renovate-mcp 1.7.0 → 1.7.2

package/README.md

@@ -74,7 +74,7 @@ Eighteen tools, seven resources, and four workflow prompts. Each tool name below
 - **Linux or macOS.** Windows is not supported — `package.json` declares `"os": ["darwin", "linux"]`, so `npm i` surfaces an `EBADPLATFORM` warning on Windows and the server exits with a clear stderr message at startup. Use WSL2 or a Linux/macOS host instead.
 - **Node.js ≥ 24.11** (aligns with Renovate's own engine requirement).
 
-Renovate ships bundled — the `renovate` package is a runtime dependency, so `validate_config`, `dry_run`, and `write_config` work out of the box with no separate install. The offline tools (`read_config`, `suggest_presets`, `resolve_config`, `explain_config`, `resolve_config_diff`, `test_package_rules`, `preview_custom_manager`, `lint_config`, `dry_run_diff`, `annotate_dry_run`, `explain_dependency`, `migrate_config`) never spawn Renovate at all — nor do `check_setup` (by default it reads version metadata from the bundled install instead of spawning) or `get_version` (it only reports the renovate-mcp server's own version).
+Renovate ships bundled — the `renovate` package is a runtime dependency, so `validate_config`, `dry_run`, and `write_config` work out of the box with no separate install. The offline tools (`read_config`, `suggest_presets`, `resolve_config`, `explain_config`, `resolve_config_diff`, `test_package_rules`, `preview_custom_manager`, `lint_config`, `dry_run_diff`, `annotate_dry_run`, `explain_dependency`, `explain_schedule`, `migrate_config`) never spawn Renovate at all — nor do `check_setup` (by default it reads version metadata from the bundled install instead of spawning) or `get_version` (it only reports the renovate-mcp server's own version).
 
 **Optional env vars:**
 

package/dist/data/datasources.generated.js

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by scripts/generate-datasources.mjs from renovate@44.181.5.
+// AUTO-GENERATED by scripts/generate-datasources.mjs from renovate@44.198.3.
 // Do not edit by hand. Run `npm run generate:datasources` to refresh.
-export const RENOVATE_VERSION = "44.181.5";
+export const RENOVATE_VERSION = "44.198.3";
 /**
  * All built-in datasource ids accepted by Renovate's `matchDatasources` and
  * `customManagers[].datasourceTemplate`. Custom datasources (`custom.<name>`)

package/dist/data/managers.generated.js

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by scripts/generate-managers.mjs from renovate@44.181.5.
+// AUTO-GENERATED by scripts/generate-managers.mjs from renovate@44.198.3.
 // Do not edit by hand. Run `npm run generate:managers` to refresh.
-export const RENOVATE_VERSION = "44.181.5";
+export const RENOVATE_VERSION = "44.198.3";
 /**
  * All manager names accepted by Renovate's `matchManagers` /
  * `excludeManagers` fields. Includes both regular managers and custom
@@ -88,6 +88,7 @@ export const ALL_MANAGERS = Object.freeze([
     "nvm",
     "ocb",
     "osgi",
+    "paket",
     "pep621",
     "pep723",
     "pip-compile",

package/dist/data/migrations.generated.js

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by scripts/generate-migrations.mjs from renovate@44.181.5.
+// AUTO-GENERATED by scripts/generate-migrations.mjs from renovate@44.198.3.
 // Do not edit by hand. Run `npm run generate:migrations` to refresh.
-export const RENOVATE_VERSION = "44.181.5";
+export const RENOVATE_VERSION = "44.198.3";
 /**
  * Deprecated config keys. Sourced from Renovate's `MigrationsService`:
  * `renamedProperties` (plain renames, with `newKey`) plus every

