renovate 40.0.0-next.9 → 40.0.0

package/dist/config/decrypt/legacy.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.tryDecryptPublicKeyPKCS1 = tryDecryptPublicKeyPKCS1;
 exports.tryDecryptPublicKeyDefault = tryDecryptPublicKeyDefault;
 const tslib_1 = require("tslib");
-/** istanbul ignore file */
 const node_crypto_1 = tslib_1.__importDefault(require("node:crypto"));
 const logger_1 = require("../../logger");
 function tryDecryptPublicKeyPKCS1(privateKey, encryptedStr) {

package/dist/config/decrypt/legacy.js.map

@@ -1 +1 @@
-{"version":3,"file":"legacy.js","sourceRoot":"","sources":["../../../lib/config/decrypt/legacy.ts"],"names":[],"mappings":";;AAIA,4DAmBC;AAED,gEAcC;;AAvCD,2BAA2B;AAC3B,sEAAiC;AACjC,yCAAsC;AAEtC,SAAgB,wBAAwB,CACtC,UAAkB,EAClB,YAAoB;IAEpB,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,YAAY,GAAG,qBAAM;aAClB,cAAc,CACb;YACE,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,qBAAM,CAAC,SAAS,CAAC,iBAAiB;SAC5C,EACD,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CACpC;aACA,QAAQ,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,eAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,0BAA0B,CACxC,UAAkB,EAClB,YAAoB;IAEpB,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,YAAY,GAAG,qBAAM;aAClB,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;aAC/D,QAAQ,EAAE,CAAC;QACd,eAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,eAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["/** istanbul ignore file */\nimport crypto from 'node:crypto';\nimport { logger } from '../../logger';\n\nexport function tryDecryptPublicKeyPKCS1(\n  privateKey: string,\n  encryptedStr: string,\n): string | null {\n  let decryptedStr: string | null = null;\n  try {\n    decryptedStr = crypto\n      .privateDecrypt(\n        {\n          key: privateKey,\n          padding: crypto.constants.RSA_PKCS1_PADDING,\n        },\n        Buffer.from(encryptedStr, 'base64'),\n      )\n      .toString();\n  } catch {\n    logger.debug('Could not decrypt using PKCS1 padding');\n  }\n  return decryptedStr;\n}\n\nexport function tryDecryptPublicKeyDefault(\n  privateKey: string,\n  encryptedStr: string,\n): string | null {\n  let decryptedStr: string | null = null;\n  try {\n    decryptedStr = crypto\n      .privateDecrypt(privateKey, Buffer.from(encryptedStr, 'base64'))\n      .toString();\n    logger.debug('Decrypted config using default padding');\n  } catch {\n    logger.debug('Could not decrypt using default padding');\n  }\n  return decryptedStr;\n}\n"]}
+{"version":3,"file":"legacy.js","sourceRoot":"","sources":["../../../lib/config/decrypt/legacy.ts"],"names":[],"mappings":";;AAGA,4DAmBC;AAED,gEAcC;;AAtCD,sEAAiC;AACjC,yCAAsC;AAEtC,SAAgB,wBAAwB,CACtC,UAAkB,EAClB,YAAoB;IAEpB,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,YAAY,GAAG,qBAAM;aAClB,cAAc,CACb;YACE,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,qBAAM,CAAC,SAAS,CAAC,iBAAiB;SAC5C,EACD,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CACpC;aACA,QAAQ,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,eAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,0BAA0B,CACxC,UAAkB,EAClB,YAAoB;IAEpB,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,YAAY,GAAG,qBAAM;aAClB,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;aAC/D,QAAQ,EAAE,CAAC;QACd,eAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,eAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC","sourcesContent":["import crypto from 'node:crypto';\nimport { logger } from '../../logger';\n\nexport function tryDecryptPublicKeyPKCS1(\n  privateKey: string,\n  encryptedStr: string,\n): string | null {\n  let decryptedStr: string | null = null;\n  try {\n    decryptedStr = crypto\n      .privateDecrypt(\n        {\n          key: privateKey,\n          padding: crypto.constants.RSA_PKCS1_PADDING,\n        },\n        Buffer.from(encryptedStr, 'base64'),\n      )\n      .toString();\n  } catch {\n    logger.debug('Could not decrypt using PKCS1 padding');\n  }\n  return decryptedStr;\n}\n\nexport function tryDecryptPublicKeyDefault(\n  privateKey: string,\n  encryptedStr: string,\n): string | null {\n  let decryptedStr: string | null = null;\n  try {\n    decryptedStr = crypto\n      .privateDecrypt(privateKey, Buffer.from(encryptedStr, 'base64'))\n      .toString();\n    logger.debug('Decrypted config using default padding');\n  } catch {\n    logger.debug('Could not decrypt using default padding');\n  }\n  return decryptedStr;\n}\n"]}

package/dist/config/decrypt.d.ts

@@ -1,3 +1,5 @@
 import type { RenovateConfig } from './types';
 export declare function tryDecrypt(privateKey: string, encryptedStr: string, repository: string, keyName: string): Promise<string | null>;
-export declare function decryptConfig(config: RenovateConfig, repository: string): Promise<RenovateConfig>;
+export declare function validateDecryptedValue(decryptedObjStr: string, repository: string): string | null;
+export declare function decryptConfig(config: RenovateConfig, repository: string, existingPath?: string): Promise<RenovateConfig>;
+export declare function getAzureCollection(): string | undefined;

package/dist/config/decrypt.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.tryDecrypt = tryDecrypt;
+exports.validateDecryptedValue = validateDecryptedValue;
 exports.decryptConfig = decryptConfig;
+exports.getAzureCollection = getAzureCollection;
 const tslib_1 = require("tslib");
 const is_1 = tslib_1.__importDefault(require("@sindresorhus/is"));
 const error_messages_1 = require("../constants/error-messages");
@@ -31,10 +33,11 @@ async function tryDecrypt(privateKey, encryptedStr, repository, keyName) {
         }
         else {
             decryptedStr = (0, legacy_1.tryDecryptPublicKeyPKCS1)(privateKey, encryptedStr);
-            // istanbul ignore if
+            /* v8 ignore start -- not testable */
             if (is_1.default.string(decryptedStr)) {
                 logger_1.logger.warn({ keyName }, 'Encrypted value is using deprecated PKCS1 padding, please change to using PGP encryption.');
             }
+            /* v8 ignore stop */
         }
     }
     return decryptedStr;
@@ -42,7 +45,6 @@ async function tryDecrypt(privateKey, encryptedStr, repository, keyName) {
 function validateDecryptedValue(decryptedObjStr, repository) {
     try {
         const decryptedObj = schema_1.DecryptedObject.safeParse(decryptedObjStr);
-        // istanbul ignore if
         if (!decryptedObj.success) {
             const error = new Error('config-validation');
             error.validationError = `Could not parse decrypted config.`;
@@ -59,6 +61,14 @@ function validateDecryptedValue(decryptedObjStr, repository) {
             error.validationError = `Encrypted value in config is missing a scope.`;
             throw error;
         }
+        const repositories = [repository.toUpperCase()];
+        const azureCollection = getAzureCollection();
+        if (is_1.default.nonEmptyString(azureCollection)) {
+            // used for full 'org/project/repo' matching
+            repositories.push(`${azureCollection}/${repository}`.toUpperCase());
+            // used for org prefix matching without repo
+            repositories.push(`${azureCollection}/*/`.toUpperCase());
+        }
         const orgPrefixes = org
             .split(',')
             .map((o) => o.trim())
@@ -66,8 +76,10 @@ function validateDecryptedValue(decryptedObjStr, repository) {
             .map((o) => (0, url_1.ensureTrailingSlash)(o));
         if (is_1.default.nonEmptyString(repo)) {
             const scopedRepos = orgPrefixes.map((orgPrefix) => `${orgPrefix}${repo}`.toUpperCase());
-            if (scopedRepos.some((r) => r === repository.toUpperCase())) {
-                return value;
+            for (const rp of repositories) {
+                if (scopedRepos.some((r) => r === rp)) {
+                    return value;
+                }
             }
             logger_1.logger.debug({ scopedRepos }, 'Secret is scoped to a different repository');
             const error = new Error('config-validation');
@@ -76,8 +88,13 @@ function validateDecryptedValue(decryptedObjStr, repository) {
             throw error;
         }
         // no scoped repos, only org
-        if (orgPrefixes.some((orgPrefix) => repository.toUpperCase().startsWith(orgPrefix))) {
-            return value;
+        const azcol = azureCollection === undefined
+            ? undefined
+            : (0, url_1.ensureTrailingSlash)(azureCollection).toUpperCase();
+        for (const rp of repositories) {
+            if (orgPrefixes.some((orgPrefix) => rp.startsWith(orgPrefix) && orgPrefix !== azcol)) {
+                return value;
+            }
         }
         logger_1.logger.debug({ orgPrefixes }, 'Secret is scoped to a different org');
         const error = new Error('config-validation');
@@ -90,21 +107,22 @@ function validateDecryptedValue(decryptedObjStr, repository) {
     }
     return null;
 }
-async function decryptConfig(config, repository) {
+async function decryptConfig(config, repository, existingPath = '$') {
     logger_1.logger.trace({ config }, 'decryptConfig()');
     const decryptedConfig = { ...config };
     const privateKey = global_1.GlobalConfig.get('privateKey');
     const privateKeyOld = global_1.GlobalConfig.get('privateKeyOld');
     for (const [key, val] of Object.entries(config)) {
         if (key === 'encrypted' && is_1.default.object(val)) {
-            logger_1.logger.debug({ config: val }, 'Found encrypted config');
+            const path = `${existingPath}.${key}`;
+            logger_1.logger.debug({ config: val }, `Found encrypted config in ${path}`);
             const encryptedWarning = global_1.GlobalConfig.get('encryptedWarning');
             if (is_1.default.string(encryptedWarning)) {
                 logger_1.logger.once.warn(encryptedWarning);
             }
             if (privateKey) {
                 for (const [eKey, eVal] of Object.entries(val)) {
-                    logger_1.logger.debug('Trying to decrypt ' + eKey);
+                    logger_1.logger.debug(`Trying to decrypt ${eKey} in ${path}`);
                     let decryptedStr = await tryDecrypt(privateKey, eVal, repository, eKey);
                     if (privateKeyOld && !is_1.default.nonEmptyString(decryptedStr)) {
                         logger_1.logger.debug(`Trying to decrypt with old private key`);
@@ -115,7 +133,7 @@ async function decryptConfig(config, repository) {
                         error.validationError = `Failed to decrypt field ${eKey}. Please re-encrypt and try again.`;
                         throw error;
                     }
-                    logger_1.logger.debug(`Decrypted ${eKey}`);
+                    logger_1.logger.debug(`Decrypted ${eKey} in ${path}`);
                     if (eKey === 'npmToken') {
                         const token = decryptedStr.replace((0, regex_1.regEx)(/\n$/), '');
                         decryptedConfig[eKey] = token;
@@ -149,9 +167,10 @@ Refer to migration documents here: https://docs.renovatebot.com/mend-hosted/migr
         }
         else if (is_1.default.array(val)) {
             decryptedConfig[key] = [];
-            for (const item of val) {
+            for (const [index, item] of val.entries()) {
                 if (is_1.default.object(item) && !is_1.default.array(item)) {
-                    decryptedConfig[key].push(await decryptConfig(item, repository));
+                    const path = `${existingPath}.${key}[${index}]`;
+                    decryptedConfig[key].push(await decryptConfig(item, repository, path));
                 }
                 else {
                     decryptedConfig[key].push(item);
@@ -159,11 +178,35 @@ Refer to migration documents here: https://docs.renovatebot.com/mend-hosted/migr
             }
         }
         else if (is_1.default.object(val) && key !== 'content') {
-            decryptedConfig[key] = await decryptConfig(val, repository);
+            const path = `${existingPath}.${key}`;
+            decryptedConfig[key] = await decryptConfig(val, repository, path);
         }
     }
     delete decryptedConfig.encrypted;
     logger_1.logger.trace({ config: decryptedConfig }, 'decryptedConfig');
     return decryptedConfig;
 }
+function getAzureCollection() {
+    const platform = global_1.GlobalConfig.get('platform');
+    if (platform !== 'azure') {
+        return undefined;
+    }
+    const endpoint = global_1.GlobalConfig.get('endpoint');
+    const endpointUrl = (0, url_1.parseUrl)(endpoint);
+    if (endpointUrl === null) {
+        // should not happen
+        logger_1.logger.warn({ endpoint }, 'Unable to parse endpoint for token decryption');
+        return undefined;
+    }
+    const azureCollection = (0, url_1.trimSlashes)(endpointUrl.pathname);
+    if (!is_1.default.nonEmptyString(azureCollection)) {
+        logger_1.logger.debug({ endpoint }, 'Unable to find azure collection name from URL');
+        return undefined;
+    }
+    if (azureCollection.startsWith('tfs/')) {
+        // Azure DevOps Server
+        return azureCollection.substring(4);
+    }
+    return azureCollection;
+}
 //# sourceMappingURL=decrypt.js.map

