renovate 43.273.0 → 43.275.0

package/dist/modules/datasource/docker/index.js

@@ -154,7 +154,7 @@ var DockerDatasource = class DockerDatasource extends Datasource {
 	async getConfigDigest(registry, dockerRepository, tag) {
 		return (await this.getManifest(registry, dockerRepository, tag))?.config?.digest ?? null;
 	}
-	async getManifest(registry, dockerRepository, tag) {
+	async getManifestDocument(registry, dockerRepository, tag) {
 		const manifestResponse = await this.getManifestResponse(registry, dockerRepository, tag);
 		/* v8 ignore next 3 -- should never happen */
 		if (!manifestResponse) return null;
@@ -170,7 +170,9 @@ var DockerDatasource = class DockerDatasource extends Datasource {
 			}, "Invalid manifest response");
 			return null;
 		}
-		const manifest = parsed.data;
+		return parsed.data;
+	}
+	async resolveImageManifest(registry, dockerRepository, tag, manifest) {
 		switch (manifest.mediaType) {
 			case "application/vnd.docker.distribution.manifest.v2+json":
 			case "application/vnd.oci.image.manifest.v1+json": return manifest;
@@ -190,6 +192,11 @@ var DockerDatasource = class DockerDatasource extends Datasource {
 			default: return null;
 		}
 	}
+	async getManifest(registry, dockerRepository, tag) {
+		const manifest = await this.getManifestDocument(registry, dockerRepository, tag);
+		if (!manifest) return null;
+		return this.resolveImageManifest(registry, dockerRepository, tag, manifest);
+	}
 	async _getImageArchitecture(registryHost, dockerRepository, currentDigest) {
 		try {
 			let manifestResponse;
@@ -234,14 +241,10 @@ var DockerDatasource = class DockerDatasource extends Datasource {
 			logger.debug("Docker Hub image - skipping label lookup due to RENOVATE_X_DOCKER_HUB_DISABLE_LABEL_LOOKUP");
 			return {};
 		}
-		if (registryHost === "https://index.docker.io" && dockerRepository.startsWith("library/")) {
-			logger.debug("Docker Hub library image - skipping label lookup");
-			return {};
-		}
 		try {
 			let labels = {};
-			const manifest = await this.getManifest(registryHost, dockerRepository, tag);
-			if (!manifest) {
+			const manifestDocument = await this.getManifestDocument(registryHost, dockerRepository, tag);
+			if (!manifestDocument) {
 				logger.debug({
 					registryHost,
 					dockerRepository,
@@ -249,7 +252,21 @@ var DockerDatasource = class DockerDatasource extends Datasource {
 				}, "No manifest found");
 				return;
 			}
-			if ("annotations" in manifest && manifest.annotations) labels = manifest.annotations;
+			if ("annotations" in manifestDocument && manifestDocument.annotations) labels = manifestDocument.annotations;
+			if ("manifests" in manifestDocument) {
+				const descriptorAnnotations = manifestDocument.manifests.map((descriptor) => descriptor.annotations).find((annotations) => isNonEmptyString(annotations?.["org.opencontainers.image.source"]) && isNonEmptyString(annotations?.["org.opencontainers.image.revision"]));
+				if (descriptorAnnotations) labels = {
+					...labels,
+					...descriptorAnnotations
+				};
+			}
+			if ("manifests" in manifestDocument && labels["org.opencontainers.image.source"] && labels["org.opencontainers.image.revision"]) return labels;
+			const manifest = await this.resolveImageManifest(registryHost, dockerRepository, tag, manifestDocument);
+			if (!manifest) return;
+			if ("annotations" in manifest && manifest.annotations) labels = {
+				...labels,
+				...manifest.annotations
+			};
 			switch (manifest.config.mediaType) {
 				case "application/vnd.cncf.helm.config.v1+json": {
 					if (labels["org.opencontainers.image.source"]) return labels;

