MAJOR Update dependency renovate to v35 #70

mend-for-github-com · 2023-03-22T12:18:09Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
renovate (source)	`34.152.2` -> `35.115.0`

By merging this PR, the issue #79 will be automatically resolved and closed:

Severity	CVSS Score	CVE
High	7.5	CVE-2022-25883
High	7.5	CVE-2022-25883
High	7.5	CVE-2022-25883
High	7.5	CVE-2023-34104
Medium	6.5	CVE-2023-26920
Medium	4.3	CVE-2023-41037

Release Notes

renovatebot/renovate (renovate)

`v35.115.0`

Compare Source

Features

presets: add tfvarsVersions preset (#22595) (1d3687e)

`v35.114.3`

Compare Source

Miscellaneous Chores

deps: update dependency python to v3.11.4 (#22634) (7e8d36e)

Build System

deps: update aws-sdk-js-v3 monorepo to v3.348.0 (#22636) (4877960)

`v35.114.2`

Compare Source

Documentation

configuration options: rewrite lockFileMaintenance (#22617) (56f9684)

Build System

deps: update dependency @cdktf/hcl2json to v0.16.3 (#22623) (0c18515)

`v35.114.1`

Compare Source

Build System

deps: update dependency redis to v4.6.7 (#22624) (b7ae617)

`v35.114.0`

Compare Source

Features

rubygems: Incremental sync for version lists (#22564) (b90cc32)

`v35.113.3`

Compare Source

Miscellaneous Chores

deps: update dependency @ls-lint/ls-lint to v2 (#22607) (99e19d9)
deps: update dependency conventional-changelog-conventionalcommits to v6 (#22608) (43d3e34)

Build System

deps: update dependency @cdktf/hcl2json to v0.16.2 (#22620) (f6744fc)

`v35.113.2`

Compare Source

Build System

deps: update aws-sdk-js-v3 monorepo to v3.347.1 (#22613) (65f9381)

`v35.113.1`

Compare Source

Miscellaneous Chores

deps: update dependency type-fest to v3.11.1 (#22603) (d00e26d)

Documentation

document asdf .tool-versions support for Node.js (#22604) (48fbac6)

Build System

deps: update aws-sdk-js-v3 monorepo to v3.347.0 (#22605) (12a95b4)

`v35.113.0`

Compare Source

Features

manager/npm: support parsing lockfileVersion=3 (#22281) (bbd3c60)

Documentation

about us: update contributors list and numbers (#22559) (9dbc1d0)

`v35.112.1`

Compare Source

Bug Fixes

presests: fix k8s-registry-move replacement (#22592) (a699118)

`v35.112.0`

Compare Source

Features

support registry discovery in the bazel-module manager (#22563) (d99048d)

`v35.111.0`

Compare Source

Features

mix: support constraints and use erlang v26 (#22537) (c89012c)

Documentation

self-hosting: warn about outdated config example (#22583) (0bb299e)

Code Refactoring

replace as assertions (#22442) (be2a895)

`v35.110.2`

Compare Source

Bug Fixes

worker: don't coerce valid semver versions (#22586) (2f38696)

Tests

endoflife: Mock time (#22575) (4a9f5d9)

Documentation

update references to renovate/renovate to v35.110.1 (#22580) (b86db31)

Code Refactoring

Clear distinction between generic and HttpError handlers (#22576) (a700ccc)

`v35.110.1`

Compare Source

Bug Fixes

gomod: disable pinDigests (fa49848)
pnpm: lockfile v6 is supported as low as version 7.24.2 (#22562) (bc7793c)

`v35.110.0`

Compare Source

Features

bazel-module: support archive_override and local_path_override (#22555) (b53579b)

Documentation

fix broken link (#22556) (9c98a88)

`v35.109.0`

Compare Source

Features

support git_override in bazel-module manager (#22334) (0b96755)

Miscellaneous Chores

deps: update dependency @types/lodash to v4.14.195 (#22549) (87fe6e3)
deps: update dependency re2 to v1.18.2 (#22547) (bb3fa0a)
deps: update dependency re2 to v1.19.0 (#22550) (8f492d6)

