build(deps): update ghcr.io/renovatebot/renovate docker tag to v44

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
ghcr.io/renovatebot/renovate (source)	major	43.195.8 → 44.65.5

---

Release Notes

renovatebot/renovate (ghcr.io/renovatebot/renovate)

v44.65.5

Compare Source

Build System

• deps: update dependency @​renovatebot/pep440 to v5.0.1 (main) (#​45689) (2b4f433)

v44.65.4

Compare Source

Build System

• deps: update dependency @​renovatebot/pgp to v1.3.18 (main) (#​45727) (f4c9195)

v44.65.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.95.8 (main) (#​45726) (295d2e3)

Miscellaneous Chores

• deps: update dependency memfs to v4.68.2 (main) (#​45725) (0a30d5b)

v44.65.2

Compare Source

Build System

• deps: update dependency @​renovatebot/detect-tools to v4.0.13 (main) (#​45718) (b3977ea)

v44.65.1

Compare Source

v44.65.0

Compare Source

Features

• onboarding: note that vulnerabilityAlerts can be rate limited (#​45686) (a806d2f)

Continuous Integration

• check TODOs for closed issues (#​45575) (26fe7b0)

v44.64.3

Compare Source

Build System

• deps: update dependency @​renovatebot/detect-tools to v4.0.12 (main) (#​45710) (b380f44)

v44.64.2

Compare Source

Build System

• deps: update dependency zod to v4.5.1 (main) (#​45709) (5717d3e)

v44.64.1

Compare Source

Bug Fixes

• deps: promote tar to a prod dependency (#​45699) (5ee51fd), closes #​40250 #​45697

v44.64.0

Compare Source

Features

• preset: @octokit group preset (#​45643) (10c5232)

v44.63.0

Compare Source

Features

• datasource: add APK datasource support (#​40250) (795d083)

v44.62.2

Compare Source

Bug Fixes

• config/validation: allow only capturing currentDigest in Custom Managers (#​45671) (8abbd14), closes #​45665
• datasource: use release-level registryUrl in postprocessRelease (#​45096) (7f71c26)
• manager/mix: run mix commands from the lock file's directory (#​44971) (69bc2dd)
• manager/pep621: support array form of tool.uv.sources (#​44970) (9d10700)
• presets: fix javaLTSVersions not preserving partial semver for mise Java versions (#​44899) (5f5e58b)
• versioning/nuget: bare exact version bypasses ignoreUnstable (#​45087) (4db8635)

Tests

• core: replace file snapshots with explicit assertions (#​45660) (df8c405)
• linters: forbid file-based snapshot matchers (#​45661) (0ff377b)
• platform: replace file snapshots with explicit assertions (#​45684) (762ac01)
• shrink oversized fixtures to representative examples (#​45666) (300e3a6)
• use expect().resolves instead of awaiting inside expect (#​45672) (05e1271)

v44.62.1

Compare Source

Bug Fixes

• bump-versions: collect bumpVersions from all upgrades, not just upgrades[0] (#​44809) (e10ef79)

v44.62.0

Compare Source

Features

• replacements: add replacement for OpenSSF Scorecard Docker images (#​45597) (fe9ce38), closes #​45568

Tests

• bundler: replace file snapshots with explicit assertions (#​45657) (5a9c085)
• manager: replace file snapshots with explicit assertions (#​45656) (2fc46bd)
• npm: replace file snapshots with explicit assertions (#​45658) (f4fa861)
• Validate minimumReleaseAge is ignored for security updates (#​44272) (09ff8d2)

v44.61.6

Compare Source

Build System

• deps: update dependency p-map to v7.0.7 (main) (#​45678) (a01be61)

v44.61.5

Compare Source

Miscellaneous Chores

• deps: update dependency @​biomejs/biome to v2.5.11 (main) (#​45676) (894a4a6)

Build System

• deps: update dependency markdown-it to v14.3.1 (main) (#​45675) (af68f37)

v44.61.4

Compare Source

Bug Fixes

• github: model GitHub hosts explicitly (#​45605) (a744f0d)

v44.61.3

Compare Source

Bug Fixes

• lookup: preserve current compatibility (#​45171) (19e4cdc)
• manager/gitlabci: support ~latest component refs (#​45234) (80ed949)
• manager/npm: massage out lockstep siblings pinning the replaced version (#​45085) (fa7abab)
• skip empty post upgrade task (#​45227) (0bfd189)
• workers/repository: ensure internal checks are applied when a rebase is requested (4530b9e)

