chore: update dependency renovate to v43

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
renovate (source)	^39.264.1 → ^43.129.0

---

Release Notes

renovatebot/renovate (renovate)

v43.129.0

Compare Source

Features

• versioning: add a github-actions versioning (#​42712) (d508716)

v43.128.1

Compare Source

Bug Fixes

• datasource/npm: catch invalid engines (#​42718) (06cf949)

Continuous Integration

• add an auto-label for new monorepo.json onboarding (#​42660) (5cfb467)
• auto-label: manually comment + close issues (#​42722) (170cf56)

v43.128.0

Compare Source

v43.127.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.35.2 (main) (#​42717) (a4456c1)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v4.5.24 (main) (#​42665) (19a2409)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.23 (main) (#​42715) (1953812)

Code Refactoring

• logger: use expose to load bunyan (#​42714) (954ec4f)

v43.127.2

Compare Source

Bug Fixes

• manager/github-actions: revert recent changes (#​42707) (db64cc6), closes #​42690 #​42683 #​42685
• presets: restore custom versioning (#​42693) (5437860)

Miscellaneous Chores

• deps: update devcontainers/ci action to v0.3.1900000449 (main) (#​42705) (fe10c94)

v43.127.1

Compare Source

v43.127.0

Compare Source

v43.126.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.34.0 (main) (#​42697) (4b61c70)

Miscellaneous Chores

• deps: update dependency node to v24.15.0 (main) (#​42695) (dc90208)

v43.125.1

Compare Source

Bug Fixes

• manager/github-actions: override versioning for Actions with Immutable Tags (#​42690) (1b0785b)

v43.125.0

Compare Source

Features

• replacements: migrate users to astral/setup-uv v8 (#​42683) (f5859c2)

v43.124.1

Compare Source

Bug Fixes

• docker: only set replaceString if requested (#​42649) (f6d4106)

v43.124.0

Compare Source

Features

• manager/github-actions: use semver-partial as default versioning (#​42685) (da04b8e), closes #​42331

Documentation

• fix link in vulnerabilityAlerts docs (#​42680) (b0fd397)

Continuous Integration

• auto-prs: handle draft PRs better (#​42686) (0a86cc5)

v43.123.8

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.35 (main) (#​42681) (4b597ec)
• package-rules: correctly merge force.enabled (#​42679) (ae22250), closes #​42666

Tests

• git: test failing when no git author is configured (#​42676) (f9bddb9)

v43.123.7

Compare Source

Miscellaneous Chores

• deps: update vitest monorepo to v4.1.4 (main) (#​42677) (7907192)

Build System

• deps: update node.js to v24.15.0 (main) (#​42678) (a40a0f0)

v43.123.6

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.34 (main) (#​42675) (5251496)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.22 (main) (#​42674) (f69abc5)

v43.123.5

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.33 (main) (#​42673) (d33efe2)

v43.123.4

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.32 (main) (#​42669) (a14d85b)

v43.123.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.31 (main) (#​42668) (7d2c1ac)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.21 (main) (#​42667) (f891066)

v43.123.2

Compare Source

v43.123.1

Compare Source

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v4.5.22 (main) (#​42658) (9e33c20)

Build System

• deps: update dependency @​renovatebot/pgp to v1.3.6 (main) (#​42657) (80146b2)

Continuous Integration

• auto-label needs-discussion on externally-raised Issues (#​42656) (6a0e718)

v43.123.0

Compare Source

Features

• add XcodeGen manager for Swift package dependencies in project.yml files (#​41889) (0ff55d2)
• presets: add BUN_CONFIG_MAX_HTTP_REQUESTS to safe global env (#​41350) (1316fd7)
• presets: add changelogUrl link for Forgejo and Gitea digest updates (#​41786) (0f9a516)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v4.5.21 (main) (#​42654) (3891a11)

Code Refactoring

• terraform-module: replace interfaces with zod schemas and inline fixtures (#​42399) (914c55b)

v43.122.0

Compare Source

Features

• manager/ant: support custom registryUrls (#​42641) (28ab04b)

Documentation

• use single quotes (#​42648) (3c8521e)

Miscellaneous Chores

• deps: update github/codeql-action action to v4.35.2 (main) (#​42650) (40100d0)

v43.121.0

Compare Source

Features

• manager/ant: add coords= attribute syntax support (#​42635) (15c8ab5)
• terraform-provider: use registry v2 API for release timestamps (#​42340) (f421075)

Bug Fixes

• git: don't pass extraCloneOpts to ls-remote when local clone exists (#​42491) (70fa962)
• gitlab: loosen re-approve constraints during updatePr (#​42528) (7b4f75b)

Documentation

• correct name of osv-offline (#​42486) (0fbc124)
• minimum-release-age: add reference to cooldowns (#​42640) (25e47df)

Miscellaneous Chores

• deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1 (main) (#​42642) (61947e2)

Code Refactoring

• cache: Remove obsolete compress flag (#​42563) (f49de7a)