`v35.108.0`

Compare Source

Features

manager/asdf: add support for java temurin and temurin-jre. (#22504) (ef8c4ca)

Bug Fixes

logging: better sanitize keys (#22533) (c14e4f7)

Miscellaneous Chores

deps: update github/codeql-action action to v2.3.6 (#22546) (4641355)

`v35.107.0`

Compare Source

Features

datasource/endoflife-date: add endoflife.date datasource (#21994) (a5b7292)

Miscellaneous Chores

merge-confidence: update default base url (#22534) (25999bf)

Code Refactoring

manager/helmv3: use env variables for directory control and extract functions for reusability (#22510) (2e8d281)

`v35.106.1`

Compare Source

Bug Fixes

npm: reset npmrc each repo (#22515) (cbff6cd)
pnpm: modify locked version extraction (#22415) (97d2bf4)

`v35.106.0`

Compare Source

Features

presets: add xstate monorepo (#22531) (e4e1e0b)

Miscellaneous Chores

better renamed repo logging (f30bb35)
log when osv true (7965b5a)

`v35.105.5`

Compare Source

Miscellaneous Chores

deps: update actions/dependency-review-action action to v3.0.6 (#22521) (581bb3e)

Documentation

clarify stabilityDays rename (81ec1cf)
configuration options: rewrite stabilityDays mention (#22527) (add67f4)
fix typo in self-hosting example (#22519) (be760cb)

Build System

deps: update dependency simple-git to v3.19.0 (#22528) (79ce6a7)

`v35.105.4`

Compare Source

Bug Fixes

platform: handle unexpected github-graphql error (#22512) (04f4875)

Miscellaneous Chores

deps: update actions/dependency-review-action action to v3.0.5 (#22518) (83d2e52)

Documentation

use relative URLs in more places (#22516) (71d082d)

`v35.105.3`

Compare Source

Bug Fixes

improve onboarding PR closed comment (#22476) (cdeaac8)

`v35.105.2`

Compare Source

Performance Improvements

manager/pep621: do sync packages on pdm lockfile updates (#22508) (2b0a609)

Documentation

config/constraints: add pep621 to supported managers for constraints (#22507) (0e74b3b)

`v35.105.1`

Compare Source

Bug Fixes

manager/pep621: group pdm binary calls based on dependency groups (#22489) (0a4be4a)

Documentation

configuration options: style fixes for prPriority (#22467) (eaf8f89)
drop weasel words (#22165) (b08fa0c)

Miscellaneous Chores

create admin-only issue form, improve and add discussion forms (#22469) (2610e2f)
deps: update dependency @types/eslint to v8.40.0 (#22491) (830e60c)
deps: update linters to v5.59.8 (#22493) (f32b04f)
drop broken placeholders, drop duplicate description (#22484) (dac5691)

`v35.105.0`

Compare Source

Features

presets: timed presets give Renovate 4 hours to create branches (#22466) (6e17128)

`v35.104.0`

Compare Source

Features

manager/asdf: add yamlfmt (#22472) (a193fe3)

Bug Fixes

manager/gradle: normalize version aliases in version catalogs (#22470) (da6f2ed)

Documentation

update references to renovate/renovate to v35.103.0 (#22475) (7df7617)

Miscellaneous Chores

deps: update dependency @types/node to v18.16.14 (#22473) (dc9dd20)
deps: update dependency @types/node to v18.16.16 (#22474) (1d4b1f8)

Code Refactoring

bucket logic (#22464) (ddebfdb)

`v35.103.0`

Compare Source

Features

manager/pep621: uses required-python to set constraint (#22456) (4da3f25)

`v35.102.10`

Compare Source

Build System

deps: update dependency @renovatebot/osv-offline to v1.2.12 (#22463) (d3ec865)

`v35.102.9`

Compare Source

Build System

deps: update dependency glob to v10.2.6 (#22461) (4b84d5c)
deps: update dependency minimatch to v9.0.1 (#22462) (188e6c7)