package/dist/config/decrypt.js.map

@@ -1 +1 @@
-{"version":3,"file":"decrypt.js","sourceRoot":"","sources":["../../lib/config/decrypt.ts"],"names":[],"mappings":";;AAgBA,gCAkCC;AAuED,sCAyFC;;AAlND,kEAAkC;AAClC,gEAAgE;AAChE,sCAAmC;AACnC,yCAAsC;AACtC,+CAA0D;AAC1D,qCAAkD;AAClD,2CAAkD;AAClD,6CAG0B;AAC1B,+CAAsD;AACtD,qCAAwC;AACxC,qCAA2C;AAGpC,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,YAAoB,EACpB,UAAkB,EAClB,OAAe;IAEf,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,UAAU,EAAE,UAAU,CAAC,uCAAuC,CAAC,EAAE,CAAC;QACpE,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;YAC3C,CAAC,CAAC,MAAM,IAAA,2BAAiB,EAAC,UAAU,EAAE,YAAY,CAAC;YACnD,CAAC,CAAC,MAAM,IAAA,uBAAe,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACtD,IAAI,eAAe,EAAE,CAAC;YACpB,YAAY,GAAG,sBAAsB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,IAAA,mCAA0B,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACpE,IAAI,YAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,eAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,EACX,6FAA6F,CAC9F,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,IAAA,iCAAwB,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAClE,qBAAqB;YACrB,IAAI,YAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC5B,eAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,EACX,2FAA2F,CAC5F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,sBAAsB,CAC7B,eAAuB,EACvB,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,wBAAe,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChE,qBAAqB;QACrB,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7C,KAAK,CAAC,eAAe,GAAG,mCAAmC,CAAC;YAC5D,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC;QAExD,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7C,KAAK,CAAC,eAAe,GAAG,+CAA+C,CAAC;YACxE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7C,KAAK,CAAC,eAAe,GAAG,+CAA+C,CAAC;YACxE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,GAAG;aACpB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,yBAAmB,EAAC,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,YAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,GAAG,SAAS,GAAG,IAAI,EAAE,CAAC,WAAW,EAAE,CACpC,CAAC;YACF,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5D,OAAO,KAAK,CAAC;YACf,CAAC;YACD,eAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,EACf,4CAA4C,CAC7C,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,KAAK,CAAC,eAAe,GAAG,0DAA0D,WAAW,IAAI,CAAC;YAClG,MAAM,KAAK,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,IACE,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC7B,UAAU,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAC/C,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,eAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,qCAAqC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,KAAK,CAAC,eAAe,GAAG,mDAAmD,WAAW,IAAI,CAAC;QAC3F,MAAM,KAAK,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,MAAsB,EACtB,UAAkB;IAElB,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,qBAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,qBAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,WAAW,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;YAExD,MAAM,gBAAgB,GAAG,qBAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAC9D,IAAI,YAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAChC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACrC,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,eAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;oBAC1C,IAAI,YAAY,GAAG,MAAM,UAAU,CACjC,UAAU,EACV,IAAI,EACJ,UAAU,EACV,IAAI,CACL,CAAC;oBACF,IAAI,aAAa,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;wBACtD,eAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;wBACvD,YAAY,GAAG,MAAM,UAAU,CAC7B,aAAa,EACb,IAAI,EACJ,UAAU,EACV,IAAI,CACL,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;wBACrC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;wBAC7C,KAAK,CAAC,eAAe,GAAG,2BAA2B,IAAI,oCAAoC,CAAC;wBAC5F,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,eAAM,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;oBAClC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;wBACxB,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,IAAA,aAAK,EAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;wBACrD,eAAe,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;wBAC9B,IAAA,iCAAsB,EAAC,KAAK,CAAC,CAAC;oBAChC,CAAC;yBAAM,CAAC;wBACN,eAAe,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;wBACrC,IAAA,iCAAsB,EAAC,YAAY,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,MAAM,EAAE,CAAC;oBACvD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;oBAC3C,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC;oBAClC,KAAK,CAAC,eAAe,GAAG,8BAA8B,CAAC;oBACvD,KAAK,CAAC,iBAAiB,GAAG,4DAA4D,GAAG,sJAAsJ,CAAC;oBAChP,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;wBACvC,KAAK,CAAC,iBAAiB,GAAG;;;+FAGyD,CAAC;oBACtF,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,eAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,OAAO,eAAe,CAAC,SAAS,CAAC;QACnC,CAAC;aAAM,IAAI,YAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAC1B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACvB,IAAI,YAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,eAAe,CAAC,GAAG,CAAsB,CAAC,IAAI,CAC7C,MAAM,aAAa,CAAC,IAAsB,EAAE,UAAU,CAAC,CACxD,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACL,eAAe,CAAC,GAAG,CAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC/C,eAAe,CAAC,GAAG,CAAC,GAAG,MAAM,aAAa,CACxC,GAAqB,EACrB,UAAU,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC,SAAS,CAAC;IACjC,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC7D,OAAO,eAAe,CAAC;AACzB,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { CONFIG_VALIDATION } from '../constants/error-messages';\nimport { logger } from '../logger';\nimport { regEx } from '../util/regex';\nimport { addSecretForSanitizing } from '../util/sanitize';\nimport { ensureTrailingSlash } from '../util/url';\nimport { tryDecryptKbPgp } from './decrypt/kbpgp';\nimport {\n  tryDecryptPublicKeyDefault,\n  tryDecryptPublicKeyPKCS1,\n} from './decrypt/legacy';\nimport { tryDecryptOpenPgp } from './decrypt/openpgp';\nimport { GlobalConfig } from './global';\nimport { DecryptedObject } from './schema';\nimport type { RenovateConfig } from './types';\n\nexport async function tryDecrypt(\n  privateKey: string,\n  encryptedStr: string,\n  repository: string,\n  keyName: string,\n): Promise<string | null> {\n  let decryptedStr: string | null = null;\n  if (privateKey?.startsWith('-----BEGIN PGP PRIVATE KEY BLOCK-----')) {\n    const decryptedObjStr =\n      process.env.RENOVATE_X_USE_OPENPGP === 'true'\n        ? await tryDecryptOpenPgp(privateKey, encryptedStr)\n        : await tryDecryptKbPgp(privateKey, encryptedStr);\n    if (decryptedObjStr) {\n      decryptedStr = validateDecryptedValue(decryptedObjStr, repository);\n    }\n  } else {\n    decryptedStr = tryDecryptPublicKeyDefault(privateKey, encryptedStr);\n    if (is.string(decryptedStr)) {\n      logger.warn(\n        { keyName },\n        'Encrypted value is using deprecated default padding, please change to using PGP encryption.',\n      );\n    } else {\n      decryptedStr = tryDecryptPublicKeyPKCS1(privateKey, encryptedStr);\n      // istanbul ignore if\n      if (is.string(decryptedStr)) {\n        logger.warn(\n          { keyName },\n          'Encrypted value is using deprecated PKCS1 padding, please change to using PGP encryption.',\n        );\n      }\n    }\n  }\n  return decryptedStr;\n}\n\nfunction validateDecryptedValue(\n  decryptedObjStr: string,\n  repository: string,\n): string | null {\n  try {\n    const decryptedObj = DecryptedObject.safeParse(decryptedObjStr);\n    // istanbul ignore if\n    if (!decryptedObj.success) {\n      const error = new Error('config-validation');\n      error.validationError = `Could not parse decrypted config.`;\n      throw error;\n    }\n\n    const { o: org, r: repo, v: value } = decryptedObj.data;\n\n    if (!is.nonEmptyString(value)) {\n      const error = new Error('config-validation');\n      error.validationError = `Encrypted value in config is missing a value.`;\n      throw error;\n    }\n\n    if (!is.nonEmptyString(org)) {\n      const error = new Error('config-validation');\n      error.validationError = `Encrypted value in config is missing a scope.`;\n      throw error;\n    }\n\n    const orgPrefixes = org\n      .split(',')\n      .map((o) => o.trim())\n      .map((o) => o.toUpperCase())\n      .map((o) => ensureTrailingSlash(o));\n\n    if (is.nonEmptyString(repo)) {\n      const scopedRepos = orgPrefixes.map((orgPrefix) =>\n        `${orgPrefix}${repo}`.toUpperCase(),\n      );\n      if (scopedRepos.some((r) => r === repository.toUpperCase())) {\n        return value;\n      }\n      logger.debug(\n        { scopedRepos },\n        'Secret is scoped to a different repository',\n      );\n      const error = new Error('config-validation');\n      const scopeString = scopedRepos.join(',');\n      error.validationError = `Encrypted secret is scoped to a different repository: \"${scopeString}\".`;\n      throw error;\n    }\n\n    // no scoped repos, only org\n    if (\n      orgPrefixes.some((orgPrefix) =>\n        repository.toUpperCase().startsWith(orgPrefix),\n      )\n    ) {\n      return value;\n    }\n    logger.debug({ orgPrefixes }, 'Secret is scoped to a different org');\n    const error = new Error('config-validation');\n    const scopeString = orgPrefixes.join(',');\n    error.validationError = `Encrypted secret is scoped to a different org: \"${scopeString}\".`;\n    throw error;\n  } catch (err) {\n    logger.warn({ err }, 'Could not parse decrypted string');\n  }\n  return null;\n}\n\nexport async function decryptConfig(\n  config: RenovateConfig,\n  repository: string,\n): Promise<RenovateConfig> {\n  logger.trace({ config }, 'decryptConfig()');\n  const decryptedConfig = { ...config };\n  const privateKey = GlobalConfig.get('privateKey');\n  const privateKeyOld = GlobalConfig.get('privateKeyOld');\n  for (const [key, val] of Object.entries(config)) {\n    if (key === 'encrypted' && is.object(val)) {\n      logger.debug({ config: val }, 'Found encrypted config');\n\n      const encryptedWarning = GlobalConfig.get('encryptedWarning');\n      if (is.string(encryptedWarning)) {\n        logger.once.warn(encryptedWarning);\n      }\n\n      if (privateKey) {\n        for (const [eKey, eVal] of Object.entries(val)) {\n          logger.debug('Trying to decrypt ' + eKey);\n          let decryptedStr = await tryDecrypt(\n            privateKey,\n            eVal,\n            repository,\n            eKey,\n          );\n          if (privateKeyOld && !is.nonEmptyString(decryptedStr)) {\n            logger.debug(`Trying to decrypt with old private key`);\n            decryptedStr = await tryDecrypt(\n              privateKeyOld,\n              eVal,\n              repository,\n              eKey,\n            );\n          }\n          if (!is.nonEmptyString(decryptedStr)) {\n            const error = new Error('config-validation');\n            error.validationError = `Failed to decrypt field ${eKey}. Please re-encrypt and try again.`;\n            throw error;\n          }\n          logger.debug(`Decrypted ${eKey}`);\n          if (eKey === 'npmToken') {\n            const token = decryptedStr.replace(regEx(/\\n$/), '');\n            decryptedConfig[eKey] = token;\n            addSecretForSanitizing(token);\n          } else {\n            decryptedConfig[eKey] = decryptedStr;\n            addSecretForSanitizing(decryptedStr);\n          }\n        }\n      } else {\n        if (process.env.RENOVATE_X_ENCRYPTED_STRICT === 'true') {\n          const error = new Error(CONFIG_VALIDATION);\n          error.validationSource = 'config';\n          error.validationError = 'Encrypted config unsupported';\n          error.validationMessage = `This config contains an encrypted object at location \\`$.${key}\\` but no privateKey is configured. To support encrypted config, the Renovate administrator must configure a \\`privateKey\\` in Global Configuration.`;\n          if (process.env.MEND_HOSTED === 'true') {\n            error.validationMessage = `Mend-hosted Renovate Apps no longer support the use of encrypted secrets in Renovate file config (e.g. renovate.json).\nPlease migrate all secrets to the Developer Portal using the web UI available at https://developer.mend.io/\n\nRefer to migration documents here: https://docs.renovatebot.com/mend-hosted/migrating-secrets/`;\n          }\n          throw error;\n        } else {\n          logger.error('Found encrypted data but no privateKey');\n        }\n      }\n      delete decryptedConfig.encrypted;\n    } else if (is.array(val)) {\n      decryptedConfig[key] = [];\n      for (const item of val) {\n        if (is.object(item) && !is.array(item)) {\n          (decryptedConfig[key] as RenovateConfig[]).push(\n            await decryptConfig(item as RenovateConfig, repository),\n          );\n        } else {\n          (decryptedConfig[key] as unknown[]).push(item);\n        }\n      }\n    } else if (is.object(val) && key !== 'content') {\n      decryptedConfig[key] = await decryptConfig(\n        val as RenovateConfig,\n        repository,\n      );\n    }\n  }\n  delete decryptedConfig.encrypted;\n  logger.trace({ config: decryptedConfig }, 'decryptedConfig');\n  return decryptedConfig;\n}\n"]}