package/dist/modules/datasource/docker/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["dockerVersioningId","HttpError"],"sources":["../../../../lib/modules/datasource/docker/index.ts"],"sourcesContent":["import { isNonEmptyString } from '@sindresorhus/is';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport { PAGE_NOT_FOUND_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { withCache } from '../../../util/cache/package/with-cache.ts';\nimport { getEnv } from '../../../util/env.ts';\nimport { memCacheProvider } from '../../../util/http/cache/memory-http-cache-provider.ts';\nimport { HttpError } from '../../../util/http/index.ts';\nimport type { HttpResponse } from '../../../util/http/types.ts';\nimport { hasKey } from '../../../util/object.ts';\nimport { type AsyncResult, Result } from '../../../util/result.ts';\nimport { isDockerDigest } from '../../../util/string-match.ts';\nimport { asTimestamp } from '../../../util/timestamp.ts';\nimport {\n  ensurePathPrefix,\n  joinUrlParts,\n  parseLinkHeader,\n  parseUrl,\n} from '../../../util/url.ts';\nimport { id as dockerVersioningId } from '../../versioning/docker/index.ts';\nimport { Datasource } from '../datasource.ts';\nimport type {\n  DigestConfig,\n  GetReleasesConfig,\n  Release,\n  ReleaseResult,\n} from '../types.ts';\nimport { isArtifactoryServer } from '../util.ts';\nimport {\n  DOCKER_HUB,\n  dockerDatasourceId,\n  extractDigestFromResponseBody,\n  findHelmSourceUrl,\n  findLatestStable,\n  getAuthHeaders,\n  getRegistryRepository,\n  gitRefLabel,\n  imageUrlLabel,\n  isDockerHost,\n  sourceLabel,\n  sourceLabels,\n} from './common.ts';\nimport { DockerHubCache } from './dockerhub-cache.ts';\nimport { ecrPublicRegex, ecrRegex, isECRMaxResultsError } from './ecr.ts';\nimport type { DistributionManifest, OciImageManifest } from './schema.ts';\nimport {\n  DockerHubTagsPage,\n  ManifestJson,\n  OciHelmConfig,\n  OciImageConfig,\n  QuayTagsResponse,\n  RegistryTagsList,\n} from './schema.ts';\n\nconst defaultConfig = {\n  commitMessageTopic: '{{{depName}}} Docker tag',\n  commitMessageExtra:\n    'to {{#if isPinDigest}}{{{newDigestShort}}}{{else}}{{#if isMajor}}{{{prettyNewMajor}}}{{else}}{{{prettyNewVersion}}}{{/if}}{{/if}}',\n  digest: {\n    branchTopic: '{{{depNameSanitized}}}-{{{currentValue}}}',\n    commitMessageExtra: 'to {{newDigestShort}}',\n    commitMessageTopic:\n      '{{{depName}}}{{#if currentValue}}:{{{currentValue}}}{{/if}} Docker digest',\n    group: {\n      commitMessageTopic: '{{{groupName}}}',\n      commitMessageExtra: '',\n    },\n  },\n  pin: {\n    commitMessageExtra: '',\n    groupName: 'Docker digests',\n    group: {\n      commitMessageTopic: '{{{groupName}}}',\n      branchTopic: 'digests-pin',\n    },\n  },\n};\n\nexport class DockerDatasource extends Datasource {\n  static readonly id = dockerDatasourceId;\n\n  override readonly defaultVersioning = dockerVersioningId;\n\n  override readonly defaultRegistryUrls = [DOCKER_HUB];\n\n  override readonly defaultConfig = defaultConfig;\n\n  override readonly releaseTimestampSupport = true;\n  override readonly releaseTimestampNote =\n    'Only supported on Docker Hub: The release timestamp is determined from the `tag_last_pushed` field in the results. **NOTE**: Currently, digests will receive the same release timestamp as the `tag_last_pushed`, which means that digests may appear newer than they are - see https://github.com/renovatebot/renovate/issues/38659';\n  override readonly sourceUrlSupport = 'package';\n  override readonly sourceUrlNote =\n    'The source URL is determined from the `org.opencontainers.image.source` and `org.label-schema.vcs-url` labels present in the metadata of the **latest stable** image found on the Docker registry.';\n\n  constructor() {\n    super(DockerDatasource.id);\n  }\n\n  // TODO: debug why quay throws errors (#9612)\n  private async getManifestResponse(\n    registryHost: string,\n    dockerRepository: string,\n    tag: string,\n    mode: 'head' | 'getText' = 'getText',\n  ): Promise<HttpResponse | null> {\n    logger.debug(\n      `getManifestResponse(${registryHost}, ${dockerRepository}, ${tag}, ${mode})`,\n    );\n    try {\n      const headers = await getAuthHeaders(\n        this.http,\n        registryHost,\n        dockerRepository,\n      );\n      if (!headers) {\n        logger.warn('No docker auth found - returning');\n        return null;\n      }\n      headers.accept = [\n        'application/vnd.docker.distribution.manifest.list.v2+json',\n        'application/vnd.docker.distribution.manifest.v2+json',\n        'application/vnd.oci.image.manifest.v1+json',\n        'application/vnd.oci.image.index.v1+json',\n      ].join(', ');\n      const url = `${registryHost}/v2/${dockerRepository}/manifests/${tag}`;\n      const manifestResponse = await this.http[mode](url, {\n        headers,\n        noAuth: true,\n        cacheProvider: memCacheProvider,\n      });\n      return manifestResponse;\n    } catch (err) /* istanbul ignore next */ {\n      if (err instanceof ExternalHostError) {\n        throw err;\n      }\n      if (err.statusCode === 401) {\n        logger.debug(\n          { registryHost, dockerRepository },\n          'Unauthorized docker lookup',\n        );\n        logger.debug({ err });\n        return null;\n      }\n      if (err.statusCode === 404) {\n        logger.debug(\n          {\n            err,\n            registryHost,\n            dockerRepository,\n            tag,\n          },\n          'Docker Manifest is unknown',\n        );\n        return null;\n      }\n      if (err.statusCode === 429 && isDockerHost(registryHost)) {\n        throw new ExternalHostError(err);\n      }\n      if (err.statusCode >= 500 && err.statusCode < 600) {\n        throw new ExternalHostError(err);\n      }\n      if (err.code === 'ETIMEDOUT') {\n        logger.debug(\n          { registryHost },\n          'Timeout when attempting to connect to docker registry',\n        );\n        logger.debug({ err });\n        return null;\n      }\n      logger.debug(\n        {\n          err,\n          registryHost,\n          dockerRepository,\n          tag,\n        },\n        'Unknown Error looking up docker manifest',\n      );\n      return null;\n    }\n  }\n\n  private async _getImageConfig(\n    registryHost: string,\n    dockerRepository: string,\n    configDigest: string,\n  ): Promise<HttpResponse<OciImageConfig> | undefined> {\n    logger.trace(\n      `getImageConfig(${registryHost}, ${dockerRepository}, ${configDigest})`,\n    );\n\n    const headers = await getAuthHeaders(\n      this.http,\n      registryHost,\n      dockerRepository,\n    );\n    /* v8 ignore next 4 -- should never happen */\n    if (!headers) {\n      logger.warn('No docker auth found - returning');\n      return undefined;\n    }\n    const url = joinUrlParts(\n      registryHost,\n      'v2',\n      dockerRepository,\n      'blobs',\n      configDigest,\n    );\n    return await this.http.getJson(\n      url,\n      {\n        headers,\n        noAuth: true,\n      },\n      OciImageConfig,\n    );\n  }\n\n  getImageConfig(\n    registryHost: string,\n    dockerRepository: string,\n    configDigest: string,\n  ): Promise<HttpResponse<OciImageConfig> | undefined> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-imageconfig',\n        key: `${registryHost}:${dockerRepository}@${configDigest}`,\n        ttlMinutes: 1440 * 28,\n      },\n      () => this._getImageConfig(registryHost, dockerRepository, configDigest),\n    );\n  }\n\n  private async _getHelmConfig(\n    registryHost: string,\n    dockerRepository: string,\n    configDigest: string,\n  ): Promise<HttpResponse<OciHelmConfig> | undefined> {\n    logger.trace(\n      `getImageConfig(${registryHost}, ${dockerRepository}, ${configDigest})`,\n    );\n\n    const headers = await getAuthHeaders(\n      this.http,\n      registryHost,\n      dockerRepository,\n    );\n    /* v8 ignore next 4 -- should never happen */\n    if (!headers) {\n      logger.warn('No docker auth found - returning');\n      return undefined;\n    }\n    const url = joinUrlParts(\n      registryHost,\n      'v2',\n      dockerRepository,\n      'blobs',\n      configDigest,\n    );\n    return await this.http.getJson(\n      url,\n      {\n        headers,\n        noAuth: true,\n      },\n      OciHelmConfig,\n    );\n  }\n\n  getHelmConfig(\n    registryHost: string,\n    dockerRepository: string,\n    configDigest: string,\n  ): Promise<HttpResponse<OciHelmConfig> | undefined> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-imageconfig',\n        key: `${registryHost}:${dockerRepository}@${configDigest}`,\n        ttlMinutes: 1440 * 28,\n      },\n      () => this._getHelmConfig(registryHost, dockerRepository, configDigest),\n    );\n  }\n\n  private async getConfigDigest(\n    registry: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<string | null> {\n    return (\n      (await this.getManifest(registry, dockerRepository, tag))?.config\n        ?.digest ?? null\n    );\n  }\n\n  private async getManifest(\n    registry: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<OciImageManifest | DistributionManifest | null> {\n    const manifestResponse = await this.getManifestResponse(\n      registry,\n      dockerRepository,\n      tag,\n    );\n\n    // If getting the manifest fails here, then abort\n    // This means that the latest tag doesn't have a manifest, which shouldn't\n    // be possible\n    /* v8 ignore next 3 -- should never happen */\n    if (!manifestResponse) {\n      return null;\n    }\n\n    // Softfail on invalid manifests\n    const parsed = ManifestJson.safeParse(manifestResponse.body);\n    if (!parsed.success) {\n      logger.debug(\n        {\n          registry,\n          dockerRepository,\n          tag,\n          body: manifestResponse.body,\n          headers: manifestResponse.headers,\n          err: parsed.error,\n        },\n        'Invalid manifest response',\n      );\n      return null;\n    }\n\n    const manifest = parsed.data;\n\n    switch (manifest.mediaType) {\n      case 'application/vnd.docker.distribution.manifest.v2+json':\n      case 'application/vnd.oci.image.manifest.v1+json':\n        return manifest;\n      case 'application/vnd.docker.distribution.manifest.list.v2+json':\n      case 'application/vnd.oci.image.index.v1+json':\n        if (!manifest.manifests.length) {\n          logger.debug(\n            { manifest },\n            'Invalid manifest list with no manifests - returning',\n          );\n          return null;\n        }\n        logger.trace(\n          { registry, dockerRepository, tag },\n          'Found manifest list, using first image',\n        );\n        return this.getManifest(\n          registry,\n          dockerRepository,\n          manifest.manifests[0].digest,\n        );\n      // istanbul ignore next: can't happen\n      default:\n        return null;\n    }\n  }\n\n  private async _getImageArchitecture(\n    registryHost: string,\n    dockerRepository: string,\n    currentDigest: string,\n  ): Promise<string | null | undefined> {\n    try {\n      let manifestResponse: HttpResponse | null;\n\n      try {\n        manifestResponse = await this.getManifestResponse(\n          registryHost,\n          dockerRepository,\n          currentDigest,\n          'head',\n        );\n      } catch (_err) {\n        const err =\n          _err instanceof ExternalHostError\n            ? _err.err\n            : /* istanbul ignore next: can never happen */ _err;\n\n        if (\n          typeof err.statusCode === 'number' &&\n          err.statusCode >= 500 &&\n          err.statusCode < 600\n        ) {\n          // querying the digest manifest for a non existent image leads to a 500 statusCode\n          return null;\n        }\n\n        /* istanbul ignore next */\n        throw _err;\n      }\n\n      if (\n        manifestResponse?.headers['content-type'] !==\n          'application/vnd.docker.distribution.manifest.v2+json' &&\n        manifestResponse?.headers['content-type'] !==\n          'application/vnd.oci.image.manifest.v1+json'\n      ) {\n        return null;\n      }\n\n      const configDigest = await this.getConfigDigest(\n        registryHost,\n        dockerRepository,\n        currentDigest,\n      );\n      if (!configDigest) {\n        return null;\n      }\n\n      const configResponse = await this.getImageConfig(\n        registryHost,\n        dockerRepository,\n        configDigest,\n      );\n\n      // TODO: fix me, architecture is required in spec\n      if (\n        configResponse &&\n        ('config' in configResponse.body ||\n          'architecture' in configResponse.body)\n      ) {\n        const architecture = configResponse.body.architecture ?? null;\n        logger.debug(\n          `Current digest ${currentDigest} relates to architecture ${\n            architecture ?? 'null'\n          }`,\n        );\n\n        return architecture;\n      }\n    } catch (err) /* istanbul ignore next */ {\n      if (err.statusCode !== 404 || err.message === PAGE_NOT_FOUND_ERROR) {\n        throw err;\n      }\n      logger.debug(\n        { registryHost, dockerRepository, currentDigest, err },\n        'Unknown error getting image architecture',\n      );\n    }\n\n    return undefined;\n  }\n\n  getImageArchitecture(\n    registryHost: string,\n    dockerRepository: string,\n    currentDigest: string,\n  ): Promise<string | null | undefined> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-architecture',\n        key: `${registryHost}:${dockerRepository}@${currentDigest}`,\n        ttlMinutes: 1440 * 28,\n        shouldCacheResult: isNonEmptyString,\n      },\n      () =>\n        this._getImageArchitecture(\n          registryHost,\n          dockerRepository,\n          currentDigest,\n        ),\n    );\n  }\n\n  /*\n   * docker.getLabels\n   *\n   * This function will:\n   *  - Return the labels for the requested image\n   */\n  private async _getLabels(\n    registryHost: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<Record<string, string> | undefined> {\n    logger.debug(`getLabels(${registryHost}, ${dockerRepository}, ${tag})`);\n    // Skip Docker Hub image if RENOVATE_X_DOCKER_HUB_DISABLE_LABEL_LOOKUP is set\n    if (\n      getEnv().RENOVATE_X_DOCKER_HUB_DISABLE_LABEL_LOOKUP &&\n      registryHost === DOCKER_HUB\n    ) {\n      logger.debug(\n        'Docker Hub image - skipping label lookup due to RENOVATE_X_DOCKER_HUB_DISABLE_LABEL_LOOKUP',\n      );\n      return {};\n    }\n    // Docker Hub library images don't have labels we need\n    if (\n      registryHost === DOCKER_HUB &&\n      dockerRepository.startsWith('library/')\n    ) {\n      logger.debug('Docker Hub library image - skipping label lookup');\n      return {};\n    }\n    try {\n      let labels: Record<string, string> | undefined = {};\n      const manifest = await this.getManifest(\n        registryHost,\n        dockerRepository,\n        tag,\n      );\n\n      if (!manifest) {\n        logger.debug(\n          { registryHost, dockerRepository, tag },\n          'No manifest found',\n        );\n        return undefined;\n      }\n\n      if ('annotations' in manifest && manifest.annotations) {\n        labels = manifest.annotations;\n      }\n\n      switch (manifest.config.mediaType) {\n        case 'application/vnd.cncf.helm.config.v1+json': {\n          if (labels[sourceLabel]) {\n            // we already have the source url, so no need to pull the config\n            return labels;\n          }\n          const configResponse = await this.getHelmConfig(\n            registryHost,\n            dockerRepository,\n            manifest.config.digest,\n          );\n\n          if (configResponse) {\n            // Helm chart\n            const url = findHelmSourceUrl(configResponse.body);\n            if (url) {\n              labels[sourceLabel] = url;\n            }\n          }\n          break;\n        }\n        case 'application/vnd.oci.image.config.v1+json':\n        case 'application/vnd.docker.container.image.v1+json': {\n          if (labels[sourceLabel] && labels[gitRefLabel]) {\n            // we already have the source url, so no need to pull the config\n            return labels;\n          }\n          const configResponse = await this.getImageConfig(\n            registryHost,\n            dockerRepository,\n            manifest.config.digest,\n          );\n\n          /* v8 ignore next 3 -- should never happen */\n          if (!configResponse) {\n            return labels;\n          }\n\n          const body = configResponse.body;\n          if (body.config) {\n            labels = { ...labels, ...body.config.Labels };\n          } else {\n            logger.debug(\n              { headers: configResponse.headers, body },\n              `manifest blob response body missing the \"config\" property`,\n            );\n          }\n          break;\n        }\n      }\n\n      if (labels) {\n        logger.debug(\n          {\n            labels,\n          },\n          'found labels in manifest',\n        );\n      }\n      return labels;\n    } catch (err) /* istanbul ignore next: should be tested in future */ {\n      if (err instanceof ExternalHostError) {\n        throw err;\n      }\n      if (err.statusCode === 400 || err.statusCode === 401) {\n        logger.debug(\n          { registryHost, dockerRepository, err },\n          'Unauthorized docker lookup',\n        );\n      } else if (err.statusCode === 404) {\n        logger.warn(\n          {\n            err,\n            registryHost,\n            dockerRepository,\n            tag,\n          },\n          'Config Manifest is unknown',\n        );\n      } else if (err.statusCode === 429 && isDockerHost(registryHost)) {\n        logger.warn({ err }, 'docker registry failure: too many requests');\n      } else if (err.statusCode >= 500 && err.statusCode < 600) {\n        logger.debug(\n          {\n            err,\n            registryHost,\n            dockerRepository,\n            tag,\n          },\n          'docker registry failure: internal error',\n        );\n      } else if (\n        err.code === 'ERR_TLS_CERT_ALTNAME_INVALID' ||\n        err.code === 'ETIMEDOUT'\n      ) {\n        logger.debug(\n          { registryHost, err },\n          'Error connecting to docker registry',\n        );\n      } else if (registryHost === 'https://quay.io') {\n        // istanbul ignore next\n        logger.debug(\n          'Ignoring quay.io errors until they fully support v2 schema',\n        );\n      } else {\n        logger.info(\n          { registryHost, dockerRepository, tag, err },\n          'Unknown error getting Docker labels',\n        );\n      }\n      return {};\n    }\n  }\n\n  getLabels(\n    registryHost: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<Record<string, string> | undefined> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-labels',\n        key: `${registryHost}:${dockerRepository}:${tag}`,\n        ttlMinutes: 24 * 60,\n      },\n      () => this._getLabels(registryHost, dockerRepository, tag),\n    );\n  }\n\n  private async getTagsQuayRegistry(\n    registry: string,\n    repository: string,\n  ): Promise<string[]> {\n    let tags: string[] = [];\n    const limit = 100;\n\n    function pageUrl(page: number): string {\n      return `${registry}/api/v1/repository/${repository}/tag/?limit=${limit}&page=${page}&onlyActiveTags=true`;\n    }\n\n    let page = 1;\n    let url: string | null = pageUrl(page);\n    while (url && page <= 20) {\n      const res: HttpResponse<QuayTagsResponse> = await this.http.getJson(\n        url,\n        QuayTagsResponse,\n      );\n      const pageTags = res.body.tags.map((tag) => tag.name);\n      tags = tags.concat(pageTags);\n      page += 1;\n      url = res.body.has_additional ? pageUrl(page) : null;\n    }\n    return tags;\n  }\n\n  private async getDockerApiTags(\n    registryHost: string,\n    dockerRepository: string,\n  ): Promise<string[] | null> {\n    let tags: string[] = [];\n    // AWS ECR limits the maximum number of results to 1000\n    // See https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeRepositories.html#ECR-DescribeRepositories-request-maxResults\n    // See https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_DescribeRepositories.html#ecrpublic-DescribeRepositories-request-maxResults\n    const limit =\n      ecrRegex.test(registryHost) || ecrPublicRegex.test(registryHost)\n        ? 1000\n        : 10000;\n    let url: string | null =\n      `${registryHost}/${dockerRepository}/tags/list?n=${limit}`;\n    url = ensurePathPrefix(url, '/v2');\n    const headers = await getAuthHeaders(\n      this.http,\n      registryHost,\n      dockerRepository,\n      url,\n    );\n    if (!headers) {\n      logger.debug('Failed to get authHeaders for getTags lookup');\n      return null;\n    }\n    let page = 0;\n    const hostsNeedingAllPages = [\n      'https://ghcr.io', // GHCR sorts from oldest to newest, so we need to get all pages\n      'https://quay.io', // Quay sorts from oldest to newest, so we need to get all pages\n    ];\n    const pages = hostsNeedingAllPages.includes(registryHost)\n      ? 1000\n      : GlobalConfig.get('dockerMaxPages');\n    logger.trace({ registryHost, dockerRepository, pages }, 'docker.getTags');\n    let foundMaxResultsError = false;\n    do {\n      let res: HttpResponse<RegistryTagsList>;\n      try {\n        res = await this.http.getJson(\n          url,\n          { headers, noAuth: true },\n          RegistryTagsList,\n        );\n      } catch (err) {\n        if (\n          !foundMaxResultsError &&\n          err instanceof HttpError &&\n          isECRMaxResultsError(err)\n        ) {\n          const maxResults = 1000;\n          url = `${registryHost}/${dockerRepository}/tags/list?n=${maxResults}`;\n          url = ensurePathPrefix(url, '/v2');\n          foundMaxResultsError = true;\n          continue;\n        }\n        throw err;\n      }\n      tags = tags.concat(res.body.tags);\n      const linkHeader = parseLinkHeader(res.headers.link);\n      if (isArtifactoryServer(res)) {\n        // Artifactory bug: next link comes back without virtual-repo prefix (RTFACT-18971)\n        if (linkHeader?.next?.last) {\n          // parse the current URL, strip any old \"last\" param, then set the new one\n          const parsed = parseUrl(url);\n          // v8 ignore if: url is always a valid HTTP URL as `ensurePathPrefix`\n          if (!parsed) {\n            url = null;\n            break;\n          }\n          parsed.searchParams.delete('last');\n          parsed.searchParams.set('last', linkHeader.next.last);\n          url = parsed.href;\n        } else {\n          url = null;\n        }\n      } else if (linkHeader?.next?.url) {\n        // for the normal case we can still use URL to resolve relative-next\n        url = new URL(linkHeader.next.url, url).href;\n      } else {\n        url = null;\n      }\n      page += 1;\n    } while (url && page < pages);\n    return tags;\n  }\n\n  private async _getTags(\n    registryHost: string,\n    dockerRepository: string,\n  ): Promise<string[] | null> {\n    try {\n      const isQuay = registryHost === 'https://quay.io';\n      let tags: string[] | null;\n      if (isQuay) {\n        try {\n          // Due to pagination and sorting limits on Quay Docker v2 API implementation we try the Quay v1 API first\n          tags = await this.getTagsQuayRegistry(registryHost, dockerRepository);\n        } catch (err) {\n          // If we get a 401 Unauthorized error (v1 API requires separate auth for private images), fall back to Docker v2 API\n          if (err.statusCode === 401) {\n            logger.debug(\n              { registryHost, dockerRepository },\n              'Quay v1 API unauthorized, falling back to Docker v2 API',\n            );\n            tags = await this.getDockerApiTags(registryHost, dockerRepository);\n          } else {\n            throw err;\n          }\n        }\n      } else {\n        tags = await this.getDockerApiTags(registryHost, dockerRepository);\n      }\n      return tags;\n    } catch (_err) /* istanbul ignore next */ {\n      const err = _err instanceof ExternalHostError ? _err.err : _err;\n\n      if (\n        (err.statusCode === 404 || err.message === PAGE_NOT_FOUND_ERROR) &&\n        !dockerRepository.includes('/')\n      ) {\n        logger.debug(\n          `Retrying Tags for ${registryHost}/${dockerRepository} using library/ prefix`,\n        );\n        return this.getTags(registryHost, `library/${dockerRepository}`);\n      }\n      // JFrog Artifactory - Retry handling when resolving Docker Official Images\n      // These follow the format of {{registryHost}}{{jFrogRepository}}/library/{{dockerRepository}}\n      if (\n        (err.statusCode === 404 || err.message === PAGE_NOT_FOUND_ERROR) &&\n        isArtifactoryServer(err.response) &&\n        dockerRepository.split('/').length === 2\n      ) {\n        logger.debug(\n          `JFrog Artifactory: Retrying Tags for ${registryHost}/${dockerRepository} using library/ path between JFrog virtual repository and image`,\n        );\n\n        const dockerRepositoryParts = dockerRepository.split('/');\n        const jfrogRepository = dockerRepositoryParts[0];\n        const dockerImage = dockerRepositoryParts[1];\n\n        return this.getTags(\n          registryHost,\n          `${jfrogRepository}/library/${dockerImage}`,\n        );\n      }\n      if (err.statusCode === 429 && isDockerHost(registryHost)) {\n        logger.warn(\n          { registryHost, dockerRepository, err },\n          'docker registry failure: too many requests',\n        );\n        throw new ExternalHostError(err);\n      }\n      if (err.statusCode >= 500 && err.statusCode < 600) {\n        logger.warn(\n          { registryHost, dockerRepository, err },\n          'docker registry failure: internal error',\n        );\n        throw new ExternalHostError(err);\n      }\n      const errorCodes = ['ECONNRESET', 'ETIMEDOUT'];\n      if (errorCodes.includes(err.code)) {\n        logger.warn(\n          { registryHost, dockerRepository, err },\n          'docker registry connection failure',\n        );\n        throw new ExternalHostError(err);\n      }\n      if (isDockerHost(registryHost)) {\n        logger.info({ err }, 'Docker Hub lookup failure');\n      }\n      throw _err;\n    }\n  }\n\n  getTags(\n    registryHost: string,\n    dockerRepository: string,\n  ): Promise<string[] | null> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-tags',\n        key: `${registryHost}:${dockerRepository}`,\n      },\n      () => this._getTags(registryHost, dockerRepository),\n    );\n  }\n\n  /**\n   * docker.getDigest\n   *\n   * The `newValue` supplied here should be a valid tag for the docker image.\n   *\n   * This function will:\n   *  - Look up a sha256 digest for a tag on its registry\n   *  - Return the digest as a string\n   */\n  private async _getDigest(\n    { registryUrl, lookupName, packageName, currentDigest }: DigestConfig,\n    newValue?: string,\n  ): Promise<string | null> {\n    let registryHost: string;\n    let dockerRepository: string;\n    if (registryUrl && lookupName) {\n      // Reuse the resolved values from getReleases()\n      registryHost = registryUrl;\n      dockerRepository = lookupName;\n    } else {\n      // Resolve values independently\n      ({ registryHost, dockerRepository } = getRegistryRepository(\n        packageName,\n        registryUrl!,\n      ));\n    }\n    logger.debug(\n      // TODO: types (#22198)\n      `getDigest(${registryHost}, ${dockerRepository}, ${newValue})`,\n    );\n    const newTag = isNonEmptyString(newValue) ? newValue : 'latest';\n    let digest: string | null = null;\n    try {\n      let architecture: string | null | undefined = null;\n      if (currentDigest && isDockerDigest(currentDigest)) {\n        architecture = await this.getImageArchitecture(\n          registryHost,\n          dockerRepository,\n          currentDigest,\n        );\n      }\n\n      let manifestResponse: HttpResponse | null = null;\n      if (!architecture) {\n        // Reuse the digest cached from the Docker Hub tag API\n        if (registryHost === DOCKER_HUB) {\n          const cache = await DockerHubCache.init(dockerRepository);\n          const cachedDigest = cache.getDigestForTag(newTag);\n          if (cachedDigest) {\n            return cachedDigest;\n          }\n        }\n\n        manifestResponse = await this.getManifestResponse(\n          registryHost,\n          dockerRepository,\n          newTag,\n          'head',\n        );\n\n        if (\n          manifestResponse &&\n          hasKey('docker-content-digest', manifestResponse.headers)\n        ) {\n          digest =\n            (manifestResponse.headers['docker-content-digest'] as string) ||\n            null;\n        }\n      }\n\n      if (\n        isNonEmptyString(architecture) ||\n        (manifestResponse &&\n          !hasKey('docker-content-digest', manifestResponse.headers))\n      ) {\n        // Reuse the per-arch digest cached from the Docker Hub tag API\n        if (isNonEmptyString(architecture) && registryHost === DOCKER_HUB) {\n          const cache = await DockerHubCache.init(dockerRepository);\n          const cachedDigest = cache.getArchDigestForTag(newTag, architecture);\n          if (cachedDigest) {\n            return cachedDigest;\n          }\n        }\n\n        logger.debug(\n          { registryHost, dockerRepository },\n          'Architecture-specific digest or missing docker-content-digest header - pulling full manifest',\n        );\n        manifestResponse = await this.getManifestResponse(\n          registryHost,\n          dockerRepository,\n          newTag,\n        );\n\n        if (architecture && manifestResponse) {\n          const parsed = ManifestJson.safeParse(manifestResponse.body);\n          /* istanbul ignore else: hard to test */\n          if (parsed.success) {\n            const manifestList = parsed.data;\n            if (\n              manifestList.mediaType ===\n                'application/vnd.docker.distribution.manifest.list.v2+json' ||\n              manifestList.mediaType ===\n                'application/vnd.oci.image.index.v1+json'\n            ) {\n              for (const manifest of manifestList.manifests) {\n                if (manifest.platform?.architecture === architecture) {\n                  digest = manifest.digest;\n                  break;\n                }\n              }\n              // TODO: return null if no matching architecture digest found\n              // https://github.com/renovatebot/renovate/discussions/22639\n            } else if (\n              hasKey('docker-content-digest', manifestResponse.headers)\n            ) {\n              // TODO: return null if no matching architecture, requires to fetch the config manifest\n              // https://github.com/renovatebot/renovate/discussions/22639\n              digest = manifestResponse.headers[\n                'docker-content-digest'\n              ] as string;\n            }\n          } else {\n            logger.debug(\n              {\n                registryHost,\n                dockerRepository,\n                newTag,\n                body: manifestResponse.body,\n                headers: manifestResponse.headers,\n                err: parsed.error,\n              },\n              'Failed to parse manifest response',\n            );\n          }\n        }\n\n        if (!digest) {\n          logger.debug(\n            { registryHost, dockerRepository, newTag },\n            'Extraction digest from manifest response body is deprecated',\n          );\n          digest = extractDigestFromResponseBody(manifestResponse!);\n        }\n      }\n\n      if (\n        !manifestResponse &&\n        !dockerRepository.includes('/') &&\n        !packageName.includes('/')\n      ) {\n        logger.debug(\n          `Retrying Digest for ${registryHost}/${dockerRepository} using library/ prefix`,\n        );\n        return this.getDigest(\n          {\n            registryUrl,\n            packageName: `library/${packageName}`,\n            currentDigest,\n          },\n          newValue,\n        );\n      }\n\n      if (manifestResponse) {\n        // TODO: fix types (#22198)\n        logger.debug(`Got docker digest ${digest!}`);\n      }\n    } catch (err) /* istanbul ignore next */ {\n      if (err instanceof ExternalHostError) {\n        throw err;\n      }\n      logger.debug(\n        {\n          err,\n          packageName,\n          newTag,\n        },\n        'Unknown Error looking up docker image digest',\n      );\n    }\n    return digest;\n  }\n\n  override getDigest(\n    config: DigestConfig,\n    newValue?: string,\n  ): Promise<string | null> {\n    const newTag = newValue ?? 'latest';\n    const { registryHost, dockerRepository } = getRegistryRepository(\n      config.packageName,\n      config.registryUrl!,\n    );\n    const digest = config.currentDigest ? `@${config.currentDigest}` : '';\n    return withCache(\n      {\n        namespace: 'datasource-docker-digest',\n        key: `${registryHost}:${dockerRepository}:${newTag}${digest}`,\n        fallback: true,\n        shouldCacheResult: isNonEmptyString,\n      },\n      () => this._getDigest(config, newValue),\n    );\n  }\n\n  private async _getDockerHubTags(\n    dockerRepository: string,\n  ): Promise<Release[] | null> {\n    let url = `https://hub.docker.com/v2/repositories/${dockerRepository}/tags?page_size=1000&ordering=last_updated`;\n\n    const cache = await DockerHubCache.init(dockerRepository);\n    const maxPages = GlobalConfig.get('dockerMaxPages');\n    let page = 0,\n      needNextPage = true;\n    while (needNextPage && page < maxPages) {\n      const { val, err } = await this.http\n        .getJsonSafe(url, DockerHubTagsPage)\n        .unwrap();\n\n      if (err) {\n        logger.debug({ err }, `Docker: error fetching data from DockerHub`);\n        return null;\n      }\n      page++;\n      const { results, next, count } = val;\n\n      needNextPage = cache.reconcile(results, count);\n\n      if (!next) {\n        break;\n      }\n\n      url = next;\n    }\n\n    await cache.save();\n\n    const items = cache.getItems();\n    return items.map(({ name: version, tag_last_pushed }) => {\n      const release: Release = { version };\n\n      const releaseTimestamp = asTimestamp(tag_last_pushed);\n      if (releaseTimestamp) {\n        release.releaseTimestamp = releaseTimestamp;\n      }\n\n      // Digest is intentionally not propagated — the Docker Hub tag API\n      // returns the manifest-list digest, which would bypass arch-aware\n      // resolution in `getDigest()`. `getDigest()` consults the same cache\n      // as a shortcut when no arch resolution is needed.