package/dist/data/options.generated.js

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by scripts/generate-options.mjs from renovate@44.181.5.
+// AUTO-GENERATED by scripts/generate-options.mjs from renovate@44.198.3.
 // Do not edit by hand. Run `npm run generate:options` to refresh.
-export const RENOVATE_VERSION = "44.181.5";
+export const RENOVATE_VERSION = "44.198.3";
 export const OPTIONS = {
     "abandonmentThreshold": {
         "description": "Flags packages that have not been updated within this period as abandoned.",
@@ -643,6 +643,7 @@ export const OPTIONS = {
             "major",
             "minor",
             "patch",
+            "prerelease",
             "sync"
         ],
         "parents": [
@@ -1403,7 +1404,7 @@ export const OPTIONS = {
     "dockerSidecarImage": {
         "description": "Change this value to override the default Renovate sidecar image.",
         "type": "string",
-        "default": "ghcr.io/renovatebot/base-image:13.142.5",
+        "default": "ghcr.io/renovatebot/base-image:13.149.0",
         "globalOnly": true,
         "deprecationMsg": "The usage of `binarySource=docker` is deprecated, and will be removed in the future"
     },
@@ -1545,6 +1546,7 @@ export const OPTIONS = {
             "nvm",
             "ocb",
             "osgi",
+            "paket",
             "pep621",
             "pep723",
             "pip-compile",
@@ -3421,6 +3423,18 @@ export const OPTIONS = {
         "type": "array",
         "stage": "package"
     },
+    "paket": {
+        "description": "Configuration object for the paket manager",
+        "type": "object",
+        "default": {
+            "managerFilePatterns": [
+                "/(^|/)paket\\.dependencies$/"
+            ],
+            "versioning": "paket"
+        },
+        "stage": "package",
+        "cli": false
+    },
     "password": {
         "description": "Password for authentication.",
         "type": "string",

package/dist/data/presets.generated.js

@@ -1,6 +1,6 @@
-// AUTO-GENERATED by scripts/generate-presets.mjs from renovate@44.181.5.
+// AUTO-GENERATED by scripts/generate-presets.mjs from renovate@44.198.3.
 // Do not edit by hand. Run `npm run generate:presets` to refresh.
-export const RENOVATE_VERSION = "44.181.5";
+export const RENOVATE_VERSION = "44.198.3";
 export const PRESETS = {
     "abandonments:recommended": {
         "namespace": "abandonments",
@@ -6965,6 +6965,27 @@ export const PRESETS = {
             ]
         }
     },
+    "group:logtapeMonorepo": {
+        "namespace": "group",
+        "description": null,
+        "body": {
+            "packageRules": [
+                {
+                    "description": "Group packages from logtape monorepo together.",
+                    "extends": [
+                        "monorepo:logtape"
+                    ],
+                    "groupName": "logtape monorepo",
+                    "matchUpdateTypes": [
+                        "digest",
+                        "patch",
+                        "minor",
+                        "major"
+                    ]
+                }
+            ]
+        }
+    },
     "group:loopbackMonorepo": {
         "namespace": "group",
         "description": null,
@@ -7587,6 +7608,7 @@ export const PRESETS = {
                 "group:linkifyjsMonorepo",
                 "group:log4j2Monorepo",
                 "group:logbackMonorepo",
+                "group:logtapeMonorepo",
                 "group:loopbackMonorepo",
                 "group:lrnwebcomponentsMonorepo",
                 "group:lucideMonorepo",
@@ -15784,6 +15806,15 @@ export const PRESETS = {
             ]
         }
     },
+    "monorepo:logtape": {
+        "namespace": "monorepo",
+        "description": "logtape monorepo",
+        "body": {
+            "matchSourceUrls": [
+                "https://github.com/dahlia/logtape"
+            ]
+        }
+    },
     "monorepo:loopback": {
         "namespace": "monorepo",
         "description": "loopback monorepo",
@@ -16525,7 +16556,9 @@ export const PRESETS = {
         "description": "prisma monorepo",
         "body": {
             "matchSourceUrls": [
-                "https://github.com/prisma/prisma"
+                "https://github.com/prisma/orm",
+                "https://github.com/prisma/prisma",
+                "https://github.com/prisma/prisma-cli"
             ]
         }
     },
@@ -18042,7 +18075,9 @@ export const PRESETS = {
                 "packages:tslint"
             ],
             "matchPackageNames": [
+                "@biomejs/**",
                 "@oxlint/**",
+                "oxfmt",
                 "oxlint",
                 "prettier",
                 "remark-lint",
@@ -18290,6 +18325,7 @@ export const PRESETS = {
                 "replacements:mem-rename",
                 "replacements:messageFormat-to-scoped",
                 "replacements:middie-to-scoped",
+                "replacements:monochromata-cucumber-reporting-plugin-to-jvt",
                 "replacements:now-to-vercel",
                 "replacements:npm-run-all-to-maintenance-fork",
                 "replacements:ojdbc-to-ojdbc11",
@@ -19835,6 +19871,24 @@ export const PRESETS = {
             ]
         }
     },
+    "replacements:monochromata-cucumber-reporting-plugin-to-jvt": {
+        "namespace": "replacements",
+        "description": "`de.monochromata.cucumber:reporting-plugin` was moved to `me.jvt.cucumber:reporting-plugin`.",
+        "body": {
+            "packageRules": [
+                {
+                    "matchDatasources": [
+                        "maven"
+                    ],
+                    "matchPackageNames": [
+                        "de.monochromata.cucumber:reporting-plugin"
+                    ],
+                    "replacementName": "me.jvt.cucumber:reporting-plugin",
+                    "replacementVersion": "5.0.0"
+                }
+            ]
+        }
+    },
     "replacements:now-to-vercel": {
         "namespace": "replacements",
         "description": "`now` was renamed to `vercel`.",
@@ -21203,7 +21257,8 @@ export const PRESETS = {
                 "workarounds:libericaJdkDockerVersioning",
                 "workarounds:ubuntuDockerVersioning",
                 "workarounds:groupings",
-                "workarounds:helmDocs"
+                "workarounds:helmDocs",
+                "workarounds:guavaVariants"
             ],
             "overrideDescription": [
                 "Apply crowd-sourced workarounds for known problems with packages."
@@ -21384,6 +21439,38 @@ export const PRESETS = {
                     "matchUpdateTypes": [
                         "major"
                     ]
+                },
+                {
+                    "description": "Group SimpleWebAuthn major updates to keep browser and server compatible.",
+                    "groupName": "SimpleWebAuthn",
+                    "matchDatasources": [
+                        "npm"
+                    ],
+                    "matchPackageNames": [
+                        "@simplewebauthn/browser",
+                        "@simplewebauthn/server"
+                    ],
+                    "matchUpdateTypes": [
+                        "major"
+                    ]
+                }
+            ]
+        }
+    },
+    "workarounds:guavaVariants": {
+        "namespace": "workarounds",
+        "description": "Keep Guava on its `-jre` or `-android` variant.",
+        "body": {
+            "packageRules": [
+                {
+                    "matchDatasources": [
+                        "maven",
+                        "sbt-package"
+                    ],
+                    "matchPackageNames": [
+                        "com.google.guava:guava"
+                    ],
+                    "versionCompatibility": "^(?<version>.+)-(?<compatibility>jre|android)$"
                 }
             ]
         }