+{"version":3,"file":"decrypt.js","sourceRoot":"","sources":["../../lib/config/decrypt.ts"],"names":[],"mappings":";;AAgBA,gCAmCC;AAED,wDAqFC;AAED,sCA8FC;AAED,gDAyBC;;AArQD,kEAAkC;AAClC,gEAAgE;AAChE,sCAAmC;AACnC,yCAAsC;AACtC,+CAA0D;AAC1D,qCAAyE;AACzE,2CAAkD;AAClD,6CAG0B;AAC1B,+CAAsD;AACtD,qCAAwC;AACxC,qCAA2C;AAGpC,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,YAAoB,EACpB,UAAkB,EAClB,OAAe;IAEf,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,UAAU,EAAE,UAAU,CAAC,uCAAuC,CAAC,EAAE,CAAC;QACpE,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;YAC3C,CAAC,CAAC,MAAM,IAAA,2BAAiB,EAAC,UAAU,EAAE,YAAY,CAAC;YACnD,CAAC,CAAC,MAAM,IAAA,uBAAe,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACtD,IAAI,eAAe,EAAE,CAAC;YACpB,YAAY,GAAG,sBAAsB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,IAAA,mCAA0B,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACpE,IAAI,YAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,eAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,EACX,6FAA6F,CAC9F,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,IAAA,iCAAwB,EAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAClE,qCAAqC;YACrC,IAAI,YAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC5B,eAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,EACX,2FAA2F,CAC5F,CAAC;YACJ,CAAC;YACD,oBAAoB;QACtB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,sBAAsB,CACpC,eAAuB,EACvB,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,wBAAe,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7C,KAAK,CAAC,eAAe,GAAG,mCAAmC,CAAC;YAC5D,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC;QAExD,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7C,KAAK,CAAC,eAAe,GAAG,+CAA+C,CAAC;YACxE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7C,KAAK,CAAC,eAAe,GAAG,+CAA+C,CAAC;YACxE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAEhD,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;QAC7C,IAAI,YAAE,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;YACvC,4CAA4C;YAC5C,YAAY,CAAC,IAAI,CAAC,GAAG,eAAe,IAAI,UAAU,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACpE,4CAA4C;YAC5C,YAAY,CAAC,IAAI,CAAC,GAAG,eAAe,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,WAAW,GAAG,GAAG;aACpB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,yBAAmB,EAAC,CAAC,CAAC,CAAC,CAAC;QAEtC,IAAI,YAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAChD,GAAG,SAAS,GAAG,IAAI,EAAE,CAAC,WAAW,EAAE,CACpC,CAAC;YACF,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;gBAC9B,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;oBACtC,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,eAAM,CAAC,KAAK,CACV,EAAE,WAAW,EAAE,EACf,4CAA4C,CAC7C,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,KAAK,CAAC,eAAe,GAAG,0DAA0D,WAAW,IAAI,CAAC;YAClG,MAAM,KAAK,CAAC;QACd,CAAC;QAED,4BAA4B;QAC5B,MAAM,KAAK,GACT,eAAe,KAAK,SAAS;YAC3B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAA,yBAAmB,EAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;QACzD,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9B,IACE,WAAW,CAAC,IAAI,CACd,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,KAAK,CAC/D,EACD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,eAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,qCAAqC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,KAAK,CAAC,eAAe,GAAG,mDAAmD,WAAW,IAAI,CAAC;QAC3F,MAAM,KAAK,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,MAAsB,EACtB,UAAkB,EAClB,YAAY,GAAG,GAAG;IAElB,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,qBAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,qBAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,WAAW,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;YACtC,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,6BAA6B,IAAI,EAAE,CAAC,CAAC;YAEnE,MAAM,gBAAgB,GAAG,qBAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAC9D,IAAI,YAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAChC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACrC,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,eAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;oBACrD,IAAI,YAAY,GAAG,MAAM,UAAU,CACjC,UAAU,EACV,IAAI,EACJ,UAAU,EACV,IAAI,CACL,CAAC;oBACF,IAAI,aAAa,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;wBACtD,eAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;wBACvD,YAAY,GAAG,MAAM,UAAU,CAC7B,aAAa,EACb,IAAI,EACJ,UAAU,EACV,IAAI,CACL,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;wBACrC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;wBAC7C,KAAK,CAAC,eAAe,GAAG,2BAA2B,IAAI,oCAAoC,CAAC;wBAC5F,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,eAAM,CAAC,KAAK,CAAC,aAAa,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC;oBAC7C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;wBACxB,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,IAAA,aAAK,EAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;wBACrD,eAAe,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;wBAC9B,IAAA,iCAAsB,EAAC,KAAK,CAAC,CAAC;oBAChC,CAAC;yBAAM,CAAC;wBACN,eAAe,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;wBACrC,IAAA,iCAAsB,EAAC,YAAY,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,MAAM,EAAE,CAAC;oBACvD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,kCAAiB,CAAC,CAAC;oBAC3C,KAAK,CAAC,gBAAgB,GAAG,QAAQ,CAAC;oBAClC,KAAK,CAAC,eAAe,GAAG,8BAA8B,CAAC;oBACvD,KAAK,CAAC,iBAAiB,GAAG,4DAA4D,GAAG,sJAAsJ,CAAC;oBAChP,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;wBACvC,KAAK,CAAC,iBAAiB,GAAG;;;+FAGyD,CAAC;oBACtF,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,eAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,OAAO,eAAe,CAAC,SAAS,CAAC;QACnC,CAAC;aAAM,IAAI,YAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC1C,IAAI,YAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvC,MAAM,IAAI,GAAG,GAAG,YAAY,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC;oBAC/C,eAAe,CAAC,GAAG,CAAsB,CAAC,IAAI,CAC7C,MAAM,aAAa,CAAC,IAAsB,EAAE,UAAU,EAAE,IAAI,CAAC,CAC9D,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACL,eAAe,CAAC,GAAG,CAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC;YACtC,eAAe,CAAC,GAAG,CAAC,GAAG,MAAM,aAAa,CACxC,GAAqB,EACrB,UAAU,EACV,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC,SAAS,CAAC;IACjC,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC7D,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAgB,kBAAkB;IAChC,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAA,cAAQ,EAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,oBAAoB;QACpB,eAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,+CAA+C,CAAC,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,eAAe,GAAG,IAAA,iBAAW,EAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAE,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,eAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,+CAA+C,CAAC,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,sBAAsB;QACtB,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { CONFIG_VALIDATION } from '../constants/error-messages';\nimport { logger } from '../logger';\nimport { regEx } from '../util/regex';\nimport { addSecretForSanitizing } from '../util/sanitize';\nimport { ensureTrailingSlash, parseUrl, trimSlashes } from '../util/url';\nimport { tryDecryptKbPgp } from './decrypt/kbpgp';\nimport {\n  tryDecryptPublicKeyDefault,\n  tryDecryptPublicKeyPKCS1,\n} from './decrypt/legacy';\nimport { tryDecryptOpenPgp } from './decrypt/openpgp';\nimport { GlobalConfig } from './global';\nimport { DecryptedObject } from './schema';\nimport type { RenovateConfig } from './types';\n\nexport async function tryDecrypt(\n  privateKey: string,\n  encryptedStr: string,\n  repository: string,\n  keyName: string,\n): Promise<string | null> {\n  let decryptedStr: string | null = null;\n  if (privateKey?.startsWith('-----BEGIN PGP PRIVATE KEY BLOCK-----')) {\n    const decryptedObjStr =\n      process.env.RENOVATE_X_USE_OPENPGP === 'true'\n        ? await tryDecryptOpenPgp(privateKey, encryptedStr)\n        : await tryDecryptKbPgp(privateKey, encryptedStr);\n    if (decryptedObjStr) {\n      decryptedStr = validateDecryptedValue(decryptedObjStr, repository);\n    }\n  } else {\n    decryptedStr = tryDecryptPublicKeyDefault(privateKey, encryptedStr);\n    if (is.string(decryptedStr)) {\n      logger.warn(\n        { keyName },\n        'Encrypted value is using deprecated default padding, please change to using PGP encryption.',\n      );\n    } else {\n      decryptedStr = tryDecryptPublicKeyPKCS1(privateKey, encryptedStr);\n      /* v8 ignore start -- not testable */\n      if (is.string(decryptedStr)) {\n        logger.warn(\n          { keyName },\n          'Encrypted value is using deprecated PKCS1 padding, please change to using PGP encryption.',\n        );\n      }\n      /* v8 ignore stop */\n    }\n  }\n  return decryptedStr;\n}\n\nexport function validateDecryptedValue(\n  decryptedObjStr: string,\n  repository: string,\n): string | null {\n  try {\n    const decryptedObj = DecryptedObject.safeParse(decryptedObjStr);\n    if (!decryptedObj.success) {\n      const error = new Error('config-validation');\n      error.validationError = `Could not parse decrypted config.`;\n      throw error;\n    }\n\n    const { o: org, r: repo, v: value } = decryptedObj.data;\n\n    if (!is.nonEmptyString(value)) {\n      const error = new Error('config-validation');\n      error.validationError = `Encrypted value in config is missing a value.`;\n      throw error;\n    }\n\n    if (!is.nonEmptyString(org)) {\n      const error = new Error('config-validation');\n      error.validationError = `Encrypted value in config is missing a scope.`;\n      throw error;\n    }\n\n    const repositories = [repository.toUpperCase()];\n\n    const azureCollection = getAzureCollection();\n    if (is.nonEmptyString(azureCollection)) {\n      // used for full 'org/project/repo' matching\n      repositories.push(`${azureCollection}/${repository}`.toUpperCase());\n      // used for org prefix matching without repo\n      repositories.push(`${azureCollection}/*/`.toUpperCase());\n    }\n\n    const orgPrefixes = org\n      .split(',')\n      .map((o) => o.trim())\n      .map((o) => o.toUpperCase())\n      .map((o) => ensureTrailingSlash(o));\n\n    if (is.nonEmptyString(repo)) {\n      const scopedRepos = orgPrefixes.map((orgPrefix) =>\n        `${orgPrefix}${repo}`.toUpperCase(),\n      );\n      for (const rp of repositories) {\n        if (scopedRepos.some((r) => r === rp)) {\n          return value;\n        }\n      }\n\n      logger.debug(\n        { scopedRepos },\n        'Secret is scoped to a different repository',\n      );\n      const error = new Error('config-validation');\n      const scopeString = scopedRepos.join(',');\n      error.validationError = `Encrypted secret is scoped to a different repository: \"${scopeString}\".`;\n      throw error;\n    }\n\n    // no scoped repos, only org\n    const azcol =\n      azureCollection === undefined\n        ? undefined\n        : ensureTrailingSlash(azureCollection).toUpperCase();\n    for (const rp of repositories) {\n      if (\n        orgPrefixes.some(\n          (orgPrefix) => rp.startsWith(orgPrefix) && orgPrefix !== azcol,\n        )\n      ) {\n        return value;\n      }\n    }\n    logger.debug({ orgPrefixes }, 'Secret is scoped to a different org');\n    const error = new Error('config-validation');\n    const scopeString = orgPrefixes.join(',');\n    error.validationError = `Encrypted secret is scoped to a different org: \"${scopeString}\".`;\n    throw error;\n  } catch (err) {\n    logger.warn({ err }, 'Could not parse decrypted string');\n  }\n  return null;\n}\n\nexport async function decryptConfig(\n  config: RenovateConfig,\n  repository: string,\n  existingPath = '$',\n): Promise<RenovateConfig> {\n  logger.trace({ config }, 'decryptConfig()');\n  const decryptedConfig = { ...config };\n  const privateKey = GlobalConfig.get('privateKey');\n  const privateKeyOld = GlobalConfig.get('privateKeyOld');\n  for (const [key, val] of Object.entries(config)) {\n    if (key === 'encrypted' && is.object(val)) {\n      const path = `${existingPath}.${key}`;\n      logger.debug({ config: val }, `Found encrypted config in ${path}`);\n\n      const encryptedWarning = GlobalConfig.get('encryptedWarning');\n      if (is.string(encryptedWarning)) {\n        logger.once.warn(encryptedWarning);\n      }\n\n      if (privateKey) {\n        for (const [eKey, eVal] of Object.entries(val)) {\n          logger.debug(`Trying to decrypt ${eKey} in ${path}`);\n          let decryptedStr = await tryDecrypt(\n            privateKey,\n            eVal,\n            repository,\n            eKey,\n          );\n          if (privateKeyOld && !is.nonEmptyString(decryptedStr)) {\n            logger.debug(`Trying to decrypt with old private key`);\n            decryptedStr = await tryDecrypt(\n              privateKeyOld,\n              eVal,\n              repository,\n              eKey,\n            );\n          }\n          if (!is.nonEmptyString(decryptedStr)) {\n            const error = new Error('config-validation');\n            error.validationError = `Failed to decrypt field ${eKey}. Please re-encrypt and try again.`;\n            throw error;\n          }\n          logger.debug(`Decrypted ${eKey} in ${path}`);\n          if (eKey === 'npmToken') {\n            const token = decryptedStr.replace(regEx(/\\n$/), '');\n            decryptedConfig[eKey] = token;\n            addSecretForSanitizing(token);\n          } else {\n            decryptedConfig[eKey] = decryptedStr;\n            addSecretForSanitizing(decryptedStr);\n          }\n        }\n      } else {\n        if (process.env.RENOVATE_X_ENCRYPTED_STRICT === 'true') {\n          const error = new Error(CONFIG_VALIDATION);\n          error.validationSource = 'config';\n          error.validationError = 'Encrypted config unsupported';\n          error.validationMessage = `This config contains an encrypted object at location \\`$.${key}\\` but no privateKey is configured. To support encrypted config, the Renovate administrator must configure a \\`privateKey\\` in Global Configuration.`;\n          if (process.env.MEND_HOSTED === 'true') {\n            error.validationMessage = `Mend-hosted Renovate Apps no longer support the use of encrypted secrets in Renovate file config (e.g. renovate.json).\nPlease migrate all secrets to the Developer Portal using the web UI available at https://developer.mend.io/\n\nRefer to migration documents here: https://docs.renovatebot.com/mend-hosted/migrating-secrets/`;\n          }\n          throw error;\n        } else {\n          logger.error('Found encrypted data but no privateKey');\n        }\n      }\n      delete decryptedConfig.encrypted;\n    } else if (is.array(val)) {\n      decryptedConfig[key] = [];\n      for (const [index, item] of val.entries()) {\n        if (is.object(item) && !is.array(item)) {\n          const path = `${existingPath}.${key}[${index}]`;\n          (decryptedConfig[key] as RenovateConfig[]).push(\n            await decryptConfig(item as RenovateConfig, repository, path),\n          );\n        } else {\n          (decryptedConfig[key] as unknown[]).push(item);\n        }\n      }\n    } else if (is.object(val) && key !== 'content') {\n      const path = `${existingPath}.${key}`;\n      decryptedConfig[key] = await decryptConfig(\n        val as RenovateConfig,\n        repository,\n        path,\n      );\n    }\n  }\n  delete decryptedConfig.encrypted;\n  logger.trace({ config: decryptedConfig }, 'decryptedConfig');\n  return decryptedConfig;\n}\n\nexport function getAzureCollection(): string | undefined {\n  const platform = GlobalConfig.get('platform');\n  if (platform !== 'azure') {\n    return undefined;\n  }\n\n  const endpoint = GlobalConfig.get('endpoint');\n  const endpointUrl = parseUrl(endpoint);\n  if (endpointUrl === null) {\n    // should not happen\n    logger.warn({ endpoint }, 'Unable to parse endpoint for token decryption');\n    return undefined;\n  }\n\n  const azureCollection = trimSlashes(endpointUrl.pathname);\n  if (!is.nonEmptyString(azureCollection)) {\n    logger.debug({ endpoint }, 'Unable to find azure collection name from URL');\n    return undefined;\n  }\n\n  if (azureCollection.startsWith('tfs/')) {\n    // Azure DevOps Server\n    return azureCollection.substring(4);\n  }\n  return azureCollection;\n}\n"]}