Documentation

• add warning to checkedBranches (c2a4f49)

Code Refactoring

• workers/repository: add a separate check for "don't make this branch as pending" (bb8c9cb)
• workers/repository: extract a type for the Dependency Dashboard checks (f1c39b2)

Tests

• datasource: replace file snapshots with explicit assertions (#​45655) (f4ab79f)

v44.61.2

Compare Source

Bug Fixes

• gerrit: resolve relative submodule URLs for nested project paths (#​44667) (40fce9a)
• manager/flux: strip templates from resource files (#​43198) (029663d)
• manager: Handle variables with default values in registry aliases (#​36293) (b22f580)

Documentation

• clarify prCreation=not-pending fallback and no-check caveat (#​44889) (c5f50dd)
• document GitLab auth for private Go modules (#​44371) (3228cc7), closes #​37624

Miscellaneous Chores

• deps: update dependency lint-staged to v17.4.1 (main) (#​45664) (ff36228)

Code Refactoring

• linters: enable oxlint rule prefer-named-capture-group (#​44714) (3412de8)

v44.61.1

Compare Source

Bug Fixes

• azure: filter pull request queries by Renovate author (#​45359) (7a6e7b2), closes #​1
• util/exec: disable execa rejection (#​45651) (c97111e)

Documentation

• tool-calling: centralise AWS configuration (#​45586) (210bf42)

v44.61.0

Compare Source

Features

• datasource/orb: use REST API instead of graphql-unstable (#​45205) (2fc1b5c)

Performance Improvements

• package-rules: avoid re-cloning invariant packageRules array on every rule match (#​44781) (0e90c69)

Code Refactoring

• linters: add rule to enforce inline single use fixtures (#​45230) (6e03e83)

v44.60.1

Compare Source

Bug Fixes

• config: enforce allowedEnv when applying env vars (6b2b607)
• config: enforce allowedHeaders when applying headers (223e6ef)
• config: report top-level "security" violations for env (61cbc87)
• config: report top-level "security" violations for hostRules[].headers (ae34610)
• util/host-rules: apply the admin's headers over a repository's (4732da7)
• util/host-rules: enforce allowedHeaders within add() (c98f4f7)
• util/host-rules: merge headers across matching rules (3d56c38)
• workers/global: enforce allowedHeaders for the admin's own hostRules (432bb00)
• workers/repository: validate resolved presets (2382888)

Code Refactoring

• config: add requiresCheckAtTrustBoundary option flag (711d46b)

Tests

• config: add a reminder to add check for trust boundaries (c1a00f1)
• config: cover existing allowedEnv behaviour (6e0bbee)
• config: cover existing allowedHeaders behaviour (d088346)
• util/host-rules: cover existing header merging behaviour (9a91b69)
• workers/repository: don't mock more than we need to (cf491cc)
• workers/repository: set explicit allowedEnv (f189d93)

v44.60.0

Compare Source

v44.59.3

Compare Source

v44.59.2

Compare Source

v44.59.1

Compare Source

Bug Fixes

• versioning/rez: match version precision (#​45554) (1133f3b)

v44.59.0

Compare Source

Features

• manager: add apm manager for Agent Package Manager (#​44390) (6d747ea)

Bug Fixes

• changelog: match release notes for host-qualified names (#​45176) (fb623bd)

v44.58.0

Compare Source

Features

• preset: group vite+ (#​45631) (3206c6a)

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.95.6 (main) (#​45633) (d5b78f9)

v44.57.4

Compare Source

Bug Fixes

• bitbucket: bbUseDevelopmentBranch fetching (#​45626) (e631d60)