`v35.102.8`

Compare Source

Miscellaneous Chores

deps: update dependency type-fest to v3.11.0 (#22453) (0a103fa)

Code Refactoring

Rename branchFingerprint to commitFingerprint (#22454) (d306bfa)
Rename PR fingerprint to bodyFingerprint (#22455) (62d9cdb)

Build System

deps: update dependency @renovatebot/osv-offline to v1.2.11 (#22459) (1ba2d0b)

`v35.102.7`

Compare Source

Bug Fixes

manager/pep621: run pdm commands in subdirectories (#22450) (16f7b49)

`v35.102.6`

Compare Source

Build System

deps: update dependency @renovatebot/osv-offline to v1.2.10 (#22446) (7eb188c)

`v35.102.5`

Compare Source

Bug Fixes

datasource/cpan: add module.authorized condition for querying releases (#22445) (135858d)

`v35.102.4`

Compare Source

Bug Fixes

manager/pdm: install python first (#22441) (2f23c14)

`v35.102.3`

Compare Source

Bug Fixes

github: Check for missing commits before force push (#22381) (470d3b5)

Tests

bitbucket: update paginated values mocks (#22357) (7ec97a7)

`v35.102.2`

Compare Source

Bug Fixes

github: stop trying automerge if code owner review required (#22167) (a9179e0)

`v35.102.1`

Compare Source

Bug Fixes

pnpm: defer lock file constraint parsing (#22311) (d4d742c)

Miscellaneous Chores

deps: update github/codeql-action action to v2.3.5 (#22438) (4e255cc)

`v35.102.0`

Compare Source

Features

manager/flux: Support OCI Helm repositories (#22291) (e066924)

Bug Fixes

manager: unify logging (#22398) (497d4c1)

`v35.101.0`

Compare Source

Features

http: Etag support (#22302) (290b78d)
manager/terraform: search lockfile on parent dirs (#22403) (a8c8c00)

Bug Fixes

github: try push branch if rebase fails (#22376) (3cc637f)
schema-utils: Return parsed key instead of the original one (#22425) (2fba61a)
skip commit message sync for platform=local (#22423) (0fc01f5)

Code Refactoring

Merged multiple skipReasons into unspecified-version. (#22409) (0417c11)

`v35.100.3`

Compare Source

Miscellaneous Chores

deps: update github/codeql-action action to v2.3.4 (#22420) (def491c)

Build System

deps: update dependency tslib to v2.5.2 (#22421) (0d511ac)

`v35.100.2`

Compare Source

Miscellaneous Chores

deps: update dependency rimraf to v5.0.1 (#22419) (27bf1ac)

Build System

deps: update dependency tslib to v2.5.1 (#22418) (29bdab0)

`v35.100.1`

Compare Source

Bug Fixes

Match both yaml and yml in all managers (#22416) (f5dc5eb)

`v35.100.0`

Compare Source

Features

schema-utils: Support LooseRecord key validation (#22404) (71ce657)

Miscellaneous Chores

deps: update dependency tar to v6.1.15 (#22397) (6780200)
simplify ts-node calls (#22401) (2958a44)

Code Refactoring

npm: Avoid usage of non-null assertion for constraints (#22405) (c146878)

`v35.99.0`

Compare Source

Features

presets: add turbo monorepo (#22393) (c40f724)

`v35.98.8`

Compare Source

Bug Fixes

correct typo (#22392) (800336b)

Documentation

matchFiles also matches lock files (a894b75)

`v35.98.7`

Compare Source

Build System

deps: update dependency cacache to v17.1.3 (#22390) (c8f4935)

`v35.98.6`

Compare Source

Build System

deps: update dependency cacache to v17.1.2 (#22387) (f3b4749)
deps: update dependency ini to v4.1.1 (#22388) (eea2313)

`v35.98.5`

Compare Source

Miscellaneous Chores

deps: update linters (#22361) (793c307)

Documentation

lockFileMaintenance: add pmd.lock (#22364) (a27cec8)

