training/docker-build-exercise
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

chore(deps): update ghcr.io/renovatebot/renovate docker tag to v42 #165

Merged
renovate merged 1 commits from renovate/ghcr.io-renovatebot-renovate-42.x into main 2025-11-16 00:23:43 +00:00
Conversation 0 Commits 1 Files Changed 1 +1 -1
renovate commented 2025-11-16 00:23:36 +00:00
Member
Copy Link

This PR contains the following updates:

Package Type Update Change
ghcr.io/renovatebot/renovate (source) container major 41.173.1 -> 42.11.0

Release Notes

renovatebot/renovate (ghcr.io/renovatebot/renovate)

v42.11.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.3.0 (main) (#​39308) (b52a96b)
Miscellaneous Chores

v42.10.5

Compare Source

Bug Fixes
  • deps: update ghcr.io/containerbase/sidecar docker tag to v13.24.3 (main) (#​39300) (808801d)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v13.24.3 (main) (#​39299) (5e541b8)

v42.10.4

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.2.1 (main) (#​39298) (1861733)

v42.10.3

Compare Source

Miscellaneous Chores
Build System

v42.10.2

Compare Source

Bug Fixes
Documentation
  • minimumReleaseAge: further clarify what happens with multiple releases (#​39266) (ab1f7c0)
Tests

v42.10.1

Compare Source

Build System
  • deps: update opentelemetry-js monorepo to v0.208.0 (main) (#​39293) (f2c01cb)

v42.10.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.2.0 (main) (#​39291) (0431ed7)
Miscellaneous Chores
  • deps: update docker/dockerfile docker tag to v1.20.0 (main) (#​39290) (c050b18)
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v13.24.2 (main) (#​39289) (d19a32e)

v42.9.2

Compare Source

Miscellaneous Chores
Build System

v42.9.1

Compare Source

Bug Fixes
  • config/validation: don't allow global: presets outside of global configuration (#​39211) (7092644)

v42.9.0

Compare Source

Features
Bug Fixes

v42.8.1

Compare Source

Bug Fixes
  • gerrit: avoid retrieving messages in updatePr and createPr (#​39015) (84633f1)

v42.8.0

Compare Source

Features

v42.7.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.1.8 (main) (#​39262) (4a8391e)
Documentation
Miscellaneous Chores

v42.7.0

Compare Source

Features
Bug Fixes
Miscellaneous Chores
Tests

v42.6.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.1.7 (main) (#​39253) (c505dd6)
Miscellaneous Chores

v42.6.2

Compare Source

Miscellaneous Chores
Build System

v42.6.1

Compare Source

Build System

v42.6.0

Compare Source

Features
  • manager/gradle: add support for variables in plugin names (#​39002) (96a7d27)

v42.5.4

Compare Source

Bug Fixes
  • deps: update dependency mkdocs-material to v9.7.0 (main) (#​39227) (50b4d13)

v42.5.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.1.6 (main) (#​39224) (684ce89)

v42.5.2

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.1.5 (main) (#​39220) (808029c)
Miscellaneous Chores
  • deps: update actions/dependency-review-action action to v4.8.2 (main) (#​39219) (a17245c)

v42.5.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/containerbase/sidecar docker tag to v13.24.1 (main) (#​39218) (909e043)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v13.24.1 (main) (#​39217) (4532ddd)
  • deps: update linters to v9.39.1 (main) (#​39216) (b607128)

v42.5.0

Compare Source

Features
  • add configValidationError option to log config validation errors as errors instead of warnings (#​39177) (83d6464)
Miscellaneous Chores
  • deps: update dependency typescript-eslint to v8.46.3 (main) (#​39209) (39b7896)
Build System

v42.4.1

Compare Source

Bug Fixes
  • ignore .npmrc when the npmrc configuration is being used (#​39205) (67b256a)
Documentation
Code Refactoring

v42.4.0

Compare Source

Features
Miscellaneous Chores

v42.3.0

Compare Source

Features
  • argocd: support OCI Helm charts without explicit chart field (#​39149) (82c09ba)
Documentation
Miscellaneous Chores

v42.2.0

Compare Source

Features
  • manager/npm: use volta node pin as node version constraint (#​38816) (3b81143)
Miscellaneous Chores
Build System

v42.1.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.1.4 (main) (#​39174) (1216402)
Build System

v42.1.2

Compare Source

Bug Fixes

v42.1.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.1.3 (main) (#​39172) (0ffd324)

v42.1.0

Compare Source

Features
Code Refactoring
  • deb: Split DebDatasource in smaller pieces and prepare for mutli-compression feature (#​38254) (5d36cf1)
  • presets: add type for presets with global-only configuration (#​39166) (8348930)
Build System
Continuous Integration

v42.0.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v12.1.2 (main) (#​39164) (534a686)
Documentation

v42.0.2

Compare Source

Bug Fixes
Miscellaneous Chores

v42.0.1

Compare Source

Documentation
Miscellaneous Chores
Build System
  • deps: update dependency google-auth-library to v10.5.0 (main) (#​39146) (748a623)

v42.0.0

Compare Source

Breaking changes for 42

Using minimumReleaseAge will now require a release timestamp #​38843

When specifying minimumReleaseAge, Renovate will look for a release timestamp to determine the age of the release, and whether it matched the minimumReleaseAge configuration.

Before Renovate 42, if a release timestamp was not present, Renovate would treat the dependency update as if the release timestamp was present and the dependency had passed that lifetime.

This means that users with artifact proxies, or in cases that the release timestamp wasn't consistently present could lead to dependencies "slipping through", and being updated before Renovate's policy enforced it to.

As of Renovate 42, the configuration minimumReleaseAgeBehaviour (added in 41.150.0) requires the release timestamp to be present.

If the release timestamp isn't present, Renovate will mark it as "awaiting schedule", and will output a debug log message to explain why.

You can revert to the existing behaviour by setting minimumReleaseAgeBehaviour=timestamp-optional.

Note that not all datasources support this functionality, nor do custom registries (such as Artifactory, etc).
For more details on how to verify support for your repository, check out the Minimum Release Age documentation

minimumReleaseAge: 3 days will now be set by default for npm in config:best-practices #​37967

For users of config:best-practices, the Minimum Release Age functionality will now apply by default for the npm ecosystem.

This will introduce a delay of 3 days between package publishing and Renovate suggesting an update for the release, so:

  • there is time for malware researchers and scanners to (possibly) detect any malicious behaviour in new releases, before your CI infrastructure or developers receive a malicious version upgrade
  • you are not at risk of the package being unpublished in the 3 day window that the npm registry allows

This will be enforced by default for packages using the npm datasource via the security:minimumReleaseAgeNpm preset.

[!NOTE]
This may require additional configuration if using a custom registry, or you have packages that you wish to not have minimum release age checks.

For more details on this functionality, check out the Minimum Release Age documentation.

