Update npm package `renovate` to v44.34.3 by hash-dependencies[bot] · Pull Request #107 · hashintel/.github

hash-dependencies · 2026-09-02T18:03:12Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
renovate (source)	`44.13.1` → `44.34.3`

Release Notes

renovatebot/renovate (renovate)

`v44.34.3`

Compare Source

Bug Fixes

kotlin-script: support vararg arguments in @file:DependsOn and @file:Repository (#44762) (8ea65f7)

`v44.34.2`

Compare Source

Bug Fixes

gradle: collision with well-known Android APIs (#45350) (c77ac1f)

`v44.34.1`

Compare Source

Build System

deps: update dependency azure-devops-node-api to v15.1.3 (main) (#45355) (ae4f36d)

`v44.34.0`

Compare Source

Features

manager/poetry: pass POETRY_SOLVER_MIN_RELEASE_AGE when minimumReleaseAge is configured (#43429) (dd72cf0)

Documentation

update information about renovate-pretty-log (#45327) (5af2a19)

Miscellaneous Chores

deps: update dependency @hyrious/marshal to v0.3.4 (main) (#45344) (a648fa7)

Code Refactoring

changelog: make release-notes URLs overridable on ChangeLogSource (#45260) (e42c696)
config: use constants for config validation topics (#45333) (1d6af9f)

Continuous Integration

oxlint: move custom oxlint rules to typescript and alternative API (#45337) (e44c9a2)
precommit: block issue closing keywords in commit messages (#45290) (c235170)

`v44.33.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.87.3 (main) (#45332) (1333d2c)

Miscellaneous Chores

deps: update dependency @biomejs/biome to v2.5.8 (main) (#45329) (72f9949)

Continuous Integration

add restore-keys fallback for tsbuildinfo cache (97c10ff)
add restore-keys fallback for vitest cache (a265d4a)
add missing description to setup-docker action (da7dc8b)
correctly generate prefetch matrix cache key (6a7683b)
don't gate build-docs on lint-docs (27875b6)
don't gate lint-actions on setup-build (4dae136)
ensure lint-actions lints composite actions (a00fef3)
ensure that linting leads to test-success failure (267c7ff)
evaluate codecov fail_ci_if_error as an expression (eeaa20f)
mend-slack: pass discussion timestamp to script via env (0bc5849)
never restore caches into the release job (34c7bcb)
pass secrets and inputs to release scripts via env (a0ad2d0)
remove duplicated markdown-lint step from lint-docs (d1073f0)
ws_scan: pass Mend API key via WS_APIKEY environment variable (2d566bf)

`v44.33.1`

Compare Source

Bug Fixes

datasource: keep merged releases when a registry is rate-limited (#45299) (37444ef)

`v44.33.0`

Compare Source

Features

pypi: add support for JSON-based Simple API (PEP 691) (#44222) (2606ae2), closes #44182

Code Refactoring

java-version: extract adoptium HTTP logic from datasource class (#42604) (a53aaf4)
remove escapeRegExp and replace with RegExp.escape (#45322) (41da033)

`v44.32.6`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.87.2 (main) (#45323) (2fb8ad4)

`v44.32.5`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.87.1 (main) (#45320) (803f154)

`v44.32.4`

Compare Source

Miscellaneous Chores

deps: update dependency memfs to v4.68.1 (main) (#45318) (01a6df8)

Build System

deps: update dependency jsonc-weaver to v0.3.1 (main) (#45317) (0294dce)

`v44.32.3`

Compare Source

Bug Fixes

datasource/go: prefer later releaseTimestamp from GitHub Releases (#45315) (d870505), closes #45314 #43451
github: recognize another "needs approving review" message (#45052) (5e8bf3c)

`v44.32.2`

Compare Source

Bug Fixes

datasource/pypi: use the earliest upload_time of a version (#45313) (e942788)

Tests

datasource/pypi: add regression test for constraintsFiltering=strict (#45312) (5e93fc2), closes #44222

`v44.32.1`

Compare Source

Bug Fixes

datasource/npm: handle absent homepages (#45219) (116c3d6)

Miscellaneous Chores

AGENTS.md: tune the PR template + PR raising etiquette (#45311) (a07a598)
deps: update dependency protobufjs@8.0.1 to v8.7.2 (main) (#45297) (a429936)