Build System

deps: update dependency @opentelemetry/instrumentation-bunyan to v0.31.3 (#22385) (ce6406b)
deps: update dependency cacache to v17.1.1 (#22386) (fc11f3f)

`v35.98.4`

Compare Source

Build System

deps: update dependency openpgp to v5.9.0 (#22356) (eae5814)

Miscellaneous Chores

deps: update linters to v5.59.6 (#22355) (a219a6a)

Code Refactoring

bitbucket: remove unused accumulate value utility (#22359) (cbbb958)

`v35.98.3`

Compare Source

Bug Fixes

onboarding: write gitAuthor before merging into onboarding branch (#22353) (4fe2972)

`v35.98.2`

Compare Source

Bug Fixes

log repo problems correctly (#22349) (18bd6b6)

Documentation

reading list: fix typo (#22341) (947babe)

Code Refactoring

bitbucket: use paginated api for comments (#22348) (d9f5d04)

`v35.98.1`

Compare Source

Bug Fixes

migration: throw error for invalid hostRules (#20540) (0d85cea)

Documentation

update references to renovate/renovate to v35.98.0 (#22338) (5000a62)

Code Refactoring

bitbucket: use paginated api for commit statuses (#22329) (48d4cf3)
bitbucket: use paginated api for pullrequests (#22330) (5597560)
bitbucket: use paginated api for tags (#22336) (550ab80)

`v35.98.0`

Compare Source

Features

template: allow isGroup (#22331) (0296810)

Documentation

mention tooling to retrieve installation token for GitHub platform (#22316) (ec0bddd)

Code Refactoring

bitbucket: use paginated api for getRepos (#22275) (2ccf030)

`v35.97.1`

Compare Source

Code Refactoring

rubygems: Extract copystring function to the utils (#22322) (86735d7)

Miscellaneous Chores

deps: update dependency @sinonjs/fake-timers to v10.1.0 (#22325) (a986aeb)
deps: update dependency @sinonjs/fake-timers to v10.2.0 (#22327) (b8c1b81)
deps: update dependency @types/node to v18.16.13 (#22326) (9c6dc13)
deps: update dependency @types/node to v18.16.9 (#22324) (8ee2855)

Build System

deps: update dependency @renovatebot/osv-offline to v1.2.9 (#22328) (6ee1dda)

`v35.97.0`

Compare Source

Features

bitbucket: add support for pagelen (#22278) (06f7134)
initial implementation of bazel-module manager (#21893) (7a1d242)

Documentation

running renovate: rewrite (#21222) (43669f8)

`v35.96.3`

Compare Source

Bug Fixes

versioning/composer: handle abnormal subset ranges (#22319) (735129b)

`v35.96.2`

Compare Source

Build System

deps: update opentelemetry-js monorepo (#22301) (cf7e95a)

Code Refactoring

npm: Use schema for PackageSource parsing (#22314) (3164401)

`v35.96.1`

Compare Source

Bug Fixes

pnpm: use latest pnpm when upgrading pnpm (#22309) (8d372fc)

`v35.96.0`

Compare Source

Features

config-error: raise a warning issue for misconfigured matchConfidence (#22296) (d88d63b)

Code Refactoring

http: Rename useCache option to memCache (#22300) (8cdd1a2)

Documentation

create reading lists (#21782) (cb909fe)
document how to configure OS cert store for Python (#22299) (be9c642)

`v35.95.1`

Compare Source

Bug Fixes

remove rebase label (#22293) (bcdf843)

`v35.95.0`

Compare Source

Features

manager/terragrunt: support lockFileMaintenance (#20833) (2904637)

Documentation

hostRules: document current matchHost behaviour if a port is supplied (#22007) (7cfd714)

Code Refactoring

drop lint-staged (#22294) (fc5ddaa)

`v35.94.1`

Compare Source

Build System

deps: update dependency glob to v10.2.5 (#22277) (d4b3504)