Renovate now defaults to using Node.JS 24 #​38939

With Node 24 now in Long Term Support (LTS) release status, we have moved to target Node.JS 24 (^24.11.0) as our default engine for Node, and retain support for Node 22.

The pre-built Docker containers have been updated to use Node 24.

If you self-host without using our Docker image, you should be able to continue running Renovate with Node 22, for instance if you build your own image, or run the renovate npm package.

Redis clusters now authenticate to all nodes in the cluster with the provided credentials

When running Renovate against a Redis cluster with authentication, it was possible that a NOAUTH Authentication required error may appear:

DEBUG: Redis cache init
DEBUG: Redis cache connected
...
 WARN: Error while setting Redis cache value (repository=jcl-test/example)
       "err": {"message": "NOAUTH Authentication required."}

Renovate will now use the same authentication for all nodes in a cluster.

Support Yarn Catalogs #​38215

We now support the official Yarn Catalog functionality.

As part of this, we have removed support for the yarn-plugin-catalogs community plugin.

If you are using the yarn-plugin-catalogs community plugin, you will need to migrate your catalogs to the official Yarn Catalog functionality before Renovate 42 will update your dependencies.

Remove versioning modules needing to implement rangeStrategy=pin #​36261

This is an internal refactor to make it easier for creating and maintaining versioning modules.

This should not be a non-breaking change, as the versioning modules will have defaults available.

However, we're releasing it as part of this major release, and highlighting it, in case it does lead to breaking changes.

PGP encryption is now performed using Bouncy Castle #​39032

GPG encryption is no longer performed using kbpgp Keybase's PGP for JavaScript), and has been replaced with a Bouncy Castle version.

Some users have found license compliance issues with the kbpgp package, so this will now resolve them.

Legacy RSA encryption has been removed #​39111

Deprecated since 37.315.0 (2024-04-21), the legacy RSA encryption is now no longer available.

Change to the default User Agent #​37535

The user-agent header for Renovate's outgoing HTTP calls has changed the default to Renovate/${version}.

Default tool version updates #​39100

For users of the upstream Renovate container images, the following tools have been updated to new major versions:

Tool Version
Erlang 28
Gradle 9
Java 25
Node 24
Python 3.14.0

Commentary for 42

Focus on minimumReleaseAge

You'll notice that there are a number of big features here - and in recent minor releases - that focus on Minimum Release Age.

With recent supply chain attacks, the Renovate team have been hard at work improving the support we've had in Renovate (since 2019!) for this functionality, and making it as predictable as possible, so we can then enable it by default for users of config:best-practices.

You can read more about this focus in a blog post we've written on the Mend blog.

We're starting with the enabling of the npm datasource, but will look to extend this functionality in future major releases, based on community feedback, and ecosystem support.

Deprecations

As part of this release, we want to make you aware of deprecated features which will be removed as of Renovate 43:

42.0.0 (2025-11-06)

⚠ BREAKING CHANGES
  • deps: Update ghcr.io/renovatebot/base-image Docker tag to v12 (main) (#​39100)
  • deps: Needs NodeJS v24.11.0 instead of v24.10.0. NodeJS v22 is still supported.
  • npm: communit plugin yarn-catalogs-plugin is not supported anymore
  • drop legacy rsa encryption (#​39111)
  • remove rangeStrategy=pin from versioning modules (#​36261)
  • minimumReleaseAge: require a release timestamp by default (#​38843)
  • best-practices: provide default minimumReleaseAge for npm (#​37967)
  • redis: add default auth to redis clusters (#​37337)
  • remove the "Bot" from user-agent header (#​37535)
Features
Bug Fixes
Code Refactoring
Build System