Miscellaneous Chores

• deps: update dependency @​biomejs/biome to v2.5.10 (main) (#​45540) (927e68a)

v44.57.3

Compare Source

Bug Fixes

• cache: re-add cacache.verify() to garbage collect orphaned content from put() overwrites (#​44987) (13ab659)
• honour dashboard rebase for edited branch with no open PR (#​44567) (7c5bb7d)

v44.57.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.95.5 (main) (#​45625) (196f16a)

v44.57.1

Compare Source

Bug Fixes

• manager/git-submodules: init nested submodules in updateDependency (#​45606) (bbd603e)
• reconfigure: capitalise Renovate (#​39310) (c02de67)
• remove references to "bot" (#​39305) (b62fe59)

Tests

• util/git: add missing coverage of setGitAuthor (#​45607) (ea3b7ac)

v44.57.0

Compare Source

Features

• preset: add TUnit monorepo preset (#​45612) (a1ce94c)

Documentation

• conda: clarify minimumReleaseAge is supported (#​45622) (b9f5e3c)

v44.56.4

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.95.4 (main) (#​45620) (957d745)

v44.56.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.95.3 (main) (#​45619) (dff2419)

Miscellaneous Chores

• deps: update actions/deploy-pages action to v5.0.1 (main) (#​45616) (872716a)
• deps: update dependency astral-sh/uv to v0.12.9 (main) (#​45617) (681e30c)
• deps: update dependency uv to v0.12.9 (main) (#​45618) (1ea3d33)

v44.56.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.95.2 (main) (#​45614) (f96de99)

v44.56.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.95.1 (main) (#​45609) (eadeb32)

v44.56.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.95.0 (main) (#​45604) (c6e4e90)

v44.55.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.94.0 (main) (#​45600) (d4ac9fc)
• manager/npm: add support for bun in the packageManager field (#​45572) (24c56f9)

Bug Fixes

• datasource/jsr: accept scopes shorter than the JSR registration minimum (#​45547) (78f4d9a)

Documentation

• mend-hosted: updates to environment variables and arbitrary scripts (#​45496) (8b89b34)

Miscellaneous Chores

• deps: update docker/setup-qemu-action action to v4.3.0 (main) (#​45594) (d481d33)

Code Refactoring

• manager/npm: rename internal managerData.pnpmShrinkwrap to pnpmLockFile (#​45390) (ef60dfc)
• tools/check: convert to Commander (#​45596) (739f430), closes #​43528

Continuous Integration

• check for Closes #<discussion> (#​45462) (bf37a4a)
• ensure scripts in .github/ are linted (#​45593) (135dd45), closes #​45462

v44.54.0

Compare Source

Features

• datasource/aws-eks-addon: add host rule authentication (#​45552) (7dce51d)

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.93.3 (main) (#​45587) (a5801df)
• util/markdown: preserve at signs in URLs (#​45555) (cfb2a76)

v44.53.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.93.2 (main) (#​45583) (d62bf70)

Documentation

• update references to renovate/renovate to v44.52.1 (main) (#​45563) (9a53fbd)
• update references to renovatebot/github-action to v46.2.5 (main) (#​45566) (9e335a2)

Miscellaneous Chores

• deps: lock file maintenance (main) (#​45564) (f2ed0ac)
• deps: update dependency astral-sh/uv to v0.12.8 (main) (#​45580) (51d19b8)
• deps: update dependency pnpm to v11.24.0 (main) (#​45578) (6d6432d)
• deps: update dependency uv to v0.12.8 (main) (#​45581) (f5acef8)
• deps: update linters to v1.80.0 (main) (#​45579) (f708552)

Build System

• deps: update aws-sdk-js-v3 monorepo to v3.1117.0 (main) (#​45582) (ea17651)

v44.52.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.92.3 (main) (#​45561) (9061f33)

Documentation

• update references to python to b0aed0e (main) (#​45559) (29e582b)
• update references to renovate/renovate (main) (#​45562) (e8fbe34)
• update references to renovatebot/github-action to v46.2.4 (main) (#​45560) (5192c0f)

Miscellaneous Chores

• deps: update dependency pnpm to v11.23.0 (main) (#​45557) (d6ded07)
• deps: update zizmor (main) (#​45558) (7c351d2)

v44.52.0

Compare Source

Features

• data: automatic update of static data (#​45551) (df98f44)

v44.51.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.92.2 (main) (#​45550) (e26aa5d)

v44.51.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.92.1 (main) (#​45549) (43de28b)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.4 (main) (#​45548) (af4211d)

v44.51.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.92.0 (main) (#​45546) (3e8110e)