`v35.94.0`

Compare Source

Features

log extended branch summary (#22056) (c6d7168)
manager/pep621: support pdm lock files (#22244) (2863361)
onboarding: merge onboardingBranch into baseBranch (#20893) (ffeb784)
presets: create approveMajorUpdates (#22075) (4528048)

`v35.93.0`

Compare Source

Features

allow previously merged PRs, but block automerge (#22279) (b5d74a8)

Code Refactoring

config-error: generalize error issue creation for future reuse (#22289) (98d9851)

`v35.92.0`

Compare Source

Features

add sdk to monorepo:dotnet (#22290) (71d64d2)

`v35.91.1`

Compare Source

Bug Fixes

maven: Implement latest fix of the Maven versions (#22288) (42e2b27)

`v35.91.0`

Compare Source

Features

manager/asdf: support channel suffix on asdf-flutter (#22131) (5207da4)

Bug Fixes

cpanfile: support version ranges which are not v-prefixed (#22259) (adacfcf)

`v35.90.0`

Compare Source

Features

vulnerabilities: add option to add summary to dashboard (#21766) (3fccfbe)

Bug Fixes

manager/nuget: return null for no deps (#22282) (9a87c3f)
update json-schema (#22262) (1c13cf4)

Miscellaneous Chores

run label action on prs (#22227) (fd87414)

Code Refactoring

gitpod: dropping gitpod (#22274) (64b6e16)
rubygems: Use schema for fallback API (#21933) (cd5abc8)

`v35.89.1`

Compare Source

Build System

deps: update dependency glob to v10.2.3 (#22276) (3016a6c)

`v35.89.0`

Compare Source

Features

add maui to monorepo:dotnet (#22269) (90100df)

Bug Fixes

cache: include upgrade details in pr fingerprint (#22271) (f2977e4)

`v35.88.0`

Compare Source

Features

vulnerabilities: handle medium and unknown severities (#22257) (1c82218)

Bug Fixes

changelog: correct excactReleaseRegex (#22265) (e1e5f7f)

Build System

deps: update dependency @renovatebot/osv-offline to v1.2.8 (#22266) (63fa54c)

`v35.87.3`

Compare Source

Bug Fixes

logger: Represent Zod errors in friendlier format (#22238) (115ed87)

`v35.87.2`

Compare Source

Bug Fixes

gitlab: ignoreApprovals add check for existingAnyApproverRule (#22237) (dc077f3)

`v35.87.1`

Compare Source

Build System

deps: update aws-sdk-js-v3 monorepo to v3.332.0 (#22253) (7e5f98b)
deps: update dependency @renovatebot/osv-offline to v1.2.7 (#22252) (2cc2474)

`v35.87.0`

Compare Source

Features

Add rjsf as a monorepo (#22248) ([ae75c83](https://togithub.com/renovatebot/renovate/commit/ae75c83

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch 9 times, most recently from 1ea9b62 to 67f1d39 Compare March 26, 2023 13:12

mend-for-github-com bot changed the title ~~Update dependency renovate to v35~~ Update dependency renovate to v35 - autoclosed Mar 26, 2023

mend-for-github-com bot closed this Mar 26, 2023

mend-for-github-com bot deleted the whitesource-remediate/renovate-35.x branch March 26, 2023 13:24

mend-for-github-com bot changed the title ~~Update dependency renovate to v35 - autoclosed~~ Update dependency renovate to v35 Mar 26, 2023

mend-for-github-com bot reopened this Mar 26, 2023

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch from 67f1d39 to 51ccf4d Compare March 26, 2023 13:40

mend-for-github-com bot changed the title ~~Update dependency renovate to v35~~ Update dependency renovate to v35 - autoclosed Mar 26, 2023

mend-for-github-com bot closed this Mar 26, 2023

mend-for-github-com bot changed the title ~~Update dependency renovate to v35 - autoclosed~~ Update dependency renovate to v35 Mar 26, 2023

mend-for-github-com bot reopened this Mar 26, 2023

mend-for-github-com bot restored the whitesource-remediate/renovate-35.x branch March 26, 2023 17:18

mend-for-github-com bot changed the title ~~Update dependency renovate to v35~~ rnv: ![confidence](https://badges.renovateapi.com/packages/npm/renovate/35.23.1/confidence-slim/34.152.2) Update dependency renovate to v35 Mar 26, 2023