\n      return release;\n    });\n  }\n\n  getDockerHubTags(dockerRepository: string): Promise<Release[] | null> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-hub-tags',\n        key: `${dockerRepository}`,\n      },\n      () => this._getDockerHubTags(dockerRepository),\n    );\n  }\n\n  /**\n   * docker.getReleases\n   *\n   * A docker image usually looks something like this: somehost.io/owner/repo:8.1.0-alpine\n   * In the above:\n   *  - 'somehost.io' is the registry\n   *  - 'owner/repo' is the package name\n   *  - '8.1.0-alpine' is the tag\n   *\n   * This function will filter only tags that contain a semver version\n   */\n  private async _getReleases({\n    packageName,\n    registryUrl,\n  }: GetReleasesConfig): Promise<ReleaseResult | null> {\n    const { registryHost, dockerRepository } = getRegistryRepository(\n      packageName,\n      registryUrl!,\n    );\n\n    type TagsResultType = AsyncResult<\n      Release[],\n      NonNullable<Error | 'tags-error' | 'dockerhub-error'>\n    >;\n\n    const getTags = (): TagsResultType =>\n      Result.wrapNullable(\n        this.getTags(registryHost, dockerRepository),\n        'tags-error' as const,\n      ).transform((tags) => tags.map((version) => ({ version })));\n\n    const getDockerHubTags = (): TagsResultType =>\n      Result.wrapNullable(\n        this.getDockerHubTags(dockerRepository),\n        'dockerhub-error' as const,\n      ).catch(getTags);\n\n    const tagsResult =\n      registryHost === DOCKER_HUB &&\n      !getEnv().RENOVATE_X_DOCKER_HUB_TAGS_DISABLE\n        ? getDockerHubTags()\n        : getTags();\n\n    const { val: releases, err } = await tagsResult.unwrap();\n    if (err instanceof Error) {\n      throw err;\n    } else if (err) {\n      return null;\n    }\n\n    const ret: ReleaseResult = {\n      registryUrl: registryHost,\n      releases,\n    };\n    if (dockerRepository !== packageName) {\n      // This will be reused later if a getDigest() call is made\n      ret.lookupName = dockerRepository;\n    }\n\n    const tags = releases.map((release) => release.version);\n    const latestTag = tags.includes('latest')\n      ? 'latest'\n      : (findLatestStable(tags) ?? tags.at(-1));\n\n    /* v8 ignore next 3 -- TODO: add test */\n    if (!latestTag) {\n      return ret;\n    }\n    const labels = await this.getLabels(\n      registryHost,\n      dockerRepository,\n      latestTag,\n    );\n    if (labels) {\n      if (isNonEmptyString(labels[gitRefLabel])) {\n        ret.gitRef = labels[gitRefLabel];\n      }\n      for (const label of sourceLabels) {\n        if (isNonEmptyString(labels[label])) {\n          ret.sourceUrl = labels[label];\n          break;\n        }\n      }\n      if (isNonEmptyString(labels[imageUrlLabel])) {\n        ret.homepage = labels[imageUrlLabel];\n      }\n    }\n    return ret;\n  }\n\n  getReleases(config: GetReleasesConfig): Promise<ReleaseResult | null> {\n    const { registryHost, dockerRepository } = getRegistryRepository(\n      config.packageName,\n      config.registryUrl!,\n    );\n    return withCache(\n      {\n        namespace: 'datasource-docker-releases-v2',\n        key: `${registryHost}:${dockerRepository}`,\n        cacheable: registryHost === DOCKER_HUB,\n        fallback: true,\n      },\n      () => this._getReleases(config),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuDA,MAAM,gBAAgB;CACpB,oBAAoB;CACpB,oBACE;CACF,QAAQ;EACN,aAAa;EACb,oBAAoB;EACpB,oBACE;EACF,OAAO;GACL,oBAAoB;GACpB,oBAAoB;EACtB;CACF;CACA,KAAK;EACH,oBAAoB;EACpB,WAAW;EACX,OAAO;GACL,oBAAoB;GACpB,aAAa;EACf;CACF;AACF;AAEA,IAAa,mBAAb,MAAa,yBAAyB,WAAW;CAC/C,OAAgB,KAAK;CAErB,oBAAsCA;CAEtC,sBAAwC,CAAC,UAAU;CAEnD,gBAAkC;CAElC,0BAA4C;CAC5C,uBACE;CACF,mBAAqC;CACrC,gBACE;CAEF,cAAc;EACZ,MAAM,iBAAiB,EAAE;CAC3B;CAGA,MAAc,oBACZ,cACA,kBACA,KACA,OAA2B,WACG;EAC9B,OAAO,MACL,uBAAuB,aAAa,IAAI,iBAAiB,IAAI,IAAI,IAAI,KAAK,EAC5E;EACA,IAAI;GACF,MAAM,UAAU,MAAM,eACpB,KAAK,MACL,cACA,gBACF;GACA,IAAI,CAAC,SAAS;IACZ,OAAO,KAAK,kCAAkC;IAC9C,OAAO;GACT;GACA,QAAQ,SAAS;IACf;IACA;IACA;IACA;GACF,CAAC,CAAC,KAAK,IAAI;GACX,MAAM,MAAM,GAAG,aAAa,MAAM,iBAAiB,aAAa;GAMhE,OAAO,MALwB,KAAK,KAAK,KAAK,CAAC,KAAK;IAClD;IACA,QAAQ;IACR,eAAe;GACjB,CAAC;EAEH,SAAS,kCAAgC;GACvC,IAAI,eAAe,mBACjB,MAAM;GAER,IAAI,IAAI,eAAe,KAAK;IAC1B,OAAO,MACL;KAAE;KAAc;IAAiB,GACjC,4BACF;IACA,OAAO,MAAM,EAAE,IAAI,CAAC;IACpB,OAAO;GACT;GACA,IAAI,IAAI,eAAe,KAAK;IAC1B,OAAO,MACL;KACE;KACA;KACA;KACA;IACF,GACA,4BACF;IACA,OAAO;GACT;GACA,IAAI,IAAI,eAAe,OAAO,aAAa,YAAY,GACrD,MAAM,IAAI,kBAAkB,GAAG;GAEjC,IAAI,IAAI,cAAc,OAAO,IAAI,aAAa,KAC5C,MAAM,IAAI,kBAAkB,GAAG;GAEjC,IAAI,IAAI,SAAS,aAAa;IAC5B,OAAO,MACL,EAAE,aAAa,GACf,uDACF;IACA,OAAO,MAAM,EAAE,IAAI,CAAC;IACpB,OAAO;GACT;GACA,OAAO,MACL;IACE;IACA;IACA;IACA;GACF,GACA,0CACF;GACA,OAAO;EACT;CACF;CAEA,MAAc,gBACZ,cACA,kBACA,cACmD;EACnD,OAAO,MACL,kBAAkB,aAAa,IAAI,iBAAiB,IAAI,aAAa,EACvE;EAEA,MAAM,UAAU,MAAM,eACpB,KAAK,MACL,cACA,gBACF;;EAEA,IAAI,CAAC,SAAS;GACZ,OAAO,KAAK,kCAAkC;GAC9C;EACF;EACA,MAAM,MAAM,aACV,cACA,MACA,kBACA,SACA,YACF;EACA,OAAO,MAAM,KAAK,KAAK,QACrB,KACA;GACE;GACA,QAAQ;EACV,GACA,cACF;CACF;CAEA,eACE,cACA,kBACA,cACmD;EACnD,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG;GAC5C,YAAY,OAAO;EACrB,SACM,KAAK,gBAAgB,cAAc,kBAAkB,YAAY,CACzE;CACF;CAEA,MAAc,eACZ,cACA,kBACA,cACkD;EAClD,OAAO,MACL,kBAAkB,aAAa,IAAI,iBAAiB,IAAI,aAAa,EACvE;EAEA,MAAM,UAAU,MAAM,eACpB,KAAK,MACL,cACA,gBACF;;EAEA,IAAI,CAAC,SAAS;GACZ,OAAO,KAAK,kCAAkC;GAC9C;EACF;EACA,MAAM,MAAM,aACV,cACA,MACA,kBACA,SACA,YACF;EACA,OAAO,MAAM,KAAK,KAAK,QACrB,KACA;GACE;GACA,QAAQ;EACV,GACA,aACF;CACF;CAEA,cACE,cACA,kBACA,cACkD;EAClD,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG;GAC5C,YAAY,OAAO;EACrB,SACM,KAAK,eAAe,cAAc,kBAAkB,YAAY,CACxE;CACF;CAEA,MAAc,gBACZ,UACA,kBACA,KACwB;EACxB,QACG,MAAM,KAAK,YAAY,UAAU,kBAAkB,GAAG,EAAA,EAAI,QACvD,UAAU;CAElB;CAEA,MAAc,YACZ,UACA,kBACA,KACyD;EACzD,MAAM,mBAAmB,MAAM,KAAK,oBAClC,UACA,kBACA,GACF;;EAMA,IAAI,CAAC,kBACH,OAAO;EAIT,MAAM,SAAS,aAAa,UAAU,iBAAiB,IAAI;EAC3D,IAAI,CAAC,OAAO,SAAS;GACnB,OAAO,MACL;IACE;IACA;IACA;IACA,MAAM,iBAAiB;IACvB,SAAS,iBAAiB;IAC1B,KAAK,OAAO;GACd,GACA,2BACF;GACA,OAAO;EACT;EAEA,MAAM,WAAW,OAAO;EAExB,QAAQ,SAAS,WAAjB;GACE,KAAK;GACL,KAAK,8CACH,OAAO;GACT,KAAK;GACL,KAAK;IACH,IAAI,CAAC,SAAS,UAAU,QAAQ;KAC9B,OAAO,MACL,EAAE,SAAS,GACX,qDACF;KACA,OAAO;IACT;IACA,OAAO,MACL;KAAE;KAAU;KAAkB;IAAI,GAClC,wCACF;IACA,OAAO,KAAK,YACV,UACA,kBACA,SAAS,UAAU,EAAE,CAAC,MACxB;;GAEF,SACE,OAAO;EACX;CACF;CAEA,MAAc,sBACZ,cACA,kBACA,eACoC;EACpC,IAAI;GACF,IAAI;GAEJ,IAAI;IACF,mBAAmB,MAAM,KAAK,oBAC5B,cACA,kBACA,eACA,MACF;GACF,SAAS,MAAM;IACb,MAAM,MACJ,gBAAgB,oBACZ,KAAK,uDACwC;IAEnD,IACE,OAAO,IAAI,eAAe,YAC1B,IAAI,cAAc,OAClB,IAAI,aAAa,KAGjB,OAAO;;IAIT,MAAM;GACR;GAEA,IACE,kBAAkB,QAAQ,oBACxB,0DACF,kBAAkB,QAAQ,oBACxB,8CAEF,OAAO;GAGT,MAAM,eAAe,MAAM,KAAK,gBAC9B,cACA,kBACA,aACF;GACA,IAAI,CAAC,cACH,OAAO;GAGT,MAAM,iBAAiB,MAAM,KAAK,eAChC,cACA,kBACA,YACF;GAGA,IACE,mBACC,YAAY,eAAe,QAC1B,kBAAkB,eAAe,OACnC;IACA,MAAM,eAAe,eAAe,KAAK,gBAAgB;IACzD,OAAO,MACL,kBAAkB,cAAc,2BAC9B,gBAAgB,QAEpB;IAEA,OAAO;GACT;EACF,SAAS,kCAAgC;GACvC,IAAI,IAAI,eAAe,OAAO,IAAI,YAAA,kBAChC,MAAM;GAER,OAAO,MACL;IAAE;IAAc;IAAkB;IAAe;GAAI,GACrD,0CACF;EACF;CAGF;CAEA,qBACE,cACA,kBACA,eACoC;EACpC,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG;GAC5C,YAAY,OAAO;GACnB,mBAAmB;EACrB,SAEE,KAAK,sBACH,cACA,kBACA,aACF,CACJ;CACF;CAQA,MAAc,WACZ,cACA,kBACA,KAC6C;EAC7C,OAAO,MAAM,aAAa,aAAa,IAAI,iBAAiB,IAAI,IAAI,EAAE;EAEtE,IACE,OAAO,CAAC,CAAC,8CACT,iBAAA,2BACA;GACA,OAAO,MACL,4FACF;GACA,OAAO,CAAC;EACV;EAEA,IACE,iBAAA,6BACA,iBAAiB,WAAW,UAAU,GACtC;GACA,OAAO,MAAM,kDAAkD;GAC/D,OAAO,CAAC;EACV;EACA,IAAI;GACF,IAAI,SAA6C,CAAC;GAClD,MAAM,WAAW,MAAM,KAAK,YAC1B,cACA,kBACA,GACF;GAEA,IAAI,CAAC,UAAU;IACb,OAAO,MACL;KAAE;KAAc;KAAkB;IAAI,GACtC,mBACF;IACA;GACF;GAEA,IAAI,iBAAiB,YAAY,SAAS,aACxC,SAAS,SAAS;GAGpB,QAAQ,SAAS,OAAO,WAAxB;IACE,KAAK,4CAA4C;KAC/C,IAAI,OAAA,oCAEF,OAAO;KAET,MAAM,iBAAiB,MAAM,KAAK,cAChC,cACA,kBACA,SAAS,OAAO,MAClB;KAEA,IAAI,gBAAgB;MAElB,MAAM,MAAM,kBAAkB,eAAe,IAAI;MACjD,IAAI,KACF,OAAO,eAAe;KAE1B;KACA;IACF;IACA,KAAK;IACL,KAAK,kDAAkD;KACrD,IAAI,OAAA,sCAAuB,OAAA,sCAEzB,OAAO;KAET,MAAM,iBAAiB,MAAM,KAAK,eAChC,cACA,kBACA,SAAS,OAAO,MAClB;;KAGA,IAAI,CAAC,gBACH,OAAO;KAGT,MAAM,OAAO,eAAe;KAC5B,IAAI,KAAK,QACP,SAAS;MAAE,GAAG;MAAQ,GAAG,KAAK,OAAO;KAAO;UAE5C,OAAO,MACL;MAAE,SAAS,eAAe;MAAS;KAAK,GACxC,2DACF;KAEF;IACF;GACF;GAEA,IAAI,QACF,OAAO,MACL,EACE,OACF,GACA,0BACF;GAEF,OAAO;EACT,SAAS,8DAA4D;GACnE,IAAI,eAAe,mBACjB,MAAM;GAER,IAAI,IAAI,eAAe,OAAO,IAAI,eAAe,KAC/C,OAAO,MACL;IAAE;IAAc;IAAkB;GAAI,GACtC,4BACF;QACK,IAAI,IAAI,eAAe,KAC5B,OAAO,KACL;IACE;IACA;IACA;IACA;GACF,GACA,4BACF;QACK,IAAI,IAAI,eAAe,OAAO,aAAa,YAAY,GAC5D,OAAO,KAAK,EAAE,IAAI,GAAG,4CAA4C;QAC5D,IAAI,IAAI,cAAc,OAAO,IAAI,aAAa,KACnD,OAAO,MACL;IACE;IACA;IACA;IACA;GACF,GACA,yCACF;QACK,IACL,IAAI,SAAS,kCACb,IAAI,SAAS,aAEb,OAAO,MACL;IAAE;IAAc;GAAI,GACpB,qCACF;QACK,IAAI,iBAAiB;;GAE1B,OAAO,MACL,4DACF;QAEA,OAAO,KACL;IAAE;IAAc;IAAkB;IAAK;GAAI,GAC3C,qCACF;GAEF,OAAO,CAAC;EACV;CACF;CAEA,UACE,cACA,kBACA,KAC6C;EAC7C,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG;GAC5C,YAAY;EACd,SACM,KAAK,WAAW,cAAc,kBAAkB,GAAG,CAC3D;CACF;CAEA,MAAc,oBACZ,UACA,YACmB;EACnB,IAAI,OAAiB,CAAC;EACtB,MAAM,QAAQ;EAEd,SAAS,QAAQ,MAAsB;GACrC,OAAO,GAAG,SAAS,qBAAqB,WAAW,cAAc,MAAM,QAAQ,KAAK;EACtF;EAEA,IAAI,OAAO;EACX,IAAI,MAAqB,QAAQ,IAAI;EACrC,OAAO,OAAO,QAAQ,IAAI;GACxB,MAAM,MAAsC,MAAM,KAAK,KAAK,QAC1D,KACA,gBACF;GACA,MAAM,WAAW,IAAI,KAAK,KAAK,KAAK,QAAQ,IAAI,IAAI;GACpD,OAAO,KAAK,OAAO,QAAQ;GAC3B,QAAQ;GACR,MAAM,IAAI,KAAK,iBAAiB,QAAQ,IAAI,IAAI;EAClD;EACA,OAAO;CACT;CAEA,MAAc,iBACZ,cACA,kBAC0B;EAC1B,IAAI,OAAiB,CAAC;EAQtB,IAAI,MACF,GAAG,aAAa,GAAG,iBAAiB,eAJpC,SAAS,KAAK,YAAY,KAAK,eAAe,KAAK,YAAY,IAC3D,MACA;EAGN,MAAM,iBAAiB,KAAK,KAAK;EACjC,MAAM,UAAU,MAAM,eACpB,KAAK,MACL,cACA,kBACA,GACF;EACA,IAAI,CAAC,SAAS;GACZ,OAAO,MAAM,8CAA8C;GAC3D,OAAO;EACT;EACA,IAAI,OAAO;EAKX,MAAM,QAAQ,CAHZ,mBACA,iBAE+B,CAAC,CAAC,SAAS,YAAY,IACpD,MACA,aAAa,IAAI,gBAAgB;EACrC,OAAO,MAAM;GAAE;GAAc;GAAkB;EAAM,GAAG,gBAAgB;EACxE,IAAI,uBAAuB;EAC3B,GAAG;GACD,IAAI;GACJ,IAAI;IACF,MAAM,MAAM,KAAK,KAAK,QACpB,KACA;KAAE;KAAS,QAAQ;IAAK,GACxB,gBACF;GACF,SAAS,KAAK;IACZ,IACE,CAAC,wBACD,eAAeC,gBACf,qBAAqB,GAAG,GACxB;KAEA,MAAM,GAAG,aAAa,GAAG,iBAAiB;KAC1C,MAAM,iBAAiB,KAAK,KAAK;KACjC,uBAAuB;KACvB;IACF;IACA,MAAM;GACR;GACA,OAAO,KAAK,OAAO,IAAI,KAAK,IAAI;GAChC,MAAM,aAAa,gBAAgB,IAAI,QAAQ,IAAI;GACnD,IAAI,oBAAoB,GAAG,GAEzB,IAAI,YAAY,MAAM,MAAM;IAE1B,MAAM,SAAS,SAAS,GAAG;;IAE3B,IAAI,CAAC,QAAQ;KACX,MAAM;KACN;IACF;IACA,OAAO,aAAa,OAAO,MAAM;IACjC,OAAO,aAAa,IAAI,QAAQ,WAAW,KAAK,IAAI;IACpD,MAAM,OAAO;GACf,OACE,MAAM;QAEH,IAAI,YAAY,MAAM,KAE3B,MAAM,IAAI,IAAI,WAAW,KAAK,KAAK,GAAG,CAAC,CAAC;QAExC,MAAM;GAER,QAAQ;EACV,SAAS,OAAO,OAAO;EACvB,OAAO;CACT;CAEA,MAAc,SACZ,cACA,kBAC0B;EAC1B,IAAI;GACF,MAAM,SAAS,iBAAiB;GAChC,IAAI;GACJ,IAAI,QACF,IAAI;IAEF,OAAO,MAAM,KAAK,oBAAoB,cAAc,gBAAgB;GACtE,SAAS,KAAK;IAEZ,IAAI,IAAI,eAAe,KAAK;KAC1B,OAAO,MACL;MAAE;MAAc;KAAiB,GACjC,yDACF;KACA,OAAO,MAAM,KAAK,iBAAiB,cAAc,gBAAgB;IACnE,OACE,MAAM;GAEV;QAEA,OAAO,MAAM,KAAK,iBAAiB,cAAc,gBAAgB;GAEnE,OAAO;EACT,SAAS,mCAAiC;GACxC,MAAM,MAAM,gBAAgB,oBAAoB,KAAK,MAAM;GAE3D,KACG,IAAI,eAAe,OAAO,IAAI,YAAA,qBAC/B,CAAC,iBAAiB,SAAS,GAAG,GAC9B;IACA,OAAO,MACL,qBAAqB,aAAa,GAAG,iBAAiB,uBACxD;IACA,OAAO,KAAK,QAAQ,cAAc,WAAW,kBAAkB;GACjE;GAGA,KACG,IAAI,eAAe,OAAO,IAAI,YAAA,qBAC/B,oBAAoB,IAAI,QAAQ,KAChC,iBAAiB,MAAM,GAAG,CAAC,CAAC,WAAW,GACvC;IACA,OAAO,MACL,wCAAwC,aAAa,GAAG,iBAAiB,gEAC3E;IAEA,MAAM,wBAAwB,iBAAiB,MAAM,GAAG;IACxD,MAAM,kBAAkB,sBAAsB;IAC9C,MAAM,cAAc,sBAAsB;IAE1C,OAAO,KAAK,QACV,cACA,GAAG,gBAAgB,WAAW,aAChC;GACF;GACA,IAAI,IAAI,eAAe,OAAO,aAAa,YAAY,GAAG;IACxD,OAAO,KACL;KAAE;KAAc;KAAkB;IAAI,GACtC,4CACF;IACA,MAAM,IAAI,kBAAkB,GAAG;GACjC;GACA,IAAI,IAAI,cAAc,OAAO,IAAI,aAAa,KAAK;IACjD,OAAO,KACL;KAAE;KAAc;KAAkB;IAAI,GACtC,yCACF;IACA,MAAM,IAAI,kBAAkB,GAAG;GACjC;GAEA,IAAI,CADgB,cAAc,WACrB,CAAC,CAAC,SAAS,IAAI,IAAI,GAAG;IACjC,OAAO,KACL;KAAE;KAAc;KAAkB;IAAI,GACtC,oCACF;IACA,MAAM,IAAI,kBAAkB,GAAG;GACjC;GACA,IAAI,aAAa,YAAY,GAC3B,OAAO,KAAK,EAAE,IAAI,GAAG,2BAA2B;GAElD,MAAM;EACR;CACF;CAEA,QACE,cACA,kBAC0B;EAC1B,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG;EAC1B,SACM,KAAK,SAAS,cAAc,gBAAgB,CACpD;CACF;;;;;;;;;;CAWA,MAAc,WACZ,EAAE,aAAa,YAAY,aAAa,iBACxC,UACwB;EACxB,IAAI;EACJ,IAAI;EACJ,IAAI,eAAe,YAAY;GAE7B,eAAe;GACf,mBAAmB;EACrB,OAEE,CAAC,CAAE,cAAc,oBAAqB,sBACpC,aACA,WACF;EAEF,OAAO,MAEL,aAAa,aAAa,IAAI,iBAAiB,IAAI,SAAS,EAC9D;EACA,MAAM,SAAS,iBAAiB,QAAQ,IAAI,WAAW;EACvD,IAAI,SAAwB;EAC5B,IAAI;GACF,IAAI,eAA0C;GAC9C,IAAI,iBAAiB,eAAe,aAAa,GAC/C,eAAe,MAAM,KAAK,qBACxB,cACA,kBACA,aACF;GAGF,IAAI,mBAAwC;GAC5C,IAAI,CAAC,cAAc;IAEjB,IAAI,iBAAA,2BAA6B;KAE/B,MAAM,gBAAe,MADD,eAAe,KAAK,gBAAgB,EAAA,CAC7B,gBAAgB,MAAM;KACjD,IAAI,cACF,OAAO;IAEX;IAEA,mBAAmB,MAAM,KAAK,oBAC5B,cACA,kBACA,QACA,MACF;IAEA,IACE,oBACA,OAAO,yBAAyB,iBAAiB,OAAO,GAExD,SACG,iBAAiB,QAAQ,4BAC1B;GAEN;GAEA,IACE,iBAAiB,YAAY,KAC5B,oBACC,CAAC,OAAO,yBAAyB,iBAAiB,OAAO,GAC3D;IAEA,IAAI,iBAAiB,YAAY,KAAK,iBAAA,2BAA6B;KAEjE,MAAM,gBAAe,MADD,eAAe,KAAK,gBAAgB,EAAA,CAC7B,oBAAoB,QAAQ,YAAY;KACnE,IAAI,cACF,OAAO;IAEX;IAEA,OAAO,MACL;KAAE;KAAc;IAAiB,GACjC,8FACF;IACA,mBAAmB,MAAM,KAAK,oBAC5B,cACA,kBACA,MACF;IAEA,IAAI,gBAAgB,kBAAkB;KACpC,MAAM,SAAS,aAAa,UAAU,iBAAiB,IAAI;;KAE3D,IAAI,OAAO,SAAS;MAClB,MAAM,eAAe,OAAO;MAC5B,IACE,aAAa,cACX,+DACF,aAAa,cACX;YAEG,MAAM,YAAY,aAAa,WAClC,IAAI,SAAS,UAAU,iBAAiB,cAAc;QACpD,SAAS,SAAS;QAClB;OACF;aAIG,IACL,OAAO,yBAAyB,iBAAiB,OAAO,GAIxD,SAAS,iBAAiB,QACxB;KAGN,OACE,OAAO,MACL;MACE;MACA;MACA;MACA,MAAM,iBAAiB;MACvB,SAAS,iBAAiB;MAC1B,KAAK,OAAO;KACd,GACA,mCACF;IAEJ;IAEA,IAAI,CAAC,QAAQ;KACX,OAAO,MACL;MAAE;MAAc;MAAkB;KAAO,GACzC,6DACF;KACA,SAAS,8BAA8B,gBAAiB;IAC1D;GACF;GAEA,IACE,CAAC,oBACD,CAAC,iBAAiB,SAAS,GAAG,KAC9B,CAAC,YAAY,SAAS,GAAG,GACzB;IACA,OAAO,MACL,uBAAuB,aAAa,GAAG,iBAAiB,uBAC1D;IACA,OAAO,KAAK,UACV;KACE;KACA,aAAa,WAAW;KACxB;IACF,GACA,QACF;GACF;GAEA,IAAI,kBAEF,OAAO,MAAM,qBAAqB,QAAS;EAE/C,SAAS,kCAAgC;GACvC,IAAI,eAAe,mBACjB,MAAM;GAER,OAAO,MACL;IACE;IACA;IACA;GACF,GACA,8CACF;EACF;EACA,OAAO;CACT;CAEA,UACE,QACA,UACwB;EACxB,MAAM,SAAS,YAAY;EAC3B,MAAM,EAAE,cAAc,qBAAqB,sBACzC,OAAO,aACP,OAAO,WACT;EAEA,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG,SAJjC,OAAO,gBAAgB,IAAI,OAAO,kBAAkB;GAK/D,UAAU;GACV,mBAAmB;EACrB,SACM,KAAK,WAAW,QAAQ,QAAQ,CACxC;CACF;CAEA,MAAc,kBACZ,kBAC2B;EAC3B,IAAI,MAAM,0CAA0C,iBAAiB;EAErE,MAAM,QAAQ,MAAM,eAAe,KAAK,gBAAgB;EACxD,MAAM,WAAW,aAAa,IAAI,gBAAgB;EAClD,IAAI,OAAO,GACT,eAAe;EACjB,OAAO,gBAAgB,OAAO,UAAU;GACtC,MAAM,EAAE,KAAK,QAAQ,MAAM,KAAK,KAC7B,YAAY,KAAK,iBAAiB,CAAC,CACnC,OAAO;GAEV,IAAI,KAAK;IACP,OAAO,MAAM,EAAE,IAAI,GAAG,4CAA4C;IAClE,OAAO;GACT;GACA;GACA,MAAM,EAAE,SAAS,MAAM,UAAU;GAEjC,eAAe,MAAM,UAAU,SAAS,KAAK;GAE7C,IAAI,CAAC,MACH;GAGF,MAAM;EACR;EAEA,MAAM,MAAM,KAAK;EAGjB,OADc,MAAM,SACT,CAAC,CAAC,KAAK,EAAE,MAAM,SAAS,sBAAsB;GACvD,MAAM,UAAmB,EAAE,QAAQ;GAEnC,MAAM,mBAAmB,YAAY,eAAe;GACpD,IAAI,kBACF,QAAQ,mBAAmB;GAO7B,OAAO;EACT,CAAC;CACH;CAEA,iBAAiB,kBAAqD;EACpE,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG;EACV,SACM,KAAK,kBAAkB,gBAAgB,CAC/C;CACF;;;;;;;;;;;;CAaA,MAAc,aAAa,EACzB,aACA,eACmD;EACnD,MAAM,EAAE,cAAc,qBAAqB,sBACzC,aACA,WACF;EAOA,MAAM,gBACJ,OAAO,aACL,KAAK,QAAQ,cAAc,gBAAgB,GAC3C,YACF,CAAC,CAAC,WAAW,SAAS,KAAK,KAAK,aAAa,EAAE,QAAQ,EAAE,CAAC;EAE5D,MAAM,yBACJ,OAAO,aACL,KAAK,iBAAiB,gBAAgB,GACtC,iBACF,CAAC,CAAC,MAAM,OAAO;EAQjB,MAAM,EAAE,KAAK,UAAU,QAAQ,OAL7B,iBAAA,6BACA,CAAC,OAAO,CAAC,CAAC,qCACN,iBAAiB,IACjB,QAAQ,EAAA,CAEkC,OAAO;EACvD,IAAI,eAAe,OACjB,MAAM;OACD,IAAI,KACT,OAAO;EAGT,MAAM,MAAqB;GACzB,aAAa;GACb;EACF;EACA,IAAI,qBAAqB,aAEvB,IAAI,aAAa;EAGnB,MAAM,OAAO,SAAS,KAAK,YAAY,QAAQ,OAAO;EACtD,MAAM,YAAY,KAAK,SAAS,QAAQ,IACpC,WACC,iBAAiB,IAAI,KAAK,KAAK,GAAG,EAAE;;EAGzC,IAAI,CAAC,WACH,OAAO;EAET,MAAM,SAAS,MAAM,KAAK,UACxB,cACA,kBACA,SACF;EACA,IAAI,QAAQ;GACV,IAAI,iBAAiB,OAAA,oCAAmB,GACtC,IAAI,SAAS,OAAO;GAEtB,KAAK,MAAM,SAAS,cAClB,IAAI,iBAAiB,OAAO,MAAM,GAAG;IACnC,IAAI,YAAY,OAAO;IACvB;GACF;GAEF,IAAI,iBAAiB,OAAA,+BAAqB,GACxC,IAAI,WAAW,OAAO;EAE1B;EACA,OAAO;CACT;CAEA,YAAY,QAA0D;EACpE,MAAM,EAAE,cAAc,qBAAqB,sBACzC,OAAO,aACP,OAAO,WACT;EACA,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG;GACxB,WAAW,iBAAiB;GAC5B,UAAU;EACZ,SACM,KAAK,aAAa,MAAM,CAChC;CACF;AACF"}
+{"version":3,"file":"index.js","names":["dockerVersioningId","HttpError"],"sources":["../../../../lib/modules/datasource/docker/index.ts"],"sourcesContent":["import { isNonEmptyString } from '@sindresorhus/is';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport { PAGE_NOT_FOUND_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { withCache } from '../../../util/cache/package/with-cache.ts';\nimport { getEnv } from '../../../util/env.ts';\nimport { memCacheProvider } from '../../../util/http/cache/memory-http-cache-provider.ts';\nimport { HttpError } from '../../../util/http/index.ts';\nimport type { HttpResponse } from '../../../util/http/types.ts';\nimport { hasKey } from '../../../util/object.ts';\nimport { type AsyncResult, Result } from '../../../util/result.ts';\nimport { isDockerDigest } from '../../../util/string-match.ts';\nimport { asTimestamp } from '../../../util/timestamp.ts';\nimport {\n  ensurePathPrefix,\n  joinUrlParts,\n  parseLinkHeader,\n  parseUrl,\n} from '../../../util/url.ts';\nimport { id as dockerVersioningId } from '../../versioning/docker/index.ts';\nimport { Datasource } from '../datasource.ts';\nimport type {\n  DigestConfig,\n  GetReleasesConfig,\n  Release,\n  ReleaseResult,\n} from '../types.ts';\nimport { isArtifactoryServer } from '../util.ts';\nimport {\n  DOCKER_HUB,\n  dockerDatasourceId,\n  extractDigestFromResponseBody,\n  findHelmSourceUrl,\n  findLatestStable,\n  getAuthHeaders,\n  getRegistryRepository,\n  gitRefLabel,\n  imageUrlLabel,\n  isDockerHost,\n  sourceLabel,\n  sourceLabels,\n} from './common.ts';\nimport { DockerHubCache } from './dockerhub-cache.ts';\nimport { ecrPublicRegex, ecrRegex, isECRMaxResultsError } from './ecr.ts';\nimport type {\n  DistributionManifest,\n  Manifest,\n  OciImageManifest,\n} from './schema.ts';\nimport {\n  DockerHubTagsPage,\n  ManifestJson,\n  OciHelmConfig,\n  OciImageConfig,\n  QuayTagsResponse,\n  RegistryTagsList,\n} from './schema.ts';\n\nconst defaultConfig = {\n  commitMessageTopic: '{{{depName}}} Docker tag',\n  commitMessageExtra:\n    'to {{#if isPinDigest}}{{{newDigestShort}}}{{else}}{{#if isMajor}}{{{prettyNewMajor}}}{{else}}{{{prettyNewVersion}}}{{/if}}{{/if}}',\n  digest: {\n    branchTopic: '{{{depNameSanitized}}}-{{{currentValue}}}',\n    commitMessageExtra: 'to {{newDigestShort}}',\n    commitMessageTopic:\n      '{{{depName}}}{{#if currentValue}}:{{{currentValue}}}{{/if}} Docker digest',\n    group: {\n      commitMessageTopic: '{{{groupName}}}',\n      commitMessageExtra: '',\n    },\n  },\n  pin: {\n    commitMessageExtra: '',\n    groupName: 'Docker digests',\n    group: {\n      commitMessageTopic: '{{{groupName}}}',\n      branchTopic: 'digests-pin',\n    },\n  },\n};\n\nexport class DockerDatasource extends Datasource {\n  static readonly id = dockerDatasourceId;\n\n  override readonly defaultVersioning = dockerVersioningId;\n\n  override readonly defaultRegistryUrls = [DOCKER_HUB];\n\n  override readonly defaultConfig = defaultConfig;\n\n  override readonly releaseTimestampSupport = true;\n  override readonly releaseTimestampNote =\n    'Only supported on Docker Hub: The release timestamp is determined from the `tag_last_pushed` field in the results. **NOTE**: Currently, digests will receive the same release timestamp as the `tag_last_pushed`, which means that digests may appear newer than they are - see https://github.com/renovatebot/renovate/issues/38659';\n  override readonly sourceUrlSupport = 'package';\n  override readonly sourceUrlNote =\n    'The source URL is determined from the `org.opencontainers.image.source` and `org.label-schema.vcs-url` labels present in the metadata of the **latest stable** image found on the Docker registry.';\n\n  constructor() {\n    super(DockerDatasource.id);\n  }\n\n  // TODO: debug why quay throws errors (#9612)\n  private async getManifestResponse(\n    registryHost: string,\n    dockerRepository: string,\n    tag: string,\n    mode: 'head' | 'getText' = 'getText',\n  ): Promise<HttpResponse | null> {\n    logger.debug(\n      `getManifestResponse(${registryHost}, ${dockerRepository}, ${tag}, ${mode})`,\n    );\n    try {\n      const headers = await getAuthHeaders(\n        this.http,\n        registryHost,\n        dockerRepository,\n      );\n      if (!headers) {\n        logger.warn('No docker auth found - returning');\n        return null;\n      }\n      headers.accept = [\n        'application/vnd.docker.distribution.manifest.list.v2+json',\n        'application/vnd.docker.distribution.manifest.v2+json',\n        'application/vnd.oci.image.manifest.v1+json',\n        'application/vnd.oci.image.index.v1+json',\n      ].join(', ');\n      const url = `${registryHost}/v2/${dockerRepository}/manifests/${tag}`;\n      const manifestResponse = await this.http[mode](url, {\n        headers,\n        noAuth: true,\n        cacheProvider: memCacheProvider,\n      });\n      return manifestResponse;\n    } catch (err) /* istanbul ignore next */ {\n      if (err instanceof ExternalHostError) {\n        throw err;\n      }\n      if (err.statusCode === 401) {\n        logger.debug(\n          { registryHost, dockerRepository },\n          'Unauthorized docker lookup',\n        );\n        logger.debug({ err });\n        return null;\n      }\n      if (err.statusCode === 404) {\n        logger.debug(\n          {\n            err,\n            registryHost,\n            dockerRepository,\n            tag,\n          },\n          'Docker Manifest is unknown',\n        );\n        return null;\n      }\n      if (err.statusCode === 429 && isDockerHost(registryHost)) {\n        throw new ExternalHostError(err);\n      }\n      if (err.statusCode >= 500 && err.statusCode < 600) {\n        throw new ExternalHostError(err);\n      }\n      if (err.code === 'ETIMEDOUT') {\n        logger.debug(\n          { registryHost },\n          'Timeout when attempting to connect to docker registry',\n        );\n        logger.debug({ err });\n        return null;\n      }\n      logger.debug(\n        {\n          err,\n          registryHost,\n          dockerRepository,\n          tag,\n        },\n        'Unknown Error looking up docker manifest',\n      );\n      return null;\n    }\n  }\n\n  private async _getImageConfig(\n    registryHost: string,\n    dockerRepository: string,\n    configDigest: string,\n  ): Promise<HttpResponse<OciImageConfig> | undefined> {\n    logger.trace(\n      `getImageConfig(${registryHost}, ${dockerRepository}, ${configDigest})`,\n    );\n\n    const headers = await getAuthHeaders(\n      this.http,\n      registryHost,\n      dockerRepository,\n    );\n    /* v8 ignore next 4 -- should never happen */\n    if (!headers) {\n      logger.warn('No docker auth found - returning');\n      return undefined;\n    }\n    const url = joinUrlParts(\n      registryHost,\n      'v2',\n      dockerRepository,\n      'blobs',\n      configDigest,\n    );\n    return await this.http.getJson(\n      url,\n      {\n        headers,\n        noAuth: true,\n      },\n      OciImageConfig,\n    );\n  }\n\n  getImageConfig(\n    registryHost: string,\n    dockerRepository: string,\n    configDigest: string,\n  ): Promise<HttpResponse<OciImageConfig> | undefined> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-imageconfig',\n        key: `${registryHost}:${dockerRepository}@${configDigest}`,\n        ttlMinutes: 1440 * 28,\n      },\n      () => this._getImageConfig(registryHost, dockerRepository, configDigest),\n    );\n  }\n\n  private async _getHelmConfig(\n    registryHost: string,\n    dockerRepository: string,\n    configDigest: string,\n  ): Promise<HttpResponse<OciHelmConfig> | undefined> {\n    logger.trace(\n      `getImageConfig(${registryHost}, ${dockerRepository}, ${configDigest})`,\n    );\n\n    const headers = await getAuthHeaders(\n      this.http,\n      registryHost,\n      dockerRepository,\n    );\n    /* v8 ignore next 4 -- should never happen */\n    if (!headers) {\n      logger.warn('No docker auth found - returning');\n      return undefined;\n    }\n    const url = joinUrlParts(\n      registryHost,\n      'v2',\n      dockerRepository,\n      'blobs',\n      configDigest,\n    );\n    return await this.http.getJson(\n      url,\n      {\n        headers,\n        noAuth: true,\n      },\n      OciHelmConfig,\n    );\n  }\n\n  getHelmConfig(\n    registryHost: string,\n    dockerRepository: string,\n    configDigest: string,\n  ): Promise<HttpResponse<OciHelmConfig> | undefined> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-imageconfig',\n        key: `${registryHost}:${dockerRepository}@${configDigest}`,\n        ttlMinutes: 1440 * 28,\n      },\n      () => this._getHelmConfig(registryHost, dockerRepository, configDigest),\n    );\n  }\n\n  private async getConfigDigest(\n    registry: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<string | null> {\n    return (\n      (await this.getManifest(registry, dockerRepository, tag))?.config\n        ?.digest ?? null\n    );\n  }\n\n  private async getManifestDocument(\n    registry: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<Manifest | null> {\n    const manifestResponse = await this.getManifestResponse(\n      registry,\n      dockerRepository,\n      tag,\n    );\n\n    // If getting the manifest fails here, then abort\n    // This means that the latest tag doesn't have a manifest, which shouldn't\n    // be possible\n    /* v8 ignore next 3 -- should never happen */\n    if (!manifestResponse) {\n      return null;\n    }\n\n    // Softfail on invalid manifests\n    const parsed = ManifestJson.safeParse(manifestResponse.body);\n    if (!parsed.success) {\n      logger.debug(\n        {\n          registry,\n          dockerRepository,\n          tag,\n          body: manifestResponse.body,\n          headers: manifestResponse.headers,\n          err: parsed.error,\n        },\n        'Invalid manifest response',\n      );\n      return null;\n    }\n\n    return parsed.data;\n  }\n\n  private async resolveImageManifest(\n    registry: string,\n    dockerRepository: string,\n    tag: string,\n    manifest: Manifest,\n  ): Promise<OciImageManifest | DistributionManifest | null> {\n    switch (manifest.mediaType) {\n      case 'application/vnd.docker.distribution.manifest.v2+json':\n      case 'application/vnd.oci.image.manifest.v1+json':\n        return manifest;\n      case 'application/vnd.docker.distribution.manifest.list.v2+json':\n      case 'application/vnd.oci.image.index.v1+json':\n        if (!manifest.manifests.length) {\n          logger.debug(\n            { manifest },\n            'Invalid manifest list with no manifests - returning',\n          );\n          return null;\n        }\n        logger.trace(\n          { registry, dockerRepository, tag },\n          'Found manifest list, using first image',\n        );\n        return this.getManifest(\n          registry,\n          dockerRepository,\n          manifest.manifests[0].digest,\n        );\n      // istanbul ignore next: can't happen\n      default:\n        return null;\n    }\n  }\n\n  private async getManifest(\n    registry: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<OciImageManifest | DistributionManifest | null> {\n    const manifest = await this.getManifestDocument(\n      registry,\n      dockerRepository,\n      tag,\n    );\n    if (!manifest) {\n      return null;\n    }\n    return this.resolveImageManifest(registry, dockerRepository, tag, manifest);\n  }\n\n  private async _getImageArchitecture(\n    registryHost: string,\n    dockerRepository: string,\n    currentDigest: string,\n  ): Promise<string | null | undefined> {\n    try {\n      let manifestResponse: HttpResponse | null;\n\n      try {\n        manifestResponse = await this.getManifestResponse(\n          registryHost,\n          dockerRepository,\n          currentDigest,\n          'head',\n        );\n      } catch (_err) {\n        const err =\n          _err instanceof ExternalHostError\n            ? _err.err\n            : /* istanbul ignore next: can never happen */ _err;\n\n        if (\n          typeof err.statusCode === 'number' &&\n          err.statusCode >= 500 &&\n          err.statusCode < 600\n        ) {\n          // querying the digest manifest for a non existent image leads to a 500 statusCode\n          return null;\n        }\n\n        /* istanbul ignore next */\n        throw _err;\n      }\n\n      if (\n        manifestResponse?.headers['content-type'] !==\n          'application/vnd.docker.distribution.manifest.v2+json' &&\n        manifestResponse?.headers['content-type'] !==\n          'application/vnd.oci.image.manifest.v1+json'\n      ) {\n        return null;\n      }\n\n      const configDigest = await this.getConfigDigest(\n        registryHost,\n        dockerRepository,\n        currentDigest,\n      );\n      if (!configDigest) {\n        return null;\n      }\n\n      const configResponse = await this.getImageConfig(\n        registryHost,\n        dockerRepository,\n        configDigest,\n      );\n\n      // TODO: fix me, architecture is required in spec\n      if (\n        configResponse &&\n        ('config' in configResponse.body ||\n          'architecture' in configResponse.body)\n      ) {\n        const architecture = configResponse.body.architecture ?? null;\n        logger.debug(\n          `Current digest ${currentDigest} relates to architecture ${\n            architecture ?? 'null'\n          }`,\n        );\n\n        return architecture;\n      }\n    } catch (err) /* istanbul ignore next */ {\n      if (err.statusCode !== 404 || err.message === PAGE_NOT_FOUND_ERROR) {\n        throw err;\n      }\n      logger.debug(\n        { registryHost, dockerRepository, currentDigest, err },\n        'Unknown error getting image architecture',\n      );\n    }\n\n    return undefined;\n  }\n\n  getImageArchitecture(\n    registryHost: string,\n    dockerRepository: string,\n    currentDigest: string,\n  ): Promise<string | null | undefined> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-architecture',\n        key: `${registryHost}:${dockerRepository}@${currentDigest}`,\n        ttlMinutes: 1440 * 28,\n        shouldCacheResult: isNonEmptyString,\n      },\n      () =>\n        this._getImageArchitecture(\n          registryHost,\n          dockerRepository,\n          currentDigest,\n        ),\n    );\n  }\n\n  /*\n   * docker.getLabels\n   *\n   * This function will:\n   *  - Return the labels for the requested image\n   */\n  private async _getLabels(\n    registryHost: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<Record<string, string> | undefined> {\n    logger.debug(`getLabels(${registryHost}, ${dockerRepository}, ${tag})`);\n    // Skip Docker Hub image if RENOVATE_X_DOCKER_HUB_DISABLE_LABEL_LOOKUP is set\n    if (\n      getEnv().RENOVATE_X_DOCKER_HUB_DISABLE_LABEL_LOOKUP &&\n      registryHost === DOCKER_HUB\n    ) {\n      logger.debug(\n        'Docker Hub image - skipping label lookup due to RENOVATE_X_DOCKER_HUB_DISABLE_LABEL_LOOKUP',\n      );\n      return {};\n    }\n    try {\n      let labels: Record<string, string> | undefined = {};\n      const manifestDocument = await this.getManifestDocument(\n        registryHost,\n        dockerRepository,\n        tag,\n      );\n\n      if (!manifestDocument) {\n        logger.debug(\n          { registryHost, dockerRepository, tag },\n          'No manifest found',\n        );\n        return undefined;\n      }\n\n      if ('annotations' in manifestDocument && manifestDocument.annotations) {\n        labels = manifestDocument.annotations;\n      }\n\n      if ('manifests' in manifestDocument) {\n        const descriptorAnnotations = manifestDocument.manifests\n          .map((descriptor) => descriptor.annotations)\n          .find(\n            (annotations) =>\n              isNonEmptyString(annotations?.[sourceLabel]) &&\n              isNonEmptyString(annotations?.