Tests

git: disable Git's maintenance in test repositories (#45310) (65be1c5)

`v44.32.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.87.0 (main) (#45309) (a1453ae)

Documentation

clarify GHSA publishing timelines and CVE IDs (#45307) (183fc14)

Miscellaneous Chores

deps: update dependency @containerbase/istanbul-reports-html to v2.0.16 (main) (#45305) (d1360ed)
deps: update dependency pnpm to v11.21.0 (main) (#45306) (367ab09)

Build System

deps: update dependency jsonc-weaver to v0.3.0 (main) (#45308) (d87e46e)
deps: update dependency protobufjs to v8.7.2 (main) (#45296) (dfde7f2)

`v44.31.0`

Compare Source

Features

data: automatic update of static data (#45301) (abd9125)

`v44.30.4`

Compare Source

Miscellaneous Chores

deps: update dependency esbuild to v0.28.2 (main) (#45300) (c0b96b0)

Build System

deps: update dependency @renovatebot/pgp to v1.3.17 (main) (#45302) (2483063)

`v44.30.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.86.6 (main) (#45293) (bf865fe)

`v44.30.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.86.5 (main) (#45292) (1e108a0)

Miscellaneous Chores

deps: update dependency astral-sh/uv to v0.12.5 (main) (#45288) (fb225aa)
deps: update dependency uv to v0.12.5 (main) (#45289) (e22af56)

`v44.30.1`

Compare Source

Bug Fixes

linters: add linting rule to enforce usage of our regEx utility (#44690) (a1971af), closes 12872/#12875 #12875

`v44.30.0`

Compare Source

Features

presets: add jsonforms monorepo (#45280) (fc9e453)
terraform-provider: use OpenTofu packages API for lockfile hashes (#43573) (6a782d3)

`v44.29.5`

Compare Source

Bug Fixes

platform/github: abort branch update when PR is in merge queue (#45252) (c953faf)

Miscellaneous Chores

deps: update dependency astral-sh/uv to v0.12.4 (main) (#45275) (7e82bd7)

Continuous Integration

auto-label PRs that have been dequeued from the Merge Queue (#45270) (eba4b3e)

`v44.29.4`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.86.4 (main) (#45277) (7226640)

`v44.29.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.86.3 (main) (#45274) (00daaee)

Miscellaneous Chores

deps: update dependency uv to v0.12.4 (main) (#45276) (4b81aa8)

`v44.29.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.86.2 (main) (#45271) (184f31d)

`v44.29.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.86.1 (main) (#45255) (14604ae)

Code Refactoring

linters: add rules for @sindresorhus/is helpers (#45229) (16ef171)
oxlint: scope custom JS rules via config overrides (#45266) (c2785bc)

`v44.28.0`

Compare Source

Features

gomod: add gomodTidyAll option for indirect dependency updates in Go monorepos (#37138) (ab105e6)

Miscellaneous Chores

deps: update jdx/mise-action action to v4.2.5 (main) (#45262) (c3c0226)

`v44.27.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.86.0 (main) (#45254) (f6acbb5)

Miscellaneous Chores

deps: update dependency memfs to v4.68.0 (main) (#45253) (75c68d4)

`v44.26.3`

Compare Source

Bug Fixes

github-actions: support ratchet comments for nested actions (#45210) (481f9b6)
manager/terraform: stream-based H1 hashing (#45220) (7c3a3ef)

Tests

bun: mock util/fs instead of fs-extra in artifacts spec (#45235) (d53ffc5)

`v44.26.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.85.0 (main) (#45240) (e2f223e)

Code Refactoring

linter: oxlint prefer partial typed casts for consts (#45239) (e01b50c)

`v44.25.0`

Compare Source

Features

parse TOML files by default with TOML 1.1 (#45231) (848ef4a)

`v44.24.4`

Compare Source

Bug Fixes

manager/npm: pass correct arguments to pnpm dedupe (#42024) (3646307)

Build System

deps: update dependency semantic-release to v25.0.9 (main) (#45238) (5ecbdc9)

`v44.24.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.84.3 (main) (#45233) (8a6d27d)