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [ghcr.io/renovatebot/renovate](https://renovatebot.com) ([source](https://github.com/renovatebot/renovate)) | container | major | `41.173.1` -> `42.11.0` | --- ### Release Notes <details> <summary>renovatebot/renovate (ghcr.io/renovatebot/renovate)</summary> ### [`v42.11.0`](https://github.com/renovatebot/renovate/releases/tag/42.11.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.10.5...42.11.0) ##### Features - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.3.0 (main) ([#&#8203;39308](https://github.com/renovatebot/renovate/issues/39308)) ([b52a96b](https://github.com/renovatebot/renovate/commit/b52a96b077366fce787b23b8e738dc865864d772)) ##### Miscellaneous Chores - **deps:** update dependency vite to v7.2.2 (main) ([#&#8203;39306](https://github.com/renovatebot/renovate/issues/39306)) ([54853a3](https://github.com/renovatebot/renovate/commit/54853a374e5ea5e1ff045f23354110725d7f74a1)) - **deps:** update github/codeql-action action to v4.31.3 (main) ([#&#8203;39307](https://github.com/renovatebot/renovate/issues/39307)) ([87fd290](https://github.com/renovatebot/renovate/commit/87fd2901ca5699929911d81e3b4e16b0139f676d)) ### [`v42.10.5`](https://github.com/renovatebot/renovate/releases/tag/42.10.5) [Compare Source](https://github.com/renovatebot/renovate/compare/42.10.4...42.10.5) ##### Bug Fixes - **deps:** update ghcr.io/containerbase/sidecar docker tag to v13.24.3 (main) ([#&#8203;39300](https://github.com/renovatebot/renovate/issues/39300)) ([808801d](https://github.com/renovatebot/renovate/commit/808801dc8e2530f22fb9d14eb8fb31d5ef5a4d23)) ##### Miscellaneous Chores - **deps:** update ghcr.io/containerbase/devcontainer docker tag to v13.24.3 (main) ([#&#8203;39299](https://github.com/renovatebot/renovate/issues/39299)) ([5e541b8](https://github.com/renovatebot/renovate/commit/5e541b8d22e702cea8c7b17f65b158142d61abd9)) ### [`v42.10.4`](https://github.com/renovatebot/renovate/releases/tag/42.10.4) [Compare Source](https://github.com/renovatebot/renovate/compare/42.10.3...42.10.4) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.2.1 (main) ([#&#8203;39298](https://github.com/renovatebot/renovate/issues/39298)) ([1861733](https://github.com/renovatebot/renovate/commit/1861733e2bc3bc0a09954d4a188e722420da474e)) ### [`v42.10.3`](https://github.com/renovatebot/renovate/releases/tag/42.10.3) [Compare Source](https://github.com/renovatebot/renovate/compare/42.10.2...42.10.3) ##### Miscellaneous Chores - **github:** "GraphQL" is one word ([#&#8203;39239](https://github.com/renovatebot/renovate/issues/39239)) ([b12f999](https://github.com/renovatebot/renovate/commit/b12f999d98f08803a1b0f1e13adb38d765101ede)) ##### Build System - **deps:** update dependency [@&#8203;opentelemetry/semantic-conventions](https://github.com/opentelemetry/semantic-conventions) to v1.38.0 (main) ([#&#8203;39294](https://github.com/renovatebot/renovate/issues/39294)) ([9e01a11](https://github.com/renovatebot/renovate/commit/9e01a11559b1e164f80ed04c5b50dd2fe2dfc3c5)) - **deps:** update opentelemetry-js-contrib monorepo (main) ([#&#8203;39295](https://github.com/renovatebot/renovate/issues/39295)) ([2f2548b](https://github.com/renovatebot/renovate/commit/2f2548ba63922f7a0d6a181fdbc31cab0209426f)) ### [`v42.10.2`](https://github.com/renovatebot/renovate/releases/tag/42.10.2) [Compare Source](https://github.com/renovatebot/renovate/compare/42.10.1...42.10.2) ##### Bug Fixes - **presets:** set source url for timberio/vector ([#&#8203;39181](https://github.com/renovatebot/renovate/issues/39181)) ([d3df93d](https://github.com/renovatebot/renovate/commit/d3df93d9ddec84fcc0665ce8a6d3ae121f25a650)) ##### Documentation - **minimumReleaseAge:** further clarify what happens with multiple releases ([#&#8203;39266](https://github.com/renovatebot/renovate/issues/39266)) ([ab1f7c0](https://github.com/renovatebot/renovate/commit/ab1f7c0c425870b9bf9171f37900d59216eb5d4c)) ##### Tests - **allowedEnv:** document use of regex ([#&#8203;39264](https://github.com/renovatebot/renovate/issues/39264)) ([b8429b1](https://github.com/renovatebot/renovate/commit/b8429b1a7b4db7667e2c80d41bb7d895048fe074)) ### [`v42.10.1`](https://github.com/renovatebot/renovate/releases/tag/42.10.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.10.0...42.10.1) ##### Build System - **deps:** update opentelemetry-js monorepo to v0.208.0 (main) ([#&#8203;39293](https://github.com/renovatebot/renovate/issues/39293)) ([f2c01cb](https://github.com/renovatebot/renovate/commit/f2c01cbb218ba5d987234b918ed4329bb2159d93)) ### [`v42.10.0`](https://github.com/renovatebot/renovate/releases/tag/42.10.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.9.2...42.10.0) ##### Features - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.2.0 (main) ([#&#8203;39291](https://github.com/renovatebot/renovate/issues/39291)) ([0431ed7](https://github.com/renovatebot/renovate/commit/0431ed7fde73bd788db948f4af7aeb87420ea2f1)) ##### Miscellaneous Chores - **deps:** update docker/dockerfile docker tag to v1.20.0 (main) ([#&#8203;39290](https://github.com/renovatebot/renovate/issues/39290)) ([c050b18](https://github.com/renovatebot/renovate/commit/c050b1818c1a2618cb3d56eccb8abf538a52c07c)) - **deps:** update ghcr.io/containerbase/devcontainer docker tag to v13.24.2 (main) ([#&#8203;39289](https://github.com/renovatebot/renovate/issues/39289)) ([d19a32e](https://github.com/renovatebot/renovate/commit/d19a32e32a5efe481b2aa12ead5d0414be54a11a)) ### [`v42.9.2`](https://github.com/renovatebot/renovate/releases/tag/42.9.2) [Compare Source](https://github.com/renovatebot/renovate/compare/42.9.1...42.9.2) ##### Miscellaneous Chores - **deps:** update dependency [@&#8203;containerbase/semantic-release-pnpm](https://github.com/containerbase/semantic-release-pnpm) to v1.3.5 (main) ([#&#8203;39284](https://github.com/renovatebot/renovate/issues/39284)) ([0f8282e](https://github.com/renovatebot/renovate/commit/0f8282e691faceddf3a273ac15b84e9ebf701288)) - **deps:** update dependency [@&#8203;vitest/eslint-plugin](https://github.com/vitest/eslint-plugin) to v1.4.1 (main) ([#&#8203;39285](https://github.com/renovatebot/renovate/issues/39285)) ([d1062f1](https://github.com/renovatebot/renovate/commit/d1062f1a2adb134c7341c1e0431a05035b920a45)) - **deps:** update dependency vite to v7.2.1 (main) ([#&#8203;39286](https://github.com/renovatebot/renovate/issues/39286)) ([ea0f2eb](https://github.com/renovatebot/renovate/commit/ea0f2eb32c6a6f2dea43828c09e511a7a6e1be94)) ##### Build System - **deps:** update dependency [@&#8203;renovatebot/pgp](https://github.com/renovatebot/pgp) to v1.1.1 (main) ([#&#8203;39283](https://github.com/renovatebot/renovate/issues/39283)) ([8bfe519](https://github.com/renovatebot/renovate/commit/8bfe51915465a95b03c15b6da09a1c48b7bff376)) ### [`v42.9.1`](https://github.com/renovatebot/renovate/releases/tag/42.9.