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch from 51ccf4d to 26021bb Compare March 26, 2023 17:27

mend-for-github-com bot changed the title ~~rnv: ![confidence](https://badges.renovateapi.com/packages/npm/renovate/35.23.1/confidence-slim/34.152.2) Update dependency renovate to v35~~ Update dependency renovate to v35 Mar 26, 2023

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch from 26021bb to 745c24b Compare March 26, 2023 17:36

mend-for-github-com bot changed the title ~~Update dependency renovate to v35~~ rnv: ![confidence](https://badges.renovateapi.com/packages/npm/renovate/35.23.2/confidence-slim/34.152.2) Update dependency renovate to v35 Mar 26, 2023

mend-for-github-com bot changed the title ~~rnv: ![confidence](https://badges.renovateapi.com/packages/npm/renovate/35.23.2/confidence-slim/34.152.2) Update dependency renovate to v35~~ Update dependency renovate to v35 Mar 26, 2023

mend-for-github-com bot changed the title ~~Update dependency renovate to v35~~ MAJOR Update dependency renovate to v35 Mar 26, 2023

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch 3 times, most recently from 2cd80da to f4e4976 Compare March 28, 2023 00:50

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch 11 times, most recently from 43f85d1 to 63ad991 Compare June 14, 2023 16:38

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch 10 times, most recently from 1be1e57 to 2d7019b Compare June 18, 2023 19:50

mend-for-github-com bot changed the title ~~MAJOR Update dependency renovate to v35~~ MAJOR Update dependency renovate to v35 - autoclosed Jun 19, 2023

mend-for-github-com bot closed this Jun 19, 2023

mend-for-github-com bot deleted the whitesource-remediate/renovate-35.x branch June 19, 2023 02:34

mend-for-github-com bot changed the title ~~MAJOR Update dependency renovate to v35 - autoclosed~~ MAJOR Update dependency renovate to v35 Jun 23, 2023

mend-for-github-com bot restored the whitesource-remediate/renovate-35.x branch June 23, 2023 15:51

mend-for-github-com bot reopened this Jun 23, 2023

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch from 2d7019b to 0e8b210 Compare June 23, 2023 22:43

MAJOR Update dependency renovate to v35

b643867

mend-for-github-com bot force-pushed the whitesource-remediate/renovate-35.x branch from 0e8b210 to b643867 Compare December 5, 2023 01:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

MAJOR Update dependency renovate to v35 #70

MAJOR Update dependency renovate to v35 #70

mend-for-github-com bot commented Mar 22, 2023 •

edited

Loading

MAJOR Update dependency renovate to v35 #70

Are you sure you want to change the base?

MAJOR Update dependency renovate to v35 #70

Conversation

mend-for-github-com bot commented Mar 22, 2023 • edited Loading

Release Notes

Features

Miscellaneous Chores

Build System

Documentation

Build System

Build System

Features

Miscellaneous Chores

Build System

Build System

Miscellaneous Chores

Documentation

Build System

Features

Documentation

Bug Fixes

Features

Features

Documentation

Code Refactoring

Bug Fixes

Tests

Documentation

Code Refactoring

Bug Fixes

Features

Documentation

Features

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

Features

Miscellaneous Chores

Code Refactoring

Bug Fixes

Features

Miscellaneous Chores

Miscellaneous Chores

Documentation

Build System

Bug Fixes

Miscellaneous Chores

Documentation

Bug Fixes

Performance Improvements

Documentation

Bug Fixes

Documentation

Miscellaneous Chores

Features

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Features

Build System

Build System

Miscellaneous Chores

Code Refactoring

Build System

Bug Fixes

Build System

Bug Fixes

Bug Fixes

Bug Fixes

Tests

Bug Fixes

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Features

mend-for-github-com bot commented Mar 22, 2023 •

edited

Loading