Miscellaneous Chores

deps: update dependency @containerbase/semantic-release-pnpm to v1.4.3 (main) (#45232) (923cc3f)

`v44.24.2`

Compare Source

Bug Fixes

terraform: deduplicate provider lockfile hashes (#45226) (2869cd3)

`v44.24.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.84.2 (main) (#45223) (bbda046)

Miscellaneous Chores

deps: update dependency @biomejs/biome to v2.5.7 (main) (#45225) (e8568a2)

`v44.24.0`

Compare Source

Features

manager/github-actions: add support for Actions Lockfiles (#45199) (fba1a9d)

Documentation

fix fenced blocks (#45206) (3823ef8)

Miscellaneous Chores

deps: update dependency memfs to v4.67.0 (main) (#45193) (bfa0da8)

Code Refactoring

manager: add utility for creating Artifact Error messages (#45218) (15d5414)

`v44.23.3`

Compare Source

Bug Fixes

swift: support Package Registry pins in Package.resolved (#44358) (d735b9b)

`v44.23.2`

Compare Source

Bug Fixes

keep HTTPS when resolving same origin URLs (#45157) (728ce97)

`v44.23.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.84.1 (main) (#45209) (f4f7ea1)

`v44.23.0`

Compare Source

Features

add regex support for gitIgnoredAuthors configuration (#43938) (65ee1f1)

`v44.22.0`

Compare Source

Features

vulnerabilities: match OSV Packagist sub-ecosystems (#45203) (a84e007)

`v44.21.0`

Compare Source

Features

replacements: add replacements for dev-facing Comet packages (#45112) (b9b2755)

`v44.20.1`

Compare Source

Bug Fixes

cargo: support fetching crates from git monorepo (#45142) (4adc8f3)

Miscellaneous Chores

deps: update dependency pnpm to v11.20.0 (main) (#45201) (3f20dca)

`v44.20.0`

Compare Source

Features

util/exec: add support for gh tool (#45192) (4537247), closes #44753 #45190

Documentation

update references to renovate/renovate (main) (#45196) (d584cf4)

Code Refactoring

workers/repository: allow managers to opt out of digest pinning (#45198) (7f40d43), closes #45190

`v44.19.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.84.0 (main) (#45197) (197ad00)

`v44.18.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.83.0 (main) (#45195) (63f9e20)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.0 (main) (#45194) (7275fcb)

`v44.17.5`

Compare Source

Bug Fixes

git: resolve child env before adding authentication (#45184) (cca6227)

`v44.17.4`

Compare Source

Bug Fixes

versioning/cargo: convert ranges to semver in subset and intersects (#45146) (1f6546b)

`v44.17.3`

Compare Source

Bug Fixes

manager/asdf,mise,proto: use rust-version datasource for rust (#45143) (a2d1b8c)
manager/rust-toolchain: report skipReason instead of dropping deps (#45144) (183ee9c)

`v44.17.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.82.11 (main) (#45187) (44e862a)

Documentation

update references to otel/opentelemetry-collector-contrib to v0.158.0 (main) (#45180) (3952363)
update references to python to 3a9d2dd (main) (#45179) (5ca534a)
update references to renovate/renovate (main) (#45182) (742b3b3)
update references to renovatebot/github-action to v46.2.2 (main) (#45185) (8964a66)

Miscellaneous Chores

deps: lock file maintenance (main) (#45183) (21ae785)
deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.20 (main) (#45186) (2346d98)
deps: update pnpm/setup action to v2.0.2 (main) (#45178) (30cd3d8)

`v44.17.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.82.10 (main) (#45175) (ef843fd)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.19 (main) (#45174) (4b27160)

`v44.17.0`

Compare Source

Features

presets: add replacement for deprecated password pusher images (#45172) (a484d01)

Miscellaneous Chores

deps: update dependency @containerbase/istanbul-reports-html to v2.0.15 (main) (#45173) (5e5dd4f)
deps: update dependency vitest-mock-extended to v5.1.1 (main) (#44856) (0243c9d)

`v44.16.1`

Compare Source

Bug Fixes

presets/monorepo: add new datatables.net source repos (#45090) (42cd249)

`v44.16.0`

Compare Source

Features

presets: add Flue monorepo (#45137) (e869eec)