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.9.0...42.9.1) ##### Bug Fixes - **config/validation:** don't allow `global:` presets outside of global configuration ([#&#8203;39211](https://github.com/renovatebot/renovate/issues/39211)) ([7092644](https://github.com/renovatebot/renovate/commit/70926444462d1e140a0b93d4c0122fbcc3de5d02)) ### [`v42.9.0`](https://github.com/renovatebot/renovate/releases/tag/42.9.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.8.1...42.9.0) ##### Features - **bumpVersions:** support short versions ([#&#8203;39280](https://github.com/renovatebot/renovate/issues/39280)) ([2c96c99](https://github.com/renovatebot/renovate/commit/2c96c9973fa22d557ec42da2facf6cbf76213d96)) ##### Bug Fixes - **presets:** remove `npm` preset file ([#&#8203;39282](https://github.com/renovatebot/renovate/issues/39282)) ([1bbc079](https://github.com/renovatebot/renovate/commit/1bbc07951f68bfa182bcce6e3b4526aa828beec1)), closes [#&#8203;38310](https://github.com/renovatebot/renovate/issues/38310) ### [`v42.8.1`](https://github.com/renovatebot/renovate/releases/tag/42.8.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.8.0...42.8.1) ##### Bug Fixes - **gerrit:** avoid retrieving messages in `updatePr` and `createPr` ([#&#8203;39015](https://github.com/renovatebot/renovate/issues/39015)) ([84633f1](https://github.com/renovatebot/renovate/commit/84633f1e560d6e0a787184c5e57e0857c8faece8)) ### [`v42.8.0`](https://github.com/renovatebot/renovate/releases/tag/42.8.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.7.1...42.8.0) ##### Features - **presets:** Add ckeditor5-premium-features monorepo ([#&#8203;39194](https://github.com/renovatebot/renovate/issues/39194)) ([79725d3](https://github.com/renovatebot/renovate/commit/79725d3d2071a80bcfdd2bfd4053f9052f1c1132)) ### [`v42.7.1`](https://github.com/renovatebot/renovate/releases/tag/42.7.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.7.0...42.7.1) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.1.8 (main) ([#&#8203;39262](https://github.com/renovatebot/renovate/issues/39262)) ([4a8391e](https://github.com/renovatebot/renovate/commit/4a8391e72e388d8a60ccb6113c0c18ca315c6952)) ##### Documentation - clarify org inherited config for Azure DevOps repos ([#&#8203;38808](https://github.com/renovatebot/renovate/issues/38808)) ([ed9cef7](https://github.com/renovatebot/renovate/commit/ed9cef790c229efef718349d6d0167e233497f9c)) - **templates/replace:** needs double backslash to escape dot ([#&#8203;39261](https://github.com/renovatebot/renovate/issues/39261)) ([f4b569a](https://github.com/renovatebot/renovate/commit/f4b569a5959216e5132876a8a8756798750c1ec0)) ##### Miscellaneous Chores - **deps:** update dependency vite to v7.2.0 (main) ([#&#8203;39258](https://github.com/renovatebot/renovate/issues/39258)) ([6e1adc4](https://github.com/renovatebot/renovate/commit/6e1adc497f0d1a66e04a5938eead33ebcdfee395)) ### [`v42.7.0`](https://github.com/renovatebot/renovate/releases/tag/42.7.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.6.3...42.7.0) ##### Features - **presets:** Add Apache Datafusion monorepo ([#&#8203;39215](https://github.com/renovatebot/renovate/issues/39215)) ([437448f](https://github.com/renovatebot/renovate/commit/437448f02e2a9de59792dc9b3dc0873cde995249)) ##### Bug Fixes - **bitbucket-server:** better empty pr-cache handling ([#&#8203;39245](https://github.com/renovatebot/renovate/issues/39245)) ([afb5d24](https://github.com/renovatebot/renovate/commit/afb5d24713cc345d11f0d3a69e52cee265148d51)) ##### Miscellaneous Chores - **deps:** update dependency [@&#8203;containerbase/semantic-release-pnpm](https://github.com/containerbase/semantic-release-pnpm) to v1.3.4 (main) ([#&#8203;39254](https://github.com/renovatebot/renovate/issues/39254)) ([7f39823](https://github.com/renovatebot/renovate/commit/7f39823163e597b37c27876f71c9dda61b4c254b)) ##### Tests - **forgejo:** add tests for pr-cache ([#&#8203;39244](https://github.com/renovatebot/renovate/issues/39244)) ([a034882](https://github.com/renovatebot/renovate/commit/a034882394658724a777c64ae7ec70972f14be4d)) - **gitea:** add tests for pr-cache ([#&#8203;39243](https://github.com/renovatebot/renovate/issues/39243)) ([211b500](https://github.com/renovatebot/renovate/commit/211b5000529f67905041df6a74ce6bf323d81569)) ### [`v42.6.3`](https://github.com/renovatebot/renovate/releases/tag/42.6.3) [Compare Source](https://github.com/renovatebot/renovate/compare/42.6.2...42.6.3) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.1.7 (main) ([#&#8203;39253](https://github.com/renovatebot/renovate/issues/39253)) ([c505dd6](https://github.com/renovatebot/renovate/commit/c505dd6c9bfe7a1d3a58c58631a7b5adcc04ff1a)) ##### Miscellaneous Chores - **deps:** update dependency node to v24.11.1 (main) ([#&#8203;39252](https://github.com/renovatebot/renovate/issues/39252)) ([bcf91d8](https://github.com/renovatebot/renovate/commit/bcf91d8bc725657779413c8ac3da34f3dc195ce4)) ### [`v42.6.2`](https://github.com/renovatebot/renovate/releases/tag/42.6.2) [Compare Source](https://github.com/renovatebot/renovate/compare/42.6.1...42.6.2) ##### Miscellaneous Chores - **deps:** update python:3.14 docker digest to [`e6b1f70`](https://github.com/renovatebot/renovate/commit/e6b1f70) (main) ([#&#8203;39247](https://github.com/renovatebot/renovate/issues/39247)) ([9344234](https://github.com/renovatebot/renovate/commit/934423495bca935aef27bc8d4725b28f6b4a02b4)) ##### Build System - **deps:** update node.js to v24.11.1 (main) ([#&#8203;39248](https://github.com/renovatebot/renovate/issues/39248)) ([f5cf304](https://github.com/renovatebot/renovate/commit/f5cf304913e2353ef9166351abdc937ece481619)) ### [`v42.6.1`](https://github.com/renovatebot/renovate/releases/tag/42.6.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.6.0...42.6.1) ##### Build System - **deps:** update dependency sax to v1.4.3 (main) ([#&#8203;39240](https://github.com/renovatebot/renovate/issues/39240)) ([f7d7c8a](https://github.com/renovatebot/renovate/commit/f7d7c8a15dab88125c19b4e1566f1a75de107f53)) ### [`v42.6.0`](https://github.com/renovatebot/renovate/releases/tag/42.6.