package/dist/lib/configLocations.js

@@ -2,17 +2,31 @@ import { promises as fs } from "node:fs";
 import path from "node:path";
 import JSON5 from "json5";
 import { isRecord } from "./util.js";
+// Renovate's own discovery order (`getConfigFileNames()` in
+// renovate/dist/config/app-strings.js), minus the trailing package.json which
+// is handled separately below. `.jsonc` reports format "json": that format
+// already means "JSON, comments allowed" (see the parse note in locateConfig).
+// A drift test in test/unit/allowListDrift.test.ts pins this list to Renovate's.
 const CANDIDATES = [
     { path: "renovate.json", format: "json" },
+    { path: "renovate.jsonc", format: "json" },
     { path: "renovate.json5", format: "json5" },
     { path: ".github/renovate.json", format: "json" },
+    { path: ".github/renovate.jsonc", format: "json" },
     { path: ".github/renovate.json5", format: "json5" },
     { path: ".gitlab/renovate.json", format: "json" },
+    { path: ".gitlab/renovate.jsonc", format: "json" },
     { path: ".gitlab/renovate.json5", format: "json5" },
     { path: ".renovaterc", format: "json" },
     { path: ".renovaterc.json", format: "json" },
+    { path: ".renovaterc.jsonc", format: "json" },
     { path: ".renovaterc.json5", format: "json5" },
 ];
+/** Every filename `locateConfig` checks, in priority order. */
+export const CONFIG_FILE_NAMES = Object.freeze([
+    ...CANDIDATES.map((c) => c.path),
+    "package.json",
+]);
 export async function locateConfig(repoPath) {
     for (const candidate of CANDIDATES) {
         const abs = path.join(repoPath, candidate.path);
@@ -21,7 +35,11 @@ export async function locateConfig(repoPath) {
             // Renovate parses every candidate JSONC-then-JSON5 regardless of
             // extension (and write_config round-trips comments into renovate.json);
             // JSON5 is a superset of JSONC, so one parser covers all of them.
-            const config = JSON5.parse(raw);
+            // A 0-length file reads as `{}`, as in Renovate's detectRepoFileConfig
+            // (`if (!configFileRaw.length) configFileRaw = "{}"`). Length only: a
+            // whitespace-only file still throws, as in Renovate. This intentionally
+            // differs from configWriter.ts, which treats whitespace-only as absent.
+            const config = raw.length === 0 ? {} : JSON5.parse(raw);
             if (!isRecord(config)) {
                 throw new Error(`${candidate.path} does not contain a JSON object`);
             }
@@ -41,17 +59,41 @@ export async function locateConfig(repoPath) {
     const pkgAbs = path.join(repoPath, "package.json");
     try {
         const raw = await fs.readFile(pkgAbs, "utf8");
-        const pkg = JSON.parse(raw);
-        if (isRecord(pkg) &&
-            "renovate" in pkg &&
-            isRecord(pkg.renovate)) {
-            return {
-                absPath: pkgAbs,
-                relPath: "package.json",
-                format: "package.json",
-                raw,
-                config: pkg.renovate,
-            };
+        let pkg;
+        try {
+            pkg = JSON.parse(raw);
+        }
+        catch (err) {
+            // Invalid JSON means no config, mirroring Renovate's `catch {}`. Other
+            // read errors (EACCES etc.) still throw: a deliberate divergence.
+            if (err instanceof SyntaxError)
+                return null;
+            throw err;
+        }
+        if (isRecord(pkg) && "renovate" in pkg) {
+            const value = pkg.renovate;
+            if (isRecord(value)) {
+                return {
+                    absPath: pkgAbs,
+                    relPath: "package.json",
+                    format: "package.json",
+                    raw,
+                    config: value,
+                };
+            }
+            // Renovate expands a string package.json#renovate to `extends`.
+            if (typeof value === "string" && value.length > 0) {
+                return {
+                    absPath: pkgAbs,
+                    relPath: "package.json",
+                    format: "package.json",
+                    raw,
+                    config: { extends: [value] },
+                };
+            }
+            // An empty string or other non-object value (true, a number, an array)
+            // is reported as no config. Deliberate divergence for these truthy
+            // values: Renovate selects the file but ends up with no usable settings.
         }
     }
     catch (err) {