Miscellaneous Chores

deps: update dependency @types/semver to v7.8.0 (main) (#45164) (2f1b951)

`v44.15.0`

Compare Source

Features

data: automatic update of static data (#45163) (25a09ec)

`v44.14.12`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.82.9 (main) (#45156) (1b99a61)

Miscellaneous Chores

deps: update dependency @types/lodash to v4.17.25 (main) (#45151) (2f2dd98)
deps: update dependency @types/luxon to v3.7.3 (main) (#45154) (ecadb0c)
deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.18 (main) (#45155) (7a4aac6)

`v44.14.10`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.82.7 (main) (#45149) (f306402)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.17 (main) (#45148) (b726beb)

`v44.14.9`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.82.6 (main) (#45147) (84ef069)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.16 (main) (#45145) (4c492d3)

`v44.14.8`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.82.5 (main) (#45141) (ee9e688)

Miscellaneous Chores

deps: update dependency astral-sh/uv to v0.12.3 (main) (#45139) (f1e08d3)
deps: update dependency uv to v0.12.3 (main) (#45140) (58c581b)

Code Refactoring

types: make return type for getToolSettingsOptions stricter (#45133) (c92c7e2)

`v44.14.7`

Compare Source

Bug Fixes

exec/docker: single-quote the sidecar bash command (b017c75)
manager/deno: quote allow-import host list in install command (3793e3b)
manager/gomod: quote module path in import path update command (c9cec1a)
manager/gradle-wrapper: quote distribution URL in wrapper command (b3f7846)
manager/maven-wrapper: quote distribution type in wrapper command (7279744)
manager/mix: quote hex organization and token in auth command (ff3e99e)
manager/nix: quote GitHub token in flake update command (521d325)
manager/npm: quote package spec in corepack command (6d2fa81)

Miscellaneous Chores

add no-unquoted-exec-interpolation linting rule (e510b9a)

Code Refactoring

generate the list of templatable fields (df7a014)

`v44.14.6`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.82.4 (main) (#45131) (d8aa95f)

Documentation

add link to Containerbase' "new tool" documentation (#45127) (78fa7af)
Do not recommend to use prCreation=not-pending with automerge (#45088) (0dac257)

Miscellaneous Chores

deps: update dependency nock to v14.0.17 (main) (#45121) (2668a65)
deps: update ghcr.io/containerbase/devcontainer docker tag to v14.13.15 (main) (#45120) (3bcc84b)
deps: update pnpm/setup action to v2.0.1 (main) (#45129) (ed81456)

Code Refactoring

types: clarify ToolSettings has two levels of config (#45125) (a28ecdc)

`v44.14.5`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.82.3 (main) (#45122) (4230fe3)

Miscellaneous Chores

deps: update dependency pnpm to v11.19.0 (main) (#45128) (8126773)

`v44.14.4`

Compare Source

Bug Fixes

proxy: sanitise password components in HTTP_PROXY variable(s) in logs (#45117) (f88212b)
util/host-rules: sanitise TLS credential fields in hostRules (#45119) (54384ff)

Miscellaneous Chores

deps: update dependency lint-staged to v17.3.0 (main) (#45126) (4a62cda)

`v44.14.3`

Compare Source

Bug Fixes

workers/global: sanitise COREPACK_NPM_{TOKEN,PASSWORD} in logs (#45116) (244bfe1)

`v44.14.2`

Compare Source

Bug Fixes

datasource/docker: fetch all pages for cgr.dev (#45114) (d7ce060)

Miscellaneous Chores

add linter rule for shell: true usage (#45110) (52ff375)
deps: update actions/cache action to v6 (main) (#45104) (ec7aadb)
deps: update actions/checkout action to v7 (main) (#45105) (db79937)
deps: update codecov/codecov-action action to v7 (main) (#45106) (0593955)
deps: update dependency astral-sh/setup-uv to v9 (main) (#45100) (7840681)
deps: update dependency vite to v8.2.0 (main) (#45115) (9d02537)
deps: update slackapi/slack-github-action action to v4 (main) (#45107) (0fb9ca8)
manager/flux: don't use shell execution to flux install (#45109

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 4am every weekday,every weekend"
Automerge
- "before 4am every weekday,every weekend"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

cursor · 2026-09-02T18:03:19Z

PR Summary

Low Risk
Dependency-only change to the CI Renovate installer; no application runtime code changes, though Renovate behavior for dependency PRs may differ across ~21 minor releases.