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.5.4...42.6.0) ##### Features - **manager/gradle:** add support for variables in plugin names ([#&#8203;39002](https://github.com/renovatebot/renovate/issues/39002)) ([96a7d27](https://github.com/renovatebot/renovate/commit/96a7d27350433474f9b50f22e2e8237095d56aff)) ### [`v42.5.4`](https://github.com/renovatebot/renovate/releases/tag/42.5.4) [Compare Source](https://github.com/renovatebot/renovate/compare/42.5.3...42.5.4) ##### Bug Fixes - **deps:** update dependency mkdocs-material to v9.7.0 (main) ([#&#8203;39227](https://github.com/renovatebot/renovate/issues/39227)) ([50b4d13](https://github.com/renovatebot/renovate/commit/50b4d131f4938f4b497e9b5eba70467c8f386ff7)) ### [`v42.5.3`](https://github.com/renovatebot/renovate/releases/tag/42.5.3) [Compare Source](https://github.com/renovatebot/renovate/compare/42.5.2...42.5.3) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.1.6 (main) ([#&#8203;39224](https://github.com/renovatebot/renovate/issues/39224)) ([684ce89](https://github.com/renovatebot/renovate/commit/684ce89f9524fcbf671c2b6c4e30dec4951d48c3)) ### [`v42.5.2`](https://github.com/renovatebot/renovate/releases/tag/42.5.2) [Compare Source](https://github.com/renovatebot/renovate/compare/42.5.1...42.5.2) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.1.5 (main) ([#&#8203;39220](https://github.com/renovatebot/renovate/issues/39220)) ([808029c](https://github.com/renovatebot/renovate/commit/808029cf14b2468290a3af57660285e0c810e03f)) ##### Miscellaneous Chores - **deps:** update actions/dependency-review-action action to v4.8.2 (main) ([#&#8203;39219](https://github.com/renovatebot/renovate/issues/39219)) ([a17245c](https://github.com/renovatebot/renovate/commit/a17245cff3f3359fff75fb45a7519f3279195b66)) ### [`v42.5.1`](https://github.com/renovatebot/renovate/releases/tag/42.5.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.5.0...42.5.1) ##### Bug Fixes - **deps:** update ghcr.io/containerbase/sidecar docker tag to v13.24.1 (main) ([#&#8203;39218](https://github.com/renovatebot/renovate/issues/39218)) ([909e043](https://github.com/renovatebot/renovate/commit/909e043bd286b42a0e31d09e1c50a84bcb59e694)) ##### Miscellaneous Chores - **deps:** update ghcr.io/containerbase/devcontainer docker tag to v13.24.1 (main) ([#&#8203;39217](https://github.com/renovatebot/renovate/issues/39217)) ([4532ddd](https://github.com/renovatebot/renovate/commit/4532ddd9c3381c59f29f977f0e4ce79fdc0aa1d5)) - **deps:** update linters to v9.39.1 (main) ([#&#8203;39216](https://github.com/renovatebot/renovate/issues/39216)) ([b607128](https://github.com/renovatebot/renovate/commit/b607128d05edc23ce0c1ab178105b3cce666e3cb)) ### [`v42.5.0`](https://github.com/renovatebot/renovate/releases/tag/42.5.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.4.1...42.5.0) ##### Features - add configValidationError option to log config validation errors as errors instead of warnings ([#&#8203;39177](https://github.com/renovatebot/renovate/issues/39177)) ([83d6464](https://github.com/renovatebot/renovate/commit/83d64647b7b722247b41a993bf2eaf45c6c089ab)) ##### Miscellaneous Chores - **deps:** update dependency typescript-eslint to v8.46.3 (main) ([#&#8203;39209](https://github.com/renovatebot/renovate/issues/39209)) ([39b7896](https://github.com/renovatebot/renovate/commit/39b78964cc942ad4a51d55b85e0857042e82e657)) ##### Build System - **deps:** update dependency sax to v1.4.2 (main) ([#&#8203;39210](https://github.com/renovatebot/renovate/issues/39210)) ([54fb867](https://github.com/renovatebot/renovate/commit/54fb867c0b3c97b3845f231602bafd29978f5f18)) ### [`v42.4.1`](https://github.com/renovatebot/renovate/releases/tag/42.4.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.4.0...42.4.1) ##### Bug Fixes - ignore .npmrc when the npmrc configuration is being used ([#&#8203;39205](https://github.com/renovatebot/renovate/issues/39205)) ([67b256a](https://github.com/renovatebot/renovate/commit/67b256aa3f8906120c82757e10b04cf45aa9f0af)) ##### Documentation - render empty array in code tag ([#&#8203;39200](https://github.com/renovatebot/renovate/issues/39200)) ([89edd5e](https://github.com/renovatebot/renovate/commit/89edd5e9f6c436fd07fdf7306befdb626880b62f)) ##### Code Refactoring - use named exports ([#&#8203;39196](https://github.com/renovatebot/renovate/issues/39196)) ([76f9110](https://github.com/renovatebot/renovate/commit/76f911041a1808555e798f36731052a09a3109e7)) ### [`v42.4.0`](https://github.com/renovatebot/renovate/releases/tag/42.4.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.3.0...42.4.0) ##### Features - **poetry:** support PEP735 dependency-groups ([#&#8203;38608](https://github.com/renovatebot/renovate/issues/38608)) ([1839f93](https://github.com/renovatebot/renovate/commit/1839f934e4a1702a46d98e39647816e25e0bd931)) ##### Miscellaneous Chores - **deps:** update dependency type-fest to v5.2.0 (main) ([#&#8203;39195](https://github.com/renovatebot/renovate/issues/39195)) ([74397d1](https://github.com/renovatebot/renovate/commit/74397d1244ba7ea54adb5a4654b0c9e2f48830ef)) - **deps:** update linters (main) ([#&#8203;38897](https://github.com/renovatebot/renovate/issues/38897)) ([b34bbb5](https://github.com/renovatebot/renovate/commit/b34bbb5b2a2c7e772534f1b944da1ce3d4c3ecf7)), closes [#&#8203;39183](https://github.com/renovatebot/renovate/issues/39183) ### [`v42.3.0`](https://github.com/renovatebot/renovate/releases/tag/42.3.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.2.0...42.3.0) ##### Features - **argocd:** support OCI Helm charts without explicit chart field ([#&#8203;39149](https://github.com/renovatebot/renovate/issues/39149)) ([82c09ba](https://github.com/renovatebot/renovate/commit/82c09baca641e82052a79df9720ed9a2d5555853)) ##### Documentation - update references to renovate/renovate to v42 (main) ([#&#8203;39185](https://github.com/renovatebot/renovate/issues/39185)) ([7adf47b](https://github.com/renovatebot/renovate/commit/7adf47b521ca45265b01288527a5c9fe901a7ebd)) ##### Miscellaneous Chores - **deps:** lock file maintenance (main) ([#&#8203;39186](https://github.com/renovatebot/renovate/issues/39186)) ([a028a54](https://github.com/renovatebot/renovate/commit/a028a541e1cc11bdeb7c2a18d357b3210a3308a6)) - **deps:** update containerbase/internal-tools action to v3.14.17 (main) ([#&#8203;39187](https://github.com/renovatebot/renovate/issues/39187)) ([bb24aa4](https://github.com/renovatebot/renovate/commit/bb24aa458bb29f856c26ea69680f3f03848277b8)) - **deps:** update containerbase/internal-tools action to v3.14.18 (main) ([#&#8203;39189](https://github.com/renovatebot/renovate/issues/39189)) ([e818872](https://github.com/renovatebot/renovate/commit/e8188729a9ba527f3e542ae42d7e4f6c7577c957)) - **deps:** update dependency [@&#8203;containerbase/eslint-plugin](https://github.com/containerbase/eslint-plugin) to v1.1.18 (main) ([#&#8203;39188](https://github.com/renovatebot/renovate/issues/39188)) ([bc5d6c8](https://github.com/renovatebot/renovate/commit/bc5d6c82b3ab7087cdccd498d1b9d815b4952a67)) - **deps:** update dependency [@&#8203;containerbase/semantic-release-pnpm](https://github.com/containerbase/semantic-release-pnpm) to v1.3.3 (main) ([#&#8203;39190](https://github.com/renovatebot/renovate/issues/39190)) ([b011d89](https://github.com/renovatebot/renovate/commit/b011d89eb3be8d166439bc110b512b270a30d932)) - **deps:** update dependency [@&#8203;types/node](https://github.com/types/node) to v22.19.0 (main) ([#&#8203;39191](https://github.com/renovatebot/renovate/issues/39191)) ([b06c8b2](https://github.com/renovatebot/renovate/commit/b06c8b21bee83213c01795b0b93206a68107bcf3)) - **deps:** update python:3.14 docker digest to [`97aa8cc`](https://github.com/renovatebot/renovate/commit/97aa8cc) (main) ([#&#8203;39192](https://github.com/renovatebot/renovate/issues/39192)) ([741b028](https://github.com/renovatebot/renovate/commit/741b0288432c78f2fbc536fb4a4ef00297921d19)) ### [`v42.2.0`](https://github.com/renovatebot/renovate/releases/tag/42.2.