package/dist/config/global.js

@@ -6,7 +6,6 @@ class GlobalConfig {
     static OPTIONS = [
         'allowedCommands',
         'allowedEnv',
-        'allowCommandTemplating',
         'allowCustomCrateRegistries',
         'allowedHeaders',
         'allowPlugins',

package/dist/config/global.js.map

@@ -1 +1 @@
-{"version":3,"file":"global.js","sourceRoot":"","sources":["../../lib/config/global.ts"],"names":[],"mappings":";;;AAEA,MAAa,YAAY;IACvB,iIAAiI;IACzH,MAAM,CAAU,OAAO,GAA+B;QAC5D,iBAAiB;QACjB,YAAY;QACZ,wBAAwB;QACxB,4BAA4B;QAC5B,gBAAgB;QAChB,cAAc;QACd,cAAc;QACd,cAAc;QACd,UAAU;QACV,qBAAqB;QACrB,kBAAkB;QAClB,kBAAkB;QAClB,oBAAoB;QACpB,mBAAmB;QACnB,kBAAkB;QAClB,oBAAoB;QACpB,YAAY;QACZ,QAAQ;QACR,kBAAkB;QAClB,cAAc;QACd,kBAAkB;QAClB,iBAAiB;QACjB,UAAU;QACV,gBAAgB;QAChB,wBAAwB;QACxB,YAAY;QACZ,eAAe;QACf,YAAY;QACZ,UAAU;QACV,UAAU;QACV,kBAAkB;QAClB,sBAAsB;QACtB,uBAAuB;QACvB,WAAW;QACX,gBAAgB;QAChB,YAAY;QACZ,aAAa;QACb,sBAAsB;KACvB,CAAC;IAEM,MAAM,CAAC,MAAM,GAAqB,EAAE,CAAC;IAU7C,MAAM,CAAC,GAAG,CACR,GAAS,EACT,YAAoC;QAEpC,OAAO,GAAG;YACR,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC;YAC5C,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,MAAyC;QAClD,YAAY,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1C,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAU,CAAC;YACtD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,KAAK;QACV,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC;IAC3B,CAAC;;AA5EH,oCA6EC","sourcesContent":["import type { RenovateConfig, RepoGlobalConfig } from './types';\n\nexport class GlobalConfig {\n  // TODO: once global config work is complete, add a test to make sure this list includes all options with globalOnly=true (#9603)\n  private static readonly OPTIONS: (keyof RepoGlobalConfig)[] = [\n    'allowedCommands',\n    'allowedEnv',\n    'allowCommandTemplating',\n    'allowCustomCrateRegistries',\n    'allowedHeaders',\n    'allowPlugins',\n    'allowScripts',\n    'binarySource',\n    'cacheDir',\n    'cacheHardTtlMinutes',\n    'cacheTtlOverride',\n    'containerbaseDir',\n    'customEnvVariables',\n    'dockerChildPrefix',\n    'dockerCliOptions',\n    'dockerSidecarImage',\n    'dockerUser',\n    'dryRun',\n    'encryptedWarning',\n    'exposeAllEnv',\n    'executionTimeout',\n    'githubTokenWarn',\n    'localDir',\n    'migratePresets',\n    'presetCachePersistence',\n    'privateKey',\n    'privateKeyOld',\n    'gitTimeout',\n    'platform',\n    'endpoint',\n    'httpCacheTtlDays',\n    'autodiscoverRepoSort',\n    'autodiscoverRepoOrder',\n    'userAgent',\n    'dockerMaxPages',\n    's3Endpoint',\n    's3PathStyle',\n    'cachePrivatePackages',\n  ];\n\n  private static config: RepoGlobalConfig = {};\n\n  static get(): RepoGlobalConfig;\n  static get<Key extends keyof RepoGlobalConfig>(\n    key: Key,\n  ): RepoGlobalConfig[Key];\n  static get<Key extends keyof RepoGlobalConfig>(\n    key: Key,\n    defaultValue: Required<RepoGlobalConfig>[Key],\n  ): Required<RepoGlobalConfig>[Key];\n  static get<Key extends keyof RepoGlobalConfig>(\n    key?: Key,\n    defaultValue?: RepoGlobalConfig[Key],\n  ): RepoGlobalConfig | RepoGlobalConfig[Key] {\n    return key\n      ? (GlobalConfig.config[key] ?? defaultValue)\n      : GlobalConfig.config;\n  }\n\n  static set(config: RenovateConfig | RepoGlobalConfig): RenovateConfig {\n    GlobalConfig.reset();\n\n    const result = { ...config };\n    for (const option of GlobalConfig.OPTIONS) {\n      GlobalConfig.config[option] = config[option] as never;\n      delete result[option];\n    }\n\n    return result;\n  }\n\n  static reset(): void {\n    GlobalConfig.config = {};\n  }\n}\n"]}
+{"version":3,"file":"global.js","sourceRoot":"","sources":["../../lib/config/global.ts"],"names":[],"mappings":";;;AAEA,MAAa,YAAY;IACvB,iIAAiI;IACzH,MAAM,CAAU,OAAO,GAA+B;QAC5D,iBAAiB;QACjB,YAAY;QACZ,4BAA4B;QAC5B,gBAAgB;QAChB,cAAc;QACd,cAAc;QACd,cAAc;QACd,UAAU;QACV,qBAAqB;QACrB,kBAAkB;QAClB,kBAAkB;QAClB,oBAAoB;QACpB,mBAAmB;QACnB,kBAAkB;QAClB,oBAAoB;QACpB,YAAY;QACZ,QAAQ;QACR,kBAAkB;QAClB,cAAc;QACd,kBAAkB;QAClB,iBAAiB;QACjB,UAAU;QACV,gBAAgB;QAChB,wBAAwB;QACxB,YAAY;QACZ,eAAe;QACf,YAAY;QACZ,UAAU;QACV,UAAU;QACV,kBAAkB;QAClB,sBAAsB;QACtB,uBAAuB;QACvB,WAAW;QACX,gBAAgB;QAChB,YAAY;QACZ,aAAa;QACb,sBAAsB;KACvB,CAAC;IAEM,MAAM,CAAC,MAAM,GAAqB,EAAE,CAAC;IAU7C,MAAM,CAAC,GAAG,CACR,GAAS,EACT,YAAoC;QAEpC,OAAO,GAAG;YACR,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC;YAC5C,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,MAAyC;QAClD,YAAY,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1C,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAU,CAAC;YACtD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,KAAK;QACV,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC;IAC3B,CAAC;;AA3EH,oCA4EC","sourcesContent":["import type { RenovateConfig, RepoGlobalConfig } from './types';\n\nexport class GlobalConfig {\n  // TODO: once global config work is complete, add a test to make sure this list includes all options with globalOnly=true (#9603)\n  private static readonly OPTIONS: (keyof RepoGlobalConfig)[] = [\n    'allowedCommands',\n    'allowedEnv',\n    'allowCustomCrateRegistries',\n    'allowedHeaders',\n    'allowPlugins',\n    'allowScripts',\n    'binarySource',\n    'cacheDir',\n    'cacheHardTtlMinutes',\n    'cacheTtlOverride',\n    'containerbaseDir',\n    'customEnvVariables',\n    'dockerChildPrefix',\n    'dockerCliOptions',\n    'dockerSidecarImage',\n    'dockerUser',\n    'dryRun',\n    'encryptedWarning',\n    'exposeAllEnv',\n    'executionTimeout',\n    'githubTokenWarn',\n    'localDir',\n    'migratePresets',\n    'presetCachePersistence',\n    'privateKey',\n    'privateKeyOld',\n    'gitTimeout',\n    'platform',\n    'endpoint',\n    'httpCacheTtlDays',\n    'autodiscoverRepoSort',\n    'autodiscoverRepoOrder',\n    'userAgent',\n    'dockerMaxPages',\n    's3Endpoint',\n    's3PathStyle',\n    'cachePrivatePackages',\n  ];\n\n  private static config: RepoGlobalConfig = {};\n\n  static get(): RepoGlobalConfig;\n  static get<Key extends keyof RepoGlobalConfig>(\n    key: Key,\n  ): RepoGlobalConfig[Key];\n  static get<Key extends keyof RepoGlobalConfig>(\n    key: Key,\n    defaultValue: Required<RepoGlobalConfig>[Key],\n  ): Required<RepoGlobalConfig>[Key];\n  static get<Key extends keyof RepoGlobalConfig>(\n    key?: Key,\n    defaultValue?: RepoGlobalConfig[Key],\n  ): RepoGlobalConfig | RepoGlobalConfig[Key] {\n    return key\n      ? (GlobalConfig.config[key] ?? defaultValue)\n      : GlobalConfig.config;\n  }\n\n  static set(config: RenovateConfig | RepoGlobalConfig): RenovateConfig {\n    GlobalConfig.reset();\n\n    const result = { ...config };\n    for (const option of GlobalConfig.OPTIONS) {\n      GlobalConfig.config[option] = config[option] as never;\n      delete result[option];\n    }\n\n    return result;\n  }\n\n  static reset(): void {\n    GlobalConfig.config = {};\n  }\n}\n"]}

package/dist/config/migrate-validate.js

@@ -24,7 +24,7 @@ async function migrateAndValidate(config, input) {
             logger_1.logger.debug({ config: massagedConfig }, 'Post-massage config');
         }
         const { warnings, errors, } = await configValidation.validateConfig('repo', massagedConfig);
-        // istanbul ignore if
+        /* v8 ignore start -- hard to test */
         if (is_1.default.nonEmptyArray(warnings)) {
             logger_1.logger.warn({ warnings }, 'Found renovate config warnings');
         }
@@ -36,8 +36,9 @@ async function migrateAndValidate(config, input) {
             massagedConfig.warnings = (config.warnings ?? []).concat(warnings);
         }
         return massagedConfig;
+        /* v8 ignore next 3 -- TODO: add test */
     }
-    catch (err) /* istanbul ignore next */ {
+    catch (err) {
         logger_1.logger.debug({ config: input }, 'migrateAndValidate error');
         throw err;
     }

package/dist/config/migrate-validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate-validate.js","sourceRoot":"","sources":["../../lib/config/migrate-validate.ts"],"names":[],"mappings":";;AAQA,gDA2CC;;AAnDD,kEAAkC;AAClC,mCAAgC;AAChC,sCAAmC;AACnC,iEAA2C;AAC3C,qEAA+C;AAE/C,uEAAiD;AAE1C,KAAK,UAAU,kBAAkB,CACtC,MAAsB,EACtB,KAAqB;IAErB,eAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,EAC/C,4BAA4B,CAC7B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,cAAc,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACnE,2BAA2B;QAC3B,IAAI,CAAC,IAAA,eAAM,EAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;YACnC,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,qBAAqB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,EACJ,QAAQ,EACR,MAAM,GACP,GAGG,MAAM,gBAAgB,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAClE,qBAAqB;QACrB,IAAI,YAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,eAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAC1D,CAAC;QACD,cAAc,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5B,cAAc,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAC5D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { logger } from '../logger';\nimport * as configMassage from './massage';\nimport * as configMigration from './migration';\nimport type { RenovateConfig, ValidationMessage } from './types';\nimport * as configValidation from './validation';\n\nexport async function migrateAndValidate(\n  config: RenovateConfig,\n  input: RenovateConfig,\n): Promise<RenovateConfig> {\n  logger.debug('migrateAndValidate()');\n  try {\n    const { isMigrated, migratedConfig } = configMigration.migrateConfig(input);\n    if (isMigrated) {\n      logger.debug(\n        { oldConfig: input, newConfig: migratedConfig },\n        'Config migration necessary',\n      );\n    } else {\n      logger.debug('No config migration necessary');\n    }\n    const massagedConfig = configMassage.massageConfig(migratedConfig);\n    // log only if it's changed\n    if (!dequal(input, massagedConfig)) {\n      logger.debug({ config: massagedConfig }, 'Post-massage config');\n    }\n    const {\n      warnings,\n      errors,\n    }: {\n      warnings: ValidationMessage[];\n      errors: ValidationMessage[];\n    } = await configValidation.validateConfig('repo', massagedConfig);\n    // istanbul ignore if\n    if (is.nonEmptyArray(warnings)) {\n      logger.warn({ warnings }, 'Found renovate config warnings');\n    }\n    if (is.nonEmptyArray(errors)) {\n      logger.info({ errors }, 'Found renovate config errors');\n    }\n    massagedConfig.errors = (config.errors ?? []).concat(errors);\n    if (!config.repoIsOnboarded) {\n      massagedConfig.warnings = (config.warnings ?? []).concat(warnings);\n    }\n    return massagedConfig;\n  } catch (err) /* istanbul ignore next */ {\n    logger.debug({ config: input }, 'migrateAndValidate error');\n    throw err;\n  }\n}\n"]}
+{"version":3,"file":"migrate-validate.js","sourceRoot":"","sources":["../../lib/config/migrate-validate.ts"],"names":[],"mappings":";;AAQA,gDA4CC;;AApDD,kEAAkC;AAClC,mCAAgC;AAChC,sCAAmC;AACnC,iEAA2C;AAC3C,qEAA+C;AAE/C,uEAAiD;AAE1C,KAAK,UAAU,kBAAkB,CACtC,MAAsB,EACtB,KAAqB;IAErB,eAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CACV,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,EAC/C,4BAA4B,CAC7B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,eAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,cAAc,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QACnE,2BAA2B;QAC3B,IAAI,CAAC,IAAA,eAAM,EAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;YACnC,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,qBAAqB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,EACJ,QAAQ,EACR,MAAM,GACP,GAGG,MAAM,gBAAgB,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAClE,qCAAqC;QACrC,IAAI,YAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,eAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,YAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,eAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC;QAC1D,CAAC;QACD,cAAc,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5B,cAAc,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,cAAc,CAAC;QACtB,wCAAwC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAC;QAC5D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { logger } from '../logger';\nimport * as configMassage from './massage';\nimport * as configMigration from './migration';\nimport type { RenovateConfig, ValidationMessage } from './types';\nimport * as configValidation from './validation';\n\nexport async function migrateAndValidate(\n  config: RenovateConfig,\n  input: RenovateConfig,\n): Promise<RenovateConfig> {\n  logger.debug('migrateAndValidate()');\n  try {\n    const { isMigrated, migratedConfig } = configMigration.migrateConfig(input);\n    if (isMigrated) {\n      logger.debug(\n        { oldConfig: input, newConfig: migratedConfig },\n        'Config migration necessary',\n      );\n    } else {\n      logger.debug('No config migration necessary');\n    }\n    const massagedConfig = configMassage.massageConfig(migratedConfig);\n    // log only if it's changed\n    if (!dequal(input, massagedConfig)) {\n      logger.debug({ config: massagedConfig }, 'Post-massage config');\n    }\n    const {\n      warnings,\n      errors,\n    }: {\n      warnings: ValidationMessage[];\n      errors: ValidationMessage[];\n    } = await configValidation.validateConfig('repo', massagedConfig);\n    /* v8 ignore start -- hard to test */\n    if (is.nonEmptyArray(warnings)) {\n      logger.warn({ warnings }, 'Found renovate config warnings');\n    }\n    if (is.nonEmptyArray(errors)) {\n      logger.info({ errors }, 'Found renovate config errors');\n    }\n    massagedConfig.errors = (config.errors ?? []).concat(errors);\n    if (!config.repoIsOnboarded) {\n      massagedConfig.warnings = (config.warnings ?? []).concat(warnings);\n    }\n    return massagedConfig;\n    /* v8 ignore next 3 -- TODO: add test */\n  } catch (err) {\n    logger.debug({ config: input }, 'migrateAndValidate error');\n    throw err;\n  }\n}\n"]}

package/dist/config/migration.js

@@ -166,8 +166,9 @@ function migrateConfig(config, parentKey) {
             };
         }
         return { isMigrated, migratedConfig };
+        /* v8 ignore next 4 -- TODO: add test */
     }
-    catch (err) /* istanbul ignore next */ {
+    catch (err) {
         logger_1.logger.debug({ config, err }, 'migrateConfig() error');
         throw err;
     }

