38.0.0

38.0.0 (2024-07-25)

⚠ BREAKING CHANGES

• bitbucket-server: autodetect gitAuthor if possible (#29525)
• require node v20 (#30291)
• http: dnsCache is now removed
• github: platformCommit will be automatically enabled if running as a GitHub app
• npm: remove RENOVATE_CACHE_NPM_MINUTES (#28715)
• git: determine branch modification based on all branch commits (#28225)
• packageRules: matchPackageNames exact matches are now case-insensitive
• datasource/docker: Docker Hub lookups prefer hub.docker.com over index.docker.io. Set RENOVATE_X_DOCKER_HUB_TAGS_DISABLE=true in env to revert behavior.
• package-rules: matchPackageNames and related functions no longer fall back to checking depName.
• logging: File logging must now be set via env and not in config.js
• config: onboardingNoDeps changes from boolean to enum. Repositories with no dependencies will be onboarded unless in autodiscover mode.
• npm: Transitive remediation for npm <7 is no longer supported.
• config: Branch names for remediation will be sanitized to exclude special characters, potentially resulting in some autoclosing/replacing of existing PRs.
• Renovate docker images no longer have -slim tags. Drop the -slim prefix as this is now the default behavior.
• gitea: Gitea platfor authentication will now be done using Bearer auth instead of token auth.
• manager/pep621: depName for pep621 dependencies changes, which will lead to branch name changes, which will lead to some autoclosing and reopening of PRs.
• config: order of globalExtends resolution is changed so that it is applied first and remaining global config takes precedence.

Features

• bitbucket-server: autodetect gitAuthor if possible (#29525) (716c8cf)
• config: * pattern matches everything (#28556) (219108d)
• config: change onboardingNoDeps from boolean to enum (#28133) (0c500f5), closes #28101
• datasource/docker: prefer hub.docker.com over index.docker.io for tag lookups (#28400) (adcffd2), closes #24666
• deps: update ghcr.io/renovatebot/base-image docker tag to v7 (#30373) (77c0266)
• git: determine branch modification based on all branch commits (#28225) (03919bb)
• gitea: use Bearer instead of token for auth (#28308) (a3e29a0)
• github: convert platformCommit to enum (#29156) (bb6c27f)
• http: remove dnsCache option (#29449) (2eb7c76)
• logging: drop logFile and logFileLevel (#29104) (cf29c33)
• logging: initialize file logging via env (#28104) (c6c4572), closes #14705
• manager/pep621: remove group name from depName (#28193) (2ad12cc), closes #28131
• npm: drop transitiveRemediation option (#27985) (b05f389)
• npm: remove RENOVATE_CACHE_NPM_MINUTES (#28715) (23eb2de)
• package-rules: remove depName fallback (#28548) (3d78ae7)
• packageRules: migrate matchers and excludes (#28602) (879f7cc)
• packageRules: support glob/regex patterns for matchPackageNames (#28551) (1e5cf6d)
• packageRules: support regex or glob matching for all (#28591) (69dab29)
• prepare for containerbase changes (#29989) (80b0252)
• stop publishing slim docker tags (#27993) (9b4fb81)

Bug Fixes

• config: globalExtends merge order (#28145) (e3175a3), closes #28131
• config: Use depNameSanitized in branch name for vulnerability alerts (#25166) (33b1cdb)
• deps: update ghcr.io/containerbase/sidecar docker tag to v11 (#30357) (46f0357)
• normalize Python depName in every manager (#27733) (2e78a71)
• presets: replace matchPackagePrefix/Patterns with matchPackageNames (#29159) (2c13498)

Miscellaneous Chores

• deps: update dependency @swc/core to v1.7.0 (#30367) (e93b071)
• deps: update dependency @swc/core to v1.7.1 (#30371) (6bad833)
• deps: update dependency @types/node to v20 (e629b2b)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v11 (#30368) (3bee6bf)
• deps: update github/codeql-action action to v3.25.14 (#30372) (0b9d899)

Code Refactoring

• vulnerability-alerts: move to REST API (#27378) (5ed97aa)

Tests

• update wrong assertion (#28741) (31c6602)

Build System

• drop compatibility from docker image (#28588) (8859e64)
• require node v20 (#30291) (09824b1)