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.1.3...42.2.0) ##### Features - **manager/npm:** use volta node pin as node version constraint ([#&#8203;38816](https://github.com/renovatebot/renovate/issues/38816)) ([3b81143](https://github.com/renovatebot/renovate/commit/3b811438d4d90c91e27a6f340b2b57afb205188e)) ##### Miscellaneous Chores - **deps:** update dependency esbuild to v0.25.12 (main) ([#&#8203;39179](https://github.com/renovatebot/renovate/issues/39179)) ([3a149c9](https://github.com/renovatebot/renovate/commit/3a149c9edcbae0964ae491e3753cf255145937ca)) - **deps:** update dependency globals to v16.5.0 (main) ([#&#8203;39176](https://github.com/renovatebot/renovate/issues/39176)) ([d53217b](https://github.com/renovatebot/renovate/commit/d53217b9a65d5e2c6c522cc7ea20e71bc64ade54)) - **deps:** update dependency graphql to v16.12.0 (main) ([#&#8203;39178](https://github.com/renovatebot/renovate/issues/39178)) ([d453b0e](https://github.com/renovatebot/renovate/commit/d453b0e90684fa0f4c98673732befbadd2b849b2)) ##### Build System - **deps:** update dependency simple-git to v3.30.0 (main) ([#&#8203;39180](https://github.com/renovatebot/renovate/issues/39180)) ([19fd8e4](https://github.com/renovatebot/renovate/commit/19fd8e4e50c8ada782916823f4dec83fbac1d638)) ### [`v42.1.3`](https://github.com/renovatebot/renovate/releases/tag/42.1.3) [Compare Source](https://github.com/renovatebot/renovate/compare/42.1.2...42.1.3) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.1.4 (main) ([#&#8203;39174](https://github.com/renovatebot/renovate/issues/39174)) ([1216402](https://github.com/renovatebot/renovate/commit/1216402ca44244e10484761a2ebee90153bd47fa)) ##### Build System - **deps:** update dependency [@&#8203;renovatebot/osv-offline](https://github.com/renovatebot/osv-offline) to v1.7.10 (main) ([#&#8203;39173](https://github.com/renovatebot/renovate/issues/39173)) ([a8f1501](https://github.com/renovatebot/renovate/commit/a8f150193c53c0b8f91b64be85edb1cb9364e047)) ### [`v42.1.2`](https://github.com/renovatebot/renovate/releases/tag/42.1.2) [Compare Source](https://github.com/renovatebot/renovate/compare/42.1.1...42.1.2) ##### Bug Fixes - **nuget:** correct escaping syntax ([#&#8203;39120](https://github.com/renovatebot/renovate/issues/39120)) ([50471cb](https://github.com/renovatebot/renovate/commit/50471cbd253d3ee613bb120ee7274b3a03965f6f)) - skip npm installation if no constraint specified ([#&#8203;38974](https://github.com/renovatebot/renovate/issues/38974)) ([98eef7e](https://github.com/renovatebot/renovate/commit/98eef7e82da17ee9a025aa7f06c1ed250d74300e)) ### [`v42.1.1`](https://github.com/renovatebot/renovate/releases/tag/42.1.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.1.0...42.1.1) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.1.3 (main) ([#&#8203;39172](https://github.com/renovatebot/renovate/issues/39172)) ([0ffd324](https://github.com/renovatebot/renovate/commit/0ffd3241cbc064b0a3e037dfab0ab0da8d3c0656)) ### [`v42.1.0`](https://github.com/renovatebot/renovate/releases/tag/42.1.0) [Compare Source](https://github.com/renovatebot/renovate/compare/42.0.3...42.1.0) ##### Features - **pip-compile:** Support more `uv pip compile` options ([#&#8203;39167](https://github.com/renovatebot/renovate/issues/39167)) ([0b02c42](https://github.com/renovatebot/renovate/commit/0b02c4257a91c11d2c89372ab21f2c03f2f34824)) ##### Code Refactoring - **deb:** Split DebDatasource in smaller pieces and prepare for mutli-compression feature ([#&#8203;38254](https://github.com/renovatebot/renovate/issues/38254)) ([5d36cf1](https://github.com/renovatebot/renovate/commit/5d36cf1d1496cf0bbd98318a3f9cbdf0811e1f04)) - **presets:** add type for presets with global-only configuration ([#&#8203;39166](https://github.com/renovatebot/renovate/issues/39166)) ([8348930](https://github.com/renovatebot/renovate/commit/83489302d7248ed918e96a890ebfffe2cbe334d8)) ##### Build System - **deps:** update dependency [@&#8203;sindresorhus/is](https://github.com/sindresorhus/is) to v7.1.1 (main) ([#&#8203;39169](https://github.com/renovatebot/renovate/issues/39169)) ([2ed5bc5](https://github.com/renovatebot/renovate/commit/2ed5bc52a0fd751985a2581657e6d5b1f0e4753f)) ##### Continuous Integration - add an "ago" note to the notification ([#&#8203;39161](https://github.com/renovatebot/renovate/issues/39161)) ([a75dc8c](https://github.com/renovatebot/renovate/commit/a75dc8c4023b6539ea2c5f8c29b5783bfdaed2d1)) ### [`v42.0.3`](https://github.com/renovatebot/renovate/releases/tag/42.0.3) [Compare Source](https://github.com/renovatebot/renovate/compare/42.0.2...42.0.3) ##### Bug Fixes - **deps:** update ghcr.io/renovatebot/base-image docker tag to v12.1.2 (main) ([#&#8203;39164](https://github.com/renovatebot/renovate/issues/39164)) ([534a686](https://github.com/renovatebot/renovate/commit/534a68691d5dfc7eb4f962baaa6f7e0029433d90)) ##### Documentation - reference glob tool ([#&#8203;39154](https://github.com/renovatebot/renovate/issues/39154)) ([6f6a94a](https://github.com/renovatebot/renovate/commit/6f6a94abf9c0dd7b8fea987b066901ad36f161d5)) ### [`v42.0.2`](https://github.com/renovatebot/renovate/releases/tag/42.0.2) [Compare Source](https://github.com/renovatebot/renovate/compare/42.0.1...42.0.2) ##### Bug Fixes - **git-submodules:** avoid network call during extract ([#&#8203;39147](https://github.com/renovatebot/renovate/issues/39147)) ([7688550](https://github.com/renovatebot/renovate/commit/7688550150c6ad7868f403dcd1d9578316fa28b7)) ##### Miscellaneous Chores - **deps:** update dependency rimraf to v6.1.0 (main) ([#&#8203;39150](https://github.com/renovatebot/renovate/issues/39150)) ([c94c65f](https://github.com/renovatebot/renovate/commit/c94c65f52a7c6c31132d07cd07782e6a8ae96495)) ### [`v42.0.1`](https://github.com/renovatebot/renovate/releases/tag/42.0.1) [Compare