package/dist/config/migration.js.map

@@ -1 +1 @@
-{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../lib/config/migration.ts"],"names":[],"mappings":";;AAiBA,sCAEC;AAID,sCAmLC;;AA1MD,kEAAkC;AAClC,mCAAgC;AAChC,sCAAmC;AACnC,yCAAsC;AACtC,yCAAsC;AACtC,6CAAiD;AACjD,uCAAuC;AAQvC,mCAA2C;AAE3C,MAAM,OAAO,GAAG,IAAA,oBAAU,GAAE,CAAC;AAC7B,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAA,aAAK,EAAC,mBAAmB,CAAC,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,IAAI,WAAoD,CAAC;AACzD,4BAA4B;AAC5B,SAAgB,aAAa,CAC3B,MAAsB,EACtB,SAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,WAAW,GAAG,EAAE,CAAC;YACjB,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBACzB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,8BAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAA,aAAK,EAAC,SAAS,CAA2B,CAAC;QAElE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAClD,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAC/B,IAAA,aAAK,EAAC,cAAc,CAAC,EACrB,oBAAoB,CACrB,CAAC;YACJ,CAAC;iBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC5D,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAC/B,IAAA,aAAK,EAAC,iBAAiB,CAAC,EACxB,iBAAiB,CAClB,CAAC;YACJ,CAAC;iBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9D,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAC/B,IAAA,aAAK,EAAC,mBAAmB,CAAC,EAC1B,aAAa,CACd,CAAC;YACJ,CAAC;iBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAClE,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAC/B,oBAAoB,EACpB,sHAAsH,CACvH,CAAC;YACJ,CAAC;iBAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,YAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACzC,CAAC;iBAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;oBACnB,cAAc,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAC7B,CAAC;qBAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;oBAC3B,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC9B,CAAC;YACH,CAAC;iBAAM,IACL,WAAW,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAC7B,YAAE,CAAC,KAAK,CAAC,GAAG,CAAC;gBACb,GAAG,CAAC,MAAM,KAAK,CAAC,EAChB,CAAC;gBACD,cAAc,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;iBAAM,IAAI,YAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,YAAE,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBACpC,MAAM,QAAQ,GAAG,EAAE,CAAC;oBACpB,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvC,IAAI,YAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;4BACvC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAsB,CAAC,CAAC;4BACzD,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;wBAC3C,CAAC;6BAAM,CAAC;4BACN,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACtB,CAAC;oBACH,CAAC;oBACD,cAAc,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBACjC,CAAC;YACH,CAAC;iBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,aAAa,CAC9B,cAAc,CAAC,GAAG,CAAmB,EACrC,GAAG,CACJ,CAAC;gBACF,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;oBAC1B,cAAc,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC;gBAClD,CAAC;YACH,CAAC;YAED,MAAM,iBAAiB,GAAG;gBACxB,WAAW,EAAE,gBAAgB;gBAC7B,aAAa,EAAE,UAAU;gBACzB,aAAa,EAAE,UAAU;gBACzB,eAAe,EAAE,UAAU;gBAC3B,eAAe,EAAE,UAAU;gBAC3B,SAAS,EAAE,YAAY;aACxB,CAAC;YACF,IAAI,YAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACnC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBAC3D,cAAc,CAAC,GAAG,CAAC,GAAI,cAAc,CAAC,GAAG,CAAY,CAAC,OAAO,CAC3D,IAAA,aAAK,EAAC,IAAI,EAAE,GAAG,CAAC,EAChB,EAAE,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG;YAChB,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,IAAI;YACJ,MAAM;YACN,KAAK;YACL,QAAQ;YACR,MAAM;YACN,MAAM;SACP,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,YAAE,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAChD,cAAc,CAAC,YAAY,KAAK,EAAE,CAAC;gBACnC,MAAM,cAAc,GAAG,cAAc,CAAC,QAAQ,CAAQ,CAAC;gBACvD,MAAM,WAAW,GAAG;oBAClB,eAAe,EAAE,CAAC,QAAQ,CAAC;oBAC3B,GAAG,cAAc;iBAClB,CAAC;gBACF,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACjD,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,8BAA8B;QAC9B,IAAI,YAAE,CAAC,aAAa,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,MAAM,aAAa,GAAG,cAAc,CAAC,YAAY,CAAC;YAClD,cAAc,CAAC,YAAY,GAAG,EAAE,CAAC;YACjC,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;gBACxC,IAAI,YAAE,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvC,eAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;oBAC/C,gDAAgD;oBAChD,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;wBAC/C,yBAAyB;wBACzB,MAAM,YAAY,GAAG,IAAA,wBAAgB,EACnC,WAAW,EACX,OAAsB,CACvB,CAAC;wBACF,OAAO,YAAY,CAAC,YAAY,CAAC;wBACjC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;QACD,IACE,YAAE,CAAC,cAAc,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAChD,YAAE,CAAC,aAAa,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,EACzD,CAAC;YACD,cAAc,CAAC,aAAa,CAAC,CAAC,SAAS,GAAG,cAAc,CACtD,aAAa,CACd,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC5B,MAAM,KAAK,GAAG,SAAmB,CAAC;gBAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,YAAE,CAAC,aAAa,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,IAAI,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9C,CAAC;gBACD,cAAc,CAAC,aAAa,GAAG,cAAc,CAAC,aAAa,CAAC,MAAM,CAChE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,YAAE,CAAC,cAAc,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACrD,cAAc,CAAC,MAAM,GAAG,IAAA,wBAAgB,EACtC,cAAc,CAAC,MAAM,IAAI,EAAE,EAC3B,cAAc,CAAC,aAAa,CAAC,CAC9B,CAAC;QACJ,CAAC;QACD,OAAO,cAAc,CAAC,aAAa,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,CAAC,IAAA,eAAM,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,qEAAqE;YACrE,OAAO;gBACL,UAAU;gBACV,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC,cAAc;aAC7D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACxC,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACvD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { logger } from '../logger';\nimport { clone } from '../util/clone';\nimport { regEx } from '../util/regex';\nimport { MigrationsService } from './migrations';\nimport { getOptions } from './options';\nimport type {\n  MigratedConfig,\n  MigratedRenovateConfig,\n  PackageRule,\n  RenovateConfig,\n  RenovateOptions,\n} from './types';\nimport { mergeChildConfig } from './utils';\n\nconst options = getOptions();\nexport function fixShortHours(input: string): string {\n  return input.replace(regEx(/( \\d?\\d)((a|p)m)/g), '$1:00$2');\n}\n\nlet optionTypes: Record<string, RenovateOptions['type']>;\n// Returns a migrated config\nexport function migrateConfig(\n  config: RenovateConfig,\n  parentKey?: string,\n): MigratedConfig {\n  try {\n    if (!optionTypes) {\n      optionTypes = {};\n      options.forEach((option) => {\n        optionTypes[option.name] = option.type;\n      });\n    }\n    const newConfig = MigrationsService.run(config, parentKey);\n    const migratedConfig = clone(newConfig) as MigratedRenovateConfig;\n\n    for (const [key, val] of Object.entries(newConfig)) {\n      if (is.string(val) && val.includes('{{baseDir}}')) {\n        migratedConfig[key] = val.replace(\n          regEx(/{{baseDir}}/g),\n          '{{packageFileDir}}',\n        );\n      } else if (is.string(val) && val.includes('{{lookupName}}')) {\n        migratedConfig[key] = val.replace(\n          regEx(/{{lookupName}}/g),\n          '{{packageName}}',\n        );\n      } else if (is.string(val) && val.includes('{{depNameShort}}')) {\n        migratedConfig[key] = val.replace(\n          regEx(/{{depNameShort}}/g),\n          '{{depName}}',\n        );\n      } else if (is.string(val) && val.startsWith('{{semanticPrefix}}')) {\n        migratedConfig[key] = val.replace(\n          '{{semanticPrefix}}',\n          '{{#if semanticCommitType}}{{semanticCommitType}}{{#if semanticCommitScope}}({{semanticCommitScope}}){{/if}}: {{/if}}',\n        );\n      } else if (optionTypes[key] === 'object' && is.boolean(val)) {\n        migratedConfig[key] = { enabled: val };\n      } else if (optionTypes[key] === 'boolean') {\n        if (val === 'true') {\n          migratedConfig[key] = true;\n        } else if (val === 'false') {\n          migratedConfig[key] = false;\n        }\n      } else if (\n        optionTypes[key] === 'string' &&\n        is.array(val) &&\n        val.length === 1\n      ) {\n        migratedConfig[key] = String(val[0]);\n      } else if (is.array(val)) {\n        if (is.array(migratedConfig?.[key])) {\n          const newArray = [];\n          for (const item of migratedConfig[key]) {\n            if (is.object(item) && !is.array(item)) {\n              const arrMigrate = migrateConfig(item as RenovateConfig);\n              newArray.push(arrMigrate.migratedConfig);\n            } else {\n              newArray.push(item);\n            }\n          }\n          migratedConfig[key] = newArray;\n        }\n      } else if (is.object(val)) {\n        const subMigrate = migrateConfig(\n          migratedConfig[key] as RenovateConfig,\n          key,\n        );\n        if (subMigrate.isMigrated) {\n          migratedConfig[key] = subMigrate.migratedConfig;\n        }\n      }\n\n      const migratedTemplates = {\n        fromVersion: 'currentVersion',\n        newValueMajor: 'newMajor',\n        newValueMinor: 'newMinor',\n        newVersionMajor: 'newMajor',\n        newVersionMinor: 'newMinor',\n        toVersion: 'newVersion',\n      };\n      if (is.string(migratedConfig[key])) {\n        for (const [from, to] of Object.entries(migratedTemplates)) {\n          migratedConfig[key] = (migratedConfig[key] as string).replace(\n            regEx(from, 'g'),\n            to,\n          );\n        }\n      }\n    }\n    const languages = [\n      'docker',\n      'dotnet',\n      'golang',\n      'java',\n      'js',\n      'node',\n      'php',\n      'python',\n      'ruby',\n      'rust',\n    ];\n    for (const language of languages) {\n      if (is.nonEmptyObject(migratedConfig[language])) {\n        migratedConfig.packageRules ??= [];\n        const currentContent = migratedConfig[language] as any;\n        const packageRule = {\n          matchCategories: [language],\n          ...currentContent,\n        };\n        migratedConfig.packageRules.unshift(packageRule);\n        delete migratedConfig[language];\n      }\n    }\n    // Migrate nested packageRules\n    if (is.nonEmptyArray(migratedConfig.packageRules)) {\n      const existingRules = migratedConfig.packageRules;\n      migratedConfig.packageRules = [];\n      for (const packageRule of existingRules) {\n        if (is.array(packageRule.packageRules)) {\n          logger.debug('Flattening nested packageRules');\n          // merge each subrule and add to the parent list\n          for (const subrule of packageRule.packageRules) {\n            // TODO: fix types #22198\n            const combinedRule = mergeChildConfig(\n              packageRule,\n              subrule as PackageRule,\n            );\n            delete combinedRule.packageRules;\n            migratedConfig.packageRules.push(combinedRule);\n          }\n        } else {\n          migratedConfig.packageRules.push(packageRule);\n        }\n      }\n    }\n    if (\n      is.nonEmptyObject(migratedConfig['pip-compile']) &&\n      is.nonEmptyArray(migratedConfig['pip-compile'].fileMatch)\n    ) {\n      migratedConfig['pip-compile'].fileMatch = migratedConfig[\n        'pip-compile'\n      ].fileMatch.map((fileMatch) => {\n        const match = fileMatch as string;\n        if (match.endsWith('.in')) {\n          return match.replace(/\\.in$/, '.txt');\n        }\n        return match.replace(/\\.in\\$$/, '.txt$');\n      });\n    }\n    if (is.nonEmptyArray(migratedConfig.matchManagers)) {\n      if (migratedConfig.matchManagers.includes('gradle-lite')) {\n        if (!migratedConfig.matchManagers.includes('gradle')) {\n          migratedConfig.matchManagers.push('gradle');\n        }\n        migratedConfig.matchManagers = migratedConfig.matchManagers.filter(\n          (manager) => manager !== 'gradle-lite',\n        );\n      }\n    }\n    if (is.nonEmptyObject(migratedConfig['gradle-lite'])) {\n      migratedConfig.gradle = mergeChildConfig(\n        migratedConfig.gradle ?? {},\n        migratedConfig['gradle-lite'],\n      );\n    }\n    delete migratedConfig['gradle-lite'];\n    const isMigrated = !dequal(config, migratedConfig);\n    if (isMigrated) {\n      // recursive call in case any migrated configs need further migrating\n      return {\n        isMigrated,\n        migratedConfig: migrateConfig(migratedConfig).migratedConfig,\n      };\n    }\n    return { isMigrated, migratedConfig };\n  } catch (err) /* istanbul ignore next */ {\n    logger.debug({ config, err }, 'migrateConfig() error');\n    throw err;\n  }\n}\n"]}
+{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../lib/config/migration.ts"],"names":[],"mappings":";;AAiBA,sCAEC;AAID,sCAoLC;;AA3MD,kEAAkC;AAClC,mCAAgC;AAChC,sCAAmC;AACnC,yCAAsC;AACtC,yCAAsC;AACtC,6CAAiD;AACjD,uCAAuC;AAQvC,mCAA2C;AAE3C,MAAM,OAAO,GAAG,IAAA,oBAAU,GAAE,CAAC;AAC7B,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAA,aAAK,EAAC,mBAAmB,CAAC,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,IAAI,WAAoD,CAAC;AACzD,4BAA4B;AAC5B,SAAgB,aAAa,CAC3B,MAAsB,EACtB,SAAkB;IAElB,IAAI,CAAC;QACH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,WAAW,GAAG,EAAE,CAAC;YACjB,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBACzB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,8BAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAA,aAAK,EAAC,SAAS,CAA2B,CAAC;QAElE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAClD,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAC/B,IAAA,aAAK,EAAC,cAAc,CAAC,EACrB,oBAAoB,CACrB,CAAC;YACJ,CAAC;iBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC5D,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAC/B,IAAA,aAAK,EAAC,iBAAiB,CAAC,EACxB,iBAAiB,CAClB,CAAC;YACJ,CAAC;iBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9D,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAC/B,IAAA,aAAK,EAAC,mBAAmB,CAAC,EAC1B,aAAa,CACd,CAAC;YACJ,CAAC;iBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAClE,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAC/B,oBAAoB,EACpB,sHAAsH,CACvH,CAAC;YACJ,CAAC;iBAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,YAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACzC,CAAC;iBAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;oBACnB,cAAc,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAC7B,CAAC;qBAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;oBAC3B,cAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC9B,CAAC;YACH,CAAC;iBAAM,IACL,WAAW,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAC7B,YAAE,CAAC,KAAK,CAAC,GAAG,CAAC;gBACb,GAAG,CAAC,MAAM,KAAK,CAAC,EAChB,CAAC;gBACD,cAAc,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC;iBAAM,IAAI,YAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,YAAE,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBACpC,MAAM,QAAQ,GAAG,EAAE,CAAC;oBACpB,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvC,IAAI,YAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;4BACvC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAsB,CAAC,CAAC;4BACzD,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;wBAC3C,CAAC;6BAAM,CAAC;4BACN,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACtB,CAAC;oBACH,CAAC;oBACD,cAAc,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;gBACjC,CAAC;YACH,CAAC;iBAAM,IAAI,YAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,aAAa,CAC9B,cAAc,CAAC,GAAG,CAAmB,EACrC,GAAG,CACJ,CAAC;gBACF,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;oBAC1B,cAAc,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC;gBAClD,CAAC;YACH,CAAC;YAED,MAAM,iBAAiB,GAAG;gBACxB,WAAW,EAAE,gBAAgB;gBAC7B,aAAa,EAAE,UAAU;gBACzB,aAAa,EAAE,UAAU;gBACzB,eAAe,EAAE,UAAU;gBAC3B,eAAe,EAAE,UAAU;gBAC3B,SAAS,EAAE,YAAY;aACxB,CAAC;YACF,IAAI,YAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACnC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBAC3D,cAAc,CAAC,GAAG,CAAC,GAAI,cAAc,CAAC,GAAG,CAAY,CAAC,OAAO,CAC3D,IAAA,aAAK,EAAC,IAAI,EAAE,GAAG,CAAC,EAChB,EAAE,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG;YAChB,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,IAAI;YACJ,MAAM;YACN,KAAK;YACL,QAAQ;YACR,MAAM;YACN,MAAM;SACP,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,YAAE,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAChD,cAAc,CAAC,YAAY,KAAK,EAAE,CAAC;gBACnC,MAAM,cAAc,GAAG,cAAc,CAAC,QAAQ,CAAQ,CAAC;gBACvD,MAAM,WAAW,GAAG;oBAClB,eAAe,EAAE,CAAC,QAAQ,CAAC;oBAC3B,GAAG,cAAc;iBAClB,CAAC;gBACF,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACjD,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,8BAA8B;QAC9B,IAAI,YAAE,CAAC,aAAa,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,MAAM,aAAa,GAAG,cAAc,CAAC,YAAY,CAAC;YAClD,cAAc,CAAC,YAAY,GAAG,EAAE,CAAC;YACjC,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;gBACxC,IAAI,YAAE,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvC,eAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;oBAC/C,gDAAgD;oBAChD,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;wBAC/C,yBAAyB;wBACzB,MAAM,YAAY,GAAG,IAAA,wBAAgB,EACnC,WAAW,EACX,OAAsB,CACvB,CAAC;wBACF,OAAO,YAAY,CAAC,YAAY,CAAC;wBACjC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;QACD,IACE,YAAE,CAAC,cAAc,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAChD,YAAE,CAAC,aAAa,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,EACzD,CAAC;YACD,cAAc,CAAC,aAAa,CAAC,CAAC,SAAS,GAAG,cAAc,CACtD,aAAa,CACd,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC5B,MAAM,KAAK,GAAG,SAAmB,CAAC;gBAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,YAAE,CAAC,aAAa,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,IAAI,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9C,CAAC;gBACD,cAAc,CAAC,aAAa,GAAG,cAAc,CAAC,aAAa,CAAC,MAAM,CAChE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,aAAa,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,YAAE,CAAC,cAAc,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACrD,cAAc,CAAC,MAAM,GAAG,IAAA,wBAAgB,EACtC,cAAc,CAAC,MAAM,IAAI,EAAE,EAC3B,cAAc,CAAC,aAAa,CAAC,CAC9B,CAAC;QACJ,CAAC;QACD,OAAO,cAAc,CAAC,aAAa,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,CAAC,IAAA,eAAM,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,qEAAqE;YACrE,OAAO;gBACL,UAAU;gBACV,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC,cAAc;aAC7D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;QACtC,wCAAwC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACvD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { logger } from '../logger';\nimport { clone } from '../util/clone';\nimport { regEx } from '../util/regex';\nimport { MigrationsService } from './migrations';\nimport { getOptions } from './options';\nimport type {\n  MigratedConfig,\n  MigratedRenovateConfig,\n  PackageRule,\n  RenovateConfig,\n  RenovateOptions,\n} from './types';\nimport { mergeChildConfig } from './utils';\n\nconst options = getOptions();\nexport function fixShortHours(input: string): string {\n  return input.replace(regEx(/( \\d?\\d)((a|p)m)/g), '$1:00$2');\n}\n\nlet optionTypes: Record<string, RenovateOptions['type']>;\n// Returns a migrated config\nexport function migrateConfig(\n  config: RenovateConfig,\n  parentKey?: string,\n): MigratedConfig {\n  try {\n    if (!optionTypes) {\n      optionTypes = {};\n      options.forEach((option) => {\n        optionTypes[option.name] = option.type;\n      });\n    }\n    const newConfig = MigrationsService.run(config, parentKey);\n    const migratedConfig = clone(newConfig) as MigratedRenovateConfig;\n\n    for (const [key, val] of Object.entries(newConfig)) {\n      if (is.string(val) && val.includes('{{baseDir}}')) {\n        migratedConfig[key] = val.replace(\n          regEx(/{{baseDir}}/g),\n          '{{packageFileDir}}',\n        );\n      } else if (is.string(val) && val.includes('{{lookupName}}')) {\n        migratedConfig[key] = val.replace(\n          regEx(/{{lookupName}}/g),\n          '{{packageName}}',\n        );\n      } else if (is.string(val) && val.includes('{{depNameShort}}')) {\n        migratedConfig[key] = val.replace(\n          regEx(/{{depNameShort}}/g),\n          '{{depName}}',\n        );\n      } else if (is.string(val) && val.startsWith('{{semanticPrefix}}')) {\n        migratedConfig[key] = val.replace(\n          '{{semanticPrefix}}',\n          '{{#if semanticCommitType}}{{semanticCommitType}}{{#if semanticCommitScope}}({{semanticCommitScope}}){{/if}}: {{/if}}',\n        );\n      } else if (optionTypes[key] === 'object' && is.boolean(val)) {\n        migratedConfig[key] = { enabled: val };\n      } else if (optionTypes[key] === 'boolean') {\n        if (val === 'true') {\n          migratedConfig[key] = true;\n        } else if (val === 'false') {\n          migratedConfig[key] = false;\n        }\n      } else if (\n        optionTypes[key] === 'string' &&\n        is.array(val) &&\n        val.length === 1\n      ) {\n        migratedConfig[key] = String(val[0]);\n      } else if (is.array(val)) {\n        if (is.array(migratedConfig?.[key])) {\n          const newArray = [];\n          for (const item of migratedConfig[key]) {\n            if (is.object(item) && !is.array(item)) {\n              const arrMigrate = migrateConfig(item as RenovateConfig);\n              newArray.push(arrMigrate.migratedConfig);\n            } else {\n              newArray.push(item);\n            }\n          }\n          migratedConfig[key] = newArray;\n        }\n      } else if (is.object(val)) {\n        const subMigrate = migrateConfig(\n          migratedConfig[key] as RenovateConfig,\n          key,\n        );\n        if (subMigrate.isMigrated) {\n          migratedConfig[key] = subMigrate.migratedConfig;\n        }\n      }\n\n      const migratedTemplates = {\n        fromVersion: 'currentVersion',\n        newValueMajor: 'newMajor',\n        newValueMinor: 'newMinor',\n        newVersionMajor: 'newMajor',\n        newVersionMinor: 'newMinor',\n        toVersion: 'newVersion',\n      };\n      if (is.string(migratedConfig[key])) {\n        for (const [from, to] of Object.entries(migratedTemplates)) {\n          migratedConfig[key] = (migratedConfig[key] as string).replace(\n            regEx(from, 'g'),\n            to,\n          );\n        }\n      }\n    }\n    const languages = [\n      'docker',\n      'dotnet',\n      'golang',\n      'java',\n      'js',\n      'node',\n      'php',\n      'python',\n      'ruby',\n      'rust',\n    ];\n    for (const language of languages) {\n      if (is.nonEmptyObject(migratedConfig[language])) {\n        migratedConfig.packageRules ??= [];\n        const currentContent = migratedConfig[language] as any;\n        const packageRule = {\n          matchCategories: [language],\n          ...currentContent,\n        };\n        migratedConfig.packageRules.unshift(packageRule);\n        delete migratedConfig[language];\n      }\n    }\n    // Migrate nested packageRules\n    if (is.nonEmptyArray(migratedConfig.packageRules)) {\n      const existingRules = migratedConfig.packageRules;\n      migratedConfig.packageRules = [];\n      for (const packageRule of existingRules) {\n        if (is.array(packageRule.packageRules)) {\n          logger.debug('Flattening nested packageRules');\n          // merge each subrule and add to the parent list\n          for (const subrule of packageRule.packageRules) {\n            // TODO: fix types #22198\n            const combinedRule = mergeChildConfig(\n              packageRule,\n              subrule as PackageRule,\n            );\n            delete combinedRule.packageRules;\n            migratedConfig.packageRules.push(combinedRule);\n          }\n        } else {\n          migratedConfig.packageRules.push(packageRule);\n        }\n      }\n    }\n    if (\n      is.nonEmptyObject(migratedConfig['pip-compile']) &&\n      is.nonEmptyArray(migratedConfig['pip-compile'].fileMatch)\n    ) {\n      migratedConfig['pip-compile'].fileMatch = migratedConfig[\n        'pip-compile'\n      ].fileMatch.map((fileMatch) => {\n        const match = fileMatch as string;\n        if (match.endsWith('.in')) {\n          return match.replace(/\\.in$/, '.txt');\n        }\n        return match.replace(/\\.in\\$$/, '.txt$');\n      });\n    }\n    if (is.nonEmptyArray(migratedConfig.matchManagers)) {\n      if (migratedConfig.matchManagers.includes('gradle-lite')) {\n        if (!migratedConfig.matchManagers.includes('gradle')) {\n          migratedConfig.matchManagers.push('gradle');\n        }\n        migratedConfig.matchManagers = migratedConfig.matchManagers.filter(\n          (manager) => manager !== 'gradle-lite',\n        );\n      }\n    }\n    if (is.nonEmptyObject(migratedConfig['gradle-lite'])) {\n      migratedConfig.gradle = mergeChildConfig(\n        migratedConfig.gradle ?? {},\n        migratedConfig['gradle-lite'],\n      );\n    }\n    delete migratedConfig['gradle-lite'];\n    const isMigrated = !dequal(config, migratedConfig);\n    if (isMigrated) {\n      // recursive call in case any migrated configs need further migrating\n      return {\n        isMigrated,\n        migratedConfig: migrateConfig(migratedConfig).migratedConfig,\n      };\n    }\n    return { isMigrated, migratedConfig };\n    /* v8 ignore next 4 -- TODO: add test */\n  } catch (err) {\n    logger.debug({ config, err }, 'migrateConfig() error');\n    throw err;\n  }\n}\n"]}

