)

##### Features

- **manager/cake:** Take nuget.config into account for registryUrls of nuget packages ([#41545](renovatebot/renovate#41545)) ([a6238a4](renovatebot/renovate@a6238a4))
@jamietanna jamietanna mentioned this pull request May 6, 2026
Merged
12 tasks
@github-actions github-actions Bot locked as resolved and limited conversation to collaborators May 24, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@viceice viceice viceice approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jamietanna @viceice