[gitRefLabel]),\n          );\n        if (descriptorAnnotations) {\n          labels = { ...labels, ...descriptorAnnotations };\n        }\n      }\n\n      if (\n        'manifests' in manifestDocument &&\n        labels[sourceLabel] &&\n        labels[gitRefLabel]\n      ) {\n        return labels;\n      }\n\n      const manifest = await this.resolveImageManifest(\n        registryHost,\n        dockerRepository,\n        tag,\n        manifestDocument,\n      );\n      if (!manifest) {\n        return undefined;\n      }\n\n      if ('annotations' in manifest && manifest.annotations) {\n        labels = { ...labels, ...manifest.annotations };\n      }\n\n      switch (manifest.config.mediaType) {\n        case 'application/vnd.cncf.helm.config.v1+json': {\n          if (labels[sourceLabel]) {\n            // we already have the source url, so no need to pull the config\n            return labels;\n          }\n          const configResponse = await this.getHelmConfig(\n            registryHost,\n            dockerRepository,\n            manifest.config.digest,\n          );\n\n          if (configResponse) {\n            // Helm chart\n            const url = findHelmSourceUrl(configResponse.body);\n            if (url) {\n              labels[sourceLabel] = url;\n            }\n          }\n          break;\n        }\n        case 'application/vnd.oci.image.config.v1+json':\n        case 'application/vnd.docker.container.image.v1+json': {\n          if (labels[sourceLabel] && labels[gitRefLabel]) {\n            // we already have the source url, so no need to pull the config\n            return labels;\n          }\n          const configResponse = await this.getImageConfig(\n            registryHost,\n            dockerRepository,\n            manifest.config.digest,\n          );\n\n          /* v8 ignore next 3 -- should never happen */\n          if (!configResponse) {\n            return labels;\n          }\n\n          const body = configResponse.body;\n          if (body.config) {\n            labels = { ...labels, ...body.config.Labels };\n          } else {\n            logger.debug(\n              { headers: configResponse.headers, body },\n              `manifest blob response body missing the \"config\" property`,\n            );\n          }\n          break;\n        }\n      }\n\n      if (labels) {\n        logger.debug(\n          {\n            labels,\n          },\n          'found labels in manifest',\n        );\n      }\n      return labels;\n    } catch (err) /* istanbul ignore next: should be tested in future */ {\n      if (err instanceof ExternalHostError) {\n        throw err;\n      }\n      if (err.statusCode === 400 || err.statusCode === 401) {\n        logger.debug(\n          { registryHost, dockerRepository, err },\n          'Unauthorized docker lookup',\n        );\n      } else if (err.statusCode === 404) {\n        logger.warn(\n          {\n            err,\n            registryHost,\n            dockerRepository,\n            tag,\n          },\n          'Config Manifest is unknown',\n        );\n      } else if (err.statusCode === 429 && isDockerHost(registryHost)) {\n        logger.warn({ err }, 'docker registry failure: too many requests');\n      } else if (err.statusCode >= 500 && err.statusCode < 600) {\n        logger.debug(\n          {\n            err,\n            registryHost,\n            dockerRepository,\n            tag,\n          },\n          'docker registry failure: internal error',\n        );\n      } else if (\n        err.code === 'ERR_TLS_CERT_ALTNAME_INVALID' ||\n        err.code === 'ETIMEDOUT'\n      ) {\n        logger.debug(\n          { registryHost, err },\n          'Error connecting to docker registry',\n        );\n      } else if (registryHost === 'https://quay.io') {\n        // istanbul ignore next\n        logger.debug(\n          'Ignoring quay.io errors until they fully support v2 schema',\n        );\n      } else {\n        logger.info(\n          { registryHost, dockerRepository, tag, err },\n          'Unknown error getting Docker labels',\n        );\n      }\n      return {};\n    }\n  }\n\n  getLabels(\n    registryHost: string,\n    dockerRepository: string,\n    tag: string,\n  ): Promise<Record<string, string> | undefined> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-labels',\n        key: `${registryHost}:${dockerRepository}:${tag}`,\n        ttlMinutes: 24 * 60,\n      },\n      () => this._getLabels(registryHost, dockerRepository, tag),\n    );\n  }\n\n  private async getTagsQuayRegistry(\n    registry: string,\n    repository: string,\n  ): Promise<string[]> {\n    let tags: string[] = [];\n    const limit = 100;\n\n    function pageUrl(page: number): string {\n      return `${registry}/api/v1/repository/${repository}/tag/?limit=${limit}&page=${page}&onlyActiveTags=true`;\n    }\n\n    let page = 1;\n    let url: string | null = pageUrl(page);\n    while (url && page <= 20) {\n      const res: HttpResponse<QuayTagsResponse> = await this.http.getJson(\n        url,\n        QuayTagsResponse,\n      );\n      const pageTags = res.body.tags.map((tag) => tag.name);\n      tags = tags.concat(pageTags);\n      page += 1;\n      url = res.body.has_additional ? pageUrl(page) : null;\n    }\n    return tags;\n  }\n\n  private async getDockerApiTags(\n    registryHost: string,\n    dockerRepository: string,\n  ): Promise<string[] | null> {\n    let tags: string[] = [];\n    // AWS ECR limits the maximum number of results to 1000\n    // See https://docs.aws.amazon.com/AmazonECR/latest/APIReference/API_DescribeRepositories.html#ECR-DescribeRepositories-request-maxResults\n    // See https://docs.aws.amazon.com/AmazonECRPublic/latest/APIReference/API_DescribeRepositories.html#ecrpublic-DescribeRepositories-request-maxResults\n    const limit =\n      ecrRegex.test(registryHost) || ecrPublicRegex.test(registryHost)\n        ? 1000\n        : 10000;\n    let url: string | null =\n      `${registryHost}/${dockerRepository}/tags/list?n=${limit}`;\n    url = ensurePathPrefix(url, '/v2');\n    const headers = await getAuthHeaders(\n      this.http,\n      registryHost,\n      dockerRepository,\n      url,\n    );\n    if (!headers) {\n      logger.debug('Failed to get authHeaders for getTags lookup');\n      return null;\n    }\n    let page = 0;\n    const hostsNeedingAllPages = [\n      'https://ghcr.io', // GHCR sorts from oldest to newest, so we need to get all pages\n      'https://quay.io', // Quay sorts from oldest to newest, so we need to get all pages\n    ];\n    const pages = hostsNeedingAllPages.includes(registryHost)\n      ? 1000\n      : GlobalConfig.get('dockerMaxPages');\n    logger.trace({ registryHost, dockerRepository, pages }, 'docker.getTags');\n    let foundMaxResultsError = false;\n    do {\n      let res: HttpResponse<RegistryTagsList>;\n      try {\n        res = await this.http.getJson(\n          url,\n          { headers, noAuth: true },\n          RegistryTagsList,\n        );\n      } catch (err) {\n        if (\n          !foundMaxResultsError &&\n          err instanceof HttpError &&\n          isECRMaxResultsError(err)\n        ) {\n          const maxResults = 1000;\n          url = `${registryHost}/${dockerRepository}/tags/list?n=${maxResults}`;\n          url = ensurePathPrefix(url, '/v2');\n          foundMaxResultsError = true;\n          continue;\n        }\n        throw err;\n      }\n      tags = tags.concat(res.body.tags);\n      const linkHeader = parseLinkHeader(res.headers.link);\n      if (isArtifactoryServer(res)) {\n        // Artifactory bug: next link comes back without virtual-repo prefix (RTFACT-18971)\n        if (linkHeader?.next?.last) {\n          // parse the current URL, strip any old \"last\" param, then set the new one\n          const parsed = parseUrl(url);\n          // v8 ignore if: url is always a valid HTTP URL as `ensurePathPrefix`\n          if (!parsed) {\n            url = null;\n            break;\n          }\n          parsed.searchParams.delete('last');\n          parsed.searchParams.set('last', linkHeader.next.last);\n          url = parsed.href;\n        } else {\n          url = null;\n        }\n      } else if (linkHeader?.next?.url) {\n        // for the normal case we can still use URL to resolve relative-next\n        url = new URL(linkHeader.next.url, url).href;\n      } else {\n        url = null;\n      }\n      page += 1;\n    } while (url && page < pages);\n    return tags;\n  }\n\n  private async _getTags(\n    registryHost: string,\n    dockerRepository: string,\n  ): Promise<string[] | null> {\n    try {\n      const isQuay = registryHost === 'https://quay.io';\n      let tags: string[] | null;\n      if (isQuay) {\n        try {\n          // Due to pagination and sorting limits on Quay Docker v2 API implementation we try the Quay v1 API first\n          tags = await this.getTagsQuayRegistry(registryHost, dockerRepository);\n        } catch (err) {\n          // If we get a 401 Unauthorized error (v1 API requires separate auth for private images), fall back to Docker v2 API\n          if (err.statusCode === 401) {\n            logger.debug(\n              { registryHost, dockerRepository },\n              'Quay v1 API unauthorized, falling back to Docker v2 API',\n            );\n            tags = await this.getDockerApiTags(registryHost, dockerRepository);\n          } else {\n            throw err;\n          }\n        }\n      } else {\n        tags = await this.getDockerApiTags(registryHost, dockerRepository);\n      }\n      return tags;\n    } catch (_err) /* istanbul ignore next */ {\n      const err = _err instanceof ExternalHostError ? _err.err : _err;\n\n      if (\n        (err.statusCode === 404 || err.message === PAGE_NOT_FOUND_ERROR) &&\n        !dockerRepository.includes('/')\n      ) {\n        logger.debug(\n          `Retrying Tags for ${registryHost}/${dockerRepository} using library/ prefix`,\n        );\n        return this.getTags(registryHost, `library/${dockerRepository}`);\n      }\n      // JFrog Artifactory - Retry handling when resolving Docker Official Images\n      // These follow the format of {{registryHost}}{{jFrogRepository}}/library/{{dockerRepository}}\n      if (\n        (err.statusCode === 404 || err.message === PAGE_NOT_FOUND_ERROR) &&\n        isArtifactoryServer(err.response) &&\n        dockerRepository.split('/').length === 2\n      ) {\n        logger.debug(\n          `JFrog Artifactory: Retrying Tags for ${registryHost}/${dockerRepository} using library/ path between JFrog virtual repository and image`,\n        );\n\n        const dockerRepositoryParts = dockerRepository.split('/');\n        const jfrogRepository = dockerRepositoryParts[0];\n        const dockerImage = dockerRepositoryParts[1];\n\n        return this.getTags(\n          registryHost,\n          `${jfrogRepository}/library/${dockerImage}`,\n        );\n      }\n      if (err.statusCode === 429 && isDockerHost(registryHost)) {\n        logger.warn(\n          { registryHost, dockerRepository, err },\n          'docker registry failure: too many requests',\n        );\n        throw new ExternalHostError(err);\n      }\n      if (err.statusCode >= 500 && err.statusCode < 600) {\n        logger.warn(\n          { registryHost, dockerRepository, err },\n          'docker registry failure: internal error',\n        );\n        throw new ExternalHostError(err);\n      }\n      const errorCodes = ['ECONNRESET', 'ETIMEDOUT'];\n      if (errorCodes.includes(err.code)) {\n        logger.warn(\n          { registryHost, dockerRepository, err },\n          'docker registry connection failure',\n        );\n        throw new ExternalHostError(err);\n      }\n      if (isDockerHost(registryHost)) {\n        logger.info({ err }, 'Docker Hub lookup failure');\n      }\n      throw _err;\n    }\n  }\n\n  getTags(\n    registryHost: string,\n    dockerRepository: string,\n  ): Promise<string[] | null> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-tags',\n        key: `${registryHost}:${dockerRepository}`,\n      },\n      () => this._getTags(registryHost, dockerRepository),\n    );\n  }\n\n  /**\n   * docker.getDigest\n   *\n   * The `newValue` supplied here should be a valid tag for the docker image.\n   *\n   * This function will:\n   *  - Look up a sha256 digest for a tag on its registry\n   *  - Return the digest as a string\n   */\n  private async _getDigest(\n    { registryUrl, lookupName, packageName, currentDigest }: DigestConfig,\n    newValue?: string,\n  ): Promise<string | null> {\n    let registryHost: string;\n    let dockerRepository: string;\n    if (registryUrl && lookupName) {\n      // Reuse the resolved values from getReleases()\n      registryHost = registryUrl;\n      dockerRepository = lookupName;\n    } else {\n      // Resolve values independently\n      ({ registryHost, dockerRepository } = getRegistryRepository(\n        packageName,\n        registryUrl!,\n      ));\n    }\n    logger.debug(\n      // TODO: types (#22198)\n      `getDigest(${registryHost}, ${dockerRepository}, ${newValue})`,\n    );\n    const newTag = isNonEmptyString(newValue) ? newValue : 'latest';\n    let digest: string | null = null;\n    try {\n      let architecture: string | null | undefined = null;\n      if (currentDigest && isDockerDigest(currentDigest)) {\n        architecture = await this.getImageArchitecture(\n          registryHost,\n          dockerRepository,\n          currentDigest,\n        );\n      }\n\n      let manifestResponse: HttpResponse | null = null;\n      if (!architecture) {\n        // Reuse the digest cached from the Docker Hub tag API\n        if (registryHost === DOCKER_HUB) {\n          const cache = await DockerHubCache.init(dockerRepository);\n          const cachedDigest = cache.getDigestForTag(newTag);\n          if (cachedDigest) {\n            return cachedDigest;\n          }\n        }\n\n        manifestResponse = await this.getManifestResponse(\n          registryHost,\n          dockerRepository,\n          newTag,\n          'head',\n        );\n\n        if (\n          manifestResponse &&\n          hasKey('docker-content-digest', manifestResponse.headers)\n        ) {\n          digest =\n            (manifestResponse.headers['docker-content-digest'] as string) ||\n            null;\n        }\n      }\n\n      if (\n        isNonEmptyString(architecture) ||\n        (manifestResponse &&\n          !hasKey('docker-content-digest', manifestResponse.headers))\n      ) {\n        // Reuse the per-arch digest cached from the Docker Hub tag API\n        if (isNonEmptyString(architecture) && registryHost === DOCKER_HUB) {\n          const cache = await DockerHubCache.init(dockerRepository);\n          const cachedDigest = cache.getArchDigestForTag(newTag, architecture);\n          if (cachedDigest) {\n            return cachedDigest;\n          }\n        }\n\n        logger.debug(\n          { registryHost, dockerRepository },\n          'Architecture-specific digest or missing docker-content-digest header - pulling full manifest',\n        );\n        manifestResponse = await this.getManifestResponse(\n          registryHost,\n          dockerRepository,\n          newTag,\n        );\n\n        if (architecture && manifestResponse) {\n          const parsed = ManifestJson.safeParse(manifestResponse.body);\n          /* istanbul ignore else: hard to test */\n          if (parsed.success) {\n            const manifestList = parsed.data;\n            if (\n              manifestList.mediaType ===\n                'application/vnd.docker.distribution.manifest.list.v2+json' ||\n              manifestList.mediaType ===\n                'application/vnd.oci.image.index.v1+json'\n            ) {\n              for (const manifest of manifestList.manifests) {\n                if (manifest.platform?.architecture === architecture) {\n                  digest = manifest.digest;\n                  break;\n                }\n              }\n              // TODO: return null if no matching architecture digest found\n              // https://github.com/renovatebot/renovate/discussions/22639\n            } else if (\n              hasKey('docker-content-digest', manifestResponse.headers)\n            ) {\n              // TODO: return null if no matching architecture, requires to fetch the config manifest\n              // https://github.com/renovatebot/renovate/discussions/22639\n              digest = manifestResponse.headers[\n                'docker-content-digest'\n              ] as string;\n            }\n          } else {\n            logger.debug(\n              {\n                registryHost,\n                dockerRepository,\n                newTag,\n                body: manifestResponse.body,\n                headers: manifestResponse.headers,\n                err: parsed.error,\n              },\n              'Failed to parse manifest response',\n            );\n          }\n        }\n\n        if (!digest) {\n          logger.debug(\n            { registryHost, dockerRepository, newTag },\n            'Extraction digest from manifest response body is deprecated',\n          );\n          digest = extractDigestFromResponseBody(manifestResponse!);\n        }\n      }\n\n      if (\n        !manifestResponse &&\n        !dockerRepository.includes('/') &&\n        !packageName.includes('/')\n      ) {\n        logger.debug(\n          `Retrying Digest for ${registryHost}/${dockerRepository} using library/ prefix`,\n        );\n        return this.getDigest(\n          {\n            registryUrl,\n            packageName: `library/${packageName}`,\n            currentDigest,\n          },\n          newValue,\n        );\n      }\n\n      if (manifestResponse) {\n        // TODO: fix types (#22198)\n        logger.debug(`Got docker digest ${digest!}`);\n      }\n    } catch (err) /* istanbul ignore next */ {\n      if (err instanceof ExternalHostError) {\n        throw err;\n      }\n      logger.debug(\n        {\n          err,\n          packageName,\n          newTag,\n        },\n        'Unknown Error looking up docker image digest',\n      );\n    }\n    return digest;\n  }\n\n  override getDigest(\n    config: DigestConfig,\n    newValue?: string,\n  ): Promise<string | null> {\n    const newTag = newValue ?? 'latest';\n    const { registryHost, dockerRepository } = getRegistryRepository(\n      config.packageName,\n      config.registryUrl!,\n    );\n    const digest = config.currentDigest ? `@${config.currentDigest}` : '';\n    return withCache(\n      {\n        namespace: 'datasource-docker-digest',\n        key: `${registryHost}:${dockerRepository}:${newTag}${digest}`,\n        fallback: true,\n        shouldCacheResult: isNonEmptyString,\n      },\n      () => this._getDigest(config, newValue),\n    );\n  }\n\n  private async _getDockerHubTags(\n    dockerRepository: string,\n  ): Promise<Release[] | null> {\n    let url = `https://hub.docker.com/v2/repositories/${dockerRepository}/tags?page_size=1000&ordering=last_updated`;\n\n    const cache = await DockerHubCache.init(dockerRepository);\n    const maxPages = GlobalConfig.get('dockerMaxPages');\n    let page = 0,\n      needNextPage = true;\n    while (needNextPage && page < maxPages) {\n      const { val, err } = await this.http\n        .getJsonSafe(url, DockerHubTagsPage)\n        .unwrap();\n\n      if (err) {\n        logger.debug({ err }, `Docker: error fetching data from DockerHub`);\n        return null;\n      }\n      page++;\n      const { results, next, count } = val;\n\n      needNextPage = cache.reconcile(results, count);\n\n      if (!next) {\n        break;\n      }\n\n      url = next;\n    }\n\n    await cache.save();\n\n    const items = cache.getItems();\n    return items.map(({ name: version, tag_last_pushed }) => {\n      const release: Release = { version };\n\n      const releaseTimestamp = asTimestamp(tag_last_pushed);\n      if (releaseTimestamp) {\n        release.releaseTimestamp = releaseTimestamp;\n      }\n\n      // Digest is intentionally not propagated — the Docker Hub tag API\n      // returns the manifest-list digest, which would bypass arch-aware\n      // resolution in `getDigest()`. `getDigest()` consults the same cache\n      // as a shortcut when no arch resolution is needed.\n      return release;\n    });\n  }\n\n  getDockerHubTags(dockerRepository: string): Promise<Release[] | null> {\n    return withCache(\n      {\n        namespace: 'datasource-docker-hub-tags',\n        key: `${dockerRepository}`,\n      },\n      () => this._getDockerHubTags(dockerRepository),\n    );\n  }\n\n  /**\n   * docker.getReleases\n   *\n   * A docker image usually looks something like this: somehost.io/owner/repo:8.1.0-alpine\n   * In the above:\n   *  - 'somehost.io' is the registry\n   *  - 'owner/repo' is the package name\n   *  - '8.1.0-alpine' is the tag\n   *\n   * This function will filter only tags that contain a semver version\n   */\n  private async _getReleases({\n    packageName,\n    registryUrl,\n  }: GetReleasesConfig): Promise<ReleaseResult | null> {\n    const { registryHost, dockerRepository } = getRegistryRepository(\n      packageName,\n      registryUrl!,\n    );\n\n    type TagsResultType = AsyncResult<\n      Release[],\n      NonNullable<Error | 'tags-error' | 'dockerhub-error'>\n    >;\n\n    const getTags = (): TagsResultType =>\n      Result.wrapNullable(\n        this.getTags(registryHost, dockerRepository),\n        'tags-error' as const,\n      ).transform((tags) => tags.map((version) => ({ version })));\n\n    const getDockerHubTags = (): TagsResultType =>\n      Result.wrapNullable(\n        this.getDockerHubTags(dockerRepository),\n        'dockerhub-error' as const,\n      ).catch(getTags);\n\n    const tagsResult =\n      registryHost === DOCKER_HUB &&\n      !getEnv().RENOVATE_X_DOCKER_HUB_TAGS_DISABLE\n        ? getDockerHubTags()\n        : getTags();\n\n    const { val: releases, err } = await tagsResult.unwrap();\n    if (err instanceof Error) {\n      throw err;\n    } else if (err) {\n      return null;\n    }\n\n    const ret: ReleaseResult = {\n      registryUrl: registryHost,\n      releases,\n    };\n    if (dockerRepository !== packageName) {\n      // This will be reused later if a getDigest() call is made\n      ret.lookupName = dockerRepository;\n    }\n\n    const tags = releases.map((release) => release.version);\n    const latestTag = tags.includes('latest')\n      ? 'latest'\n      : (findLatestStable(tags) ?? tags.at(-1));\n\n    /* v8 ignore next 3 -- TODO: add test */\n    if (!latestTag) {\n      return ret;\n    }\n    const labels = await this.getLabels(\n      registryHost,\n      dockerRepository,\n      latestTag,\n    );\n    if (labels) {\n      if (isNonEmptyString(labels[gitRefLabel])) {\n        ret.gitRef = labels[gitRefLabel];\n      }\n      for (const label of sourceLabels) {\n        if (isNonEmptyString(labels[label])) {\n          ret.sourceUrl = labels[label];\n          break;\n        }\n      }\n      if (isNonEmptyString(labels[imageUrlLabel])) {\n        ret.homepage = labels[imageUrlLabel];\n      }\n    }\n    return ret;\n  }\n\n  getReleases(config: GetReleasesConfig): Promise<ReleaseResult | null> {\n    const { registryHost, dockerRepository } = getRegistryRepository(\n      config.packageName,\n      config.registryUrl!,\n    );\n    return withCache(\n      {\n        namespace: 'datasource-docker-releases-v2',\n        key: `${registryHost}:${dockerRepository}`,\n        cacheable: registryHost === DOCKER_HUB,\n        fallback: true,\n      },\n      () => this._getReleases(config),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA2DA,MAAM,gBAAgB;CACpB,oBAAoB;CACpB,oBACE;CACF,QAAQ;EACN,aAAa;EACb,oBAAoB;EACpB,oBACE;EACF,OAAO;GACL,oBAAoB;GACpB,oBAAoB;EACtB;CACF;CACA,KAAK;EACH,oBAAoB;EACpB,WAAW;EACX,OAAO;GACL,oBAAoB;GACpB,aAAa;EACf;CACF;AACF;AAEA,IAAa,mBAAb,MAAa,yBAAyB,WAAW;CAC/C,OAAgB,KAAK;CAErB,oBAAsCA;CAEtC,sBAAwC,CAAC,UAAU;CAEnD,gBAAkC;CAElC,0BAA4C;CAC5C,uBACE;CACF,mBAAqC;CACrC,gBACE;CAEF,cAAc;EACZ,MAAM,iBAAiB,EAAE;CAC3B;CAGA,MAAc,oBACZ,cACA,kBACA,KACA,OAA2B,WACG;EAC9B,OAAO,MACL,uBAAuB,aAAa,IAAI,iBAAiB,IAAI,IAAI,IAAI,KAAK,EAC5E;EACA,IAAI;GACF,MAAM,UAAU,MAAM,eACpB,KAAK,MACL,cACA,gBACF;GACA,IAAI,CAAC,SAAS;IACZ,OAAO,KAAK,kCAAkC;IAC9C,OAAO;GACT;GACA,QAAQ,SAAS;IACf;IACA;IACA;IACA;GACF,CAAC,CAAC,KAAK,IAAI;GACX,MAAM,MAAM,GAAG,aAAa,MAAM,iBAAiB,aAAa;GAMhE,OAAO,MALwB,KAAK,KAAK,KAAK,CAAC,KAAK;IAClD;IACA,QAAQ;IACR,eAAe;GACjB,CAAC;EAEH,SAAS,kCAAgC;GACvC,IAAI,eAAe,mBACjB,MAAM;GAER,IAAI,IAAI,eAAe,KAAK;IAC1B,OAAO,MACL;KAAE;KAAc;IAAiB,GACjC,4BACF;IACA,OAAO,MAAM,EAAE,IAAI,CAAC;IACpB,OAAO;GACT;GACA,IAAI,IAAI,eAAe,KAAK;IAC1B,OAAO,MACL;KACE;KACA;KACA;KACA;IACF,GACA,4BACF;IACA,OAAO;GACT;GACA,IAAI,IAAI,eAAe,OAAO,aAAa,YAAY,GACrD,MAAM,IAAI,kBAAkB,GAAG;GAEjC,IAAI,IAAI,cAAc,OAAO,IAAI,aAAa,KAC5C,MAAM,IAAI,kBAAkB,GAAG;GAEjC,IAAI,IAAI,SAAS,aAAa;IAC5B,OAAO,MACL,EAAE,aAAa,GACf,uDACF;IACA,OAAO,MAAM,EAAE,IAAI,CAAC;IACpB,OAAO;GACT;GACA,OAAO,MACL;IACE;IACA;IACA;IACA;GACF,GACA,0CACF;GACA,OAAO;EACT;CACF;CAEA,MAAc,gBACZ,cACA,kBACA,cACmD;EACnD,OAAO,MACL,kBAAkB,aAAa,IAAI,iBAAiB,IAAI,aAAa,EACvE;EAEA,MAAM,UAAU,MAAM,eACpB,KAAK,MACL,cACA,gBACF;;EAEA,IAAI,CAAC,SAAS;GACZ,OAAO,KAAK,kCAAkC;GAC9C;EACF;EACA,MAAM,MAAM,aACV,cACA,MACA,kBACA,SACA,YACF;EACA,OAAO,MAAM,KAAK,KAAK,QACrB,KACA;GACE;GACA,QAAQ;EACV,GACA,cACF;CACF;CAEA,eACE,cACA,kBACA,cACmD;EACnD,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG;GAC5C,YAAY,OAAO;EACrB,SACM,KAAK,gBAAgB,cAAc,kBAAkB,YAAY,CACzE;CACF;CAEA,MAAc,eACZ,cACA,kBACA,cACkD;EAClD,OAAO,MACL,kBAAkB,aAAa,IAAI,iBAAiB,IAAI,aAAa,EACvE;EAEA,MAAM,UAAU,MAAM,eACpB,KAAK,MACL,cACA,gBACF;;EAEA,IAAI,CAAC,SAAS;GACZ,OAAO,KAAK,kCAAkC;GAC9C;EACF;EACA,MAAM,MAAM,aACV,cACA,MACA,kBACA,SACA,YACF;EACA,OAAO,MAAM,KAAK,KAAK,QACrB,KACA;GACE;GACA,QAAQ;EACV,GACA,aACF;CACF;CAEA,cACE,cACA,kBACA,cACkD;EAClD,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG;GAC5C,YAAY,OAAO;EACrB,SACM,KAAK,eAAe,cAAc,kBAAkB,YAAY,CACxE;CACF;CAEA,MAAc,gBACZ,UACA,kBACA,KACwB;EACxB,QACG,MAAM,KAAK,YAAY,UAAU,kBAAkB,GAAG,EAAA,EAAI,QACvD,UAAU;CAElB;CAEA,MAAc,oBACZ,UACA,kBACA,KAC0B;EAC1B,MAAM,mBAAmB,MAAM,KAAK,oBAClC,UACA,kBACA,GACF;;EAMA,IAAI,CAAC,kBACH,OAAO;EAIT,MAAM,SAAS,aAAa,UAAU,iBAAiB,IAAI;EAC3D,IAAI,CAAC,OAAO,SAAS;GACnB,OAAO,MACL;IACE;IACA;IACA;IACA,MAAM,iBAAiB;IACvB,SAAS,iBAAiB;IAC1B,KAAK,OAAO;GACd,GACA,2BACF;GACA,OAAO;EACT;EAEA,OAAO,OAAO;CAChB;CAEA,MAAc,qBACZ,UACA,kBACA,KACA,UACyD;EACzD,QAAQ,SAAS,WAAjB;GACE,KAAK;GACL,KAAK,8CACH,OAAO;GACT,KAAK;GACL,KAAK;IACH,IAAI,CAAC,SAAS,UAAU,QAAQ;KAC9B,OAAO,MACL,EAAE,SAAS,GACX,qDACF;KACA,OAAO;IACT;IACA,OAAO,MACL;KAAE;KAAU;KAAkB;IAAI,GAClC,wCACF;IACA,OAAO,KAAK,YACV,UACA,kBACA,SAAS,UAAU,EAAE,CAAC,MACxB;;GAEF,SACE,OAAO;EACX;CACF;CAEA,MAAc,YACZ,UACA,kBACA,KACyD;EACzD,MAAM,WAAW,MAAM,KAAK,oBAC1B,UACA,kBACA,GACF;EACA,IAAI,CAAC,UACH,OAAO;EAET,OAAO,KAAK,qBAAqB,UAAU,kBAAkB,KAAK,QAAQ;CAC5E;CAEA,MAAc,sBACZ,cACA,kBACA,eACoC;EACpC,IAAI;GACF,IAAI;GAEJ,IAAI;IACF,mBAAmB,MAAM,KAAK,oBAC5B,cACA,kBACA,eACA,MACF;GACF,SAAS,MAAM;IACb,MAAM,MACJ,gBAAgB,oBACZ,KAAK,uDACwC;IAEnD,IACE,OAAO,IAAI,eAAe,YAC1B,IAAI,cAAc,OAClB,IAAI,aAAa,KAGjB,OAAO;;IAIT,MAAM;GACR;GAEA,IACE,kBAAkB,QAAQ,oBACxB,0DACF,kBAAkB,QAAQ,oBACxB,8CAEF,OAAO;GAGT,MAAM,eAAe,MAAM,KAAK,gBAC9B,cACA,kBACA,aACF;GACA,IAAI,CAAC,cACH,OAAO;GAGT,MAAM,iBAAiB,MAAM,KAAK,eAChC,cACA,kBACA,YACF;GAGA,IACE,mBACC,YAAY,eAAe,QAC1B,kBAAkB,eAAe,OACnC;IACA,MAAM,eAAe,eAAe,KAAK,gBAAgB;IACzD,OAAO,MACL,kBAAkB,cAAc,2BAC9B,gBAAgB,QAEpB;IAEA,OAAO;GACT;EACF,SAAS,kCAAgC;GACvC,IAAI,IAAI,eAAe,OAAO,IAAI,YAAA,kBAChC,MAAM;GAER,OAAO,MACL;IAAE;IAAc;IAAkB;IAAe;GAAI,GACrD,0CACF;EACF;CAGF;CAEA,qBACE,cACA,kBACA,eACoC;EACpC,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG;GAC5C,YAAY,OAAO;GACnB,mBAAmB;EACrB,SAEE,KAAK,sBACH,cACA,kBACA,aACF,CACJ;CACF;CAQA,MAAc,WACZ,cACA,kBACA,KAC6C;EAC7C,OAAO,MAAM,aAAa,aAAa,IAAI,iBAAiB,IAAI,IAAI,EAAE;EAEtE,IACE,OAAO,CAAC,CAAC,8CACT,iBAAA,2BACA;GACA,OAAO,MACL,4FACF;GACA,OAAO,CAAC;EACV;EACA,IAAI;GACF,IAAI,SAA6C,CAAC;GAClD,MAAM,mBAAmB,MAAM,KAAK,oBAClC,cACA,kBACA,GACF;GAEA,IAAI,CAAC,kBAAkB;IACrB,OAAO,MACL;KAAE;KAAc;KAAkB;IAAI,GACtC,mBACF;IACA;GACF;GAEA,IAAI,iBAAiB,oBAAoB,iBAAiB,aACxD,SAAS,iBAAiB;GAG5B,IAAI,eAAe,kBAAkB;IACnC,MAAM,wBAAwB,iBAAiB,UAC5C,KAAK,eAAe,WAAW,WAAW,CAAC,CAC3C,MACE,gBACC,iBAAiB,cAAA,kCAA0B,KAC3C,iBAAiB,cAAA,oCAA0B,CAC/C;IACF,IAAI,uBACF,SAAS;KAAE,GAAG;KAAQ,GAAG;IAAsB;GAEnD;GAEA,IACE,eAAe,oBACf,OAAA,sCACA,OAAA,sCAEA,OAAO;GAGT,MAAM,WAAW,MAAM,KAAK,qBAC1B,cACA,kBACA,KACA,gBACF;GACA,IAAI,CAAC,UACH;GAGF,IAAI,iBAAiB,YAAY,SAAS,aACxC,SAAS;IAAE,GAAG;IAAQ,GAAG,SAAS;GAAY;GAGhD,QAAQ,SAAS,OAAO,WAAxB;IACE,KAAK,4CAA4C;KAC/C,IAAI,OAAA,oCAEF,OAAO;KAET,MAAM,iBAAiB,MAAM,KAAK,cAChC,cACA,kBACA,SAAS,OAAO,MAClB;KAEA,IAAI,gBAAgB;MAElB,MAAM,MAAM,kBAAkB,eAAe,IAAI;MACjD,IAAI,KACF,OAAO,eAAe;KAE1B;KACA;IACF;IACA,KAAK;IACL,KAAK,kDAAkD;KACrD,IAAI,OAAA,sCAAuB,OAAA,sCAEzB,OAAO;KAET,MAAM,iBAAiB,MAAM,KAAK,eAChC,cACA,kBACA,SAAS,OAAO,MAClB;;KAGA,IAAI,CAAC,gBACH,OAAO;KAGT,MAAM,OAAO,eAAe;KAC5B,IAAI,KAAK,QACP,SAAS;MAAE,GAAG;MAAQ,GAAG,KAAK,OAAO;KAAO;UAE5C,OAAO,MACL;MAAE,SAAS,eAAe;MAAS;KAAK,GACxC,2DACF;KAEF;IACF;GACF;GAEA,IAAI,QACF,OAAO,MACL,EACE,OACF,GACA,0BACF;GAEF,OAAO;EACT,SAAS,8DAA4D;GACnE,IAAI,eAAe,mBACjB,MAAM;GAER,IAAI,IAAI,eAAe,OAAO,IAAI,eAAe,KAC/C,OAAO,MACL;IAAE;IAAc;IAAkB;GAAI,GACtC,4BACF;QACK,IAAI,IAAI,eAAe,KAC5B,OAAO,KACL;IACE;IACA;IACA;IACA;GACF,GACA,4BACF;QACK,IAAI,IAAI,eAAe,OAAO,aAAa,YAAY,GAC5D,OAAO,KAAK,EAAE,IAAI,GAAG,4CAA4C;QAC5D,IAAI,IAAI,cAAc,OAAO,IAAI,aAAa,KACnD,OAAO,MACL;IACE;IACA;IACA;IACA;GACF,GACA,yCACF;QACK,IACL,IAAI,SAAS,kCACb,IAAI,SAAS,aAEb,OAAO,MACL;IAAE;IAAc;GAAI,GACpB,qCACF;QACK,IAAI,iBAAiB;;GAE1B,OAAO,MACL,4DACF;QAEA,OAAO,KACL;IAAE;IAAc;IAAkB;IAAK;GAAI,GAC3C,qCACF;GAEF,OAAO,CAAC;EACV;CACF;CAEA,UACE,cACA,kBACA,KAC6C;EAC7C,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG;GAC5C,YAAY;EACd,SACM,KAAK,WAAW,cAAc,kBAAkB,GAAG,CAC3D;CACF;CAEA,MAAc,oBACZ,UACA,YACmB;EACnB,IAAI,OAAiB,CAAC;EACtB,MAAM,QAAQ;EAEd,SAAS,QAAQ,MAAsB;GACrC,OAAO,GAAG,SAAS,qBAAqB,WAAW,cAAc,MAAM,QAAQ,KAAK;EACtF;EAEA,IAAI,OAAO;EACX,IAAI,MAAqB,QAAQ,IAAI;EACrC,OAAO,OAAO,QAAQ,IAAI;GACxB,MAAM,MAAsC,MAAM,KAAK,KAAK,QAC1D,KACA,gBACF;GACA,MAAM,WAAW,IAAI,KAAK,KAAK,KAAK,QAAQ,IAAI,IAAI;GACpD,OAAO,KAAK,OAAO,QAAQ;GAC3B,QAAQ;GACR,MAAM,IAAI,KAAK,iBAAiB,QAAQ,IAAI,IAAI;EAClD;EACA,OAAO;CACT;CAEA,MAAc,iBACZ,cACA,kBAC0B;EAC1B,IAAI,OAAiB,CAAC;EAQtB,IAAI,MACF,GAAG,aAAa,GAAG,iBAAiB,eAJpC,SAAS,KAAK,YAAY,KAAK,eAAe,KAAK,YAAY,IAC3D,MACA;EAGN,MAAM,iBAAiB,KAAK,KAAK;EACjC,MAAM,UAAU,MAAM,eACpB,KAAK,MACL,cACA,kBACA,GACF;EACA,IAAI,CAAC,SAAS;GACZ,OAAO,MAAM,8CAA8C;GAC3D,OAAO;EACT;EACA,IAAI,OAAO;EAKX,MAAM,QAAQ,CAHZ,mBACA,iBAE+B,CAAC,CAAC,SAAS,YAAY,IACpD,MACA,aAAa,IAAI,gBAAgB;EACrC,OAAO,MAAM;GAAE;GAAc;GAAkB;EAAM,GAAG,gBAAgB;EACxE,IAAI,uBAAuB;EAC3B,GAAG;GACD,IAAI;GACJ,IAAI;IACF,MAAM,MAAM,KAAK,KAAK,QACpB,KACA;KAAE;KAAS,QAAQ;IAAK,GACxB,gBACF;GACF,SAAS,KAAK;IACZ,IACE,CAAC,wBACD,eAAeC,gBACf,qBAAqB,GAAG,GACxB;KAEA,MAAM,GAAG,aAAa,GAAG,iBAAiB;KAC1C,MAAM,iBAAiB,KAAK,KAAK;KACjC,uBAAuB;KACvB;IACF;IACA,MAAM;GACR;GACA,OAAO,KAAK,OAAO,IAAI,KAAK,IAAI;GAChC,MAAM,aAAa,gBAAgB,IAAI,QAAQ,IAAI;GACnD,IAAI,oBAAoB,GAAG,GAEzB,IAAI,YAAY,MAAM,MAAM;IAE1B,MAAM,SAAS,SAAS,GAAG;;IAE3B,IAAI,CAAC,QAAQ;KACX,MAAM;KACN;IACF;IACA,OAAO,aAAa,OAAO,MAAM;IACjC,OAAO,aAAa,IAAI,QAAQ,WAAW,KAAK,IAAI;IACpD,MAAM,OAAO;GACf,OACE,MAAM;QAEH,IAAI,YAAY,MAAM,KAE3B,MAAM,IAAI,IAAI,WAAW,KAAK,KAAK,GAAG,CAAC,CAAC;QAExC,MAAM;GAER,QAAQ;EACV,SAAS,OAAO,OAAO;EACvB,OAAO;CACT;CAEA,MAAc,SACZ,cACA,kBAC0B;EAC1B,IAAI;GACF,MAAM,SAAS,iBAAiB;GAChC,IAAI;GACJ,IAAI,QACF,IAAI;IAEF,OAAO,MAAM,KAAK,oBAAoB,cAAc,gBAAgB;GACtE,SAAS,KAAK;IAEZ,IAAI,IAAI,eAAe,KAAK;KAC1B,OAAO,MACL;MAAE;MAAc;KAAiB,GACjC,yDACF;KACA,OAAO,MAAM,KAAK,iBAAiB,cAAc,gBAAgB;IACnE,OACE,MAAM;GAEV;QAEA,OAAO,MAAM,KAAK,iBAAiB,cAAc,gBAAgB;GAEnE,OAAO;EACT,SAAS,mCAAiC;GACxC,MAAM,MAAM,gBAAgB,oBAAoB,KAAK,MAAM;GAE3D,KACG,IAAI,eAAe,OAAO,IAAI,YAAA,qBAC/B,CAAC,iBAAiB,SAAS,GAAG,GAC9B;IACA,OAAO,MACL,qBAAqB,aAAa,GAAG,iBAAiB,uBACxD;IACA,OAAO,KAAK,QAAQ,cAAc,WAAW,kBAAkB;GACjE;GAGA,KACG,IAAI,eAAe,OAAO,IAAI,YAAA,qBAC/B,oBAAoB,IAAI,QAAQ,KAChC,iBAAiB,MAAM,GAAG,CAAC,CAAC,WAAW,GACvC;IACA,OAAO,MACL,wCAAwC,aAAa,GAAG,iBAAiB,gEAC3E;IAEA,MAAM,wBAAwB,iBAAiB,MAAM,GAAG;IACxD,MAAM,kBAAkB,sBAAsB;IAC9C,MAAM,cAAc,sBAAsB;IAE1C,OAAO,KAAK,QACV,cACA,GAAG,gBAAgB,WAAW,aAChC;GACF;GACA,IAAI,IAAI,eAAe,OAAO,aAAa,YAAY,GAAG;IACxD,OAAO,KACL;KAAE;KAAc;KAAkB;IAAI,GACtC,4CACF;IACA,MAAM,IAAI,kBAAkB,GAAG;GACjC;GACA,IAAI,IAAI,cAAc,OAAO,IAAI,aAAa,KAAK;IACjD,OAAO,KACL;KAAE;KAAc;KAAkB;IAAI,GACtC,yCACF;IACA,MAAM,IAAI,kBAAkB,GAAG;GACjC;GAEA,IAAI,CADgB,cAAc,WACrB,CAAC,CAAC,SAAS,IAAI,IAAI,GAAG;IACjC,OAAO,KACL;KAAE;KAAc;KAAkB;IAAI,GACtC,oCACF;IACA,MAAM,IAAI,kBAAkB,GAAG;GACjC;GACA,IAAI,aAAa,YAAY,GAC3B,OAAO,KAAK,EAAE,IAAI,GAAG,2BAA2B;GAElD,MAAM;EACR;CACF;CAEA,QACE,cACA,kBAC0B;EAC1B,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG;EAC1B,SACM,KAAK,SAAS,cAAc,gBAAgB,CACpD;CACF;;;;;;;;;;CAWA,MAAc,WACZ,EAAE,aAAa,YAAY,aAAa,iBACxC,UACwB;EACxB,IAAI;EACJ,IAAI;EACJ,IAAI,eAAe,YAAY;GAE7B,eAAe;GACf,mBAAmB;EACrB,OAEE,CAAC,CAAE,cAAc,oBAAqB,sBACpC,aACA,WACF;EAEF,OAAO,MAEL,aAAa,aAAa,IAAI,iBAAiB,IAAI,SAAS,EAC9D;EACA,MAAM,SAAS,iBAAiB,QAAQ,IAAI,WAAW;EACvD,IAAI,SAAwB;EAC5B,IAAI;GACF,IAAI,eAA0C;GAC9C,IAAI,iBAAiB,eAAe,aAAa,GAC/C,eAAe,MAAM,KAAK,qBACxB,cACA,kBACA,aACF;GAGF,IAAI,mBAAwC;GAC5C,IAAI,CAAC,cAAc;IAEjB,IAAI,iBAAA,2BAA6B;KAE/B,MAAM,gBAAe,MADD,eAAe,KAAK,gBAAgB,EAAA,CAC7B,gBAAgB,MAAM;KACjD,IAAI,cACF,OAAO;IAEX;IAEA,mBAAmB,MAAM,KAAK,oBAC5B,cACA,kBACA,QACA,MACF;IAEA,IACE,oBACA,OAAO,yBAAyB,iBAAiB,OAAO,GAExD,SACG,iBAAiB,QAAQ,4BAC1B;GAEN;GAEA,IACE,iBAAiB,YAAY,KAC5B,oBACC,CAAC,OAAO,yBAAyB,iBAAiB,OAAO,GAC3D;IAEA,IAAI,iBAAiB,YAAY,KAAK,iBAAA,2BAA6B;KAEjE,MAAM,gBAAe,MADD,eAAe,KAAK,gBAAgB,EAAA,CAC7B,oBAAoB,QAAQ,YAAY;KACnE,IAAI,cACF,OAAO;IAEX;IAEA,OAAO,MACL;KAAE;KAAc;IAAiB,GACjC,8FACF;IACA,mBAAmB,MAAM,KAAK,oBAC5B,cACA,kBACA,MACF;IAEA,IAAI,gBAAgB,kBAAkB;KACpC,MAAM,SAAS,aAAa,UAAU,iBAAiB,IAAI;;KAE3D,IAAI,OAAO,SAAS;MAClB,MAAM,eAAe,OAAO;MAC5B,IACE,aAAa,cACX,+DACF,aAAa,cACX;YAEG,MAAM,YAAY,aAAa,WAClC,IAAI,SAAS,UAAU,iBAAiB,cAAc;QACpD,SAAS,SAAS;QAClB;OACF;aAIG,IACL,OAAO,yBAAyB,iBAAiB,OAAO,GAIxD,SAAS,iBAAiB,QACxB;KAGN,OACE,OAAO,MACL;MACE;MACA;MACA;MACA,MAAM,iBAAiB;MACvB,SAAS,iBAAiB;MAC1B,KAAK,OAAO;KACd,GACA,mCACF;IAEJ;IAEA,IAAI,CAAC,QAAQ;KACX,OAAO,MACL;MAAE;MAAc;MAAkB;KAAO,GACzC,6DACF;KACA,SAAS,8BAA8B,gBAAiB;IAC1D;GACF;GAEA,IACE,CAAC,oBACD,CAAC,iBAAiB,SAAS,GAAG,KAC9B,CAAC,YAAY,SAAS,GAAG,GACzB;IACA,OAAO,MACL,uBAAuB,aAAa,GAAG,iBAAiB,uBAC1D;IACA,OAAO,KAAK,UACV;KACE;KACA,aAAa,WAAW;KACxB;IACF,GACA,QACF;GACF;GAEA,IAAI,kBAEF,OAAO,MAAM,qBAAqB,QAAS;EAE/C,SAAS,kCAAgC;GACvC,IAAI,eAAe,mBACjB,MAAM;GAER,OAAO,MACL;IACE;IACA;IACA;GACF,GACA,8CACF;EACF;EACA,OAAO;CACT;CAEA,UACE,QACA,UACwB;EACxB,MAAM,SAAS,YAAY;EAC3B,MAAM,EAAE,cAAc,qBAAqB,sBACzC,OAAO,aACP,OAAO,WACT;EAEA,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG,iBAAiB,GAAG,SAJjC,OAAO,gBAAgB,IAAI,OAAO,kBAAkB;GAK/D,UAAU;GACV,mBAAmB;EACrB,SACM,KAAK,WAAW,QAAQ,QAAQ,CACxC;CACF;CAEA,MAAc,kBACZ,kBAC2B;EAC3B,IAAI,MAAM,0CAA0C,iBAAiB;EAErE,MAAM,QAAQ,MAAM,eAAe,KAAK,gBAAgB;EACxD,MAAM,WAAW,aAAa,IAAI,gBAAgB;EAClD,IAAI,OAAO,GACT,eAAe;EACjB,OAAO,gBAAgB,OAAO,UAAU;GACtC,MAAM,EAAE,KAAK,QAAQ,MAAM,KAAK,KAC7B,YAAY,KAAK,iBAAiB,CAAC,CACnC,OAAO;GAEV,IAAI,KAAK;IACP,OAAO,MAAM,EAAE,IAAI,GAAG,4CAA4C;IAClE,OAAO;GACT;GACA;GACA,MAAM,EAAE,SAAS,MAAM,UAAU;GAEjC,eAAe,MAAM,UAAU,SAAS,KAAK;GAE7C,IAAI,CAAC,MACH;GAGF,MAAM;EACR;EAEA,MAAM,MAAM,KAAK;EAGjB,OADc,MAAM,SACT,CAAC,CAAC,KAAK,EAAE,MAAM,SAAS,sBAAsB;GACvD,MAAM,UAAmB,EAAE,QAAQ;GAEnC,MAAM,mBAAmB,YAAY,eAAe;GACpD,IAAI,kBACF,QAAQ,mBAAmB;GAO7B,OAAO;EACT,CAAC;CACH;CAEA,iBAAiB,kBAAqD;EACpE,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG;EACV,SACM,KAAK,kBAAkB,gBAAgB,CAC/C;CACF;;;;;;;;;;;;CAaA,MAAc,aAAa,EACzB,aACA,eACmD;EACnD,MAAM,EAAE,cAAc,qBAAqB,sBACzC,aACA,WACF;EAOA,MAAM,gBACJ,OAAO,aACL,KAAK,QAAQ,cAAc,gBAAgB,GAC3C,YACF,CAAC,CAAC,WAAW,SAAS,KAAK,KAAK,aAAa,EAAE,QAAQ,EAAE,CAAC;EAE5D,MAAM,yBACJ,OAAO,aACL,KAAK,iBAAiB,gBAAgB,GACtC,iBACF,CAAC,CAAC,MAAM,OAAO;EAQjB,MAAM,EAAE,KAAK,UAAU,QAAQ,OAL7B,iBAAA,6BACA,CAAC,OAAO,CAAC,CAAC,qCACN,iBAAiB,IACjB,QAAQ,EAAA,CAEkC,OAAO;EACvD,IAAI,eAAe,OACjB,MAAM;OACD,IAAI,KACT,OAAO;EAGT,MAAM,MAAqB;GACzB,aAAa;GACb;EACF;EACA,IAAI,qBAAqB,aAEvB,IAAI,aAAa;EAGnB,MAAM,OAAO,SAAS,KAAK,YAAY,QAAQ,OAAO;EACtD,MAAM,YAAY,KAAK,SAAS,QAAQ,IACpC,WACC,iBAAiB,IAAI,KAAK,KAAK,GAAG,EAAE;;EAGzC,IAAI,CAAC,WACH,OAAO;EAET,MAAM,SAAS,MAAM,KAAK,UACxB,cACA,kBACA,SACF;EACA,IAAI,QAAQ;GACV,IAAI,iBAAiB,OAAA,oCAAmB,GACtC,IAAI,SAAS,OAAO;GAEtB,KAAK,MAAM,SAAS,cAClB,IAAI,iBAAiB,OAAO,MAAM,GAAG;IACnC,IAAI,YAAY,OAAO;IACvB;GACF;GAEF,IAAI,iBAAiB,OAAA,+BAAqB,GACxC,IAAI,WAAW,OAAO;EAE1B;EACA,OAAO;CACT;CAEA,YAAY,QAA0D;EACpE,MAAM,EAAE,cAAc,qBAAqB,sBACzC,OAAO,aACP,OAAO,WACT;EACA,OAAO,UACL;GACE,WAAW;GACX,KAAK,GAAG,aAAa,GAAG;GACxB,WAAW,iBAAiB;GAC5B,UAAU;EACZ,SACM,KAAK,aAAa,MAAM,CAChC;CACF;AACF"}