Build System

• deps: update dependency @​renovatebot/osv-offline to v2.5.0 (main) (#​42645) (4cb4030)

v43.120.2

Compare Source

Bug Fixes

• vulnerability: remove matchFileNames restriction from GitHub vulnerability alerts (#​42636) (593a2b1)

v43.120.1

Compare Source

Bug Fixes

• logger: log file using pretty format not working (#​42319) (1c886e0)

v43.120.0

Compare Source

Features

• vulnerability: add severity and CVSS details to GitHub Dependabot alerts (#​42568) (1e906e8)

Miscellaneous Chores

• instrumentation: add timing statistics for getReleases (#​42523) (f635ae2)

v43.119.0

Compare Source

Features

• manager/ant: add file traversal (#​42631) (76dcc66)

v43.118.2

Compare Source

Bug Fixes

• util/git: allow setting config.hooksPath (#​42630) (33c1bf5), closes #​42588 #​42628

v43.118.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.30 (main) (#​42629) (015264e)

Miscellaneous Chores

• expose known environment variables (#​42201) (b39b50f)

v43.118.0

Compare Source

Features

• manager/ant: add property resolution and .properties file support (#​42175) (ef8e6c8)

v43.117.0

Compare Source

Features

• bitbucket-pipelines: update file patterns to support shared configs (#​41704) (53bd796)
• cache: add a in-memory expiry map to package file cache (#​42531) (5184761)

v43.116.1

Compare Source

Build System

• deps: update dependency @​renovatebot/pgp to v1.3.5 (main) (#​42626) (7363aee)

v43.116.0

Compare Source

Features

• osv: mark malicious packages with skipReasons (#​42510) (01f2479)

Miscellaneous Chores

• deps: update dependency typescript to v6 (main) (#​42615) (d9417b0)

Code Refactoring

• move requireConfig to InheritConfig (#​41385) (36f9d4a)

v43.115.1

Compare Source

Miscellaneous Chores

• deps: update actions/github-script action to v9 (main) (#​42613) (1fac64b)
• deps: update actions/upload-pages-artifact action to v5 (main) (#​42614) (cf79688)
• deps: update dependency vitest-mock-extended to v4 (main) (#​42616) (1afe9a7)
• deps: update nick-fields/retry action to v4 (main) (#​42617) (7eee338)
• deps: update slackapi/slack-github-action action to v3 (main) (#​42619) (d2d8297)
• deps: update vitest monorepo to v4.1.3 (main) (#​42623) (6cf2410)
• drop obsolete tsconfig (#​42622) (fcf1e20)
• renovate: disable next branch (#​42620) (d2abeb4)
• tsdown: migrate config (#​42621) (32964bd)
• types: add skipStage=enrichment (#​42585) (4faa847)

Build System

• deps: update dependency p-queue to v9.1.2 (main) (#​42624) (19baa76)
• deps: update dependency simple-git to v3.35.2 (main) (#​42588) (a7b5b48)

v43.115.0

Compare Source

Features

• packageRules: bumpVersions.type sync (#​42540) (0389869)

v43.114.0

Compare Source

Features

• manager/mise: add support for openfga (#​42611) (203c5fe)

Miscellaneous Chores

• deps: update zizmorcore/zizmor-action action to v0.5.3 (main) (#​42607) (c815d30)
• types: add a strong type for ToolName and ConstraintName (#​42589) (1044a80), closes #​41849

v43.113.0

Compare Source

Features

• sbt: support anonymous objects and dotted symbols for version declaration (#​40699) (ef3c964)

Bug Fixes

• workers/repository: don't include skipReason'd dependencies in flattened updates (#​42595) (f8b4477), closes #​42510

Miscellaneous Chores

• deps: update actions/cache action to v5.0.5 (main) (#​42598) (a808338)
• deps: update containerbase/internal-tools action to v4.5.20 (main) (#​42602) (d2131a7)
• deps: update dependency @​smithy/util-stream to v4.5.22 (main) (#​42603) (81e51cb)

v43.112.1

Compare Source

Bug Fixes

• cache: Improve SQLite cache error handling (#​42557) (50a2bac)

Code Refactoring

• dashboard: align terminology with other sections (#​42354) (27f0797)

v43.112.0

Compare Source

Features

• cache: Add writeSchema to Maven cache provider (#​42570) (e33aa4c)

Miscellaneous Chores

• deps: update dependency oxlint-tsgolint to v0.20.0 (main) (#​42593) (d80881e)

v43.111.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.29 (main) (#​42592) (edc474a)

Documentation

• add Renovate Operator as Kubernetes-native option (#​42506) (91a7213)

v43.111.2

Compare Source

Bug Fixes

• github-actions: use correct datasource for Zizmor version (#​42587) (ea1e60e)

v43.111.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.28 (main) (#​42580) (216fc99)

Documentation

• update references to python to 8428c32 (main) (#​42572) (c549ff7)
• update references to renovatebot/github-action to v46.1.8 (main) (#​42573) (da4e84e)
• update references to renovatebot/github-action to v46.1.9 (main) (#​42577) (2870abe)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v4.5.19 (main) (#​42574) (f31e3d4)
• deps: update dependency @​containerbase/istanbul-reports-html to v1.1.43 (main) (#​42575) (7af9aed)
• deps: update dependency @​containerbase/semantic-release-pnpm to v1.3.33 (main) (#​42576) (3870e76)
• deps: update dependency nock to v14.0.12 (main) (#​42571) (81791bd)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.20 (main) (#​42579) (90a2429)

v43.111.0

Compare Source

Features

• npm: Trim response data before caching (#​42559) (b359a1d)