Source](https://github.com/renovatebot/renovate/compare/42.0.0...42.0.1) ##### Documentation - **major-release:** document "why", "when", "how" ([#&#8203;38963](https://github.com/renovatebot/renovate/issues/38963)) ([cd757d8](https://github.com/renovatebot/renovate/commit/cd757d84fcd427ae7e47ce06be38796d9f552752)) - **minimumReleaseAge:** document how to opt-out a dependency ([#&#8203;39119](https://github.com/renovatebot/renovate/issues/39119)) ([81697ad](https://github.com/renovatebot/renovate/commit/81697ad087888a461c3105de584fe37fcbb55724)) ##### Miscellaneous Chores - **deps:** update dependency [@&#8203;smithy/util-stream](https://github.com/smithy/util-stream) to v4.5.5 (main) ([#&#8203;39143](https://github.com/renovatebot/renovate/issues/39143)) ([1563b41](https://github.com/renovatebot/renovate/commit/1563b418577b4258eda1da91c393fe54a2c0391d)) - **deps:** update dependency [@&#8203;vitest/eslint-plugin](https://github.com/vitest/eslint-plugin) to v1.4.0 (main) ([#&#8203;39138](https://github.com/renovatebot/renovate/issues/39138)) ([bddc1c3](https://github.com/renovatebot/renovate/commit/bddc1c35d79ce77dca926f630c458de4df1b3068)) - update pull request template ([#&#8203;39136](https://github.com/renovatebot/renovate/issues/39136)) ([39a1b86](https://github.com/renovatebot/renovate/commit/39a1b8640eb317955b9166841f50d33864e2e038)) ##### Build System - **deps:** update dependency google-auth-library to v10.5.0 (main) ([#&#8203;39146](https://github.com/renovatebot/renovate/issues/39146)) ([748a623](https://github.com/renovatebot/renovate/commit/748a623d8e6e5d93f345d04d6d341200f23afea6)) ### [`v42.0.0`](https://github.com/renovatebot/renovate/releases/tag/42.0.0) [Compare Source](https://github.com/renovatebot/renovate/compare/41.173.1...42.0.0) #### Breaking changes for 42 ##### Using `minimumReleaseAge` will now require a release timestamp [#&#8203;38843](https://github.com/renovatebot/renovate/issues/38843) When specifying `minimumReleaseAge`, Renovate will look for a release timestamp to determine the age of the release, and whether it matched the `minimumReleaseAge` configuration. Before Renovate 42, if a release timestamp was not present, Renovate would treat the dependency update as if the release timestamp was present and the dependency had passed that lifetime. This means that users with artifact proxies, or in cases that the release timestamp wasn't consistently present could lead to dependencies "slipping through", and being updated before Renovate's policy enforced it to. As of Renovate 42, the configuration [`minimumReleaseAgeBehaviour`](https://docs.renovatebot.com/configuration-options/#minimumreleaseagebehaviour) (added in 41.150.0) requires the release timestamp to be present. If the release timestamp isn't present, Renovate will mark it as "awaiting schedule", and will output a debug log message to explain why. You can revert to the existing behaviour by setting `minimumReleaseAgeBehaviour=timestamp-optional`. Note that not all datasources support this functionality, nor do custom registries (such as Artifactory, etc). For more details on how to verify support for your repository, check out the [Minimum Release Age documentation](https://docs.renovatebot.com/key-concepts/minimum-release-age/) ##### `minimumReleaseAge: 3 days` will now be set by default for npm in `config:best-practices` [#&#8203;37967](https://github.com/renovatebot/renovate/issues/37967) For users of [`config:best-practices`](https://docs.renovatebot.com/presets-config/#configbest-practices), the [Minimum Release Age](https://docs.renovatebot.com/key-concepts/minimum-release-age/) functionality will now apply by default for the npm ecosystem. This will introduce a delay of **3 days** between package publishing and Renovate suggesting an update for the release, so: - there is time for malware researchers and scanners to (possibly) detect any malicious behaviour in new releases, before your CI infrastructure or developers receive a malicious version upgrade - you are not at risk of the package being unpublished in the 3 day window that the npm registry allows This will be enforced by default for packages using the [`npm` datasource](https://docs.renovatebot.com/modules/datasource/npm/) via the [`security:minimumReleaseAgeNpm`](https://docs.renovatebot.com/presets-security/#securityminimumreleaseagenpm) preset. > \[!NOTE] > This may require additional configuration if using a custom registry, or you have packages that you wish to not have minimum release age checks. For more details on this functionality, check out the [Minimum Release Age documentation](https://docs.renovatebot.com/key-concepts/minimum-release-age/). ##### Renovate now defaults to using Node.JS 24 [#&#8203;38939](https://github.com/renovatebot/renovate/issues/38939) With Node 24 now in Long Term Support (LTS) release status, we have moved to target Node.JS 24 (`^24.11.0`) as our default engine for Node, and retain support for Node 22. The pre-built Docker containers have been updated to use Node 24. If you self-host *without* using our Docker image, you should be able to continue running Renovate with Node 22, for instance if you build your own image, or run the `renovate` npm package. ##### Redis clusters now authenticate to all nodes in the cluster with the provided credentials When running Renovate against a Redis cluster with authentication, it was possible that a `NOAUTH Authentication required` error may appear: ``` DEBUG: Redis cache init DEBUG: Redis cache connected ... WARN: Error while setting Redis cache value (repository=jcl-test/example) "err": {"message": "NOAUTH Authentication required."} ``` Renovate will now use the same authentication for all nodes in a cluster. ##### Support Yarn Catalogs [#&#8203;38215](https://github.com/renovatebot/renovate/issues/38215) We now support the official [Yarn Catalog](https://yarnpkg.com/features/catalogs) functionality. As part of this, we have removed support for the [yarn-plugin-catalogs](https://github.com/toss/yarn-plugin-catalogs) community plugin. If you are using the [yarn-plugin-catalogs](https://github.com/toss/yarn-plugin-catalogs) community plugin, you will need to migrate your catalogs to the official Yarn Catalog functionality before Renovate 42 will update your dependencies. ##### Remove versioning modules needing to implement `rangeStrategy=pin` [#&#8203;36261](https://github.com/renovatebot/renovate/issues/36261) This is an internal refactor to make it easier for creating and maintaining versioning modules. This *should* not be a non-breaking change, as the versioning modules will have defaults available. However, we're releasing it as part of this major release, and highlighting it, in case it does lead to breaking changes. ##### PGP