package/dist/modules/datasource/docker/schema.js

@@ -16,7 +16,8 @@ const ManifestObject = z.object({
 const Descriptor = z.object({
 	mediaType: z.string(),
 	digest: z.string(),
-	size: Nullish(z.number().int().gte(0))
+	size: Nullish(z.number().int().gte(0)),
+	annotations: Nullish(z.record(z.string(), z.string()))
 });
 /**
 * OCI platform properties

package/dist/modules/datasource/docker/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","names":[],"sources":["../../../../lib/modules/datasource/docker/schema.ts"],"sourcesContent":["import { z } from 'zod/v4';\nimport { logger } from '../../../logger/index.ts';\nimport {\n  DeepNullish,\n  Json,\n  LooseArray,\n  Nullish,\n} from '../../../util/schema-utils/index.ts';\n\n// OCI manifests\n\n/**\n *  OCI manifest object\n */\nexport const ManifestObject = z.object({\n  schemaVersion: z.literal(2),\n  mediaType: Nullish(z.string()),\n});\n\n/**\n * Oci descriptor\n * https://github.com/opencontainers/image-spec/blob/main/descriptor.md\n */\nexport const Descriptor = z.object({\n  mediaType: z.string(),\n  digest: z.string(),\n  size: Nullish(z.number().int().gte(0)),\n});\n/**\n * OCI platform properties\n * https://github.com/opencontainers/image-spec/blob/main/image-index.md\n */\nconst OciPlatform = Nullish(\n  DeepNullish(\n    z.object({\n      architecture: z.string().optional(),\n    }),\n  ),\n);\n\n/**\n * OCI Image Configuration.\n *\n * Compatible with old docker configiguration.\n * https://github.com/opencontainers/image-spec/blob/main/config.md\n */\nexport const OciImageConfig = DeepNullish(\n  z.object({\n    // This is required by the spec, but probably not present in the wild.\n    architecture: z.string().optional(),\n    config: z\n      .object({ Labels: z.record(z.string(), z.string()).optional() })\n      .optional(),\n  }),\n);\nexport type OciImageConfig = z.infer<typeof OciImageConfig>;\n\n/**\n * OCI Helm Configuration\n * https://helm.sh/docs/topics/charts/#the-chartyaml-file\n */\nexport const OciHelmConfig = DeepNullish(\n  z.object({\n    name: z.string(),\n    version: z.string(),\n    home: z.string().optional(),\n    sources: z.array(z.string()).optional(),\n  }),\n);\nexport type OciHelmConfig = z.infer<typeof OciHelmConfig>;\n\n/**\n * OCI Image Manifest\n * The same structure as docker image manifest, but mediaType is not required and is not present in the wild.\n * https://github.com/opencontainers/image-spec/blob/main/manifest.md\n */\nexport const OciImageManifest = ManifestObject.extend({\n  mediaType: z.literal('application/vnd.oci.image.manifest.v1+json'),\n  config: Descriptor.extend({\n    mediaType: z.enum([\n      'application/vnd.oci.image.config.v1+json',\n      'application/vnd.cncf.helm.config.v1+json',\n      'application/vnd.devcontainers',\n      'application/vnd.oci.empty.v1+json',\n      'application/vnd.cncf.flux.config.v1+json',\n    ]),\n  }),\n  annotations: Nullish(z.record(z.string(), z.string())),\n});\nexport type OciImageManifest = z.infer<typeof OciImageManifest>;\n\n/**\n * OCI Image List\n * mediaType is not required.\n * https://github.com/opencontainers/image-spec/blob/main/image-index.md\n */\nexport const OciImageIndexManifest = ManifestObject.extend({\n  mediaType: z.literal('application/vnd.oci.image.index.v1+json'),\n  manifests: LooseArray(\n    Descriptor.extend({\n      mediaType: z.enum([\n        'application/vnd.oci.image.manifest.v1+json',\n        'application/vnd.oci.image.index.v1+json',\n      ]),\n      platform: OciPlatform,\n    }),\n  ),\n  annotations: Nullish(z.record(z.string(), z.string())),\n});\n\n// Old Docker manifests\n\n/**\n * Image Manifest\n * https://docs.docker.com/registry/spec/manifest-v2-2/#image-manifest\n */\nexport const DistributionManifest = ManifestObject.extend({\n  mediaType: z.literal('application/vnd.docker.distribution.manifest.v2+json'),\n  config: Descriptor.extend({\n    mediaType: z.literal('application/vnd.docker.container.image.v1+json'),\n  }),\n});\nexport type DistributionManifest = z.infer<typeof DistributionManifest>;\n\n/**\n * Manifest List\n * https://docs.docker.com/registry/spec/manifest-v2-2/#manifest-list\n */\nexport const DistributionListManifest = ManifestObject.extend({\n  mediaType: z.literal(\n    'application/vnd.docker.distribution.manifest.list.v2+json',\n  ),\n  manifests: z.array(\n    Descriptor.extend({\n      mediaType: z.literal(\n        'application/vnd.docker.distribution.manifest.v2+json',\n      ),\n      platform: OciPlatform,\n    }),\n  ),\n});\n\n// Combined manifests\nexport const Manifest = ManifestObject.passthrough()\n  .transform((value, ctx) => {\n    if (value.mediaType === undefined) {\n      if ('config' in value) {\n        value.mediaType = 'application/vnd.oci.image.manifest.v1+json';\n      } else if ('manifests' in value) {\n        value.mediaType = 'application/vnd.oci.image.index.v1+json';\n      } else {\n        ctx.addIssue({\n          code: 'custom',\n          message: 'Invalid manifest, missing mediaType.',\n        });\n        return z.NEVER;\n      }\n    }\n    return value;\n  })\n  .pipe(\n    z.discriminatedUnion('mediaType', [\n      DistributionManifest,\n      DistributionListManifest,\n      OciImageManifest,\n      OciImageIndexManifest,\n    ]),\n  );\n\nexport type Manifest = z.infer<typeof Manifest>;\nexport const ManifestJson = Json.pipe(Manifest);\n\nexport const DockerHubTagImage = z.object({\n  architecture: z.string().nullable().catch(null),\n  digest: z.string().nullable().catch(null),\n});\nexport type DockerHubTagImage = z.infer<typeof DockerHubTagImage>;\n\nexport const DockerHubTag = z.object({\n  id: z.number(),\n  last_updated: z.string().datetime(),\n  name: z.string(),\n  tag_last_pushed: z.string().datetime().nullable().catch(null),\n  digest: z.string().nullable().catch(null),\n  images: z.array(DockerHubTagImage).catch([]),\n});\nexport type DockerHubTag = z.infer<typeof DockerHubTag>;\n\nexport const DockerHubTagsPage = z.object({\n  count: z.number(),\n  next: z.string().nullable().catch(null),\n  results: LooseArray(DockerHubTag, {\n    /* v8 ignore next -- TODO: add test */\n    onError: ({ error }) => {\n      logger.debug(\n        { error },\n        'Docker: Failed to parse some tags from Docker Hub',\n      );\n    },\n  }),\n});\n\n/**\n * Docker registry auth token response.\n * https://distribution.github.io/distribution/spec/auth/token/\n */\nexport const RegistryAuthToken = z.object({\n  token: z.string().optional(),\n  access_token: z.string().optional(),\n});\nexport type RegistryAuthToken = z.infer<typeof RegistryAuthToken>;\n\n/**\n * Docker registry tags list response.\n * https://distribution.github.io/distribution/spec/api/#listing-image-tags\n */\nexport const RegistryTagsList = z.object({\n  tags: z.array(z.string()),\n});\nexport type RegistryTagsList = z.infer<typeof RegistryTagsList>;\n\n/**\n * Quay registry tags list response (Quay v1 API).\n */\nexport const QuayTagsResponse = z.object({\n  tags: LooseArray(\n    z.object({\n      name: z.string(),\n    }),\n  ),\n  has_additional: z.boolean().default(false),\n});\nexport type QuayTagsResponse = z.infer<typeof QuayTagsResponse>;\n"],"mappings":";;;;;;;AAcA,MAAa,iBAAiB,EAAE,OAAO;CACrC,eAAe,EAAE,QAAQ,CAAC;CAC1B,WAAW,QAAQ,EAAE,OAAO,CAAC;AAC/B,CAAC;;;;;AAMD,MAAa,aAAa,EAAE,OAAO;CACjC,WAAW,EAAE,OAAO;CACpB,QAAQ,EAAE,OAAO;CACjB,MAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;;;;;AAKD,MAAM,cAAc,QAClB,YACE,EAAE,OAAO,EACP,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,EACpC,CAAC,CACH,CACF;;;;;;;AAQA,MAAa,iBAAiB,YAC5B,EAAE,OAAO;CAEP,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,QAAQ,EACL,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAC/D,SAAS;AACd,CAAC,CACH;;;;;AAOA,MAAa,gBAAgB,YAC3B,EAAE,OAAO;CACP,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACxC,CAAC,CACH;;;;;;AAQA,MAAa,mBAAmB,eAAe,OAAO;CACpD,WAAW,EAAE,QAAQ,4CAA4C;CACjE,QAAQ,WAAW,OAAO,EACxB,WAAW,EAAE,KAAK;EAChB;EACA;EACA;EACA;EACA;CACF,CAAC,EACH,CAAC;CACD,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;;;;;;AAQD,MAAa,wBAAwB,eAAe,OAAO;CACzD,WAAW,EAAE,QAAQ,yCAAyC;CAC9D,WAAW,WACT,WAAW,OAAO;EAChB,WAAW,EAAE,KAAK,CAChB,8CACA,yCACF,CAAC;EACD,UAAU;CACZ,CAAC,CACH;CACA,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;;;;;AAQD,MAAa,uBAAuB,eAAe,OAAO;CACxD,WAAW,EAAE,QAAQ,sDAAsD;CAC3E,QAAQ,WAAW,OAAO,EACxB,WAAW,EAAE,QAAQ,gDAAgD,EACvE,CAAC;AACH,CAAC;;;;;AAOD,MAAa,2BAA2B,eAAe,OAAO;CAC5D,WAAW,EAAE,QACX,2DACF;CACA,WAAW,EAAE,MACX,WAAW,OAAO;EAChB,WAAW,EAAE,QACX,sDACF;EACA,UAAU;CACZ,CAAC,CACH;AACF,CAAC;AAGD,MAAa,WAAW,eAAe,YAAY,CAAC,CACjD,WAAW,OAAO,QAAQ;CACzB,IAAI,MAAM,cAAc,KAAA,GACtB,IAAI,YAAY,OACd,MAAM,YAAY;MACb,IAAI,eAAe,OACxB,MAAM,YAAY;MACb;EACL,IAAI,SAAS;GACX,MAAM;GACN,SAAS;EACX,CAAC;EACD,OAAO,EAAE;CACX;CAEF,OAAO;AACT,CAAC,CAAC,CACD,KACC,EAAE,mBAAmB,aAAa;CAChC;CACA;CACA;CACA;AACF,CAAC,CACH;AAGF,MAAa,eAAe,KAAK,KAAK,QAAQ;AAE9C,MAAa,oBAAoB,EAAE,OAAO;CACxC,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;CAC9C,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;AAC1C,CAAC;AAGD,MAAa,eAAe,EAAE,OAAO;CACnC,IAAI,EAAE,OAAO;CACb,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,MAAM,EAAE,OAAO;CACf,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;CAC5D,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;CACxC,QAAQ,EAAE,MAAM,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAGD,MAAa,oBAAoB,EAAE,OAAO;CACxC,OAAO,EAAE,OAAO;CAChB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;CACtC,SAAS,WAAW,cAAc;;AAEhC,UAAU,EAAE,YAAY;EACtB,OAAO,MACL,EAAE,MAAM,GACR,mDACF;CACF,EACF,CAAC;AACH,CAAC;;;;;AAMD,MAAa,oBAAoB,EAAE,OAAO;CACxC,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;AACpC,CAAC;;;;;AAOD,MAAa,mBAAmB,EAAE,OAAO,EACvC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAC1B,CAAC;;;;AAMD,MAAa,mBAAmB,EAAE,OAAO;CACvC,MAAM,WACJ,EAAE,OAAO,EACP,MAAM,EAAE,OAAO,EACjB,CAAC,CACH;CACA,gBAAgB,EAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK;AAC3C,CAAC"}
+{"version":3,"file":"schema.js","names":[],"sources":["../../../../lib/modules/datasource/docker/schema.ts"],"sourcesContent":["import { z } from 'zod/v4';\nimport { logger } from '../../../logger/index.ts';\nimport {\n  DeepNullish,\n  Json,\n  LooseArray,\n  Nullish,\n} from '../../../util/schema-utils/index.ts';\n\n// OCI manifests\n\n/**\n *  OCI manifest object\n */\nexport const ManifestObject = z.object({\n  schemaVersion: z.literal(2),\n  mediaType: Nullish(z.string()),\n});\n\n/**\n * Oci descriptor\n * https://github.com/opencontainers/image-spec/blob/main/descriptor.md\n */\nexport const Descriptor = z.object({\n  mediaType: z.string(),\n  digest: z.string(),\n  size: Nullish(z.number().int().gte(0)),\n  annotations: Nullish(z.record(z.string(), z.string())),\n});\n/**\n * OCI platform properties\n * https://github.com/opencontainers/image-spec/blob/main/image-index.md\n */\nconst OciPlatform = Nullish(\n  DeepNullish(\n    z.object({\n      architecture: z.string().optional(),\n    }),\n  ),\n);\n\n/**\n * OCI Image Configuration.\n *\n * Compatible with old docker configiguration.\n * https://github.com/opencontainers/image-spec/blob/main/config.md\n */\nexport const OciImageConfig = DeepNullish(\n  z.object({\n    // This is required by the spec, but probably not present in the wild.\n    architecture: z.string().optional(),\n    config: z\n      .object({ Labels: z.record(z.string(), z.string()).optional() })\n      .optional(),\n  }),\n);\nexport type OciImageConfig = z.infer<typeof OciImageConfig>;\n\n/**\n * OCI Helm Configuration\n * https://helm.sh/docs/topics/charts/#the-chartyaml-file\n */\nexport const OciHelmConfig = DeepNullish(\n  z.object({\n    name: z.string(),\n    version: z.string(),\n    home: z.string().optional(),\n    sources: z.array(z.string()).optional(),\n  }),\n);\nexport type OciHelmConfig = z.infer<typeof OciHelmConfig>;\n\n/**\n * OCI Image Manifest\n * The same structure as docker image manifest, but mediaType is not required and is not present in the wild.\n * https://github.com/opencontainers/image-spec/blob/main/manifest.md\n */\nexport const OciImageManifest = ManifestObject.extend({\n  mediaType: z.literal('application/vnd.oci.image.manifest.v1+json'),\n  config: Descriptor.extend({\n    mediaType: z.enum([\n      'application/vnd.oci.image.config.v1+json',\n      'application/vnd.cncf.helm.config.v1+json',\n      'application/vnd.devcontainers',\n      'application/vnd.oci.empty.v1+json',\n      'application/vnd.cncf.flux.config.v1+json',\n    ]),\n  }),\n  annotations: Nullish(z.record(z.string(), z.string())),\n});\nexport type OciImageManifest = z.infer<typeof OciImageManifest>;\n\n/**\n * OCI Image List\n * mediaType is not required.\n * https://github.com/opencontainers/image-spec/blob/main/image-index.md\n */\nexport const OciImageIndexManifest = ManifestObject.extend({\n  mediaType: z.literal('application/vnd.oci.image.index.v1+json'),\n  manifests: LooseArray(\n    Descriptor.extend({\n      mediaType: z.enum([\n        'application/vnd.oci.image.manifest.v1+json',\n        'application/vnd.oci.image.index.v1+json',\n      ]),\n      platform: OciPlatform,\n    }),\n  ),\n  annotations: Nullish(z.record(z.string(), z.string())),\n});\n\n// Old Docker manifests\n\n/**\n * Image Manifest\n * https://docs.docker.com/registry/spec/manifest-v2-2/#image-manifest\n */\nexport const DistributionManifest = ManifestObject.extend({\n  mediaType: z.literal('application/vnd.docker.distribution.manifest.v2+json'),\n  config: Descriptor.extend({\n    mediaType: z.literal('application/vnd.docker.container.image.v1+json'),\n  }),\n});\nexport type DistributionManifest = z.infer<typeof DistributionManifest>;\n\n/**\n * Manifest List\n * https://docs.docker.com/registry/spec/manifest-v2-2/#manifest-list\n */\nexport const DistributionListManifest = ManifestObject.extend({\n  mediaType: z.literal(\n    'application/vnd.docker.distribution.manifest.list.v2+json',\n  ),\n  manifests: z.array(\n    Descriptor.extend({\n      mediaType: z.literal(\n        'application/vnd.docker.distribution.manifest.v2+json',\n      ),\n      platform: OciPlatform,\n    }),\n  ),\n});\n\n// Combined manifests\nexport const Manifest = ManifestObject.passthrough()\n  .transform((value, ctx) => {\n    if (value.mediaType === undefined) {\n      if ('config' in value) {\n        value.mediaType = 'application/vnd.oci.image.manifest.v1+json';\n      } else if ('manifests' in value) {\n        value.mediaType = 'application/vnd.oci.image.index.v1+json';\n      } else {\n        ctx.addIssue({\n          code: 'custom',\n          message: 'Invalid manifest, missing mediaType.',\n        });\n        return z.NEVER;\n      }\n    }\n    return value;\n  })\n  .pipe(\n    z.discriminatedUnion('mediaType', [\n      DistributionManifest,\n      DistributionListManifest,\n      OciImageManifest,\n      OciImageIndexManifest,\n    ]),\n  );\n\nexport type Manifest = z.infer<typeof Manifest>;\nexport const ManifestJson = Json.pipe(Manifest);\n\nexport const DockerHubTagImage = z.object({\n  architecture: z.string().nullable().catch(null),\n  digest: z.string().nullable().catch(null),\n});\nexport type DockerHubTagImage = z.infer<typeof DockerHubTagImage>;\n\nexport const DockerHubTag = z.object({\n  id: z.number(),\n  last_updated: z.string().datetime(),\n  name: z.string(),\n  tag_last_pushed: z.string().datetime().nullable().catch(null),\n  digest: z.string().nullable().catch(null),\n  images: z.array(DockerHubTagImage).catch([]),\n});\nexport type DockerHubTag = z.infer<typeof DockerHubTag>;\n\nexport const DockerHubTagsPage = z.object({\n  count: z.number(),\n  next: z.string().nullable().catch(null),\n  results: LooseArray(DockerHubTag, {\n    /* v8 ignore next -- TODO: add test */\n    onError: ({ error }) => {\n      logger.debug(\n        { error },\n        'Docker: Failed to parse some tags from Docker Hub',\n      );\n    },\n  }),\n});\n\n/**\n * Docker registry auth token response.\n * https://distribution.github.io/distribution/spec/auth/token/\n */\nexport const RegistryAuthToken = z.object({\n  token: z.string().optional(),\n  access_token: z.string().optional(),\n});\nexport type RegistryAuthToken = z.infer<typeof RegistryAuthToken>;\n\n/**\n * Docker registry tags list response.\n * https://distribution.github.io/distribution/spec/api/#listing-image-tags\n */\nexport const RegistryTagsList = z.object({\n  tags: z.array(z.string()),\n});\nexport type RegistryTagsList = z.infer<typeof RegistryTagsList>;\n\n/**\n * Quay registry tags list response (Quay v1 API).\n */\nexport const QuayTagsResponse = z.object({\n  tags: LooseArray(\n    z.object({\n      name: z.string(),\n    }),\n  ),\n  has_additional: z.boolean().default(false),\n});\nexport type QuayTagsResponse = z.infer<typeof QuayTagsResponse>;\n"],"mappings":";;;;;;;AAcA,MAAa,iBAAiB,EAAE,OAAO;CACrC,eAAe,EAAE,QAAQ,CAAC;CAC1B,WAAW,QAAQ,EAAE,OAAO,CAAC;AAC/B,CAAC;;;;;AAMD,MAAa,aAAa,EAAE,OAAO;CACjC,WAAW,EAAE,OAAO;CACpB,QAAQ,EAAE,OAAO;CACjB,MAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;CACrC,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;;;;;AAKD,MAAM,cAAc,QAClB,YACE,EAAE,OAAO,EACP,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,EACpC,CAAC,CACH,CACF;;;;;;;AAQA,MAAa,iBAAiB,YAC5B,EAAE,OAAO;CAEP,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,QAAQ,EACL,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAC/D,SAAS;AACd,CAAC,CACH;;;;;AAOA,MAAa,gBAAgB,YAC3B,EAAE,OAAO;CACP,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACxC,CAAC,CACH;;;;;;AAQA,MAAa,mBAAmB,eAAe,OAAO;CACpD,WAAW,EAAE,QAAQ,4CAA4C;CACjE,QAAQ,WAAW,OAAO,EACxB,WAAW,EAAE,KAAK;EAChB;EACA;EACA;EACA;EACA;CACF,CAAC,EACH,CAAC;CACD,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;;;;;;AAQD,MAAa,wBAAwB,eAAe,OAAO;CACzD,WAAW,EAAE,QAAQ,yCAAyC;CAC9D,WAAW,WACT,WAAW,OAAO;EAChB,WAAW,EAAE,KAAK,CAChB,8CACA,yCACF,CAAC;EACD,UAAU;CACZ,CAAC,CACH;CACA,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;;;;;AAQD,MAAa,uBAAuB,eAAe,OAAO;CACxD,WAAW,EAAE,QAAQ,sDAAsD;CAC3E,QAAQ,WAAW,OAAO,EACxB,WAAW,EAAE,QAAQ,gDAAgD,EACvE,CAAC;AACH,CAAC;;;;;AAOD,MAAa,2BAA2B,eAAe,OAAO;CAC5D,WAAW,EAAE,QACX,2DACF;CACA,WAAW,EAAE,MACX,WAAW,OAAO;EAChB,WAAW,EAAE,QACX,sDACF;EACA,UAAU;CACZ,CAAC,CACH;AACF,CAAC;AAGD,MAAa,WAAW,eAAe,YAAY,CAAC,CACjD,WAAW,OAAO,QAAQ;CACzB,IAAI,MAAM,cAAc,KAAA,GACtB,IAAI,YAAY,OACd,MAAM,YAAY;MACb,IAAI,eAAe,OACxB,MAAM,YAAY;MACb;EACL,IAAI,SAAS;GACX,MAAM;GACN,SAAS;EACX,CAAC;EACD,OAAO,EAAE;CACX;CAEF,OAAO;AACT,CAAC,CAAC,CACD,KACC,EAAE,mBAAmB,aAAa;CAChC;CACA;CACA;CACA;AACF,CAAC,CACH;AAGF,MAAa,eAAe,KAAK,KAAK,QAAQ;AAE9C,MAAa,oBAAoB,EAAE,OAAO;CACxC,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;CAC9C,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;AAC1C,CAAC;AAGD,MAAa,eAAe,EAAE,OAAO;CACnC,IAAI,EAAE,OAAO;CACb,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,MAAM,EAAE,OAAO;CACf,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;CAC5D,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;CACxC,QAAQ,EAAE,MAAM,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAGD,MAAa,oBAAoB,EAAE,OAAO;CACxC,OAAO,EAAE,OAAO;CAChB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI;CACtC,SAAS,WAAW,cAAc;;AAEhC,UAAU,EAAE,YAAY;EACtB,OAAO,MACL,EAAE,MAAM,GACR,mDACF;CACF,EACF,CAAC;AACH,CAAC;;;;;AAMD,MAAa,oBAAoB,EAAE,OAAO;CACxC,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;AACpC,CAAC;;;;;AAOD,MAAa,mBAAmB,EAAE,OAAO,EACvC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAC1B,CAAC;;;;AAMD,MAAa,mBAAmB,EAAE,OAAO;CACvC,MAAM,WACJ,EAAE,OAAO,EACP,MAAM,EAAE,OAAO,EACjB,CAAC,CACH;CACA,gBAAgB,EAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK;AAC3C,CAAC"}

package/dist/workers/repository/onboarding/pr/index.js

@@ -19,8 +19,8 @@ import { addParticipants } from "../../update/pr/participants.js";
 import { getPlatformPrOptions } from "../../update/pr/index.js";
 import { getBaseBranchDesc } from "./base-branch.js";
 import { getConfigDesc } from "./config-description.js";
-import { getExpectedPrList } from "./pr-list.js";
-import { getPackageFilesDesc } from "./package-files.js";
+import { getPackageFilesDesc, getPackageFilesSummary } from "./package-files.js";
+import { getExpectedPrList, getExpectedPrListSummary } from "./pr-list.js";
 import { isNumber, isString } from "@sindresorhus/is";
 //#region lib/workers/repository/onboarding/pr/index.ts
 /**
@@ -114,10 +114,16 @@ If you need any further assistance then you can also [request help here](${Globa
 	prBody = prBody.replace("{{WARNINGS}}\n", getWarnings(config) + getDepWarningsOnboardingPR(packageFiles, config));
 	prBody = prBody.replace("{{ERRORS}}\n", getErrors(config));
 	prBody = prBody.replace("{{BASEBRANCH}}\n", getBaseBranchDesc(config));
-	prBody = prBody.replace("{{PRLIST}}\n", getExpectedPrList(config, branches));
+	const prList = getExpectedPrList(config, branches);
+	prBody = prBody.replace("{{PRLIST}}\n", prList);
 	if (isString(config.prHeader)) prBody = `${compile(config.prHeader, config)}\n\n${prBody}`;
 	if (isString(config.prFooter)) prBody = `${prBody}\n---\n\n${compile(config.prFooter, config)}\n`;
 	prBody += onboardingConfigHashComment;
+	if (prBody.length > platform.maxBodyLength()) {
+		logger.debug("Onboarding PR body exceeds platform limit, switching to summary PR list and package files");
+		prBody = prBody.replace(prList, getExpectedPrListSummary(config, branches));
+		if (packageFilesDesc) prBody = prBody.replace(packageFilesDesc, `### Detected Package Files\n\n${getPackageFilesSummary(packageFiles)}`);
+	}
 	logger.trace(`prBody:\n${prBody}`);
 	prBody = platform.massageMarkdown(prBody, config.rebaseLabel);
 	if (existingPr) {