Miscellaneous Chores

• deps: update dependency @​types/luxon to v3.7.5 (main) (#​45285) (f32c134)
• deps: update pnpm/setup action to v2.1.0 (main) (#​45543) (2b56b52)

v44.50.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.5 (main) (#​45541) (fcd8291)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.3 (main) (#​45539) (4e4ae49)

v44.50.2

Compare Source

Bug Fixes

• exec: supress unhandled promise rehection from execa timeout (#​45335) (a3a00ce)

v44.50.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.4 (main) (#​45533) (e7b98b5)

Miscellaneous Chores

• manager/gomod: clarify how artifact updates work with minimumReleaseAge (#​45526) (9ecbaa8)

Code Refactoring

• return a RepositoryResult while onboarding (#​45531) (8d08b51), closes #​22198

v44.50.0

Compare Source

Features

• instrumentation: add support for protobuf + gRPC exporter (#​45527) (0879ce5), closes #​36073

v44.49.1

Compare Source

Bug Fixes

• github: treat graphql_rate_limit as rate limiting (#​45396) (2e89151)
• manager/copier: set isExecutable on added and modified files (#​45520) (a3ac0bb)

Code Refactoring

• linters: add prefer-coerce-array rule (#​45492) (97327c3), closes #​45217
• linters: add prefer-coerce-object rule (#​45493) (c32e239), closes #​45216

Tests

• replace env operation with vi.stubEnv() (#​45490) (fbedd41)

v44.49.0

Compare Source

Features

• changelog: fetch newest releases first (#​45502) (57e546d), closes #​45500 #​45482
• changelog: stop fetching changelog entries when we're at platform limits (#​45503) (ba1fad9), closes #​45482 #​45501 #​45500

Code Refactoring

• instrumentation: instrument changelog generation (#​45507) (64e81c2)

v44.48.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.3 (main) (#​45523) (16f06e5)

Miscellaneous Chores

• deps: update dependency uv to v0.12.7 (main) (#​45521) (905f42a)

v44.48.2

Compare Source

v44.48.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.1 (main) (#​45516) (87d882e)

v44.48.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.91.0 (main) (#​45515) (9cd8c6d)

v44.47.0

Compare Source

v44.46.7

Compare Source

v44.46.6

Compare Source

Build System

• deps: update node.js to v24.20.0 (main) (#​45485) (5c8e0de)

v44.46.5

Compare Source

v44.46.4

Compare Source

Bug Fixes

• lint: use parseInt over Number (#​45472) (0216124)

v44.46.3

Compare Source

Bug Fixes

• logger: only truncate metaFields when they're string values (#​45478) (e456197)

Code Refactoring

• logger: remove unused dependencies as a stringified metaField (#​45477) (4c8a1bd)

Tests

• logger: add coverage of current metaFields stringifying behaviour (#​45476) (1d48943)

v44.46.2

Compare Source

Bug Fixes

• lint: extend prefer-is-helpers to catch more cases (#​45474) (a9c8f74)

v44.46.1

Compare Source

Bug Fixes

• manager/gomod: handle bare ../ replace paths in gomodTidyAll (#​45392) (cee4515)

Miscellaneous Chores

• deps: update linters to v1.79.0 (main) (#​44542) (91dafe9)

v44.46.0

Compare Source

Features

• presets: add @​oxlint/* packages to packages:linters and monorepo:oxlint (#​45466) (1012b34)

v44.45.4

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.89.7 (main) (#​45471) (844a2ce)

v44.45.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.89.6 (main) (#​45470) (224f1e3)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.1 (main) (#​45469) (bc0672b)

v44.45.2

Compare Source

v44.45.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.89.5 (main) (#​45468) (dfda756)

v44.45.0

Compare Source

Features

• http/bitbucket: warn when an endpoint announces a deprecation (#​45461) (a4b5c18)

Miscellaneous Chores

• deps: update dependency astral-sh/uv to v0.12.6 (main) (#​45464) ([f35acdd](https://redi

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.