package/dist/lib/version.js

@@ -1,5 +1,5 @@
 import { fileURLToPath } from "node:url";
-export const SERVER_VERSION = "1.7.0"; // x-release-please-version
+export const SERVER_VERSION = "1.7.2"; // x-release-please-version
 // "released" = the server is running from a `node_modules/` install (global
 // `npm i -g`, project-local `npm i`, or `npx renovate-mcp`). Anything else —
 // most commonly an MCP config of `{"command": "node", "args": [".../dist/index.js"]}`

package/dist/tools/dryRun.js

@@ -158,7 +158,7 @@ export function registerDryRun(server) {
             readConfigFromBaseBranch: z
                 .boolean()
                 .optional()
-                .describe("Only meaningful together with `baseBranches`. When true (default), Renovate reads its config (renovate.json/.json5) FROM each base branch — `useBaseBranchConfig=merge` — so a config edit that only exists on that branch is actually evaluated. Set false to scan the base branches' manifests while still using the default branch's config."),
+                .describe("Only meaningful together with `baseBranches`. When true (default), Renovate reads its config (renovate.json/.jsonc/.json5, …) FROM each base branch — `useBaseBranchConfig=merge` — so a config edit that only exists on that branch is actually evaluated. Set false to scan the base branches' manifests while still using the default branch's config."),
         },
     }, async ({ repoPath, dryRunMode, logLevel, timeoutMs, platform, endpoint, token, repository, hostRules, reportOutputPath, baseBranches, readConfigFromBaseBranch, }, extra) => {
         if (endpoint !== undefined) {

package/dist/tools/readConfig.js

@@ -5,7 +5,7 @@ export function registerReadConfig(server) {
     server.registerTool("read_config", {
         title: "Read Renovate config",
         annotations: OFFLINE_READ_ONLY_ANNOTATIONS,
-        description: "Locate and parse the Renovate configuration in a repository. Searches for renovate.json, renovate.json5, .renovaterc(.json|.json5), .github/renovate.json, .gitlab/renovate.json, and the 'renovate' field of package.json — in that priority order.",
+        description: "Locate and parse the Renovate configuration in a repository. Searches, in Renovate's own priority order, for renovate.json(|c|5), .github/renovate.json(|c|5), .gitlab/renovate.json(|c|5), .renovaterc, .renovaterc.json(|c|5), and finally the 'renovate' field of package.json.",
         inputSchema: {
             repoPath: pathString("Absolute path to the repository root"),
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "renovate-mcp",
-  "version": "1.7.0",
+  "version": "1.7.2",
   "description": "MCP server for designing Renovate configurations interactively.",
   "type": "module",
   "bin": {
@@ -66,7 +66,7 @@
     "jsonata": "2.2.1",
     "jsonc-parser": "^3.3.1",
     "minimatch": "^10.2.6",
-    "renovate": "44.181.5",
+    "renovate": "44.198.3",
     "smol-toml": "^1.6.1",
     "yaml": "^2.9.0",
     "zod": "^4.0.0"