package/dist/workers/repository/onboarding/pr/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["template.compile"],"sources":["../../../../../lib/workers/repository/onboarding/pr/index.ts"],"sourcesContent":["import { isNumber, isString } from '@sindresorhus/is';\nimport { GlobalConfig } from '../../../../config/global.ts';\nimport type { RenovateConfig } from '../../../../config/types.ts';\nimport { REPOSITORY_CLOSED_ONBOARDING } from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport type { PackageFile } from '../../../../modules/manager/types.ts';\nimport { ensureComment } from '../../../../modules/platform/comment.ts';\nimport type { Pr } from '../../../../modules/platform/index.ts';\nimport { platform } from '../../../../modules/platform/index.ts';\nimport { hashBody } from '../../../../modules/platform/pr-body.ts';\nimport { scm } from '../../../../modules/platform/scm.ts';\nimport { getInheritedOrGlobal } from '../../../../util/common.ts';\nimport { getElapsedDays } from '../../../../util/date.ts';\nimport { emojify } from '../../../../util/emoji.ts';\nimport { getFile } from '../../../../util/git/index.ts';\nimport { toSha256 } from '../../../../util/hash.ts';\nimport * as template from '../../../../util/template/index.ts';\nimport type { BranchConfig } from '../../../types.ts';\nimport {\n  getDepWarningsOnboardingPR,\n  getErrors,\n  getWarnings,\n} from '../../errors-warnings.ts';\nimport { getPlatformPrOptions } from '../../update/pr/index.ts';\nimport { prepareLabels } from '../../update/pr/labels.ts';\nimport { addParticipants } from '../../update/pr/participants.ts';\nimport { isOnboardingBranchConflicted } from '../branch/onboarding-branch-cache.ts';\nimport {\n  OnboardingState,\n  getDefaultConfigFileName,\n  getSemanticCommitPrTitle,\n} from '../common.ts';\nimport { getBaseBranchDesc } from './base-branch.ts';\nimport { getConfigDesc } from './config-description.ts';\nimport { getPackageFilesDesc } from './package-files.ts';\nimport { getExpectedPrList } from './pr-list.ts';\n\n/**\n * Given an existing PR, if onboardingAutoCloseAge has passed, close the PR.\n *\n * Returns true if the PR was closed.\n */\nasync function ensureOnboardingAutoCloseAge(existingPr: Pr): Promise<boolean> {\n  // check if the existing pr crosses the onboarding autoclose age\n  const ageOfOnboardingPr = getElapsedDays(existingPr.createdAt!, false);\n  const onboardingAutoCloseAge = getInheritedOrGlobal('onboardingAutoCloseAge');\n  if (onboardingAutoCloseAge) {\n    logger.debug(\n      {\n        onboardingAutoCloseAge,\n        createdAt: existingPr.createdAt!,\n        ageOfOnboardingPr,\n      },\n      `Determining that the onboarding PR created at \\`${existingPr.createdAt!}\\` was created ${ageOfOnboardingPr.toFixed(2)} days ago`,\n    );\n  }\n  if (\n    isNumber(onboardingAutoCloseAge) &&\n    ageOfOnboardingPr > onboardingAutoCloseAge\n  ) {\n    // close the pr\n    await platform.updatePr({\n      number: existingPr.number,\n      state: 'closed',\n      prTitle: existingPr.title,\n    });\n    // ensure comment\n    await ensureComment({\n      number: existingPr.number,\n      topic: `Renovate is disabled`,\n      content: `Renovate is disabled because the onboarding PR has been unmerged for more than ${onboardingAutoCloseAge} days. To enable Renovate, you can either (a) change this PR's title to get a new onboarding PR, and merge the new onboarding PR, or (b) create a Renovate config file, and commit that file to your base branch.`,\n    });\n    logger.debug(\n      {\n        ageOfOnboardingPr,\n        onboardingAutoCloseAge,\n      },\n      `Renovate is being disabled for this repository as the onboarding PR has been unmerged for more than ${onboardingAutoCloseAge} days`,\n    );\n    return true;\n  }\n  return false;\n}\n\nexport async function ensureOnboardingPr(\n  config: RenovateConfig,\n  packageFiles: Record<string, PackageFile[]> | null,\n  branches: BranchConfig[],\n): Promise<void> {\n  if (\n    config.repoIsOnboarded === true ||\n    (config.onboardingRebaseCheckbox && !OnboardingState.prUpdateRequested)\n  ) {\n    return;\n  }\n  logger.debug('ensureOnboardingPr()');\n  logger.trace({ config });\n  // TODO #22198\n  const onboardingBranch = getInheritedOrGlobal('onboardingBranch')!;\n  const existingPr = await platform.getBranchPr(\n    onboardingBranch,\n    config.defaultBranch,\n  );\n  if (existingPr) {\n    const wasClosed = await ensureOnboardingAutoCloseAge(existingPr);\n    if (wasClosed) {\n      throw new Error(REPOSITORY_CLOSED_ONBOARDING);\n    }\n\n    // skip pr-update if branch is conflicted\n    if (\n      await isOnboardingBranchConflicted(\n        config.defaultBranch!,\n        onboardingBranch,\n      )\n    ) {\n      if (GlobalConfig.get('dryRun')) {\n        logger.info(\n          'DRY-RUN: Would comment that Onboarding PR is conflicted and needs manual resolving',\n        );\n        return;\n      }\n      await ensureComment({\n        number: existingPr.number,\n        topic: 'Branch Conflicted',\n        content: emojify(\n          `:warning: This PR has a merge conflict which Renovate is unable to automatically resolve, so updates to this PR description are now paused. Please resolve the merge conflict manually.\\n\\n`,\n        ),\n      });\n      return;\n    }\n  }\n\n  if (OnboardingState.onboardingCacheValid) {\n    return;\n  }\n\n  const onboardingConfigHashComment = await getOnboardingConfigHashComment();\n  const rebaseCheckBox = getRebaseCheckbox(config.onboardingRebaseCheckbox);\n  logger.debug('Filling in onboarding PR template');\n  let prTemplate = `Welcome to [Renovate](${\n    GlobalConfig.get('productLinks').homepage\n  })! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.\\n\\n`;\n  prTemplate +=\n    getInheritedOrGlobal('requireConfig') === 'required'\n      ? emojify(\n          `:vertical_traffic_light: To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.\\n\\n`,\n        )\n      : emojify(\n          `:vertical_traffic_light: Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request.\\n\\n`,\n        );\n\n  prTemplate += emojify(\n    `:books: See our [Reading List](${GlobalConfig.get('productLinks').documentation}reading-list/) for relevant documentation you may be interested in reading.\\n\\n`,\n  );\n\n  const configFile = getDefaultConfigFileName();\n  prTemplate += emojify(\n    `:abcd: Do you want to change how Renovate upgrades your dependencies?`,\n  );\n  prTemplate += ` Add your custom config to \\`${configFile}\\` in this branch${\n    config.onboardingRebaseCheckbox\n      ? ' and select the Retry/Rebase checkbox below'\n      : ''\n  }. Renovate will update the Pull Request description the next time it runs.`;\n  prTemplate += '\\n\\n';\n  // TODO #22198\n  prTemplate += emojify(\n    `\n\n---\n{{PACKAGE FILES}}\n{{CONFIG}}\n{{BASEBRANCH}}\n{{PRLIST}}\n{{WARNINGS}}\n{{ERRORS}}\n\n---\n\n:question: Got questions? Check out Renovate's [Docs](${\n      GlobalConfig.get('productLinks').documentation\n    }), particularly the Getting Started section.\nIf you need any further assistance then you can also [request help here](${\n      GlobalConfig.get('productLinks').help\n    }).\n`,\n  );\n  prTemplate += rebaseCheckBox;\n  let prBody = prTemplate;\n  const packageFilesDesc = getPackageFilesDesc(packageFiles);\n  if (packageFilesDesc) {\n    prBody = `${prBody.replace('{{PACKAGE FILES}}', packageFilesDesc)}\\n`;\n  } else {\n    prBody = prBody.replace('{{PACKAGE FILES}}\\n', '');\n  }\n  let configDesc = '';\n  if (GlobalConfig.get('dryRun')) {\n    // TODO: types (#22198)\n    logger.info(`DRY-RUN: Would check branch ${onboardingBranch}`);\n  } else {\n    configDesc = getConfigDesc(config, packageFiles!);\n  }\n  prBody = prBody.replace('{{CONFIG}}\\n', configDesc);\n  prBody = prBody.replace(\n    '{{WARNINGS}}\\n',\n    getWarnings(config) + getDepWarningsOnboardingPR(packageFiles!, config),\n  );\n  prBody = prBody.replace('{{ERRORS}}\\n', getErrors(config));\n  prBody = prBody.replace('{{BASEBRANCH}}\\n', getBaseBranchDesc(config));\n  prBody = prBody.replace('{{PRLIST}}\\n', getExpectedPrList(config, branches));\n  if (isString(config.prHeader)) {\n    prBody = `${template.compile(config.prHeader, config)}\\n\\n${prBody}`;\n  }\n  if (isString(config.prFooter)) {\n    prBody = `${prBody}\\n---\\n\\n${template.compile(config.prFooter, config)}\\n`;\n  }\n\n  prBody += onboardingConfigHashComment;\n\n  logger.trace(`prBody:\\n${prBody}`);\n\n  prBody = platform.massageMarkdown(prBody, config.rebaseLabel);\n\n  if (existingPr) {\n    logger.debug('Found open onboarding PR');\n    // Check if existing PR needs updating\n    const prBodyHash = hashBody(prBody);\n    if (existingPr.bodyStruct?.hash === prBodyHash) {\n      logger.debug(`Pull Request #${existingPr.number} does not need updating`);\n      return;\n    }\n    // PR must need updating\n    if (GlobalConfig.get('dryRun')) {\n      logger.info('DRY-RUN: Would update onboarding PR');\n    } else {\n      await platform.updatePr({\n        number: existingPr.number,\n        prTitle: existingPr.title,\n        prBody,\n      });\n      logger.info({ pr: existingPr.number }, 'Onboarding PR updated');\n    }\n    return;\n  }\n  logger.debug('Creating onboarding PR');\n  const labels: string[] = prepareLabels(config);\n  try {\n    if (GlobalConfig.get('dryRun')) {\n      logger.info('DRY-RUN: Would create onboarding PR');\n    } else {\n      // TODO #22198\n      const prTitle =\n        config.semanticCommits === 'enabled'\n          ? getSemanticCommitPrTitle(config)\n          : getInheritedOrGlobal('onboardingPrTitle')!;\n      const pr = await platform.createPr({\n        sourceBranch: onboardingBranch,\n        targetBranch: config.defaultBranch!,\n        prTitle,\n        prBody,\n        labels,\n        platformPrOptions: getPlatformPrOptions({\n          ...config,\n          automerge: false,\n        }),\n      });\n      logger.info(\n        { pr: `Pull Request #${pr!.number}` },\n        'Onboarding PR created',\n      );\n      await addParticipants(config, pr!);\n    }\n  } catch (err) {\n    if (\n      err.response?.statusCode === 422 &&\n      err.response?.body?.errors?.[0]?.message?.startsWith(\n        'A pull request already exists',\n      )\n    ) {\n      logger.warn(\n        'Onboarding PR already exists but cannot find it. It was probably created by a different user.',\n      );\n      await scm.deleteBranch(onboardingBranch);\n      return;\n    }\n    throw err;\n  }\n}\n\nfunction getRebaseCheckbox(onboardingRebaseCheckbox?: boolean): string {\n  let rebaseCheckBox = '';\n  if (onboardingRebaseCheckbox) {\n    // Create markdown checkbox\n    rebaseCheckBox = `\\n\\n---\\n\\n - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click this checkbox.\\n`;\n  }\n\n  return rebaseCheckBox;\n}\n\nasync function getOnboardingConfigHashComment(): Promise<string> {\n  const configFile = getDefaultConfigFileName();\n  const existingContents =\n    (await getFile(configFile, getInheritedOrGlobal('onboardingBranch'))) ?? '';\n  const hash = toSha256(existingContents);\n\n  return `\\n<!--renovate-config-hash:${hash}-->\\n`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,eAAe,6BAA6B,YAAkC;CAE5E,MAAM,oBAAoB,eAAe,WAAW,WAAY,KAAK;CACrE,MAAM,yBAAyB,qBAAqB,wBAAwB;CAC5E,IAAI,wBACF,OAAO,MACL;EACE;EACA,WAAW,WAAW;EACtB;CACF,GACA,mDAAmD,WAAW,UAAW,iBAAiB,kBAAkB,QAAQ,CAAC,EAAE,UACzH;CAEF,IACE,SAAS,sBAAsB,KAC/B,oBAAoB,wBACpB;EAEA,MAAM,SAAS,SAAS;GACtB,QAAQ,WAAW;GACnB,OAAO;GACP,SAAS,WAAW;EACtB,CAAC;EAED,MAAM,cAAc;GAClB,QAAQ,WAAW;GACnB,OAAO;GACP,SAAS,kFAAkF,uBAAuB;EACpH,CAAC;EACD,OAAO,MACL;GACE;GACA;EACF,GACA,uGAAuG,uBAAuB,MAChI;EACA,OAAO;CACT;CACA,OAAO;AACT;AAEA,eAAsB,mBACpB,QACA,cACA,UACe;CACf,IACE,OAAO,oBAAoB,QAC1B,OAAO,4BAA4B,CAAC,gBAAgB,mBAErD;CAEF,OAAO,MAAM,sBAAsB;CACnC,OAAO,MAAM,EAAE,OAAO,CAAC;CAEvB,MAAM,mBAAmB,qBAAqB,kBAAkB;CAChE,MAAM,aAAa,MAAM,SAAS,YAChC,kBACA,OAAO,aACT;CACA,IAAI,YAAY;EAEd,IAAI,MADoB,6BAA6B,UAAU,GAE7D,MAAM,IAAI,MAAM,4BAA4B;EAI9C,IACE,MAAM,6BACJ,OAAO,eACP,gBACF,GACA;GACA,IAAI,aAAa,IAAI,QAAQ,GAAG;IAC9B,OAAO,KACL,oFACF;IACA;GACF;GACA,MAAM,cAAc;IAClB,QAAQ,WAAW;IACnB,OAAO;IACP,SAAS,QACP,6LACF;GACF,CAAC;GACD;EACF;CACF;CAEA,IAAI,gBAAgB,sBAClB;CAGF,MAAM,8BAA8B,MAAM,+BAA+B;CACzE,MAAM,iBAAiB,kBAAkB,OAAO,wBAAwB;CACxE,OAAO,MAAM,mCAAmC;CAChD,IAAI,aAAa,yBACf,aAAa,IAAI,cAAc,CAAC,CAAC,SAClC;CACD,cACE,qBAAqB,eAAe,MAAM,aACtC,QACE,2IACF,IACA,QACE,uIACF;CAEN,cAAc,QACZ,kCAAkC,aAAa,IAAI,cAAc,CAAC,CAAC,cAAc,gFACnF;CAEA,MAAM,aAAa,yBAAyB;CAC5C,cAAc,QACZ,uEACF;CACA,cAAc,gCAAgC,WAAW,mBACvD,OAAO,2BACH,gDACA,GACL;CACD,cAAc;CAEd,cAAc,QACZ;;;;;;;;;;;;wDAaE,aAAa,IAAI,cAAc,CAAC,CAAC,cAClC;2EAEC,aAAa,IAAI,cAAc,CAAC,CAAC,KAClC;CAEH;CACA,cAAc;CACd,IAAI,SAAS;CACb,MAAM,mBAAmB,oBAAoB,YAAY;CACzD,IAAI,kBACF,SAAS,GAAG,OAAO,QAAQ,qBAAqB,gBAAgB,EAAE;MAElE,SAAS,OAAO,QAAQ,uBAAuB,EAAE;CAEnD,IAAI,aAAa;CACjB,IAAI,aAAa,IAAI,QAAQ,GAE3B,OAAO,KAAK,+BAA+B,kBAAkB;MAE7D,aAAa,cAAc,QAAQ,YAAa;CAElD,SAAS,OAAO,QAAQ,gBAAgB,UAAU;CAClD,SAAS,OAAO,QACd,kBACA,YAAY,MAAM,IAAI,2BAA2B,cAAe,MAAM,CACxE;CACA,SAAS,OAAO,QAAQ,gBAAgB,UAAU,MAAM,CAAC;CACzD,SAAS,OAAO,QAAQ,oBAAoB,kBAAkB,MAAM,CAAC;CACrE,SAAS,OAAO,QAAQ,gBAAgB,kBAAkB,QAAQ,QAAQ,CAAC;CAC3E,IAAI,SAAS,OAAO,QAAQ,GAC1B,SAAS,GAAGA,QAAiB,OAAO,UAAU,MAAM,EAAE,MAAM;CAE9D,IAAI,SAAS,OAAO,QAAQ,GAC1B,SAAS,GAAG,OAAO,WAAWA,QAAiB,OAAO,UAAU,MAAM,EAAE;CAG1E,UAAU;CAEV,OAAO,MAAM,YAAY,QAAQ;CAEjC,SAAS,SAAS,gBAAgB,QAAQ,OAAO,WAAW;CAE5D,IAAI,YAAY;EACd,OAAO,MAAM,0BAA0B;EAEvC,MAAM,aAAa,SAAS,MAAM;EAClC,IAAI,WAAW,YAAY,SAAS,YAAY;GAC9C,OAAO,MAAM,iBAAiB,WAAW,OAAO,wBAAwB;GACxE;EACF;EAEA,IAAI,aAAa,IAAI,QAAQ,GAC3B,OAAO,KAAK,qCAAqC;OAC5C;GACL,MAAM,SAAS,SAAS;IACtB,QAAQ,WAAW;IACnB,SAAS,WAAW;IACpB;GACF,CAAC;GACD,OAAO,KAAK,EAAE,IAAI,WAAW,OAAO,GAAG,uBAAuB;EAChE;EACA;CACF;CACA,OAAO,MAAM,wBAAwB;CACrC,MAAM,SAAmB,cAAc,MAAM;CAC7C,IAAI;EACF,IAAI,aAAa,IAAI,QAAQ,GAC3B,OAAO,KAAK,qCAAqC;OAC5C;GAEL,MAAM,UACJ,OAAO,oBAAoB,YACvB,yBAAyB,MAAM,IAC/B,qBAAqB,mBAAmB;GAC9C,MAAM,KAAK,MAAM,SAAS,SAAS;IACjC,cAAc;IACd,cAAc,OAAO;IACrB;IACA;IACA;IACA,mBAAmB,qBAAqB;KACtC,GAAG;KACH,WAAW;IACb,CAAC;GACH,CAAC;GACD,OAAO,KACL,EAAE,IAAI,iBAAiB,GAAI,SAAS,GACpC,uBACF;GACA,MAAM,gBAAgB,QAAQ,EAAG;EACnC;CACF,SAAS,KAAK;EACZ,IACE,IAAI,UAAU,eAAe,OAC7B,IAAI,UAAU,MAAM,SAAS,EAAE,EAAE,SAAS,WACxC,+BACF,GACA;GACA,OAAO,KACL,+FACF;GACA,MAAM,IAAI,aAAa,gBAAgB;GACvC;EACF;EACA,MAAM;CACR;AACF;AAEA,SAAS,kBAAkB,0BAA4C;CACrE,IAAI,iBAAiB;CACrB,IAAI,0BAEF,iBAAiB;CAGnB,OAAO;AACT;AAEA,eAAe,iCAAkD;CAM/D,OAAO,8BAFM,SADV,MAAM,QAFU,yBAEO,GAAG,qBAAqB,kBAAkB,CAAC,KAAM,EAGnC,EAAE;AAC5C"}
+{"version":3,"file":"index.js","names":["template.compile"],"sources":["../../../../../lib/workers/repository/onboarding/pr/index.ts"],"sourcesContent":["import { isNumber, isString } from '@sindresorhus/is';\nimport { GlobalConfig } from '../../../../config/global.ts';\nimport type { RenovateConfig } from '../../../../config/types.ts';\nimport { REPOSITORY_CLOSED_ONBOARDING } from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport type { PackageFile } from '../../../../modules/manager/types.ts';\nimport { ensureComment } from '../../../../modules/platform/comment.ts';\nimport type { Pr } from '../../../../modules/platform/index.ts';\nimport { platform } from '../../../../modules/platform/index.ts';\nimport { hashBody } from '../../../../modules/platform/pr-body.ts';\nimport { scm } from '../../../../modules/platform/scm.ts';\nimport { getInheritedOrGlobal } from '../../../../util/common.ts';\nimport { getElapsedDays } from '../../../../util/date.ts';\nimport { emojify } from '../../../../util/emoji.ts';\nimport { getFile } from '../../../../util/git/index.ts';\nimport { toSha256 } from '../../../../util/hash.ts';\nimport * as template from '../../../../util/template/index.ts';\nimport type { BranchConfig } from '../../../types.ts';\nimport {\n  getDepWarningsOnboardingPR,\n  getErrors,\n  getWarnings,\n} from '../../errors-warnings.ts';\nimport { getPlatformPrOptions } from '../../update/pr/index.ts';\nimport { prepareLabels } from '../../update/pr/labels.ts';\nimport { addParticipants } from '../../update/pr/participants.ts';\nimport { isOnboardingBranchConflicted } from '../branch/onboarding-branch-cache.ts';\nimport {\n  OnboardingState,\n  getDefaultConfigFileName,\n  getSemanticCommitPrTitle,\n} from '../common.ts';\nimport { getBaseBranchDesc } from './base-branch.ts';\nimport { getConfigDesc } from './config-description.ts';\nimport {\n  getPackageFilesDesc,\n  getPackageFilesSummary,\n} from './package-files.ts';\nimport { getExpectedPrList, getExpectedPrListSummary } from './pr-list.ts';\n\n/**\n * Given an existing PR, if onboardingAutoCloseAge has passed, close the PR.\n *\n * Returns true if the PR was closed.\n */\nasync function ensureOnboardingAutoCloseAge(existingPr: Pr): Promise<boolean> {\n  // check if the existing pr crosses the onboarding autoclose age\n  const ageOfOnboardingPr = getElapsedDays(existingPr.createdAt!, false);\n  const onboardingAutoCloseAge = getInheritedOrGlobal('onboardingAutoCloseAge');\n  if (onboardingAutoCloseAge) {\n    logger.debug(\n      {\n        onboardingAutoCloseAge,\n        createdAt: existingPr.createdAt!,\n        ageOfOnboardingPr,\n      },\n      `Determining that the onboarding PR created at \\`${existingPr.createdAt!}\\` was created ${ageOfOnboardingPr.toFixed(2)} days ago`,\n    );\n  }\n  if (\n    isNumber(onboardingAutoCloseAge) &&\n    ageOfOnboardingPr > onboardingAutoCloseAge\n  ) {\n    // close the pr\n    await platform.updatePr({\n      number: existingPr.number,\n      state: 'closed',\n      prTitle: existingPr.title,\n    });\n    // ensure comment\n    await ensureComment({\n      number: existingPr.number,\n      topic: `Renovate is disabled`,\n      content: `Renovate is disabled because the onboarding PR has been unmerged for more than ${onboardingAutoCloseAge} days. To enable Renovate, you can either (a) change this PR's title to get a new onboarding PR, and merge the new onboarding PR, or (b) create a Renovate config file, and commit that file to your base branch.`,\n    });\n    logger.debug(\n      {\n        ageOfOnboardingPr,\n        onboardingAutoCloseAge,\n      },\n      `Renovate is being disabled for this repository as the onboarding PR has been unmerged for more than ${onboardingAutoCloseAge} days`,\n    );\n    return true;\n  }\n  return false;\n}\n\nexport async function ensureOnboardingPr(\n  config: RenovateConfig,\n  packageFiles: Record<string, PackageFile[]> | null,\n  branches: BranchConfig[],\n): Promise<void> {\n  if (\n    config.repoIsOnboarded === true ||\n    (config.onboardingRebaseCheckbox && !OnboardingState.prUpdateRequested)\n  ) {\n    return;\n  }\n  logger.debug('ensureOnboardingPr()');\n  logger.trace({ config });\n  // TODO #22198\n  const onboardingBranch = getInheritedOrGlobal('onboardingBranch')!;\n  const existingPr = await platform.getBranchPr(\n    onboardingBranch,\n    config.defaultBranch,\n  );\n  if (existingPr) {\n    const wasClosed = await ensureOnboardingAutoCloseAge(existingPr);\n    if (wasClosed) {\n      throw new Error(REPOSITORY_CLOSED_ONBOARDING);\n    }\n\n    // skip pr-update if branch is conflicted\n    if (\n      await isOnboardingBranchConflicted(\n        config.defaultBranch!,\n        onboardingBranch,\n      )\n    ) {\n      if (GlobalConfig.get('dryRun')) {\n        logger.info(\n          'DRY-RUN: Would comment that Onboarding PR is conflicted and needs manual resolving',\n        );\n        return;\n      }\n      await ensureComment({\n        number: existingPr.number,\n        topic: 'Branch Conflicted',\n        content: emojify(\n          `:warning: This PR has a merge conflict which Renovate is unable to automatically resolve, so updates to this PR description are now paused. Please resolve the merge conflict manually.\\n\\n`,\n        ),\n      });\n      return;\n    }\n  }\n\n  if (OnboardingState.onboardingCacheValid) {\n    return;\n  }\n\n  const onboardingConfigHashComment = await getOnboardingConfigHashComment();\n  const rebaseCheckBox = getRebaseCheckbox(config.onboardingRebaseCheckbox);\n  logger.debug('Filling in onboarding PR template');\n  let prTemplate = `Welcome to [Renovate](${\n    GlobalConfig.get('productLinks').homepage\n  })! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.\\n\\n`;\n  prTemplate +=\n    getInheritedOrGlobal('requireConfig') === 'required'\n      ? emojify(\n          `:vertical_traffic_light: To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.\\n\\n`,\n        )\n      : emojify(\n          `:vertical_traffic_light: Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request.\\n\\n`,\n        );\n\n  prTemplate += emojify(\n    `:books: See our [Reading List](${GlobalConfig.get('productLinks').documentation}reading-list/) for relevant documentation you may be interested in reading.\\n\\n`,\n  );\n\n  const configFile = getDefaultConfigFileName();\n  prTemplate += emojify(\n    `:abcd: Do you want to change how Renovate upgrades your dependencies?`,\n  );\n  prTemplate += ` Add your custom config to \\`${configFile}\\` in this branch${\n    config.onboardingRebaseCheckbox\n      ? ' and select the Retry/Rebase checkbox below'\n      : ''\n  }. Renovate will update the Pull Request description the next time it runs.`;\n  prTemplate += '\\n\\n';\n  // TODO #22198\n  prTemplate += emojify(\n    `\n\n---\n{{PACKAGE FILES}}\n{{CONFIG}}\n{{BASEBRANCH}}\n{{PRLIST}}\n{{WARNINGS}}\n{{ERRORS}}\n\n---\n\n:question: Got questions? Check out Renovate's [Docs](${\n      GlobalConfig.get('productLinks').documentation\n    }), particularly the Getting Started section.\nIf you need any further assistance then you can also [request help here](${\n      GlobalConfig.get('productLinks').help\n    }).\n`,\n  );\n  prTemplate += rebaseCheckBox;\n  let prBody = prTemplate;\n  const packageFilesDesc = getPackageFilesDesc(packageFiles);\n  if (packageFilesDesc) {\n    prBody = `${prBody.replace('{{PACKAGE FILES}}', packageFilesDesc)}\\n`;\n  } else {\n    prBody = prBody.replace('{{PACKAGE FILES}}\\n', '');\n  }\n  let configDesc = '';\n  if (GlobalConfig.get('dryRun')) {\n    // TODO: types (#22198)\n    logger.info(`DRY-RUN: Would check branch ${onboardingBranch}`);\n  } else {\n    configDesc = getConfigDesc(config, packageFiles!);\n  }\n  prBody = prBody.replace('{{CONFIG}}\\n', configDesc);\n  prBody = prBody.replace(\n    '{{WARNINGS}}\\n',\n    getWarnings(config) + getDepWarningsOnboardingPR(packageFiles!, config),\n  );\n  prBody = prBody.replace('{{ERRORS}}\\n', getErrors(config));\n  prBody = prBody.replace('{{BASEBRANCH}}\\n', getBaseBranchDesc(config));\n  const prList = getExpectedPrList(config, branches);\n  prBody = prBody.replace('{{PRLIST}}\\n', prList);\n  if (isString(config.prHeader)) {\n    prBody = `${template.compile(config.prHeader, config)}\\n\\n${prBody}`;\n  }\n  if (isString(config.prFooter)) {\n    prBody = `${prBody}\\n---\\n\\n${template.compile(config.prFooter, config)}\\n`;\n  }\n\n  prBody += onboardingConfigHashComment;\n\n  if (prBody.length > platform.maxBodyLength()) {\n    logger.debug(\n      'Onboarding PR body exceeds platform limit, switching to summary PR list and package files',\n    );\n    prBody = prBody.replace(prList, getExpectedPrListSummary(config, branches));\n    if (packageFilesDesc) {\n      prBody = prBody.replace(\n        packageFilesDesc,\n        `### Detected Package Files\\n\\n${getPackageFilesSummary(packageFiles)}`,\n      );\n    }\n  }\n\n  logger.trace(`prBody:\\n${prBody}`);\n\n  prBody = platform.massageMarkdown(prBody, config.rebaseLabel);\n\n  if (existingPr) {\n    logger.debug('Found open onboarding PR');\n    // Check if existing PR needs updating\n    const prBodyHash = hashBody(prBody);\n    if (existingPr.bodyStruct?.hash === prBodyHash) {\n      logger.debug(`Pull Request #${existingPr.number} does not need updating`);\n      return;\n    }\n    // PR must need updating\n    if (GlobalConfig.get('dryRun')) {\n      logger.info('DRY-RUN: Would update onboarding PR');\n    } else {\n      await platform.updatePr({\n        number: existingPr.number,\n        prTitle: existingPr.title,\n        prBody,\n      });\n      logger.info({ pr: existingPr.number }, 'Onboarding PR updated');\n    }\n    return;\n  }\n  logger.debug('Creating onboarding PR');\n  const labels: string[] = prepareLabels(config);\n  try {\n    if (GlobalConfig.get('dryRun')) {\n      logger.info('DRY-RUN: Would create onboarding PR');\n    } else {\n      // TODO #22198\n      const prTitle =\n        config.semanticCommits === 'enabled'\n          ? getSemanticCommitPrTitle(config)\n          : getInheritedOrGlobal('onboardingPrTitle')!;\n      const pr = await platform.createPr({\n        sourceBranch: onboardingBranch,\n        targetBranch: config.defaultBranch!,\n        prTitle,\n        prBody,\n        labels,\n        platformPrOptions: getPlatformPrOptions({\n          ...config,\n          automerge: false,\n        }),\n      });\n      logger.info(\n        { pr: `Pull Request #${pr!.number}` },\n        'Onboarding PR created',\n      );\n      await addParticipants(config, pr!);\n    }\n  } catch (err) {\n    if (\n      err.response?.statusCode === 422 &&\n      err.response?.body?.errors?.[0]?.message?.startsWith(\n        'A pull request already exists',\n      )\n    ) {\n      logger.warn(\n        'Onboarding PR already exists but cannot find it. It was probably created by a different user.',\n      );\n      await scm.deleteBranch(onboardingBranch);\n      return;\n    }\n    throw err;\n  }\n}\n\nfunction getRebaseCheckbox(onboardingRebaseCheckbox?: boolean): string {\n  let rebaseCheckBox = '';\n  if (onboardingRebaseCheckbox) {\n    // Create markdown checkbox\n    rebaseCheckBox = `\\n\\n---\\n\\n - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click this checkbox.\\n`;\n  }\n\n  return rebaseCheckBox;\n}\n\nasync function getOnboardingConfigHashComment(): Promise<string> {\n  const configFile = getDefaultConfigFileName();\n  const existingContents =\n    (await getFile(configFile, getInheritedOrGlobal('onboardingBranch'))) ?? '';\n  const hash = toSha256(existingContents);\n\n  return `\\n<!--renovate-config-hash:${hash}-->\\n`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,eAAe,6BAA6B,YAAkC;CAE5E,MAAM,oBAAoB,eAAe,WAAW,WAAY,KAAK;CACrE,MAAM,yBAAyB,qBAAqB,wBAAwB;CAC5E,IAAI,wBACF,OAAO,MACL;EACE;EACA,WAAW,WAAW;EACtB;CACF,GACA,mDAAmD,WAAW,UAAW,iBAAiB,kBAAkB,QAAQ,CAAC,EAAE,UACzH;CAEF,IACE,SAAS,sBAAsB,KAC/B,oBAAoB,wBACpB;EAEA,MAAM,SAAS,SAAS;GACtB,QAAQ,WAAW;GACnB,OAAO;GACP,SAAS,WAAW;EACtB,CAAC;EAED,MAAM,cAAc;GAClB,QAAQ,WAAW;GACnB,OAAO;GACP,SAAS,kFAAkF,uBAAuB;EACpH,CAAC;EACD,OAAO,MACL;GACE;GACA;EACF,GACA,uGAAuG,uBAAuB,MAChI;EACA,OAAO;CACT;CACA,OAAO;AACT;AAEA,eAAsB,mBACpB,QACA,cACA,UACe;CACf,IACE,OAAO,oBAAoB,QAC1B,OAAO,4BAA4B,CAAC,gBAAgB,mBAErD;CAEF,OAAO,MAAM,sBAAsB;CACnC,OAAO,MAAM,EAAE,OAAO,CAAC;CAEvB,MAAM,mBAAmB,qBAAqB,kBAAkB;CAChE,MAAM,aAAa,MAAM,SAAS,YAChC,kBACA,OAAO,aACT;CACA,IAAI,YAAY;EAEd,IAAI,MADoB,6BAA6B,UAAU,GAE7D,MAAM,IAAI,MAAM,4BAA4B;EAI9C,IACE,MAAM,6BACJ,OAAO,eACP,gBACF,GACA;GACA,IAAI,aAAa,IAAI,QAAQ,GAAG;IAC9B,OAAO,KACL,oFACF;IACA;GACF;GACA,MAAM,cAAc;IAClB,QAAQ,WAAW;IACnB,OAAO;IACP,SAAS,QACP,6LACF;GACF,CAAC;GACD;EACF;CACF;CAEA,IAAI,gBAAgB,sBAClB;CAGF,MAAM,8BAA8B,MAAM,+BAA+B;CACzE,MAAM,iBAAiB,kBAAkB,OAAO,wBAAwB;CACxE,OAAO,MAAM,mCAAmC;CAChD,IAAI,aAAa,yBACf,aAAa,IAAI,cAAc,CAAC,CAAC,SAClC;CACD,cACE,qBAAqB,eAAe,MAAM,aACtC,QACE,2IACF,IACA,QACE,uIACF;CAEN,cAAc,QACZ,kCAAkC,aAAa,IAAI,cAAc,CAAC,CAAC,cAAc,gFACnF;CAEA,MAAM,aAAa,yBAAyB;CAC5C,cAAc,QACZ,uEACF;CACA,cAAc,gCAAgC,WAAW,mBACvD,OAAO,2BACH,gDACA,GACL;CACD,cAAc;CAEd,cAAc,QACZ;;;;;;;;;;;;wDAaE,aAAa,IAAI,cAAc,CAAC,CAAC,cAClC;2EAEC,aAAa,IAAI,cAAc,CAAC,CAAC,KAClC;CAEH;CACA,cAAc;CACd,IAAI,SAAS;CACb,MAAM,mBAAmB,oBAAoB,YAAY;CACzD,IAAI,kBACF,SAAS,GAAG,OAAO,QAAQ,qBAAqB,gBAAgB,EAAE;MAElE,SAAS,OAAO,QAAQ,uBAAuB,EAAE;CAEnD,IAAI,aAAa;CACjB,IAAI,aAAa,IAAI,QAAQ,GAE3B,OAAO,KAAK,+BAA+B,kBAAkB;MAE7D,aAAa,cAAc,QAAQ,YAAa;CAElD,SAAS,OAAO,QAAQ,gBAAgB,UAAU;CAClD,SAAS,OAAO,QACd,kBACA,YAAY,MAAM,IAAI,2BAA2B,cAAe,MAAM,CACxE;CACA,SAAS,OAAO,QAAQ,gBAAgB,UAAU,MAAM,CAAC;CACzD,SAAS,OAAO,QAAQ,oBAAoB,kBAAkB,MAAM,CAAC;CACrE,MAAM,SAAS,kBAAkB,QAAQ,QAAQ;CACjD,SAAS,OAAO,QAAQ,gBAAgB,MAAM;CAC9C,IAAI,SAAS,OAAO,QAAQ,GAC1B,SAAS,GAAGA,QAAiB,OAAO,UAAU,MAAM,EAAE,MAAM;CAE9D,IAAI,SAAS,OAAO,QAAQ,GAC1B,SAAS,GAAG,OAAO,WAAWA,QAAiB,OAAO,UAAU,MAAM,EAAE;CAG1E,UAAU;CAEV,IAAI,OAAO,SAAS,SAAS,cAAc,GAAG;EAC5C,OAAO,MACL,2FACF;EACA,SAAS,OAAO,QAAQ,QAAQ,yBAAyB,QAAQ,QAAQ,CAAC;EAC1E,IAAI,kBACF,SAAS,OAAO,QACd,kBACA,iCAAiC,uBAAuB,YAAY,GACtE;CAEJ;CAEA,OAAO,MAAM,YAAY,QAAQ;CAEjC,SAAS,SAAS,gBAAgB,QAAQ,OAAO,WAAW;CAE5D,IAAI,YAAY;EACd,OAAO,MAAM,0BAA0B;EAEvC,MAAM,aAAa,SAAS,MAAM;EAClC,IAAI,WAAW,YAAY,SAAS,YAAY;GAC9C,OAAO,MAAM,iBAAiB,WAAW,OAAO,wBAAwB;GACxE;EACF;EAEA,IAAI,aAAa,IAAI,QAAQ,GAC3B,OAAO,KAAK,qCAAqC;OAC5C;GACL,MAAM,SAAS,SAAS;IACtB,QAAQ,WAAW;IACnB,SAAS,WAAW;IACpB;GACF,CAAC;GACD,OAAO,KAAK,EAAE,IAAI,WAAW,OAAO,GAAG,uBAAuB;EAChE;EACA;CACF;CACA,OAAO,MAAM,wBAAwB;CACrC,MAAM,SAAmB,cAAc,MAAM;CAC7C,IAAI;EACF,IAAI,aAAa,IAAI,QAAQ,GAC3B,OAAO,KAAK,qCAAqC;OAC5C;GAEL,MAAM,UACJ,OAAO,oBAAoB,YACvB,yBAAyB,MAAM,IAC/B,qBAAqB,mBAAmB;GAC9C,MAAM,KAAK,MAAM,SAAS,SAAS;IACjC,cAAc;IACd,cAAc,OAAO;IACrB;IACA;IACA;IACA,mBAAmB,qBAAqB;KACtC,GAAG;KACH,WAAW;IACb,CAAC;GACH,CAAC;GACD,OAAO,KACL,EAAE,IAAI,iBAAiB,GAAI,SAAS,GACpC,uBACF;GACA,MAAM,gBAAgB,QAAQ,EAAG;EACnC;CACF,SAAS,KAAK;EACZ,IACE,IAAI,UAAU,eAAe,OAC7B,IAAI,UAAU,MAAM,SAAS,EAAE,EAAE,SAAS,WACxC,+BACF,GACA;GACA,OAAO,KACL,+FACF;GACA,MAAM,IAAI,aAAa,gBAAgB;GACvC;EACF;EACA,MAAM;CACR;AACF;AAEA,SAAS,kBAAkB,0BAA4C;CACrE,IAAI,iBAAiB;CACrB,IAAI,0BAEF,iBAAiB;CAGnB,OAAO;AACT;AAEA,eAAe,iCAAkD;CAM/D,OAAO,8BAFM,SADV,MAAM,QAFU,yBAEO,GAAG,qBAAqB,kBAAkB,CAAC,KAAM,EAGnC,EAAE;AAC5C"}

package/dist/workers/repository/onboarding/pr/package-files.js

@@ -1,4 +1,28 @@
 //#region lib/workers/repository/onboarding/pr/package-files.ts
+const GROUP_THRESHOLD = 3;
+function formatManagerFiles(files) {
+	const byDir = /* @__PURE__ */ new Map();
+	for (const { packageFile } of files) {
+		const lastSlash = packageFile.lastIndexOf("/");
+		const dir = lastSlash >= 0 ? packageFile.slice(0, lastSlash + 1) : "";
+		const name = lastSlash >= 0 ? packageFile.slice(lastSlash + 1) : packageFile;
+		const existing = byDir.get(dir);
+		if (existing) existing.push(name);
+		else byDir.set(dir, [name]);
+	}
+	const lines = [];
+	for (const [dir, names] of byDir) if (dir && names.length >= GROUP_THRESHOLD) {
+		lines.push(` * \`${dir}\``);
+		for (const name of names) lines.push(`   * \`${name}\``);
+	} else for (const name of names) lines.push(` * \`${dir}${name}\``);
+	return lines.join("\n");
+}
+function getPackageFilesSummary(packageFiles) {
+	if (!packageFiles || !Object.entries(packageFiles).length) return "";
+	const sections = [];
+	for (const [manager, managerFiles] of Object.entries(packageFiles)) sections.push(`#### ${manager}\n\n${formatManagerFiles(managerFiles)}`);
+	return sections.join("\n\n");
+}
 function getPackageFilesDesc(packageFiles) {
 	if (!packageFiles || !Object.entries(packageFiles).length) return "";
 	let files = [];
@@ -6,6 +30,6 @@ function getPackageFilesDesc(packageFiles) {
 	return `### Detected Package Files\n\n${files.join("\n")}`;
 }
 //#endregion
-export { getPackageFilesDesc };
+export { getPackageFilesDesc, getPackageFilesSummary };
 