package/dist/config/migrations/custom/rebase-stale-prs-migration.js

@@ -13,7 +13,7 @@ class RebaseStalePrsMigration extends abstract_migration_1.AbstractMigration {
             if (is_1.default.boolean(value)) {
                 this.setSafely('rebaseWhen', value ? 'behind-base-branch' : 'conflicted');
             }
-            if (is_1.default.null_(value)) {
+            if (null === value) {
                 this.setSafely('rebaseWhen', 'auto');
             }
         }

package/dist/config/migrations/custom/rebase-stale-prs-migration.js.map

@@ -1 +1 @@
-{"version":3,"file":"rebase-stale-prs-migration.js","sourceRoot":"","sources":["../../../../lib/config/migrations/custom/rebase-stale-prs-migration.ts"],"names":[],"mappings":";;;;AAAA,kEAAkC;AAClC,mEAA+D;AAE/D,MAAa,uBAAwB,SAAQ,sCAAiB;IAC1C,UAAU,GAAG,IAAI,CAAC;IAClB,YAAY,GAAG,gBAAgB,CAAC;IAEzC,GAAG,CAAC,KAAc;QACzB,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAE5D,IAAI,mBAAmB,KAAK,KAAK,EAAE,CAAC;YAClC,IAAI,YAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CACZ,YAAY,EACZ,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAC5C,CAAC;YACJ,CAAC;YAED,IAAI,YAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AApBD,0DAoBC","sourcesContent":["import is from '@sindresorhus/is';\nimport { AbstractMigration } from '../base/abstract-migration';\n\nexport class RebaseStalePrsMigration extends AbstractMigration {\n  override readonly deprecated = true;\n  override readonly propertyName = 'rebaseStalePrs';\n\n  override run(value: unknown): void {\n    const rebaseConflictedPrs = this.get('rebaseConflictedPrs');\n\n    if (rebaseConflictedPrs !== false) {\n      if (is.boolean(value)) {\n        this.setSafely(\n          'rebaseWhen',\n          value ? 'behind-base-branch' : 'conflicted',\n        );\n      }\n\n      if (is.null_(value)) {\n        this.setSafely('rebaseWhen', 'auto');\n      }\n    }\n  }\n}\n"]}
+{"version":3,"file":"rebase-stale-prs-migration.js","sourceRoot":"","sources":["../../../../lib/config/migrations/custom/rebase-stale-prs-migration.ts"],"names":[],"mappings":";;;;AAAA,kEAAkC;AAClC,mEAA+D;AAE/D,MAAa,uBAAwB,SAAQ,sCAAiB;IAC1C,UAAU,GAAG,IAAI,CAAC;IAClB,YAAY,GAAG,gBAAgB,CAAC;IAEzC,GAAG,CAAC,KAAc;QACzB,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAE5D,IAAI,mBAAmB,KAAK,KAAK,EAAE,CAAC;YAClC,IAAI,YAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,SAAS,CACZ,YAAY,EACZ,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAC5C,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AApBD,0DAoBC","sourcesContent":["import is from '@sindresorhus/is';\nimport { AbstractMigration } from '../base/abstract-migration';\n\nexport class RebaseStalePrsMigration extends AbstractMigration {\n  override readonly deprecated = true;\n  override readonly propertyName = 'rebaseStalePrs';\n\n  override run(value: unknown): void {\n    const rebaseConflictedPrs = this.get('rebaseConflictedPrs');\n\n    if (rebaseConflictedPrs !== false) {\n      if (is.boolean(value)) {\n        this.setSafely(\n          'rebaseWhen',\n          value ? 'behind-base-branch' : 'conflicted',\n        );\n      }\n\n      if (null === value) {\n        this.setSafely('rebaseWhen', 'auto');\n      }\n    }\n  }\n}\n"]}

package/dist/config/migrations/migrations-service.js

@@ -62,6 +62,8 @@ const upgrade_in_range_migration_1 = require("./custom/upgrade-in-range-migratio
 const version_strategy_migration_1 = require("./custom/version-strategy-migration");
 class MigrationsService {
     static removedProperties = new Set([
+        'allowCommandTemplating',
+        'allowPostUpgradeCommandTemplating',
         'deepExtract',
         'gitFs',
         'groupBranchName',
@@ -70,6 +72,7 @@ class MigrationsService {
         'groupPrTitle',
         'lazyGrouping',
         'maintainYarnLock',
+        'raiseDeprecationWarnings',
         'statusCheckVerify',
         'supportPolicy',
         'transitiveRemediation',
@@ -78,11 +81,9 @@ class MigrationsService {
         'yarnMaintenanceCommitMessage',
         'yarnMaintenancePrBody',
         'yarnMaintenancePrTitle',
-        'raiseDeprecationWarnings',
     ]);
     static renamedProperties = new Map([
         ['adoptium-java', 'java-version'],
-        ['allowPostUpgradeCommandTemplating', 'allowCommandTemplating'],
         ['allowedPostUpgradeCommands', 'allowedCommands'],
         ['azureAutoApprove', 'autoApprove'],
         ['customChangelogUrl', 'changelogUrl'],