Overview
Bumps the pinned Renovate CLI used by the .github/actions/install-renovate composite action from 44.13.1 to 44.34.3, updating package.json and the lockfile from npm ci.

The lockfile also refreshes Renovate’s transitive deps (for example @renovatebot/detect-tools, @renovatebot/pgp, jsonc-weaver, protobufjs, azure-devops-node-api) and adds yauzl as a new direct dependency of Renovate. Workflows that call this action (housekeeping-dependencies, lint) will run the newer Renovate and renovate-config-validator on the next install.

^{Reviewed by Cursor Bugbot for commit 3a498b5. Bugbot is set up for automated code reviews on this repo. Configure here.}

Copilot

🟡 Changes recommended

The updated lockfile indicates Renovate now requires engines.node ^24.11.0, so the action/workflows should explicitly ensure Node >= 24.11.0 to avoid engine-mismatch failures in constrained/self-hosted environments.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates the pinned Renovate CLI version used by the .github/actions/install-renovate composite action so workflows in this repo (and callers using the shared action) run a newer Renovate release.

Changes:

Bump renovate devDependency from 44.13.1 to 44.34.3.
Refresh the lockfile to align transitive dependencies with the new Renovate version.

File summaries

File	Description
.github/actions/install-renovate/package.json	Pins Renovate to `44.34.3` for the composite action.
.github/actions/install-renovate/package-lock.json	Updates the resolved Renovate tarball + transitive dependency graph for `44.34.3`.

Review details

Files not reviewed (1)

.github/actions/install-renovate/package-lock.json: Generated file

Files reviewed: 1/2 changed files
Comments generated: 1
Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Update npm package renovate to v44.34.3

3a498b5

hash-dependencies Bot enabled auto-merge September 2, 2026 18:03

TimDiekmann requested a lite review from Copilot September 2, 2026 18:13

Copilot started reviewing on behalf of TimDiekmann September 2, 2026 18:13 View session

Copilot AI reviewed Sep 2, 2026

View reviewed changes

Comment thread .github/actions/install-renovate/package-lock.json

TimDiekmann approved these changes Sep 2, 2026

View reviewed changes

hash-dependencies Bot added this pull request to the merge queue Sep 2, 2026

Merged via the queue into main with commit db03b98 Sep 2, 2026
14 of 15 checks passed

hash-dependencies Bot deleted the deps/js/renovate-44.x branch September 2, 2026 18:24

Navigation Menu

Update npm package `renovate` to v44.34.3 - #107

Update npm package `renovate` to v44.34.3#107
hash-dependencies[bot] merged 1 commit into
mainfrom
deps/js/renovate-44.x

hash-dependencies Bot commented Sep 2, 2026

Uh oh!

cursor Bot commented Sep 2, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

hash-dependencies Bot commented Sep 2, 2026

Release Notes

Bug Fixes

Bug Fixes

Build System

Features

Documentation

Miscellaneous Chores

Code Refactoring

Continuous Integration

Bug Fixes

Miscellaneous Chores

Continuous Integration

Bug Fixes

Features

Code Refactoring

Bug Fixes

Bug Fixes

Miscellaneous Chores

Build System

Bug Fixes

Bug Fixes

Tests

Bug Fixes

Miscellaneous Chores

Tests

Features

Documentation

Miscellaneous Chores

Build System

Features

Miscellaneous Chores

Build System

Bug Fixes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Continuous Integration

Bug Fixes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Bug Fixes

Code Refactoring

Features

Miscellaneous Chores

Features

Miscellaneous Chores

Bug Fixes

Tests

Features

Code Refactoring

Features

Bug Fixes

Build System

Bug Fixes

Miscellaneous Chores

Bug Fixes

Bug Fixes

Miscellaneous Chores

Features

Documentation

Miscellaneous Chores

Code Refactoring

Bug Fixes

Bug Fixes

Bug Fixes

Features

Features

Features

Bug Fixes

Miscellaneous Chores

Features

Documentation

Code Refactoring

Features