 //# sourceMappingURL=package-files.js.map

package/dist/workers/repository/onboarding/pr/package-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-files.js","names":[],"sources":["../../../../../lib/workers/repository/onboarding/pr/package-files.ts"],"sourcesContent":["import type { PackageFile } from '../../../../modules/manager/types.ts';\n\nconst GROUP_THRESHOLD = 3;\n\nfunction formatManagerFiles(files: PackageFile[]): string {\n  const byDir = new Map<string, string[]>();\n  for (const { packageFile } of files) {\n    const lastSlash = packageFile.lastIndexOf('/');\n    const dir = lastSlash >= 0 ? packageFile.slice(0, lastSlash + 1) : '';\n    const name =\n      lastSlash >= 0 ? packageFile.slice(lastSlash + 1) : packageFile;\n    const existing = byDir.get(dir);\n    if (existing) {\n      existing.push(name);\n    } else {\n      byDir.set(dir, [name]);\n    }\n  }\n\n  const lines: string[] = [];\n  for (const [dir, names] of byDir) {\n    if (dir && names.length >= GROUP_THRESHOLD) {\n      lines.push(` * \\`${dir}\\``);\n      for (const name of names) {\n        lines.push(`   * \\`${name}\\``);\n      }\n    } else {\n      for (const name of names) {\n        lines.push(` * \\`${dir}${name}\\``);\n      }\n    }\n  }\n  return lines.join('\\n');\n}\n\nexport function getPackageFilesSummary(\n  packageFiles: Record<string, PackageFile[]> | null,\n): string {\n  if (!packageFiles || !Object.entries(packageFiles).length) {\n    return '';\n  }\n  const sections: string[] = [];\n  for (const [manager, managerFiles] of Object.entries(packageFiles)) {\n    sections.push(`#### ${manager}\\n\\n${formatManagerFiles(managerFiles)}`);\n  }\n  return sections.join('\\n\\n');\n}\n\nexport function getPackageFilesDesc(\n  packageFiles: Record<string, PackageFile[]> | null,\n): string {\n  if (!packageFiles || !Object.entries(packageFiles).length) {\n    return '';\n  }\n  let files: string[] = [];\n  for (const [manager, managerFiles] of Object.entries(packageFiles)) {\n    files = files.concat(\n      managerFiles.map((file) => ` * \\`${file.packageFile}\\` (${manager})`),\n    );\n  }\n  return `### Detected Package Files\\n\\n${files.join('\\n')}`;\n}\n"],"mappings":";AAgDA,SAAgB,oBACd,cACQ;CACR,IAAI,CAAC,gBAAgB,CAAC,OAAO,QAAQ,YAAY,CAAC,CAAC,QACjD,OAAO;CAET,IAAI,QAAkB,CAAC;CACvB,KAAK,MAAM,CAAC,SAAS,iBAAiB,OAAO,QAAQ,YAAY,GAC/D,QAAQ,MAAM,OACZ,aAAa,KAAK,SAAS,QAAQ,KAAK,YAAY,MAAM,QAAQ,EAAE,CACtE;CAEF,OAAO,iCAAiC,MAAM,KAAK,IAAI;AACzD"}
+{"version":3,"file":"package-files.js","names":[],"sources":["../../../../../lib/workers/repository/onboarding/pr/package-files.ts"],"sourcesContent":["import type { PackageFile } from '../../../../modules/manager/types.ts';\n\nconst GROUP_THRESHOLD = 3;\n\nfunction formatManagerFiles(files: PackageFile[]): string {\n  const byDir = new Map<string, string[]>();\n  for (const { packageFile } of files) {\n    const lastSlash = packageFile.lastIndexOf('/');\n    const dir = lastSlash >= 0 ? packageFile.slice(0, lastSlash + 1) : '';\n    const name =\n      lastSlash >= 0 ? packageFile.slice(lastSlash + 1) : packageFile;\n    const existing = byDir.get(dir);\n    if (existing) {\n      existing.push(name);\n    } else {\n      byDir.set(dir, [name]);\n    }\n  }\n\n  const lines: string[] = [];\n  for (const [dir, names] of byDir) {\n    if (dir && names.length >= GROUP_THRESHOLD) {\n      lines.push(` * \\`${dir}\\``);\n      for (const name of names) {\n        lines.push(`   * \\`${name}\\``);\n      }\n    } else {\n      for (const name of names) {\n        lines.push(` * \\`${dir}${name}\\``);\n      }\n    }\n  }\n  return lines.join('\\n');\n}\n\nexport function getPackageFilesSummary(\n  packageFiles: Record<string, PackageFile[]> | null,\n): string {\n  if (!packageFiles || !Object.entries(packageFiles).length) {\n    return '';\n  }\n  const sections: string[] = [];\n  for (const [manager, managerFiles] of Object.entries(packageFiles)) {\n    sections.push(`#### ${manager}\\n\\n${formatManagerFiles(managerFiles)}`);\n  }\n  return sections.join('\\n\\n');\n}\n\nexport function getPackageFilesDesc(\n  packageFiles: Record<string, PackageFile[]> | null,\n): string {\n  if (!packageFiles || !Object.entries(packageFiles).length) {\n    return '';\n  }\n  let files: string[] = [];\n  for (const [manager, managerFiles] of Object.entries(packageFiles)) {\n    files = files.concat(\n      managerFiles.map((file) => ` * \\`${file.packageFile}\\` (${manager})`),\n    );\n  }\n  return `### Detected Package Files\\n\\n${files.join('\\n')}`;\n}\n"],"mappings":";AAEA,MAAM,kBAAkB;AAExB,SAAS,mBAAmB,OAA8B;CACxD,MAAM,wBAAQ,IAAI,IAAsB;CACxC,KAAK,MAAM,EAAE,iBAAiB,OAAO;EACnC,MAAM,YAAY,YAAY,YAAY,GAAG;EAC7C,MAAM,MAAM,aAAa,IAAI,YAAY,MAAM,GAAG,YAAY,CAAC,IAAI;EACnE,MAAM,OACJ,aAAa,IAAI,YAAY,MAAM,YAAY,CAAC,IAAI;EACtD,MAAM,WAAW,MAAM,IAAI,GAAG;EAC9B,IAAI,UACF,SAAS,KAAK,IAAI;OAElB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC;CAEzB;CAEA,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,CAAC,KAAK,UAAU,OACzB,IAAI,OAAO,MAAM,UAAU,iBAAiB;EAC1C,MAAM,KAAK,QAAQ,IAAI,GAAG;EAC1B,KAAK,MAAM,QAAQ,OACjB,MAAM,KAAK,UAAU,KAAK,GAAG;CAEjC,OACE,KAAK,MAAM,QAAQ,OACjB,MAAM,KAAK,QAAQ,MAAM,KAAK,GAAG;CAIvC,OAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAgB,uBACd,cACQ;CACR,IAAI,CAAC,gBAAgB,CAAC,OAAO,QAAQ,YAAY,CAAC,CAAC,QACjD,OAAO;CAET,MAAM,WAAqB,CAAC;CAC5B,KAAK,MAAM,CAAC,SAAS,iBAAiB,OAAO,QAAQ,YAAY,GAC/D,SAAS,KAAK,QAAQ,QAAQ,MAAM,mBAAmB,YAAY,GAAG;CAExE,OAAO,SAAS,KAAK,MAAM;AAC7B;AAEA,SAAgB,oBACd,cACQ;CACR,IAAI,CAAC,gBAAgB,CAAC,OAAO,QAAQ,YAAY,CAAC,CAAC,QACjD,OAAO;CAET,IAAI,QAAkB,CAAC;CACvB,KAAK,MAAM,CAAC,SAAS,iBAAiB,OAAO,QAAQ,YAAY,GAC/D,QAAQ,MAAM,OACZ,aAAa,KAAK,SAAS,QAAQ,KAAK,YAAY,MAAM,QAAQ,EAAE,CACtE;CAEF,OAAO,iCAAiC,MAAM,KAAK,IAAI;AACzD"}

package/dist/workers/repository/onboarding/pr/pr-list.js

@@ -1,8 +1,15 @@
 import { regEx } from "../../../../util/regex.js";
 import { GlobalConfig } from "../../../../config/global.js";
 import { logger } from "../../../../logger/index.js";
+import { UpdateTypesOptions } from "../../../../config/types.js";
+import { coerceNumber } from "../../../../util/number.js";
 import { emojify } from "../../../../util/emoji.js";
 //#region lib/workers/repository/onboarding/pr/pr-list.ts
+/** Priority order when rendering the `SummaryCategory`s in the summary view.
+*
+* NOTE that this is not exhaustive - this is only the priority order for rendering, and other categories, such as `other` are placed after.
+*/
+const SUMMARY_CATEGORY_PRIORITY_ORDER = ["security", ...UpdateTypesOptions];
 function getExpectedPrList(config, branches) {
 	logger.debug("getExpectedPrList()");
 	logger.trace({ config });
@@ -36,13 +43,168 @@ function getExpectedPrList(config, branches) {
 		prDesc += "\n\n";
 		prDesc += "</details>\n\n";
 	}
-	const prHourlyLimit = config.prHourlyLimit;
-	const commitHourlyLimit = config.commitHourlyLimit;
-	if (commitHourlyLimit > 0 && commitHourlyLimit < 5 && commitHourlyLimit < branches.length) prDesc += emojify(`\n\n:children_crossing: Branch creation and rebasing will be limited to maximum ${commitHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for \`commitHourlyLimit\` for details.\n\n`);
+	const prHourlyLimit = coerceNumber(config.prHourlyLimit);
+	const commitHourlyLimit = coerceNumber(config.commitHourlyLimit);
+	if (commitHourlyLimit > 0 && commitHourlyLimit < 5 && commitHourlyLimit < branches.length) prDesc += emojify(`\n\n:children_crossing: Branch creation and rebasing will be limited to maximum ${commitHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \`commitHourlyLimit\`](${GlobalConfig.get("productLinks").documentation}configuration-options/#commithourlylimit) for details.\n\n`);
 	else if (prHourlyLimit > 0 && prHourlyLimit < 5 && prHourlyLimit < branches.length) prDesc += emojify(`\n\n:children_crossing: PR creation will be limited to maximum ${prHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \`prHourlyLimit\`](${GlobalConfig.get("productLinks").documentation}configuration-options/#prhourlylimit) for details.\n\n`);
 	return prDesc;
 }
+function getBranchUpgradeTypes(branch) {
+	if (branch.isVulnerabilityAlert) return /* @__PURE__ */ new Set(["security"]);
+	const types = /* @__PURE__ */ new Set();
+	for (const upgrade of branch.upgrades) if (upgrade.updateType) types.add(upgrade.updateType);
+	else if (upgrade.isLockfileUpdate) types.add("lockfileUpdate");
+	else types.add("other");
+	return types;
+}
+function sortBaseBranches(bases) {
+	return [...bases].sort((a, b) => {
+		if (a === b)
+ /* v8 ignore next -- base branches are unique Record keys; equal comparison cannot occur */
+		return 0;
+		if (a === "") return -1;
+		if (b === "") return 1;
+		return a.localeCompare(b);
+	});
+}
+function describeSecurityGroup(groupBranches) {
+	const firstUpgrade = groupBranches[0].upgrades[0];
+	const depName = firstUpgrade?.depName ?? groupBranches[0].prTitle ?? "";
+	const updateType = firstUpgrade?.updateType ?? "unknown";
+	const packageFiles = groupBranches.map((b) => ({
+		file: b.packageFile ?? "",
+		manager: b.manager
+	})).filter((f) => f.file);
+	const uniqueManagers = new Set(packageFiles.map((f) => f.manager));
+	if (packageFiles.length === 0) {
+		const branchManagers = new Set(groupBranches.map((b) => b.manager));
+		if (branchManagers.size === 1) return `- \`${depName}\`, (${[...branchManagers][0]}, ${updateType})\n`;
+		return `- \`${depName}\`, (${updateType}): ${[...branchManagers].sort().join(", ")}\n`;
+	}
+	if (packageFiles.length === 1) {
+		const file = packageFiles[0].file;
+		const [manager] = uniqueManagers;
+		return `- \`${depName}\`, (${manager}, ${updateType}): \`${file}\`\n`;
+	}
+	if (uniqueManagers.size === 1) return `- \`${depName}\`, (${[...uniqueManagers][0]}, ${updateType}):\n${packageFiles.map(({ file }) => `  - \`${file}\`\n`).join("")}`;
+	return `- \`${depName}\`, (${updateType}):\n${packageFiles.map(({ file, manager }) => `  - \`${file}\` (${manager})\n`).join("")}`;
+}
+function collectBranchStats(branches) {
+	const prCountByBase = {};
+	const tableStats = {};
+	const presentTypes = /* @__PURE__ */ new Set();
+	const securityGroups = {};
+	const seenPrs = /* @__PURE__ */ new Set();
+	const seenTableKeys = /* @__PURE__ */ new Set();
+	for (const branch of branches) {
+		const base = branch.baseBranch ?? "";
+		const { manager, branchName } = branch;
+		const branchTypes = getBranchUpgradeTypes(branch);
+		for (const type of branchTypes) presentTypes.add(type);
+		if (!seenPrs.has(branchName)) {
+			seenPrs.add(branchName);
+			prCountByBase[base] = (prCountByBase[base] ?? 0) + 1;
+		}
+		tableStats[base] ??= {};
+		const baseStats = tableStats[base];
+		baseStats[manager] ??= {};
+		const managerStats = baseStats[manager];
+		for (const type of branchTypes) {
+			const key = `${branchName}:${manager}:${type}`;
+			if (seenTableKeys.has(key)) continue;
+			seenTableKeys.add(key);
+			managerStats[type] ??= 0;
+			managerStats[type]++;
+		}
+		if (branch.isVulnerabilityAlert) {
+			securityGroups[branchName] ??= [];
+			securityGroups[branchName].push(branch);
+		}
+	}
+	return {
+		prCountByBase,
+		tableStats,
+		presentCategories: presentTypes,
+		securityGroups,
+		prCount: seenPrs.size
+	};
+}
+function getCategoryColumns(presentTypes) {
+	const cols = SUMMARY_CATEGORY_PRIORITY_ORDER.filter((t) => presentTypes.has(t));
+	for (const t of presentTypes) if (t !== "other" && !cols.includes(t)) cols.push(t);
+	if (presentTypes.has("other")) cols.push("other");
+	return cols;
+}
+function categoriesToColumnHeaders(cols) {
+	/* v8 ignore next -- branches always have at least one upgrade, so cols is never empty in practice */
+	if (cols.length === 0) return "";
+	return ` | ${cols.join(" | ")}`;
+}
+function renderRowCounts(typeColumns, typeCounts) {
+	return categoriesToColumnHeaders(typeColumns.map((t) => `${typeCounts[t] ?? 0}`));
+}
+function sumCategoryCounts(rows, categoryColumns) {
+	const sum = {};
+	for (const categoryCounts of rows) for (const category of categoryColumns) sum[category] = (sum[category] ?? 0) + (categoryCounts[category] ?? 0);
+	return sum;
+}
+function getExpectedPrListSummary(config, branches) {
+	logger.debug("getExpectedPrListSummary()");
+	logger.trace({ config });
+	let prDesc = `\n### What to Expect\n\n`;
+	if (!branches.length) return `${prDesc}It looks like your repository dependencies are already up-to-date and no Pull Requests will be necessary right away.\n`;
+	const stats = collectBranchStats(branches);
+	const sortedBases = sortBaseBranches(Object.keys(stats.prCountByBase));
+	const hasMultipleBaseBranches = sortedBases.length > 1;
+	const prHourlyLimit = coerceNumber(config.prHourlyLimit);
+	const commitHourlyLimit = coerceNumber(config.commitHourlyLimit);
+	if (hasMultipleBaseBranches) {
+		let total = 0;
+		const parts = sortedBases.map((base) => {
+			const count = stats.prCountByBase[base];
+			total += count;
+			const label = base ? `the \`${base}\` branch` : "the default branch";
+			return `${count} Pull Request${count > 1 ? "s" : ""} to ${label}`;
+		});
+		const hourlyLimitsNotice = determineHourlyLimitsNotice(prHourlyLimit, commitHourlyLimit, total);
+		prDesc += `With your current configuration, Renovate will create ${parts.join(" and ")}${hourlyLimitsNotice}:\n\n`;
+	} else {
+		const hourlyLimitsNotice = determineHourlyLimitsNotice(prHourlyLimit, commitHourlyLimit, stats.prCount);
+		prDesc += `With your current configuration, Renovate will create ${stats.prCount} Pull Request${stats.prCount > 1 ? "s" : ""}${hourlyLimitsNotice}:\n\n`;
+	}
+	const categoryColumns = getCategoryColumns(stats.presentCategories);
+	if (hasMultipleBaseBranches) {
+		prDesc += `| Branch | Manager${categoriesToColumnHeaders(categoryColumns)} |\n`;
+		prDesc += `| --- | ---${categoryColumns.map(() => " | ---").join("")} |\n`;
+		for (const base of sortedBases) {
+			const label = base || "$default";
+			for (const [manager, typeCounts] of Object.entries(stats.tableStats[base])) prDesc += `| ${label} | ${manager}${renderRowCounts(categoryColumns, typeCounts)} |\n`;
+		}
+		const sumRow = sumCategoryCounts(Object.values(stats.tableStats).flatMap((b) => Object.values(b)), categoryColumns);
+		prDesc += `| **Total** | ${renderRowCounts(categoryColumns, sumRow)} |\n`;
+	} else {
+		prDesc += `| Manager${categoriesToColumnHeaders(categoryColumns)} |\n`;
+		prDesc += `| ---${categoryColumns.map(() => " | ---").join("")} |\n`;
+		for (const [manager, typeCounts] of Object.entries(stats.tableStats[sortedBases[0]])) prDesc += `| ${manager}${renderRowCounts(categoryColumns, typeCounts)} |\n`;
+		const sumRow = sumCategoryCounts(Object.values(stats.tableStats[sortedBases[0]]), categoryColumns);
+		prDesc += `| **Total**${renderRowCounts(categoryColumns, sumRow)} |\n`;
+	}
+	prDesc += `\n<small>Note that a single PR can update multiple files and/or managers, so the above rows may not align with the number of PRs being listed above.</small>\n`;
+	if (Object.keys(stats.securityGroups).length) {
+		prDesc += `\n**Security updates**:\n\n`;
+		for (const groupBranches of Object.values(stats.securityGroups)) prDesc += describeSecurityGroup(groupBranches);
+	}
+	if (commitHourlyLimit > 0 && commitHourlyLimit < 5 && commitHourlyLimit < stats.prCount) prDesc += emojify(`\n\n:children_crossing: Branch creation and rebasing will be limited to maximum ${commitHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \`commitHourlyLimit\`](${GlobalConfig.get("productLinks").documentation}configuration-options/#commithourlylimit) for details.\n\n`);
+	else if (prHourlyLimit > 0 && prHourlyLimit < 5 && prHourlyLimit < stats.prCount) prDesc += emojify(`\n\n:children_crossing: PR creation will be limited to maximum ${prHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \`prHourlyLimit\`](${GlobalConfig.get("productLinks").documentation}configuration-options/#prhourlylimit) for details.\n\n`);
+	return prDesc;
+}
+function determineHourlyLimitsNotice(prHourlyLimit, commitHourlyLimit, prCount) {
+	if (commitHourlyLimit === 0 && prHourlyLimit === 0) return " (with no configured maximum of PRs per hour)";
+	if (commitHourlyLimit > 0 && commitHourlyLimit < 5 && commitHourlyLimit < prCount) return emojify(` (at a maximum of ${commitHourlyLimit} PR${commitHourlyLimit > 1 ? "s" : ""}/rebase${commitHourlyLimit > 1 ? "s" : ""} per hour)`);
+	if (prHourlyLimit > 0 && prHourlyLimit < 5 && prHourlyLimit < prCount) return emojify(` (at a maximum of ${prHourlyLimit} PR${prHourlyLimit > 1 ? "s" : ""} per hour)`);
+	return "";
+}
 //#endregion
-export { getExpectedPrList };
+export { getExpectedPrList, getExpectedPrListSummary };
 