package/dist/config/migrations/migrations-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations-service.js","sourceRoot":"","sources":["../../../lib/config/migrations/migrations-service.ts"],"names":[],"mappings":";;;;AAAA,kEAAkC;AAClC,mCAAgC;AAEhC,gFAA2E;AAC3E,gFAA2E;AAC3E,kFAA6E;AAC7E,sEAAkE;AAClE,kFAA6E;AAC7E,kFAA6E;AAC7E,gFAA2E;AAC3E,gGAA0F;AAC1F,0EAAqE;AACrE,8EAAyE;AACzE,0EAAqE;AACrE,8EAAyE;AACzE,8EAA0E;AAC1E,8GAAuG;AACvG,kFAA6E;AAC7E,wEAAoE;AACpE,sEAAiE;AACjE,kEAA6D;AAC7D,oFAA+E;AAC/E,kEAA8D;AAC9D,0FAAoF;AACpF,0EAAoE;AACpE,wEAAmE;AACnE,0FAAoF;AACpF,sFAAgF;AAChF,8EAAyE;AACzE,sFAAiF;AACjF,gFAA2E;AAC3E,8EAAyE;AACzE,4DAAwD;AACxD,8EAAyE;AACzE,4EAAuE;AACvE,kFAA6E;AAC7E,8EAAyE;AACzE,oEAAgE;AAChE,wEAAmE;AACnE,4EAAuE;AACvE,kFAA6E;AAC7E,0FAAoF;AACpF,8FAA+E;AAC/E,oFAA8E;AAC9E,kFAA6E;AAC7E,8EAAyE;AACzE,gFAA2E;AAC3E,gGAA0F;AAC1F,oEAAgE;AAChE,oFAA+E;AAC/E,kFAA6E;AAC7E,gGAA2F;AAC3F,kGAA4F;AAC5F,gFAA2E;AAC3E,gGAA2F;AAC3F,0EAAqE;AACrE,gFAA2E;AAC3E,oFAA8E;AAC9E,oFAA+E;AAG/E,MAAa,iBAAiB;IAC5B,MAAM,CAAU,iBAAiB,GAAwB,IAAI,GAAG,CAAC;QAC/D,aAAa;QACb,OAAO;QACP,iBAAiB;QACjB,oBAAoB;QACpB,aAAa;QACb,cAAc;QACd,cAAc;QACd,kBAAkB;QAClB,mBAAmB;QACnB,eAAe;QACf,uBAAuB;QACvB,iBAAiB;QACjB,2BAA2B;QAC3B,8BAA8B;QAC9B,uBAAuB;QACvB,wBAAwB;QACxB,0BAA0B;KAC3B,CAAC,CAAC;IAEH,MAAM,CAAU,iBAAiB,GAAgC,IAAI,GAAG,CAAC;QACvE,CAAC,eAAe,EAAE,cAAc,CAAC;QACjC,CAAC,mCAAmC,EAAE,wBAAwB,CAAC;QAC/D,CAAC,4BAA4B,EAAE,iBAAiB,CAAC;QACjD,CAAC,kBAAkB,EAAE,aAAa,CAAC;QACnC,CAAC,oBAAoB,EAAE,cAAc,CAAC;QACtC,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;QAC/C,CAAC,WAAW,EAAE,cAAc,CAAC;QAC7B,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,qBAAqB,EAAE,wBAAwB,CAAC;QACjD,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;QAC7C,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;QAC/C,CAAC,eAAe,EAAE,YAAY,CAAC;QAC/B,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;QAC7C,CAAC,SAAS,EAAE,iBAAiB,CAAC;QAC9B,CAAC,aAAa,EAAE,qBAAqB,CAAC;QACtC,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;QACtD,CAAC,sBAAsB,EAAE,8BAA8B,CAAC;QACxD,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;QAClD,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;QAClD,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;QAChD,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;QAClD,CAAC,eAAe,EAAE,gBAAgB,CAAC;KACpC,CAAC,CAAC;IAEH,MAAM,CAAU,gBAAgB,GAAoC;QAClE,mDAAuB;QACvB,wCAAkB;QAClB,mDAAuB;QACvB,mDAAuB;QACvB,iDAAsB;QACtB,gEAA6B;QAC7B,2CAAmB;QACnB,+CAAqB;QACrB,2CAAmB;QACnB,+CAAqB;QACrB,gDAAsB;QACtB,6EAAmC;QACnC,qDAAwB;QACxB,oCAAgB;QAChB,0CAAkB;QAClB,yCAAkB;QAClB,0DAA0B;QAC1B,sDAAwB;QACxB,+CAAqB;QACrB,+CAAqB;QACrB,6CAAoB;QACpB,mDAAuB;QACvB,sCAAiB;QACjB,yCAAkB;QAClB,6CAAoB;QACpB,0DAA0B;QAC1B,qDAAmB;QACnB,oDAAuB;QACvB,+CAAqB;QACrB,gEAA6B;QAC7B,sCAAiB;QACjB,qDAAwB;QACxB,iEAA8B;QAC9B,kEAA8B;QAC9B,iEAA8B;QAC9B,2CAAmB;QACnB,iDAAsB;QACtB,oDAAuB;QACvB,qDAAwB;QACxB,mCAAe;QACf,iDAAsB;QACtB,+CAAqB;QACrB,uCAAiB;QACjB,+CAAqB;QACrB,8BAAa;QACb,mDAAuB;QACvB,uDAAyB;QACzB,0CAAmB;QACnB,mDAAuB;QACvB,iDAAsB;QACtB,0DAA0B;QAC1B,iDAAsB;QACtB,mDAAuB;QACvB,mDAAuB;KACxB,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,cAA8B,EAC9B,SAAkB;QAElB,MAAM,cAAc,GAAmB,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAEtE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1D,cAAc,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;YAC9B,MAAM,SAAS,GAAG,iBAAiB,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAElE,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBAErC,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;oBACzB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,UAAU,CACf,cAA8B,EAC9B,cAA8B;QAE9B,OAAO,CAAC,IAAA,eAAM,EAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IACjD,CAAC;IAEM,MAAM,CAAC,aAAa,CACzB,cAA8B,EAC9B,cAA8B;QAE9B,MAAM,UAAU,GAAgB,EAAE,CAAC;QAEnC,KAAK,MAAM,YAAY,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;YAC/D,UAAU,CAAC,IAAI,CACb,IAAI,mDAAuB,CACzB,YAAY,EACZ,cAAc,EACd,cAAc,CACf,CACF,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CACT,eAAe,EACf,eAAe,EAChB,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,UAAU,CAAC,IAAI,CACb,IAAI,mDAAuB,CACzB,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,CACf,CACF,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,eAAe,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACpD,UAAU,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,YAAY,CACzB,UAAgC,EAChC,GAAW;QAEX,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YACnC,IAAI,YAAE,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;gBACtC,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,OAAO,SAAS,CAAC,YAAY,KAAK,GAAG,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;;AAtLH,8CAuLC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport type { RenovateConfig } from '../types';\nimport { RemovePropertyMigration } from './base/remove-property-migration';\nimport { RenamePropertyMigration } from './base/rename-property-migration';\nimport { AutomergeMajorMigration } from './custom/automerge-major-migration';\nimport { AutomergeMigration } from './custom/automerge-migration';\nimport { AutomergeMinorMigration } from './custom/automerge-minor-migration';\nimport { AutomergePatchMigration } from './custom/automerge-patch-migration';\nimport { AutomergeTypeMigration } from './custom/automerge-type-migration';\nimport { AzureGitLabAutomergeMigration } from './custom/azure-gitlab-automerge-migration';\nimport { BaseBranchMigration } from './custom/base-branch-migration';\nimport { BinarySourceMigration } from './custom/binary-source-migration';\nimport { BranchNameMigration } from './custom/branch-name-migration';\nimport { BranchPrefixMigration } from './custom/branch-prefix-migration';\nimport { CompatibilityMigration } from './custom/compatibility-migration';\nimport { ComposerIgnorePlatformReqsMigration } from './custom/composer-ignore-platform-reqs-migration';\nimport { CustomManagersMigration } from './custom/custom-managers-migration';\nimport { DatasourceMigration } from './custom/datasource-migration';\nimport { DepTypesMigration } from './custom/dep-types-migration';\nimport { DryRunMigration } from './custom/dry-run-migration';\nimport { EnabledManagersMigration } from './custom/enabled-managers-migration';\nimport { ExtendsMigration } from './custom/extends-migration';\nimport { FetchReleaseNotesMigration } from './custom/fetch-release-notes-migration';\nimport { GoModTidyMigration } from './custom/go-mod-tidy-migration';\nimport { HostRulesMigration } from './custom/host-rules-migration';\nimport { IgnoreNodeModulesMigration } from './custom/ignore-node-modules-migration';\nimport { IgnoreNpmrcFileMigration } from './custom/ignore-npmrc-file-migration';\nimport { IncludeForksMigration } from './custom/include-forks-migration';\nimport { MatchDatasourcesMigration } from './custom/match-datasources-migration';\nimport { MatchManagersMigration } from './custom/match-managers-migration';\nimport { MatchStringsMigration } from './custom/match-strings-migration';\nimport { NodeMigration } from './custom/node-migration';\nimport { PackageFilesMigration } from './custom/package-files-migration';\nimport { PackageNameMigration } from './custom/package-name-migration';\nimport { PackagePatternMigration } from './custom/package-pattern-migration';\nimport { PackageRulesMigration } from './custom/package-rules-migration';\nimport { PackagesMigration } from './custom/packages-migration';\nimport { PathRulesMigration } from './custom/path-rules-migration';\nimport { PinVersionsMigration } from './custom/pin-versions-migration';\nimport { PlatformCommitMigration } from './custom/platform-commit-migration';\nimport { PostUpdateOptionsMigration } from './custom/post-update-options-migration';\nimport { RebaseConflictedPrs } from './custom/rebase-conflicted-prs-migration';\nimport { RebaseStalePrsMigration } from './custom/rebase-stale-prs-migration';\nimport { RecreateClosedMigration } from './custom/recreate-closed-migration';\nimport { RenovateForkMigration } from './custom/renovate-fork-migration';\nimport { RequireConfigMigration } from './custom/require-config-migration';\nimport { RequiredStatusChecksMigration } from './custom/required-status-checks-migration';\nimport { ScheduleMigration } from './custom/schedule-migration';\nimport { SemanticCommitsMigration } from './custom/semantic-commits-migration';\nimport { SemanticPrefixMigration } from './custom/semantic-prefix-migration';\nimport { SeparateMajorReleasesMigration } from './custom/separate-major-release-migration';\nimport { SeparateMultipleMajorMigration } from './custom/separate-multiple-major-migration';\nimport { StabilityDaysMigration } from './custom/stability-days-migration';\nimport { SuppressNotificationsMigration } from './custom/suppress-notifications-migration';\nimport { TrustLevelMigration } from './custom/trust-level-migration';\nimport { UnpublishSafeMigration } from './custom/unpublish-safe-migration';\nimport { UpgradeInRangeMigration } from './custom/upgrade-in-range-migration';\nimport { VersionStrategyMigration } from './custom/version-strategy-migration';\nimport type { Migration, MigrationConstructor } from './types';\n\nexport class MigrationsService {\n  static readonly removedProperties: ReadonlySet<string> = new Set([\n    'deepExtract',\n    'gitFs',\n    'groupBranchName',\n    'groupCommitMessage',\n    'groupPrBody',\n    'groupPrTitle',\n    'lazyGrouping',\n    'maintainYarnLock',\n    'statusCheckVerify',\n    'supportPolicy',\n    'transitiveRemediation',\n    'yarnCacheFolder',\n    'yarnMaintenanceBranchName',\n    'yarnMaintenanceCommitMessage',\n    'yarnMaintenancePrBody',\n    'yarnMaintenancePrTitle',\n    'raiseDeprecationWarnings',\n  ]);\n\n  static readonly renamedProperties: ReadonlyMap<string, string> = new Map([\n    ['adoptium-java', 'java-version'],\n    ['allowPostUpgradeCommandTemplating', 'allowCommandTemplating'],\n    ['allowedPostUpgradeCommands', 'allowedCommands'],\n    ['azureAutoApprove', 'autoApprove'],\n    ['customChangelogUrl', 'changelogUrl'],\n    ['endpoints', 'hostRules'],\n    ['excludedPackageNames', 'excludePackageNames'],\n    ['exposeEnv', 'exposeAllEnv'],\n    ['keepalive', 'keepAlive'],\n    ['managerBranchPrefix', 'additionalBranchPrefix'],\n    ['multipleMajorPrs', 'separateMultipleMajor'],\n    ['separatePatchReleases', 'separateMinorPatch'],\n    ['versionScheme', 'versioning'],\n    ['lookupNameTemplate', 'packageNameTemplate'],\n    ['aliases', 'registryAliases'],\n    ['masterIssue', 'dependencyDashboard'],\n    ['masterIssueApproval', 'dependencyDashboardApproval'],\n    ['masterIssueAutoclose', 'dependencyDashboardAutoclose'],\n    ['masterIssueHeader', 'dependencyDashboardHeader'],\n    ['masterIssueFooter', 'dependencyDashboardFooter'],\n    ['masterIssueTitle', 'dependencyDashboardTitle'],\n    ['masterIssueLabels', 'dependencyDashboardLabels'],\n    ['regexManagers', 'customManagers'],\n  ]);\n\n  static readonly customMigrations: readonly MigrationConstructor[] = [\n    AutomergeMajorMigration,\n    AutomergeMigration,\n    AutomergeMinorMigration,\n    AutomergePatchMigration,\n    AutomergeTypeMigration,\n    AzureGitLabAutomergeMigration,\n    BaseBranchMigration,\n    BinarySourceMigration,\n    BranchNameMigration,\n    BranchPrefixMigration,\n    CompatibilityMigration,\n    ComposerIgnorePlatformReqsMigration,\n    EnabledManagersMigration,\n    ExtendsMigration,\n    GoModTidyMigration,\n    HostRulesMigration,\n    IgnoreNodeModulesMigration,\n    IgnoreNpmrcFileMigration,\n    IncludeForksMigration,\n    MatchStringsMigration,\n    PackageNameMigration,\n    PackagePatternMigration,\n    PackagesMigration,\n    PathRulesMigration,\n    PinVersionsMigration,\n    PostUpdateOptionsMigration,\n    RebaseConflictedPrs,\n    RebaseStalePrsMigration,\n    RenovateForkMigration,\n    RequiredStatusChecksMigration,\n    ScheduleMigration,\n    SemanticCommitsMigration,\n    SeparateMajorReleasesMigration,\n    SeparateMultipleMajorMigration,\n    SuppressNotificationsMigration,\n    TrustLevelMigration,\n    UnpublishSafeMigration,\n    UpgradeInRangeMigration,\n    VersionStrategyMigration,\n    DryRunMigration,\n    RequireConfigMigration,\n    PackageFilesMigration,\n    DepTypesMigration,\n    PackageRulesMigration,\n    NodeMigration,\n    SemanticPrefixMigration,\n    MatchDatasourcesMigration,\n    DatasourceMigration,\n    RecreateClosedMigration,\n    StabilityDaysMigration,\n    FetchReleaseNotesMigration,\n    MatchManagersMigration,\n    CustomManagersMigration,\n    PlatformCommitMigration,\n  ];\n\n  static run(\n    originalConfig: RenovateConfig,\n    parentKey?: string,\n  ): RenovateConfig {\n    const migratedConfig: RenovateConfig = {};\n    const migrations = this.getMigrations(originalConfig, migratedConfig);\n\n    for (const [key, value] of Object.entries(originalConfig)) {\n      migratedConfig[key] ??= value;\n      const migration = MigrationsService.getMigration(migrations, key);\n\n      if (migration) {\n        migration.run(value, key, parentKey);\n\n        if (migration.deprecated) {\n          delete migratedConfig[key];\n        }\n      }\n    }\n\n    return migratedConfig;\n  }\n\n  static isMigrated(\n    originalConfig: RenovateConfig,\n    migratedConfig: RenovateConfig,\n  ): boolean {\n    return !dequal(originalConfig, migratedConfig);\n  }\n\n  public static getMigrations(\n    originalConfig: RenovateConfig,\n    migratedConfig: RenovateConfig,\n  ): readonly Migration[] {\n    const migrations: Migration[] = [];\n\n    for (const propertyName of MigrationsService.removedProperties) {\n      migrations.push(\n        new RemovePropertyMigration(\n          propertyName,\n          originalConfig,\n          migratedConfig,\n        ),\n      );\n    }\n\n    for (const [\n      oldPropertyName,\n      newPropertyName,\n    ] of MigrationsService.renamedProperties.entries()) {\n      migrations.push(\n        new RenamePropertyMigration(\n          oldPropertyName,\n          newPropertyName,\n          originalConfig,\n          migratedConfig,\n        ),\n      );\n    }\n\n    for (const CustomMigration of this.customMigrations) {\n      migrations.push(new CustomMigration(originalConfig, migratedConfig));\n    }\n\n    return migrations;\n  }\n\n  private static getMigration(\n    migrations: readonly Migration[],\n    key: string,\n  ): Migration | undefined {\n    return migrations.find((migration) => {\n      if (is.regExp(migration.propertyName)) {\n        return migration.propertyName.test(key);\n      }\n\n      return migration.propertyName === key;\n    });\n  }\n}\n"]}