Miscellaneous Chores

• types: allow constraints to be passed through to getReleases (#​42564) (6238715)

v43.110.18

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.27 (main) (#​42565) (bc406d4)

v43.110.17

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.26 (main) (#​42562) (970b676)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v4.5.15 (main) (#​42551) (87cbb93)
• deps: update containerbase/internal-tools action to v4.5.17 (main) (#​42560) (dc158ab)
• lint: replace vite-tsconfig-paths with natively supported tsconfig paths resolution (#​42553) (a5c1174)

Code Refactoring

• cache: Add writeSchema transform to package cache (#​42558) (a0d6ac4)

v43.110.16

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.25 (main) (#​42536) (be183fb)

v43.110.15

Compare Source

Miscellaneous Chores

• deps: update actions/upload-artifact action to v7.0.1 (main) (#​42538) (501e7b9)
• deps: update dependency @​types/node to v24.12.1 (main) (#​42530) (249107c)
• deps: update dependency @​types/node to v24.12.2 (main) (#​42532) (84aa574)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.19 (main) (#​42550) (ec13e38)
• deps: update peter-evans/create-pull-request action to v8.1.1 (main) (#​42539) (3e1524a)

Build System

• deps: update dependency protobufjs to v8.0.1 (main) (#​42549) (cc28824)

v43.110.14

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.23 (main) (#​42527) (7766644)

v43.110.13

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.22 (main) (#​42525) (736ab3d)

Miscellaneous Chores

• deps: update dependency esbuild to v0.27.7 (main) (#​42521) (c8e14ba)
• deps: update dependency esbuild to v0.28.0 (main) (#​42522) (9bf3f64)
• workers/repository: split malicious dependency checks (#​42508) (a945d8b)

v43.110.12

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.21 (main) (#​42512) (d2493d0)

v43.110.11

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.20 (main) (#​42511) (a10dd73)

Miscellaneous Chores

• deps: update dependency vitest-mock-extended to v3.1.1 (main) (#​42505) (3ce4aad)
• workers/repository: log warning on skipReason: malicious (#​42504) (1caa918)

v43.110.10

Compare Source

Bug Fixes

• config/validation: validate preset syntax (#​42502) (70f2a3f)

Miscellaneous Chores

• types: add a skipReason: malicious (#​42500) (6146355)

Code Refactoring

• github/vulnerability: use Zod-inferred types as single source of truth (#​42494) (3a05ade)

v43.110.9

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.19 (main) (#​42498) (9eed9d3)

v43.110.8

Compare Source

Bug Fixes

• bitrise: make steps optional in workflow schema (#​42362) (ecdc476)

v43.110.7

Compare Source

v43.110.6

Compare Source

Build System

• deps: update dependency slugify to v1.6.9 (main) (#​42495) (8777206)

v43.110.5

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.17 (main) (#​42493) (e131b87)

Miscellaneous Chores

• deps: update python docker tag to v3.14.4 (main) (#​42490) (0cc1026)

v43.110.4

Compare Source

Build System

• deps: update dependency p-queue to v9.1.1 (main) (#​42488) (b471240)

v43.110.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.15 (main) (#​42481) (1882cf7)
• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.16 (main) (#​42485) (180bc3b)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v4.5.14 (main) (#​42484) (2605d95)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.18 (main) (#​42480) (c0991ab)

Code Refactoring

• types: extract a StatusCheckConfig (#​42464) (b9ad0d7)
• vulnerability: extract ecosystem<->datasource translation (#​42435) (5e5af62)

v43.110.2

Compare Source

Bug Fixes

• instrumentation: ensure instrumentation is initialised first (#​42471) (83b8955)

v43.110.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.14 (main) (#​42469) (bd481ac)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.17 (main) (#​42468) (abf3b37)

Code Refactoring

• types: use BranchStatusConfig for setting status checks (#​42463) (7b00f3a)

v43.110.0

Compare Source

Features

• npm: support pnpm workspace file overrides (#​42247) (6804768)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.16 (main) (#​42467) (0afa852)

v43.109.5

Compare Source

Code Refactoring

• vulnerability: check in case-insensitive manner (#​42457) (bc51420)

Build System

• deps: update dependency @​renovatebot/osv-offline to v2.4.1 (main) (#​42465) (294f229)

v43.109.4

Compare Source

Bug Fixes

• Revert "build(deps): update dependency global-agent to v4 (main)" (#​42458) (2efa551), closes #​41301

Code Refactoring

• lint: Improve pnpm check (#​42387) (4b98fcd)
• vulnerability: extract shared functionality into util functions (#​42433) (76ae340)

v43.109.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.13 (main) (#​42455) (556773b)

v43.109.2

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.12 (main) (#​42454) (7dd76a5)

v43.109.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.11 (main) (#​42453) (9dd5810)

Miscellaneous Chores

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.