encryption is now performed using Bouncy Castle [#&#8203;39032](https://github.com/renovatebot/renovate/issues/39032) GPG encryption is no longer performed using [`kbpgp` Keybase's PGP for JavaScript)](https://www.npmjs.com/package/@&#8203;renovatebot/kbpgp), and has been replaced with a Bouncy Castle version. Some users have found license compliance issues with the `kbpgp` package, so this will now resolve them. ##### Legacy RSA encryption has been removed [#&#8203;39111](https://github.com/renovatebot/renovate/issues/39111) [Deprecated](https://github.com/renovatebot/renovate/pull/28557) since 37.315.0 (2024-04-21), the legacy RSA encryption is now no longer available. ##### Change to the default User Agent [#&#8203;37535](https://github.com/renovatebot/renovate/issues/37535) The `user-agent` header for Renovate's outgoing HTTP calls has changed the default to `Renovate/${version}`. ##### Default tool version updates [#&#8203;39100](https://github.com/renovatebot/renovate/issues/39100) For users of the upstream Renovate container images, the following tools have been updated to new major versions: | Tool | Version | | ---- | ------- | | Erlang | 28 | | Gradle | 9 | | Java | 25| | Node | 24 | | Python | 3.14.0| #### Commentary for 42 ##### Focus on `minimumReleaseAge` You'll notice that there are a number of big features here - and in recent minor releases - that focus on [Minimum Release Age](https://docs.renovatebot.com/key-concepts/minimum-release-age/). With recent supply chain attacks, the Renovate team have been hard at work improving the support we've had in Renovate (since 2019!) for this functionality, and making it as predictable as possible, so we can then enable it by default for users of `config:best-practices`. You can read more about this focus [in a blog post we've written on the Mend blog](https://www.mend.io/blog/secure-npm-ecosystem-with-mend-renovate/). We're starting with the enabling of the `npm` datasource, but will look to extend this functionality in future major releases, based on community feedback, and ecosystem support. #### Deprecations As part of this release, we want to make you aware of deprecated features which will be removed as of Renovate 43: - [the `renovate-schema.json` will only support repository configuration](https://github.com/renovatebot/renovate/issues/38728), and a separate `renovate-admin-schema.json` will be needed for global/self-hosted configuration #### [42.0.0](https://github.com/renovatebot/renovate/compare/41.173.1...42.0.0) (2025-11-06) ##### ⚠ BREAKING CHANGES - **deps:** Update ghcr.io/renovatebot/base-image Docker tag to v12 (main) ([#&#8203;39100](https://github.com/renovatebot/renovate/issues/39100)) - **deps:** Needs NodeJS v24.11.0 instead of v24.10.0. NodeJS v22 is still supported. - **npm:** communit plugin yarn-catalogs-plugin is not supported anymore - drop legacy rsa encryption ([#&#8203;39111](https://github.com/renovatebot/renovate/issues/39111)) - remove rangeStrategy=pin from versioning modules ([#&#8203;36261](https://github.com/renovatebot/renovate/issues/36261)) - **minimumReleaseAge:** require a release timestamp by default ([#&#8203;38843](https://github.com/renovatebot/renovate/issues/38843)) - **best-practices:** provide default `minimumReleaseAge` for npm ([#&#8203;37967](https://github.com/renovatebot/renovate/issues/37967)) - **redis:** add default auth to redis clusters ([#&#8203;37337](https://github.com/renovatebot/renovate/issues/37337)) - remove the "Bot" from user-agent header ([#&#8203;37535](https://github.com/renovatebot/renovate/issues/37535)) ##### Features - **best-practices:** provide default `minimumReleaseAge` for npm ([#&#8203;37967](https://github.com/renovatebot/renovate/issues/37967)) ([e371de1](https://github.com/renovatebot/renovate/commit/e371de1b9501807eeadcb3e190ccfe982b2df977)), closes [#&#8203;37952](https://github.com/renovatebot/renovate/issues/37952) - **deps:** Update ghcr.io/renovatebot/base-image Docker tag to v12 (main) ([#&#8203;39100](https://github.com/renovatebot/renovate/issues/39100)) ([f9f810f](https://github.com/renovatebot/renovate/commit/f9f810f486621e6f43d2f5a59fe1877691366490)) - **minimumReleaseAge:** require a release timestamp by default ([#&#8203;38843](https://github.com/renovatebot/renovate/issues/38843)) ([1cf9b1c](https://github.com/renovatebot/renovate/commit/1cf9b1c6a4713a315c367153d2fe31dc5d4f3347)), closes [#&#8203;37952](https://github.com/renovatebot/renovate/issues/37952) - **npm:** support yarn catalogs ([#&#8203;38215](https://github.com/renovatebot/renovate/issues/38215)) ([d7a741b](https://github.com/renovatebot/renovate/commit/d7a741b831bc569f7564fe859b6ff0e16e7fca83)) - replace `kbpgp` with `bcpgp` ([#&#8203;39032](https://github.com/renovatebot/renovate/issues/39032)) ([6de0097](https://github.com/renovatebot/renovate/commit/6de0097dc87165b661f52821f0b3ef72cf52ec6e)) ##### Bug Fixes - drop legacy rsa encryption ([#&#8203;39111](https://github.com/renovatebot/renovate/issues/39111)) ([f1eefcf](https://github.com/renovatebot/renovate/commit/f1eefcf3938e34f2eaba6ba52fe67cb01cdcb416)) - **redis:** add default auth to redis clusters ([#&#8203;37337](https://github.com/renovatebot/renovate/issues/37337)) ([df9844d](https://github.com/renovatebot/renovate/commit/df9844d5ad019ca23930ea9ef8b9bf882848367f)) - remove the "Bot" from user-agent header ([#&#8203;37535](https://github.com/renovatebot/renovate/issues/37535)) ([4e4a0f9](https://github.com/renovatebot/renovate/commit/4e4a0f99b0da3352e417dbc52f4409557248c2ce)) ##### Code Refactoring - remove rangeStrategy=pin from versioning modules ([#&#8203;36261](https://github.com/renovatebot/renovate/issues/36261)) ([0d5d7a8](https://github.com/renovatebot/renovate/commit/0d5d7a866987dd694a13bea9b4ff176cab1a6355)) ##### Build System - **deps:** update dependency node to v24 (main) ([#&#8203;38939](https://github.com/renovatebot/renovate/issues/38939)) ([2e3da4d](https://github.com/renovatebot/renovate/commit/2e3da4d48cce8febf336e20811789d6a889deda6)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS40My41IiwidXBkYXRlZEluVmVyIjoiNDEuNDMuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate added 1 commit 2025-11-16 00:23:38 +00:00
chore(deps): update ghcr.io/renovatebot/renovate docker tag to v42 0da369389a
renovate scheduled this pull request to auto merge when all checks succeed 2025-11-16 00:23:38 +00:00
renovate merged commit a39584fb61 into main 2025-11-16 00:23:43 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
marco renovate
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: training/docker-build-exercise#165
Delete Branch "renovate/ghcr.io-renovatebot-renovate-42.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?