+{"version":3,"file":"migrations-service.js","sourceRoot":"","sources":["../../../lib/config/migrations/migrations-service.ts"],"names":[],"mappings":";;;;AAAA,kEAAkC;AAClC,mCAAgC;AAEhC,gFAA2E;AAC3E,gFAA2E;AAC3E,kFAA6E;AAC7E,sEAAkE;AAClE,kFAA6E;AAC7E,kFAA6E;AAC7E,gFAA2E;AAC3E,gGAA0F;AAC1F,0EAAqE;AACrE,8EAAyE;AACzE,0EAAqE;AACrE,8EAAyE;AACzE,8EAA0E;AAC1E,8GAAuG;AACvG,kFAA6E;AAC7E,wEAAoE;AACpE,sEAAiE;AACjE,kEAA6D;AAC7D,oFAA+E;AAC/E,kEAA8D;AAC9D,0FAAoF;AACpF,0EAAoE;AACpE,wEAAmE;AACnE,0FAAoF;AACpF,sFAAgF;AAChF,8EAAyE;AACzE,sFAAiF;AACjF,gFAA2E;AAC3E,8EAAyE;AACzE,4DAAwD;AACxD,8EAAyE;AACzE,4EAAuE;AACvE,kFAA6E;AAC7E,8EAAyE;AACzE,oEAAgE;AAChE,wEAAmE;AACnE,4EAAuE;AACvE,kFAA6E;AAC7E,0FAAoF;AACpF,8FAA+E;AAC/E,oFAA8E;AAC9E,kFAA6E;AAC7E,8EAAyE;AACzE,gFAA2E;AAC3E,gGAA0F;AAC1F,oEAAgE;AAChE,oFAA+E;AAC/E,kFAA6E;AAC7E,gGAA2F;AAC3F,kGAA4F;AAC5F,gFAA2E;AAC3E,gGAA2F;AAC3F,0EAAqE;AACrE,gFAA2E;AAC3E,oFAA8E;AAC9E,oFAA+E;AAG/E,MAAa,iBAAiB;IAC5B,MAAM,CAAU,iBAAiB,GAAwB,IAAI,GAAG,CAAC;QAC/D,wBAAwB;QACxB,mCAAmC;QACnC,aAAa;QACb,OAAO;QACP,iBAAiB;QACjB,oBAAoB;QACpB,aAAa;QACb,cAAc;QACd,cAAc;QACd,kBAAkB;QAClB,0BAA0B;QAC1B,mBAAmB;QACnB,eAAe;QACf,uBAAuB;QACvB,iBAAiB;QACjB,2BAA2B;QAC3B,8BAA8B;QAC9B,uBAAuB;QACvB,wBAAwB;KACzB,CAAC,CAAC;IAEH,MAAM,CAAU,iBAAiB,GAAgC,IAAI,GAAG,CAAC;QACvE,CAAC,eAAe,EAAE,cAAc,CAAC;QACjC,CAAC,4BAA4B,EAAE,iBAAiB,CAAC;QACjD,CAAC,kBAAkB,EAAE,aAAa,CAAC;QACnC,CAAC,oBAAoB,EAAE,cAAc,CAAC;QACtC,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;QAC/C,CAAC,WAAW,EAAE,cAAc,CAAC;QAC7B,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,qBAAqB,EAAE,wBAAwB,CAAC;QACjD,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;QAC7C,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;QAC/C,CAAC,eAAe,EAAE,YAAY,CAAC;QAC/B,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;QAC7C,CAAC,SAAS,EAAE,iBAAiB,CAAC;QAC9B,CAAC,aAAa,EAAE,qBAAqB,CAAC;QACtC,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;QACtD,CAAC,sBAAsB,EAAE,8BAA8B,CAAC;QACxD,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;QAClD,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;QAClD,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;QAChD,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;QAClD,CAAC,eAAe,EAAE,gBAAgB,CAAC;KACpC,CAAC,CAAC;IAEH,MAAM,CAAU,gBAAgB,GAAoC;QAClE,mDAAuB;QACvB,wCAAkB;QAClB,mDAAuB;QACvB,mDAAuB;QACvB,iDAAsB;QACtB,gEAA6B;QAC7B,2CAAmB;QACnB,+CAAqB;QACrB,2CAAmB;QACnB,+CAAqB;QACrB,gDAAsB;QACtB,6EAAmC;QACnC,qDAAwB;QACxB,oCAAgB;QAChB,0CAAkB;QAClB,yCAAkB;QAClB,0DAA0B;QAC1B,sDAAwB;QACxB,+CAAqB;QACrB,+CAAqB;QACrB,6CAAoB;QACpB,mDAAuB;QACvB,sCAAiB;QACjB,yCAAkB;QAClB,6CAAoB;QACpB,0DAA0B;QAC1B,qDAAmB;QACnB,oDAAuB;QACvB,+CAAqB;QACrB,gEAA6B;QAC7B,sCAAiB;QACjB,qDAAwB;QACxB,iEAA8B;QAC9B,kEAA8B;QAC9B,iEAA8B;QAC9B,2CAAmB;QACnB,iDAAsB;QACtB,oDAAuB;QACvB,qDAAwB;QACxB,mCAAe;QACf,iDAAsB;QACtB,+CAAqB;QACrB,uCAAiB;QACjB,+CAAqB;QACrB,8BAAa;QACb,mDAAuB;QACvB,uDAAyB;QACzB,0CAAmB;QACnB,mDAAuB;QACvB,iDAAsB;QACtB,0DAA0B;QAC1B,iDAAsB;QACtB,mDAAuB;QACvB,mDAAuB;KACxB,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,cAA8B,EAC9B,SAAkB;QAElB,MAAM,cAAc,GAAmB,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAEtE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1D,cAAc,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;YAC9B,MAAM,SAAS,GAAG,iBAAiB,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAElE,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBAErC,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;oBACzB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,UAAU,CACf,cAA8B,EAC9B,cAA8B;QAE9B,OAAO,CAAC,IAAA,eAAM,EAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IACjD,CAAC;IAEM,MAAM,CAAC,aAAa,CACzB,cAA8B,EAC9B,cAA8B;QAE9B,MAAM,UAAU,GAAgB,EAAE,CAAC;QAEnC,KAAK,MAAM,YAAY,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;YAC/D,UAAU,CAAC,IAAI,CACb,IAAI,mDAAuB,CACzB,YAAY,EACZ,cAAc,EACd,cAAc,CACf,CACF,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CACT,eAAe,EACf,eAAe,EAChB,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,UAAU,CAAC,IAAI,CACb,IAAI,mDAAuB,CACzB,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,CACf,CACF,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,eAAe,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACpD,UAAU,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,YAAY,CACzB,UAAgC,EAChC,GAAW;QAEX,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YACnC,IAAI,YAAE,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;gBACtC,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,OAAO,SAAS,CAAC,YAAY,KAAK,GAAG,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;;AAvLH,8CAwLC","sourcesContent":["import is from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport type { RenovateConfig } from '../types';\nimport { RemovePropertyMigration } from './base/remove-property-migration';\nimport { RenamePropertyMigration } from './base/rename-property-migration';\nimport { AutomergeMajorMigration } from './custom/automerge-major-migration';\nimport { AutomergeMigration } from './custom/automerge-migration';\nimport { AutomergeMinorMigration } from './custom/automerge-minor-migration';\nimport { AutomergePatchMigration } from './custom/automerge-patch-migration';\nimport { AutomergeTypeMigration } from './custom/automerge-type-migration';\nimport { AzureGitLabAutomergeMigration } from './custom/azure-gitlab-automerge-migration';\nimport { BaseBranchMigration } from './custom/base-branch-migration';\nimport { BinarySourceMigration } from './custom/binary-source-migration';\nimport { BranchNameMigration } from './custom/branch-name-migration';\nimport { BranchPrefixMigration } from './custom/branch-prefix-migration';\nimport { CompatibilityMigration } from './custom/compatibility-migration';\nimport { ComposerIgnorePlatformReqsMigration } from './custom/composer-ignore-platform-reqs-migration';\nimport { CustomManagersMigration } from './custom/custom-managers-migration';\nimport { DatasourceMigration } from './custom/datasource-migration';\nimport { DepTypesMigration } from './custom/dep-types-migration';\nimport { DryRunMigration } from './custom/dry-run-migration';\nimport { EnabledManagersMigration } from './custom/enabled-managers-migration';\nimport { ExtendsMigration } from './custom/extends-migration';\nimport { FetchReleaseNotesMigration } from './custom/fetch-release-notes-migration';\nimport { GoModTidyMigration } from './custom/go-mod-tidy-migration';\nimport { HostRulesMigration } from './custom/host-rules-migration';\nimport { IgnoreNodeModulesMigration } from './custom/ignore-node-modules-migration';\nimport { IgnoreNpmrcFileMigration } from './custom/ignore-npmrc-file-migration';\nimport { IncludeForksMigration } from './custom/include-forks-migration';\nimport { MatchDatasourcesMigration } from './custom/match-datasources-migration';\nimport { MatchManagersMigration } from './custom/match-managers-migration';\nimport { MatchStringsMigration } from './custom/match-strings-migration';\nimport { NodeMigration } from './custom/node-migration';\nimport { PackageFilesMigration } from './custom/package-files-migration';\nimport { PackageNameMigration } from './custom/package-name-migration';\nimport { PackagePatternMigration } from './custom/package-pattern-migration';\nimport { PackageRulesMigration } from './custom/package-rules-migration';\nimport { PackagesMigration } from './custom/packages-migration';\nimport { PathRulesMigration } from './custom/path-rules-migration';\nimport { PinVersionsMigration } from './custom/pin-versions-migration';\nimport { PlatformCommitMigration } from './custom/platform-commit-migration';\nimport { PostUpdateOptionsMigration } from './custom/post-update-options-migration';\nimport { RebaseConflictedPrs } from './custom/rebase-conflicted-prs-migration';\nimport { RebaseStalePrsMigration } from './custom/rebase-stale-prs-migration';\nimport { RecreateClosedMigration } from './custom/recreate-closed-migration';\nimport { RenovateForkMigration } from './custom/renovate-fork-migration';\nimport { RequireConfigMigration } from './custom/require-config-migration';\nimport { RequiredStatusChecksMigration } from './custom/required-status-checks-migration';\nimport { ScheduleMigration } from './custom/schedule-migration';\nimport { SemanticCommitsMigration } from './custom/semantic-commits-migration';\nimport { SemanticPrefixMigration } from './custom/semantic-prefix-migration';\nimport { SeparateMajorReleasesMigration } from './custom/separate-major-release-migration';\nimport { SeparateMultipleMajorMigration } from './custom/separate-multiple-major-migration';\nimport { StabilityDaysMigration } from './custom/stability-days-migration';\nimport { SuppressNotificationsMigration } from './custom/suppress-notifications-migration';\nimport { TrustLevelMigration } from './custom/trust-level-migration';\nimport { UnpublishSafeMigration } from './custom/unpublish-safe-migration';\nimport { UpgradeInRangeMigration } from './custom/upgrade-in-range-migration';\nimport { VersionStrategyMigration } from './custom/version-strategy-migration';\nimport type { Migration, MigrationConstructor } from './types';\n\nexport class MigrationsService {\n  static readonly removedProperties: ReadonlySet<string> = new Set([\n    'allowCommandTemplating',\n    'allowPostUpgradeCommandTemplating',\n    'deepExtract',\n    'gitFs',\n    'groupBranchName',\n    'groupCommitMessage',\n    'groupPrBody',\n    'groupPrTitle',\n    'lazyGrouping',\n    'maintainYarnLock',\n    'raiseDeprecationWarnings',\n    'statusCheckVerify',\n    'supportPolicy',\n    'transitiveRemediation',\n    'yarnCacheFolder',\n    'yarnMaintenanceBranchName',\n    'yarnMaintenanceCommitMessage',\n    'yarnMaintenancePrBody',\n    'yarnMaintenancePrTitle',\n  ]);\n\n  static readonly renamedProperties: ReadonlyMap<string, string> = new Map([\n    ['adoptium-java', 'java-version'],\n    ['allowedPostUpgradeCommands', 'allowedCommands'],\n    ['azureAutoApprove', 'autoApprove'],\n    ['customChangelogUrl', 'changelogUrl'],\n    ['endpoints', 'hostRules'],\n    ['excludedPackageNames', 'excludePackageNames'],\n    ['exposeEnv', 'exposeAllEnv'],\n    ['keepalive', 'keepAlive'],\n    ['managerBranchPrefix', 'additionalBranchPrefix'],\n    ['multipleMajorPrs', 'separateMultipleMajor'],\n    ['separatePatchReleases', 'separateMinorPatch'],\n    ['versionScheme', 'versioning'],\n    ['lookupNameTemplate', 'packageNameTemplate'],\n    ['aliases', 'registryAliases'],\n    ['masterIssue', 'dependencyDashboard'],\n    ['masterIssueApproval', 'dependencyDashboardApproval'],\n    ['masterIssueAutoclose', 'dependencyDashboardAutoclose'],\n    ['masterIssueHeader', 'dependencyDashboardHeader'],\n    ['masterIssueFooter', 'dependencyDashboardFooter'],\n    ['masterIssueTitle', 'dependencyDashboardTitle'],\n    ['masterIssueLabels', 'dependencyDashboardLabels'],\n    ['regexManagers', 'customManagers'],\n  ]);\n\n  static readonly customMigrations: readonly MigrationConstructor[] = [\n    AutomergeMajorMigration,\n    AutomergeMigration,\n    AutomergeMinorMigration,\n    AutomergePatchMigration,\n    AutomergeTypeMigration,\n    AzureGitLabAutomergeMigration,\n    BaseBranchMigration,\n    BinarySourceMigration,\n    BranchNameMigration,\n    BranchPrefixMigration,\n    CompatibilityMigration,\n    ComposerIgnorePlatformReqsMigration,\n    EnabledManagersMigration,\n    ExtendsMigration,\n    GoModTidyMigration,\n    HostRulesMigration,\n    IgnoreNodeModulesMigration,\n    IgnoreNpmrcFileMigration,\n    IncludeForksMigration,\n    MatchStringsMigration,\n    PackageNameMigration,\n    PackagePatternMigration,\n    PackagesMigration,\n    PathRulesMigration,\n    PinVersionsMigration,\n    PostUpdateOptionsMigration,\n    RebaseConflictedPrs,\n    RebaseStalePrsMigration,\n    RenovateForkMigration,\n    RequiredStatusChecksMigration,\n    ScheduleMigration,\n    SemanticCommitsMigration,\n    SeparateMajorReleasesMigration,\n    SeparateMultipleMajorMigration,\n    SuppressNotificationsMigration,\n    TrustLevelMigration,\n    UnpublishSafeMigration,\n    UpgradeInRangeMigration,\n    VersionStrategyMigration,\n    DryRunMigration,\n    RequireConfigMigration,\n    PackageFilesMigration,\n    DepTypesMigration,\n    PackageRulesMigration,\n    NodeMigration,\n    SemanticPrefixMigration,\n    MatchDatasourcesMigration,\n    DatasourceMigration,\n    RecreateClosedMigration,\n    StabilityDaysMigration,\n    FetchReleaseNotesMigration,\n    MatchManagersMigration,\n    CustomManagersMigration,\n    PlatformCommitMigration,\n  ];\n\n  static run(\n    originalConfig: RenovateConfig,\n    parentKey?: string,\n  ): RenovateConfig {\n    const migratedConfig: RenovateConfig = {};\n    const migrations = this.getMigrations(originalConfig, migratedConfig);\n\n    for (const [key, value] of Object.entries(originalConfig)) {\n      migratedConfig[key] ??= value;\n      const migration = MigrationsService.getMigration(migrations, key);\n\n      if (migration) {\n        migration.run(value, key, parentKey);\n\n        if (migration.deprecated) {\n          delete migratedConfig[key];\n        }\n      }\n    }\n\n    return migratedConfig;\n  }\n\n  static isMigrated(\n    originalConfig: RenovateConfig,\n    migratedConfig: RenovateConfig,\n  ): boolean {\n    return !dequal(originalConfig, migratedConfig);\n  }\n\n  public static getMigrations(\n    originalConfig: RenovateConfig,\n    migratedConfig: RenovateConfig,\n  ): readonly Migration[] {\n    const migrations: Migration[] = [];\n\n    for (const propertyName of MigrationsService.removedProperties) {\n      migrations.push(\n        new RemovePropertyMigration(\n          propertyName,\n          originalConfig,\n          migratedConfig,\n        ),\n      );\n    }\n\n    for (const [\n      oldPropertyName,\n      newPropertyName,\n    ] of MigrationsService.renamedProperties.entries()) {\n      migrations.push(\n        new RenamePropertyMigration(\n          oldPropertyName,\n          newPropertyName,\n          originalConfig,\n          migratedConfig,\n        ),\n      );\n    }\n\n    for (const CustomMigration of this.customMigrations) {\n      migrations.push(new CustomMigration(originalConfig, migratedConfig));\n    }\n\n    return migrations;\n  }\n\n  private static getMigration(\n    migrations: readonly Migration[],\n    key: string,\n  ): Migration | undefined {\n    return migrations.find((migration) => {\n      if (is.regExp(migration.propertyName)) {\n        return migration.propertyName.test(key);\n      }\n\n      return migration.propertyName === key;\n    });\n  }\n}\n"]}