 //# sourceMappingURL=pr-list.js.map

package/dist/workers/repository/onboarding/pr/pr-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"pr-list.js","names":[],"sources":["../../../../../lib/workers/repository/onboarding/pr/pr-list.ts"],"sourcesContent":["import { GlobalConfig } from '../../../../config/global.ts';\nimport type { RenovateConfig } from '../../../../config/types.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport { emojify } from '../../../../util/emoji.ts';\nimport { regEx } from '../../../../util/regex.ts';\nimport type { BranchConfig } from '../../../types.ts';\n\nexport function getExpectedPrList(\n  config: RenovateConfig,\n  branches: BranchConfig[],\n): string {\n  logger.debug('getExpectedPrList()');\n  logger.trace({ config });\n  let prDesc = `\\n### What to Expect\\n\\n`;\n  if (!branches.length) {\n    return `${prDesc}It looks like your repository dependencies are already up-to-date and no Pull Requests will be necessary right away.\\n`;\n  }\n  prDesc += `With your current configuration, Renovate will create ${branches.length} Pull Request`;\n  prDesc += branches.length > 1 ? `s:\\n\\n` : `:\\n\\n`;\n\n  for (const branch of branches) {\n    const prTitleRe = regEx(/@([a-z]+\\/[a-z]+)/);\n    // TODO #22198\n    prDesc += `<details>\\n<summary>${branch.prTitle!.replace(\n      prTitleRe,\n      '@&#8203;$1',\n    )}</summary>\\n\\n`;\n    if (branch.schedule?.length) {\n      prDesc += `  - Schedule: ${JSON.stringify(branch.schedule)}\\n`;\n    }\n    prDesc += `  - Branch name: \\`${branch.branchName}\\`\\n`;\n    prDesc += branch.baseBranch\n      ? `  - Merge into: \\`${branch.baseBranch}\\`\\n`\n      : '';\n    const seen: string[] = [];\n    for (const upgrade of branch.upgrades) {\n      let text = '';\n      if (upgrade.updateType === 'lockFileMaintenance') {\n        text += '  - Regenerate lock files to use latest dependency versions';\n      } else {\n        if (upgrade.updateType === 'pin') {\n          text += '  - Pin ';\n        } else {\n          text += '  - Upgrade ';\n        }\n        if (upgrade.sourceUrl) {\n          // TODO: types (#22198)\n          text += `[${upgrade.depName!}](${upgrade.sourceUrl})`;\n        } else {\n          text += upgrade.depName!.replace(prTitleRe, '@&#8203;$1');\n        }\n        // TODO: types (#22198)\n        text += upgrade.isLockfileUpdate\n          ? ` to \\`${upgrade.newVersion!}\\``\n          : ` to \\`${upgrade.newDigest ?? upgrade.newValue!}\\``;\n        text += '\\n';\n      }\n      if (!seen.includes(text)) {\n        prDesc += text;\n        seen.push(text);\n      }\n    }\n    prDesc += '\\n\\n';\n    prDesc += '</details>\\n\\n';\n  }\n  // TODO: type (#22198)\n  const prHourlyLimit = config.prHourlyLimit!;\n  const commitHourlyLimit = config.commitHourlyLimit!;\n  if (\n    commitHourlyLimit > 0 &&\n    commitHourlyLimit < 5 &&\n    commitHourlyLimit < branches.length\n  ) {\n    prDesc += emojify(\n      `\\n\\n:children_crossing: Branch creation and rebasing will be limited to maximum ${commitHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for \\`commitHourlyLimit\\` for details.\\n\\n`,\n    );\n  } else if (\n    prHourlyLimit > 0 &&\n    prHourlyLimit < 5 &&\n    prHourlyLimit < branches.length\n  ) {\n    prDesc += emojify(\n      `\\n\\n:children_crossing: PR creation will be limited to maximum ${prHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \\`prHourlyLimit\\`](${GlobalConfig.get('productLinks').documentation}configuration-options/#prhourlylimit) for details.\\n\\n`,\n    );\n  }\n  return prDesc;\n}\n"],"mappings":";;;;;AAOA,SAAgB,kBACd,QACA,UACQ;CACR,OAAO,MAAM,qBAAqB;CAClC,OAAO,MAAM,EAAE,OAAO,CAAC;CACvB,IAAI,SAAS;CACb,IAAI,CAAC,SAAS,QACZ,OAAO,GAAG,OAAO;CAEnB,UAAU,yDAAyD,SAAS,OAAO;CACnF,UAAU,SAAS,SAAS,IAAI,WAAW;CAE3C,KAAK,MAAM,UAAU,UAAU;EAC7B,MAAM,YAAY,MAAM,mBAAmB;EAE3C,UAAU,uBAAuB,OAAO,QAAS,QAC/C,WACA,YACF,EAAE;EACF,IAAI,OAAO,UAAU,QACnB,UAAU,iBAAiB,KAAK,UAAU,OAAO,QAAQ,EAAE;EAE7D,UAAU,sBAAsB,OAAO,WAAW;EAClD,UAAU,OAAO,aACb,qBAAqB,OAAO,WAAW,QACvC;EACJ,MAAM,OAAiB,CAAC;EACxB,KAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,OAAO;GACX,IAAI,QAAQ,eAAe,uBACzB,QAAQ;QACH;IACL,IAAI,QAAQ,eAAe,OACzB,QAAQ;SAER,QAAQ;IAEV,IAAI,QAAQ,WAEV,QAAQ,IAAI,QAAQ,QAAS,IAAI,QAAQ,UAAU;SAEnD,QAAQ,QAAQ,QAAS,QAAQ,WAAW,YAAY;IAG1D,QAAQ,QAAQ,mBACZ,SAAS,QAAQ,WAAY,MAC7B,SAAS,QAAQ,aAAa,QAAQ,SAAU;IACpD,QAAQ;GACV;GACA,IAAI,CAAC,KAAK,SAAS,IAAI,GAAG;IACxB,UAAU;IACV,KAAK,KAAK,IAAI;GAChB;EACF;EACA,UAAU;EACV,UAAU;CACZ;CAEA,MAAM,gBAAgB,OAAO;CAC7B,MAAM,oBAAoB,OAAO;CACjC,IACE,oBAAoB,KACpB,oBAAoB,KACpB,oBAAoB,SAAS,QAE7B,UAAU,QACR,mFAAmF,kBAAkB,8HACvG;MACK,IACL,gBAAgB,KAChB,gBAAgB,KAChB,gBAAgB,SAAS,QAEzB,UAAU,QACR,kEAAkE,cAAc,6GAA6G,aAAa,IAAI,cAAc,CAAC,CAAC,cAAc,uDAC9O;CAEF,OAAO;AACT"}
+{"version":3,"file":"pr-list.js","names":[],"sources":["../../../../../lib/workers/repository/onboarding/pr/pr-list.ts"],"sourcesContent":["import { GlobalConfig } from '../../../../config/global.ts';\nimport {\n  type RenovateConfig,\n  type UpdateType,\n  UpdateTypesOptions,\n} from '../../../../config/types.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport { emojify } from '../../../../util/emoji.ts';\nimport { coerceNumber } from '../../../../util/number.ts';\nimport { regEx } from '../../../../util/regex.ts';\nimport type { BranchConfig } from '../../../types.ts';\n\n/**\n * The different categories of dependency updates to output, when providing the summary view.\n *\n * - `security`: if the upgrade is driven by a vulnerability alert\n * - `${updateType}`: if it's set. I.e. `major`\n * - `lockfileUpdate` when `isLockfileUpdate` is true, without an `updateType`\n * - `other`: otherwise\n */\ntype SummaryCategory = UpdateType | 'security' | 'other';\n\n/** Priority order when rendering the `SummaryCategory`s in the summary view.\n *\n * NOTE that this is not exhaustive - this is only the priority order for rendering, and other categories, such as `other` are placed after.\n */\nconst SUMMARY_CATEGORY_PRIORITY_ORDER: readonly SummaryCategory[] = [\n  'security',\n  ...UpdateTypesOptions,\n  // ... anything else\n];\n\nexport function getExpectedPrList(\n  config: RenovateConfig,\n  branches: BranchConfig[],\n): string {\n  logger.debug('getExpectedPrList()');\n  logger.trace({ config });\n  let prDesc = `\\n### What to Expect\\n\\n`;\n  if (!branches.length) {\n    return `${prDesc}It looks like your repository dependencies are already up-to-date and no Pull Requests will be necessary right away.\\n`;\n  }\n  prDesc += `With your current configuration, Renovate will create ${branches.length} Pull Request`;\n  prDesc += branches.length > 1 ? `s:\\n\\n` : `:\\n\\n`;\n\n  for (const branch of branches) {\n    const prTitleRe = regEx(/@([a-z]+\\/[a-z]+)/);\n    // TODO #22198\n    prDesc += `<details>\\n<summary>${branch.prTitle!.replace(\n      prTitleRe,\n      '@&#8203;$1',\n    )}</summary>\\n\\n`;\n    if (branch.schedule?.length) {\n      prDesc += `  - Schedule: ${JSON.stringify(branch.schedule)}\\n`;\n    }\n    prDesc += `  - Branch name: \\`${branch.branchName}\\`\\n`;\n    prDesc += branch.baseBranch\n      ? `  - Merge into: \\`${branch.baseBranch}\\`\\n`\n      : '';\n    const seen: string[] = [];\n    for (const upgrade of branch.upgrades) {\n      let text = '';\n      if (upgrade.updateType === 'lockFileMaintenance') {\n        text += '  - Regenerate lock files to use latest dependency versions';\n      } else {\n        if (upgrade.updateType === 'pin') {\n          text += '  - Pin ';\n        } else {\n          text += '  - Upgrade ';\n        }\n        if (upgrade.sourceUrl) {\n          // TODO: types (#22198)\n          text += `[${upgrade.depName!}](${upgrade.sourceUrl})`;\n        } else {\n          text += upgrade.depName!.replace(prTitleRe, '@&#8203;$1');\n        }\n        // TODO: types (#22198)\n        text += upgrade.isLockfileUpdate\n          ? ` to \\`${upgrade.newVersion!}\\``\n          : ` to \\`${upgrade.newDigest ?? upgrade.newValue!}\\``;\n        text += '\\n';\n      }\n      if (!seen.includes(text)) {\n        prDesc += text;\n        seen.push(text);\n      }\n    }\n    prDesc += '\\n\\n';\n    prDesc += '</details>\\n\\n';\n  }\n  const prHourlyLimit = coerceNumber(config.prHourlyLimit);\n  const commitHourlyLimit = coerceNumber(config.commitHourlyLimit);\n  if (\n    commitHourlyLimit > 0 &&\n    commitHourlyLimit < 5 &&\n    commitHourlyLimit < branches.length\n  ) {\n    prDesc += emojify(\n      `\\n\\n:children_crossing: Branch creation and rebasing will be limited to maximum ${commitHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \\`commitHourlyLimit\\`](${GlobalConfig.get('productLinks').documentation}configuration-options/#commithourlylimit) for details.\\n\\n`,\n    );\n  } else if (\n    prHourlyLimit > 0 &&\n    prHourlyLimit < 5 &&\n    prHourlyLimit < branches.length\n  ) {\n    prDesc += emojify(\n      `\\n\\n:children_crossing: PR creation will be limited to maximum ${prHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \\`prHourlyLimit\\`](${GlobalConfig.get('productLinks').documentation}configuration-options/#prhourlylimit) for details.\\n\\n`,\n    );\n  }\n  return prDesc;\n}\n\nfunction getBranchUpgradeTypes(branch: BranchConfig): Set<SummaryCategory> {\n  if (branch.isVulnerabilityAlert) {\n    return new Set(['security']);\n  }\n  const types = new Set<SummaryCategory>();\n  for (const upgrade of branch.upgrades) {\n    if (upgrade.updateType) {\n      types.add(upgrade.updateType);\n    } else if (upgrade.isLockfileUpdate) {\n      types.add('lockfileUpdate');\n    } else {\n      types.add('other');\n    }\n  }\n  return types;\n}\n\n// Sort: default branch (empty string) first, then named branches alphabetically.\nfunction sortBaseBranches(bases: Iterable<string>): string[] {\n  return [...bases].sort((a, b) => {\n    if (a === b) {\n      /* v8 ignore next -- base branches are unique Record keys; equal comparison cannot occur */\n      return 0;\n    }\n    if (a === '') {\n      return -1;\n    }\n    if (b === '') {\n      return 1;\n    }\n    return a.localeCompare(b);\n  });\n}\n\nfunction describeSecurityGroup(groupBranches: BranchConfig[]): string {\n  const firstUpgrade = groupBranches[0].upgrades[0];\n  const depName = firstUpgrade?.depName ?? groupBranches[0].prTitle ?? '';\n  const updateType = firstUpgrade?.updateType ?? 'unknown';\n  const packageFiles = groupBranches\n    .map((b) => ({ file: b.packageFile ?? '', manager: b.manager }))\n    .filter((f) => f.file);\n  const uniqueManagers = new Set(packageFiles.map((f) => f.manager));\n\n  // Vulnerability alerts can match on datasource + packageName without a specific file (e.g. GitHub vulnerability alerts),\n  // so we need to handle an absent packageFile\n  if (packageFiles.length === 0) {\n    const branchManagers = new Set(groupBranches.map((b) => b.manager));\n    if (branchManagers.size === 1) {\n      return `- \\`${depName}\\`, (${[...branchManagers][0]}, ${updateType})\\n`;\n    }\n\n    return `- \\`${depName}\\`, (${updateType}): ${[...branchManagers].sort().join(', ')}\\n`;\n  }\n\n  if (packageFiles.length === 1) {\n    const file = packageFiles[0].file;\n    const [manager] = uniqueManagers;\n    return `- \\`${depName}\\`, (${manager}, ${updateType}): \\`${file}\\`\\n`;\n  }\n\n  if (uniqueManagers.size === 1) {\n    const manager = [...uniqueManagers][0];\n    const fileLines = packageFiles\n      .map(({ file }) => `  - \\`${file}\\`\\n`)\n      .join('');\n    return `- \\`${depName}\\`, (${manager}, ${updateType}):\\n${fileLines}`;\n  }\n\n  const fileLines = packageFiles\n    .map(({ file, manager }) => `  - \\`${file}\\` (${manager})\\n`)\n    .join('');\n  return `- \\`${depName}\\`, (${updateType}):\\n${fileLines}`;\n}\n\ninterface BranchStats {\n  // PR count per base branch, deduplicated by branchName.\n  prCountByBase: Record<string, number>;\n  // base -> manager -> type -> count, deduplicated by branchName+manager+type.\n  tableStats: Record<\n    string,\n    Record<string, Partial<Record<SummaryCategory, number>>>\n  >;\n  // All upgrade types seen anywhere — drives the table columns.\n  presentCategories: Set<SummaryCategory>;\n  // Security branches grouped by branchName.\n  securityGroups: Record<string, BranchConfig[]>;\n  prCount: number;\n}\n\nfunction collectBranchStats(branches: BranchConfig[]): BranchStats {\n  const prCountByBase: Record<string, number> = {};\n  const tableStats: Record<\n    string,\n    Record<string, Partial<Record<SummaryCategory, number>>>\n  > = {};\n  const presentTypes = new Set<SummaryCategory>();\n  const securityGroups: Record<string, BranchConfig[]> = {};\n  const seenPrs = new Set<string>();\n  const seenTableKeys = new Set<string>();\n\n  for (const branch of branches) {\n    const base = branch.baseBranch ?? '';\n    const { manager, branchName } = branch;\n    const branchTypes = getBranchUpgradeTypes(branch);\n\n    for (const type of branchTypes) {\n      presentTypes.add(type);\n    }\n\n    if (!seenPrs.has(branchName)) {\n      seenPrs.add(branchName);\n      prCountByBase[base] = (prCountByBase[base] ?? 0) + 1;\n    }\n\n    tableStats[base] ??= {};\n    const baseStats = tableStats[base];\n    baseStats[manager] ??= {};\n    const managerStats = baseStats[manager];\n    for (const type of branchTypes) {\n      const key = `${branchName}:${manager}:${type}`;\n      if (seenTableKeys.has(key)) {\n        continue;\n      }\n      seenTableKeys.add(key);\n      managerStats[type] ??= 0;\n      managerStats[type]++;\n    }\n\n    if (branch.isVulnerabilityAlert) {\n      securityGroups[branchName] ??= [];\n      securityGroups[branchName].push(branch);\n    }\n  }\n\n  return {\n    prCountByBase,\n    tableStats,\n    presentCategories: presentTypes,\n    securityGroups,\n    prCount: seenPrs.size,\n  };\n}\n\nfunction getCategoryColumns(\n  presentTypes: Set<SummaryCategory>,\n): SummaryCategory[] {\n  const cols: SummaryCategory[] = SUMMARY_CATEGORY_PRIORITY_ORDER.filter((t) =>\n    presentTypes.has(t),\n  );\n  // Append any present types not in the standard display order\n  // (e.g. lockfileUpdate, bump).\n  for (const t of presentTypes) {\n    if (t !== 'other' && !cols.includes(t)) {\n      cols.push(t);\n    }\n  }\n\n  if (presentTypes.has('other')) {\n    cols.push('other');\n  }\n\n  return cols;\n}\n\nfunction categoriesToColumnHeaders(cols: readonly string[]): string {\n  /* v8 ignore next -- branches always have at least one upgrade, so cols is never empty in practice */\n  if (cols.length === 0) {\n    return '';\n  }\n  return ` | ${cols.join(' | ')}`;\n}\n\nfunction renderRowCounts(\n  typeColumns: readonly SummaryCategory[],\n  typeCounts: Partial<Record<SummaryCategory, number>>,\n): string {\n  return categoriesToColumnHeaders(\n    typeColumns.map((t) => `${typeCounts[t] ?? 0}`),\n  );\n}\n\nfunction sumCategoryCounts(\n  rows: Partial<Record<SummaryCategory, number>>[],\n  categoryColumns: readonly SummaryCategory[],\n): Partial<Record<SummaryCategory, number>> {\n  const sum: Partial<Record<SummaryCategory, number>> = {};\n  for (const categoryCounts of rows) {\n    for (const category of categoryColumns) {\n      sum[category] = (sum[category] ?? 0) + (categoryCounts[category] ?? 0);\n    }\n  }\n  return sum;\n}\n\nexport function getExpectedPrListSummary(\n  config: RenovateConfig,\n  branches: BranchConfig[],\n): string {\n  logger.debug('getExpectedPrListSummary()');\n  logger.trace({ config });\n  let prDesc = `\\n### What to Expect\\n\\n`;\n  if (!branches.length) {\n    return `${prDesc}It looks like your repository dependencies are already up-to-date and no Pull Requests will be necessary right away.\\n`;\n  }\n\n  const stats = collectBranchStats(branches);\n  const sortedBases = sortBaseBranches(Object.keys(stats.prCountByBase));\n  const hasMultipleBaseBranches = sortedBases.length > 1;\n\n  const prHourlyLimit = coerceNumber(config.prHourlyLimit);\n  const commitHourlyLimit = coerceNumber(config.commitHourlyLimit);\n\n  if (hasMultipleBaseBranches) {\n    let total = 0;\n    const parts = sortedBases.map((base) => {\n      const count = stats.prCountByBase[base];\n      total += count;\n      const label = base ? `the \\`${base}\\` branch` : 'the default branch';\n      return `${count} Pull Request${count > 1 ? 's' : ''} to ${label}`;\n    });\n    const hourlyLimitsNotice = determineHourlyLimitsNotice(\n      prHourlyLimit,\n      commitHourlyLimit,\n      total,\n    );\n    prDesc += `With your current configuration, Renovate will create ${parts.join(' and ')}${hourlyLimitsNotice}:\\n\\n`;\n  } else {\n    const hourlyLimitsNotice = determineHourlyLimitsNotice(\n      prHourlyLimit,\n      commitHourlyLimit,\n      stats.prCount,\n    );\n    prDesc += `With your current configuration, Renovate will create ${stats.prCount} Pull Request${stats.prCount > 1 ? 's' : ''}${hourlyLimitsNotice}:\\n\\n`;\n  }\n\n  const categoryColumns = getCategoryColumns(stats.presentCategories);\n  if (hasMultipleBaseBranches) {\n    prDesc += `| Branch | Manager${categoriesToColumnHeaders(categoryColumns)} |\\n`;\n    prDesc += `| --- | ---${categoryColumns.map(() => ' | ---').join('')} |\\n`;\n    for (const base of sortedBases) {\n      const label = base || '$default';\n      for (const [manager, typeCounts] of Object.entries(\n        stats.tableStats[base],\n      )) {\n        prDesc += `| ${label} | ${manager}${renderRowCounts(categoryColumns, typeCounts)} |\\n`;\n      }\n    }\n    const sumRow = sumCategoryCounts(\n      Object.values(stats.tableStats).flatMap((b) => Object.values(b)),\n      categoryColumns,\n    );\n    prDesc += `| **Total** | ${renderRowCounts(categoryColumns, sumRow)} |\\n`;\n  } else {\n    prDesc += `| Manager${categoriesToColumnHeaders(categoryColumns)} |\\n`;\n    prDesc += `| ---${categoryColumns.map(() => ' | ---').join('')} |\\n`;\n    for (const [manager, typeCounts] of Object.entries(\n      stats.tableStats[sortedBases[0]],\n    )) {\n      prDesc += `| ${manager}${renderRowCounts(categoryColumns, typeCounts)} |\\n`;\n    }\n    const sumRow = sumCategoryCounts(\n      Object.values(stats.tableStats[sortedBases[0]]),\n      categoryColumns,\n    );\n    prDesc += `| **Total**${renderRowCounts(categoryColumns, sumRow)} |\\n`;\n  }\n\n  prDesc += `\\n<small>Note that a single PR can update multiple files and/or managers, so the above rows may not align with the number of PRs being listed above.</small>\\n`;\n\n  // provide a summary of the given security updates, as they're likely more important to the user\n  if (Object.keys(stats.securityGroups).length) {\n    prDesc += `\\n**Security updates**:\\n\\n`;\n    for (const groupBranches of Object.values(stats.securityGroups)) {\n      prDesc += describeSecurityGroup(groupBranches);\n    }\n  }\n\n  if (\n    commitHourlyLimit > 0 &&\n    commitHourlyLimit < 5 &&\n    commitHourlyLimit < stats.prCount\n  ) {\n    prDesc += emojify(\n      `\\n\\n:children_crossing: Branch creation and rebasing will be limited to maximum ${commitHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \\`commitHourlyLimit\\`](${GlobalConfig.get('productLinks').documentation}configuration-options/#commithourlylimit) for details.\\n\\n`,\n    );\n  } else if (\n    prHourlyLimit > 0 &&\n    prHourlyLimit < 5 &&\n    prHourlyLimit < stats.prCount\n  ) {\n    prDesc += emojify(\n      `\\n\\n:children_crossing: PR creation will be limited to maximum ${prHourlyLimit} per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for \\`prHourlyLimit\\`](${GlobalConfig.get('productLinks').documentation}configuration-options/#prhourlylimit) for details.\\n\\n`,\n    );\n  }\n  return prDesc;\n}\n\nfunction determineHourlyLimitsNotice(\n  prHourlyLimit: number,\n  commitHourlyLimit: number,\n  prCount: number,\n): string {\n  if (commitHourlyLimit === 0 && prHourlyLimit === 0) {\n    return ' (with no configured maximum of PRs per hour)';\n  }\n\n  if (\n    commitHourlyLimit > 0 &&\n    commitHourlyLimit < 5 &&\n    commitHourlyLimit < prCount\n  ) {\n    return emojify(\n      ` (at a maximum of ${commitHourlyLimit} PR${commitHourlyLimit > 1 ? 's' : ''}/rebase${commitHourlyLimit > 1 ? 's' : ''} per hour)`,\n    );\n  }\n\n  if (prHourlyLimit > 0 && prHourlyLimit < 5 && prHourlyLimit < prCount) {\n    return emojify(\n      ` (at a maximum of ${prHourlyLimit} PR${prHourlyLimit > 1 ? 's' : ''} per hour)`,\n    );\n  }\n\n  return '';\n}\n"],"mappings":";;;;;;;;;;;AA0BA,MAAM,kCAA8D,CAClE,YACA,GAAG,kBAEL;AAEA,SAAgB,kBACd,QACA,UACQ;CACR,OAAO,MAAM,qBAAqB;CAClC,OAAO,MAAM,EAAE,OAAO,CAAC;CACvB,IAAI,SAAS;CACb,IAAI,CAAC,SAAS,QACZ,OAAO,GAAG,OAAO;CAEnB,UAAU,yDAAyD,SAAS,OAAO;CACnF,UAAU,SAAS,SAAS,IAAI,WAAW;CAE3C,KAAK,MAAM,UAAU,UAAU;EAC7B,MAAM,YAAY,MAAM,mBAAmB;EAE3C,UAAU,uBAAuB,OAAO,QAAS,QAC/C,WACA,YACF,EAAE;EACF,IAAI,OAAO,UAAU,QACnB,UAAU,iBAAiB,KAAK,UAAU,OAAO,QAAQ,EAAE;EAE7D,UAAU,sBAAsB,OAAO,WAAW;EAClD,UAAU,OAAO,aACb,qBAAqB,OAAO,WAAW,QACvC;EACJ,MAAM,OAAiB,CAAC;EACxB,KAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,OAAO;GACX,IAAI,QAAQ,eAAe,uBACzB,QAAQ;QACH;IACL,IAAI,QAAQ,eAAe,OACzB,QAAQ;SAER,QAAQ;IAEV,IAAI,QAAQ,WAEV,QAAQ,IAAI,QAAQ,QAAS,IAAI,QAAQ,UAAU;SAEnD,QAAQ,QAAQ,QAAS,QAAQ,WAAW,YAAY;IAG1D,QAAQ,QAAQ,mBACZ,SAAS,QAAQ,WAAY,MAC7B,SAAS,QAAQ,aAAa,QAAQ,SAAU;IACpD,QAAQ;GACV;GACA,IAAI,CAAC,KAAK,SAAS,IAAI,GAAG;IACxB,UAAU;IACV,KAAK,KAAK,IAAI;GAChB;EACF;EACA,UAAU;EACV,UAAU;CACZ;CACA,MAAM,gBAAgB,aAAa,OAAO,aAAa;CACvD,MAAM,oBAAoB,aAAa,OAAO,iBAAiB;CAC/D,IACE,oBAAoB,KACpB,oBAAoB,KACpB,oBAAoB,SAAS,QAE7B,UAAU,QACR,mFAAmF,kBAAkB,iHAAiH,aAAa,IAAI,cAAc,CAAC,CAAC,cAAc,2DACvQ;MACK,IACL,gBAAgB,KAChB,gBAAgB,KAChB,gBAAgB,SAAS,QAEzB,UAAU,QACR,kEAAkE,cAAc,6GAA6G,aAAa,IAAI,cAAc,CAAC,CAAC,cAAc,uDAC9O;CAEF,OAAO;AACT;AAEA,SAAS,sBAAsB,QAA4C;CACzE,IAAI,OAAO,sBACT,uBAAO,IAAI,IAAI,CAAC,UAAU,CAAC;CAE7B,MAAM,wBAAQ,IAAI,IAAqB;CACvC,KAAK,MAAM,WAAW,OAAO,UAC3B,IAAI,QAAQ,YACV,MAAM,IAAI,QAAQ,UAAU;MACvB,IAAI,QAAQ,kBACjB,MAAM,IAAI,gBAAgB;MAE1B,MAAM,IAAI,OAAO;CAGrB,OAAO;AACT;AAGA,SAAS,iBAAiB,OAAmC;CAC3D,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM;EAC/B,IAAI,MAAM;;EAER,OAAO;EAET,IAAI,MAAM,IACR,OAAO;EAET,IAAI,MAAM,IACR,OAAO;EAET,OAAO,EAAE,cAAc,CAAC;CAC1B,CAAC;AACH;AAEA,SAAS,sBAAsB,eAAuC;CACpE,MAAM,eAAe,cAAc,EAAE,CAAC,SAAS;CAC/C,MAAM,UAAU,cAAc,WAAW,cAAc,EAAE,CAAC,WAAW;CACrE,MAAM,aAAa,cAAc,cAAc;CAC/C,MAAM,eAAe,cAClB,KAAK,OAAO;EAAE,MAAM,EAAE,eAAe;EAAI,SAAS,EAAE;CAAQ,EAAE,CAAC,CAC/D,QAAQ,MAAM,EAAE,IAAI;CACvB,MAAM,iBAAiB,IAAI,IAAI,aAAa,KAAK,MAAM,EAAE,OAAO,CAAC;CAIjE,IAAI,aAAa,WAAW,GAAG;EAC7B,MAAM,iBAAiB,IAAI,IAAI,cAAc,KAAK,MAAM,EAAE,OAAO,CAAC;EAClE,IAAI,eAAe,SAAS,GAC1B,OAAO,OAAO,QAAQ,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,IAAI,WAAW;EAGrE,OAAO,OAAO,QAAQ,OAAO,WAAW,KAAK,CAAC,GAAG,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE;CACrF;CAEA,IAAI,aAAa,WAAW,GAAG;EAC7B,MAAM,OAAO,aAAa,EAAE,CAAC;EAC7B,MAAM,CAAC,WAAW;EAClB,OAAO,OAAO,QAAQ,OAAO,QAAQ,IAAI,WAAW,OAAO,KAAK;CAClE;CAEA,IAAI,eAAe,SAAS,GAK1B,OAAO,OAAO,QAAQ,OAJN,CAAC,GAAG,cAAc,CAAC,CAAC,GAIC,IAAI,WAAW,MAHlC,aACf,KAAK,EAAE,WAAW,SAAS,KAAK,KAAK,CAAC,CACtC,KAAK,EAC0D;CAMpE,OAAO,OAAO,QAAQ,OAAO,WAAW,MAHtB,aACf,KAAK,EAAE,MAAM,cAAc,SAAS,KAAK,MAAM,QAAQ,IAAI,CAAC,CAC5D,KAAK,EAC8C;AACxD;AAiBA,SAAS,mBAAmB,UAAuC;CACjE,MAAM,gBAAwC,CAAC;CAC/C,MAAM,aAGF,CAAC;CACL,MAAM,+BAAe,IAAI,IAAqB;CAC9C,MAAM,iBAAiD,CAAC;CACxD,MAAM,0BAAU,IAAI,IAAY;CAChC,MAAM,gCAAgB,IAAI,IAAY;CAEtC,KAAK,MAAM,UAAU,UAAU;EAC7B,MAAM,OAAO,OAAO,cAAc;EAClC,MAAM,EAAE,SAAS,eAAe;EAChC,MAAM,cAAc,sBAAsB,MAAM;EAEhD,KAAK,MAAM,QAAQ,aACjB,aAAa,IAAI,IAAI;EAGvB,IAAI,CAAC,QAAQ,IAAI,UAAU,GAAG;GAC5B,QAAQ,IAAI,UAAU;GACtB,cAAc,SAAS,cAAc,SAAS,KAAK;EACrD;EAEA,WAAW,UAAU,CAAC;EACtB,MAAM,YAAY,WAAW;EAC7B,UAAU,aAAa,CAAC;EACxB,MAAM,eAAe,UAAU;EAC/B,KAAK,MAAM,QAAQ,aAAa;GAC9B,MAAM,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG;GACxC,IAAI,cAAc,IAAI,GAAG,GACvB;GAEF,cAAc,IAAI,GAAG;GACrB,aAAa,UAAU;GACvB,aAAa,KAAK;EACpB;EAEA,IAAI,OAAO,sBAAsB;GAC/B,eAAe,gBAAgB,CAAC;GAChC,eAAe,WAAW,CAAC,KAAK,MAAM;EACxC;CACF;CAEA,OAAO;EACL;EACA;EACA,mBAAmB;EACnB;EACA,SAAS,QAAQ;CACnB;AACF;AAEA,SAAS,mBACP,cACmB;CACnB,MAAM,OAA0B,gCAAgC,QAAQ,MACtE,aAAa,IAAI,CAAC,CACpB;CAGA,KAAK,MAAM,KAAK,cACd,IAAI,MAAM,WAAW,CAAC,KAAK,SAAS,CAAC,GACnC,KAAK,KAAK,CAAC;CAIf,IAAI,aAAa,IAAI,OAAO,GAC1B,KAAK,KAAK,OAAO;CAGnB,OAAO;AACT;AAEA,SAAS,0BAA0B,MAAiC;;CAElE,IAAI,KAAK,WAAW,GAClB,OAAO;CAET,OAAO,MAAM,KAAK,KAAK,KAAK;AAC9B;AAEA,SAAS,gBACP,aACA,YACQ;CACR,OAAO,0BACL,YAAY,KAAK,MAAM,GAAG,WAAW,MAAM,GAAG,CAChD;AACF;AAEA,SAAS,kBACP,MACA,iBAC0C;CAC1C,MAAM,MAAgD,CAAC;CACvD,KAAK,MAAM,kBAAkB,MAC3B,KAAK,MAAM,YAAY,iBACrB,IAAI,aAAa,IAAI,aAAa,MAAM,eAAe,aAAa;CAGxE,OAAO;AACT;AAEA,SAAgB,yBACd,QACA,UACQ;CACR,OAAO,MAAM,4BAA4B;CACzC,OAAO,MAAM,EAAE,OAAO,CAAC;CACvB,IAAI,SAAS;CACb,IAAI,CAAC,SAAS,QACZ,OAAO,GAAG,OAAO;CAGnB,MAAM,QAAQ,mBAAmB,QAAQ;CACzC,MAAM,cAAc,iBAAiB,OAAO,KAAK,MAAM,aAAa,CAAC;CACrE,MAAM,0BAA0B,YAAY,SAAS;CAErD,MAAM,gBAAgB,aAAa,OAAO,aAAa;CACvD,MAAM,oBAAoB,aAAa,OAAO,iBAAiB;CAE/D,IAAI,yBAAyB;EAC3B,IAAI,QAAQ;EACZ,MAAM,QAAQ,YAAY,KAAK,SAAS;GACtC,MAAM,QAAQ,MAAM,cAAc;GAClC,SAAS;GACT,MAAM,QAAQ,OAAO,SAAS,KAAK,aAAa;GAChD,OAAO,GAAG,MAAM,eAAe,QAAQ,IAAI,MAAM,GAAG,MAAM;EAC5D,CAAC;EACD,MAAM,qBAAqB,4BACzB,eACA,mBACA,KACF;EACA,UAAU,yDAAyD,MAAM,KAAK,OAAO,IAAI,mBAAmB;CAC9G,OAAO;EACL,MAAM,qBAAqB,4BACzB,eACA,mBACA,MAAM,OACR;EACA,UAAU,yDAAyD,MAAM,QAAQ,eAAe,MAAM,UAAU,IAAI,MAAM,KAAK,mBAAmB;CACpJ;CAEA,MAAM,kBAAkB,mBAAmB,MAAM,iBAAiB;CAClE,IAAI,yBAAyB;EAC3B,UAAU,qBAAqB,0BAA0B,eAAe,EAAE;EAC1E,UAAU,cAAc,gBAAgB,UAAU,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE;EACrE,KAAK,MAAM,QAAQ,aAAa;GAC9B,MAAM,QAAQ,QAAQ;GACtB,KAAK,MAAM,CAAC,SAAS,eAAe,OAAO,QACzC,MAAM,WAAW,KACnB,GACE,UAAU,KAAK,MAAM,KAAK,UAAU,gBAAgB,iBAAiB,UAAU,EAAE;EAErF;EACA,MAAM,SAAS,kBACb,OAAO,OAAO,MAAM,UAAU,CAAC,CAAC,SAAS,MAAM,OAAO,OAAO,CAAC,CAAC,GAC/D,eACF;EACA,UAAU,iBAAiB,gBAAgB,iBAAiB,MAAM,EAAE;CACtE,OAAO;EACL,UAAU,YAAY,0BAA0B,eAAe,EAAE;EACjE,UAAU,QAAQ,gBAAgB,UAAU,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE;EAC/D,KAAK,MAAM,CAAC,SAAS,eAAe,OAAO,QACzC,MAAM,WAAW,YAAY,GAC/B,GACE,UAAU,KAAK,UAAU,gBAAgB,iBAAiB,UAAU,EAAE;EAExE,MAAM,SAAS,kBACb,OAAO,OAAO,MAAM,WAAW,YAAY,GAAG,GAC9C,eACF;EACA,UAAU,cAAc,gBAAgB,iBAAiB,MAAM,EAAE;CACnE;CAEA,UAAU;CAGV,IAAI,OAAO,KAAK,MAAM,cAAc,CAAC,CAAC,QAAQ;EAC5C,UAAU;EACV,KAAK,MAAM,iBAAiB,OAAO,OAAO,MAAM,cAAc,GAC5D,UAAU,sBAAsB,aAAa;CAEjD;CAEA,IACE,oBAAoB,KACpB,oBAAoB,KACpB,oBAAoB,MAAM,SAE1B,UAAU,QACR,mFAAmF,kBAAkB,iHAAiH,aAAa,IAAI,cAAc,CAAC,CAAC,cAAc,2DACvQ;MACK,IACL,gBAAgB,KAChB,gBAAgB,KAChB,gBAAgB,MAAM,SAEtB,UAAU,QACR,kEAAkE,cAAc,6GAA6G,aAAa,IAAI,cAAc,CAAC,CAAC,cAAc,uDAC9O;CAEF,OAAO;AACT;AAEA,SAAS,4BACP,eACA,mBACA,SACQ;CACR,IAAI,sBAAsB,KAAK,kBAAkB,GAC/C,OAAO;CAGT,IACE,oBAAoB,KACpB,oBAAoB,KACpB,oBAAoB,SAEpB,OAAO,QACL,qBAAqB,kBAAkB,KAAK,oBAAoB,IAAI,MAAM,GAAG,SAAS,oBAAoB,IAAI,MAAM,GAAG,WACzH;CAGF,IAAI,gBAAgB,KAAK,gBAAgB,KAAK,gBAAgB,SAC5D,OAAO,QACL,qBAAqB,cAAc,KAAK,gBAAgB,IAAI,MAAM,GAAG,WACvE;CAGF,OAAO;AACT"}

package/dist/workers/repository/reconfigure/comment.js

@@ -5,7 +5,8 @@ import { ensureComment } from "../../../modules/platform/comment.js";
 import { getDepWarningsOnboardingPR, getErrors, getWarnings } from "../errors-warnings.js";
 import { getBaseBranchDesc } from "../onboarding/pr/base-branch.js";
 import { getScheduleDesc } from "../onboarding/pr/config-description.js";
-import { getExpectedPrList } from "../onboarding/pr/pr-list.js";
+import { getPackageFilesDesc, getPackageFilesSummary } from "../onboarding/pr/package-files.js";
+import { getExpectedPrList, getExpectedPrListSummary } from "../onboarding/pr/pr-list.js";
 import { isArray, isString } from "@sindresorhus/is";
 //#region lib/workers/repository/reconfigure/comment.ts
 async function ensureReconfigurePrComment(config, packageFiles, branches, branchName, pr) {
@@ -22,11 +23,9 @@ async function ensureReconfigurePrComment(config, packageFiles, branches, branch
 {{ERRORS}}
 `;
 	let prBody = prCommentTemplate;
-	if (packageFiles && Object.entries(packageFiles).length) {
-		let files = [];
-		for (const [manager, managerFiles] of Object.entries(packageFiles)) files = files.concat(managerFiles.map((file) => ` * \`${file.packageFile}\` (${manager})`));
-		prBody = `${prBody.replace("{{PACKAGE FILES}}", `### Detected Package Files\n\n${files.join("\n")}`)}\n`;
-	} else prBody = prBody.replace("{{PACKAGE FILES}}\n", "");
+	const packageFilesDesc = getPackageFilesDesc(packageFiles);
+	if (packageFilesDesc) prBody = `${prBody.replace("{{PACKAGE FILES}}", packageFilesDesc)}\n`;
+	else prBody = prBody.replace("{{PACKAGE FILES}}\n", "");
 	let configDesc = "";
 	if (GlobalConfig.get("dryRun")) logger.info(`DRY-RUN: Would check branch ${branchName}`);
 	else configDesc = getConfigDesc(config);
@@ -34,7 +33,13 @@ async function ensureReconfigurePrComment(config, packageFiles, branches, branch
 	prBody = prBody.replace("{{WARNINGS}}\n", getWarnings(config) + getDepWarningsOnboardingPR(packageFiles, config));
 	prBody = prBody.replace("{{ERRORS}}\n", getErrors(config));
 	prBody = prBody.replace("{{BASEBRANCH}}\n", getBaseBranchDesc(config));
-	prBody = prBody.replace("{{PRLIST}}\n", getExpectedPrList(config, branches));
+	const prList = getExpectedPrList(config, branches);
+	prBody = prBody.replace("{{PRLIST}}\n", prList);
+	if (prBody.length > platform.maxBodyLength()) {
+		logger.debug("Reconfigure PR body exceeds platform limit, switching to summary PR list and package files");
+		prBody = prBody.replace(prList, getExpectedPrListSummary(config, branches));
+		if (packageFilesDesc) prBody = prBody.replace(packageFilesDesc, `### Detected Package Files\n\n${getPackageFilesSummary(packageFiles)}`);
+	}
 	logger.trace(`prBody:\n${prBody}`);
 	prBody = platform.massageMarkdown(prBody);
 	if (GlobalConfig.get("dryRun")) {

package/dist/workers/repository/reconfigure/comment.js.map

@@ -1 +1 @@
-{"version":3,"file":"comment.js","names":[],"sources":["../../../../lib/workers/repository/reconfigure/comment.ts"],"sourcesContent":["import { isArray, isString } from '@sindresorhus/is';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport type { RenovateConfig } from '../../../config/types.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { PackageFile } from '../../../modules/manager/types.ts';\nimport { ensureComment } from '../../../modules/platform/comment.ts';\nimport type { Pr } from '../../../modules/platform/index.ts';\nimport { platform } from '../../../modules/platform/index.ts';\nimport type { BranchConfig } from '../../types.ts';\nimport {\n  getDepWarningsOnboardingPR,\n  getErrors,\n  getWarnings,\n} from '../errors-warnings.ts';\nimport { getBaseBranchDesc } from '../onboarding/pr/base-branch.ts';\nimport { getScheduleDesc } from '../onboarding/pr/config-description.ts';\nimport { getExpectedPrList } from '../onboarding/pr/pr-list.ts';\n\nexport async function ensureReconfigurePrComment(\n  config: RenovateConfig,\n  packageFiles: Record<string, PackageFile[]> | null,\n  branches: BranchConfig[],\n  branchName: string,\n  pr: Pr,\n): Promise<boolean> {\n  logger.debug('ensureReconfigurePrComment()');\n  logger.trace({ config });\n  let prCommentTemplate = `This is a reconfigure PR comment to help you understand and re-configure your renovate bot settings. If this Reconfigure PR were to be merged, we'd expect to see the following outcome:\\n\\n`;\n\n  // TODO #22198\n  prCommentTemplate += `\n---\n{{PACKAGE FILES}}\n{{CONFIG}}\n{{BASEBRANCH}}\n{{PRLIST}}\n{{WARNINGS}}\n{{ERRORS}}\n`;\n  let prBody = prCommentTemplate;\n  if (packageFiles && Object.entries(packageFiles).length) {\n    let files: string[] = [];\n    for (const [manager, managerFiles] of Object.entries(packageFiles)) {\n      files = files.concat(\n        managerFiles.map((file) => ` * \\`${file.packageFile}\\` (${manager})`),\n      );\n    }\n    prBody = `${prBody.replace(\n      '{{PACKAGE FILES}}',\n      `### Detected Package Files\\n\\n${files.join('\\n')}`,\n    )}\\n`;\n  } else {\n    prBody = prBody.replace('{{PACKAGE FILES}}\\n', '');\n  }\n  let configDesc = '';\n  if (GlobalConfig.get('dryRun')) {\n    logger.info(`DRY-RUN: Would check branch ${branchName}`);\n  } else {\n    configDesc = getConfigDesc(config);\n  }\n  prBody = prBody.replace('{{CONFIG}}\\n', configDesc);\n  prBody = prBody.replace(\n    '{{WARNINGS}}\\n',\n    getWarnings(config) + getDepWarningsOnboardingPR(packageFiles!, config),\n  );\n  prBody = prBody.replace('{{ERRORS}}\\n', getErrors(config));\n  prBody = prBody.replace('{{BASEBRANCH}}\\n', getBaseBranchDesc(config));\n  prBody = prBody.replace('{{PRLIST}}\\n', getExpectedPrList(config, branches));\n  logger.trace(`prBody:\\n${prBody}`);\n\n  prBody = platform.massageMarkdown(prBody);\n\n  if (GlobalConfig.get('dryRun')) {\n    logger.info('DRY-RUN: Would ensure comment');\n    return true;\n  }\n\n  return await ensureComment({\n    number: pr.number,\n    topic: 'Reconfigure PR Results',\n    content: prBody,\n  });\n}\n\nfunction getDescriptionArray(config: RenovateConfig): string[] {\n  logger.debug('getDescriptionArray()');\n  logger.trace({ config });\n  const desc = isArray(config.description, isString) ? config.description : [];\n  return desc.concat(getScheduleDesc(config));\n}\n\nexport function getConfigDesc(config: RenovateConfig): string {\n  logger.debug('getConfigDesc()');\n  logger.trace({ config });\n  const descriptionArr = getDescriptionArray(config);\n  if (!descriptionArr.length) {\n    logger.debug('No config description found');\n    return '';\n  }\n  logger.debug(`Found description array with length:${descriptionArr.length}`);\n  let desc = `\\n### Configuration Summary\\n\\nBased on the default config's presets, Renovate will:\\n\\n`;\n  descriptionArr.forEach((d) => {\n    desc += `  - ${d}\\n`;\n  });\n  desc += '\\n\\n---\\n';\n  return desc;\n}\n"],"mappings":";;;;;;;;;;AAkBA,eAAsB,2BACpB,QACA,cACA,UACA,YACA,IACkB;CAClB,OAAO,MAAM,8BAA8B;CAC3C,OAAO,MAAM,EAAE,OAAO,CAAC;CACvB,IAAI,oBAAoB;CAGxB,qBAAqB;;;;;;;;;CASrB,IAAI,SAAS;CACb,IAAI,gBAAgB,OAAO,QAAQ,YAAY,CAAC,CAAC,QAAQ;EACvD,IAAI,QAAkB,CAAC;EACvB,KAAK,MAAM,CAAC,SAAS,iBAAiB,OAAO,QAAQ,YAAY,GAC/D,QAAQ,MAAM,OACZ,aAAa,KAAK,SAAS,QAAQ,KAAK,YAAY,MAAM,QAAQ,EAAE,CACtE;EAEF,SAAS,GAAG,OAAO,QACjB,qBACA,iCAAiC,MAAM,KAAK,IAAI,GAClD,EAAE;CACJ,OACE,SAAS,OAAO,QAAQ,uBAAuB,EAAE;CAEnD,IAAI,aAAa;CACjB,IAAI,aAAa,IAAI,QAAQ,GAC3B,OAAO,KAAK,+BAA+B,YAAY;MAEvD,aAAa,cAAc,MAAM;CAEnC,SAAS,OAAO,QAAQ,gBAAgB,UAAU;CAClD,SAAS,OAAO,QACd,kBACA,YAAY,MAAM,IAAI,2BAA2B,cAAe,MAAM,CACxE;CACA,SAAS,OAAO,QAAQ,gBAAgB,UAAU,MAAM,CAAC;CACzD,SAAS,OAAO,QAAQ,oBAAoB,kBAAkB,MAAM,CAAC;CACrE,SAAS,OAAO,QAAQ,gBAAgB,kBAAkB,QAAQ,QAAQ,CAAC;CAC3E,OAAO,MAAM,YAAY,QAAQ;CAEjC,SAAS,SAAS,gBAAgB,MAAM;CAExC,IAAI,aAAa,IAAI,QAAQ,GAAG;EAC9B,OAAO,KAAK,+BAA+B;EAC3C,OAAO;CACT;CAEA,OAAO,MAAM,cAAc;EACzB,QAAQ,GAAG;EACX,OAAO;EACP,SAAS;CACX,CAAC;AACH;AAEA,SAAS,oBAAoB,QAAkC;CAC7D,OAAO,MAAM,uBAAuB;CACpC,OAAO,MAAM,EAAE,OAAO,CAAC;CAEvB,QADa,QAAQ,OAAO,aAAa,QAAQ,IAAI,OAAO,cAAc,CAAC,EAAA,CAC/D,OAAO,gBAAgB,MAAM,CAAC;AAC5C;AAEA,SAAgB,cAAc,QAAgC;CAC5D,OAAO,MAAM,iBAAiB;CAC9B,OAAO,MAAM,EAAE,OAAO,CAAC;CACvB,MAAM,iBAAiB,oBAAoB,MAAM;CACjD,IAAI,CAAC,eAAe,QAAQ;EAC1B,OAAO,MAAM,6BAA6B;EAC1C,OAAO;CACT;CACA,OAAO,MAAM,uCAAuC,eAAe,QAAQ;CAC3E,IAAI,OAAO;CACX,eAAe,SAAS,MAAM;EAC5B,QAAQ,OAAO,EAAE;CACnB,CAAC;CACD,QAAQ;CACR,OAAO;AACT"}
+{"version":3,"file":"comment.js","names":[],"sources":["../../../../lib/workers/repository/reconfigure/comment.ts"],"sourcesContent":["import { isArray, isString } from '@sindresorhus/is';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport type { RenovateConfig } from '../../../config/types.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { PackageFile } from '../../../modules/manager/types.ts';\nimport { ensureComment } from '../../../modules/platform/comment.ts';\nimport type { Pr } from '../../../modules/platform/index.ts';\nimport { platform } from '../../../modules/platform/index.ts';\nimport type { BranchConfig } from '../../types.ts';\nimport {\n  getDepWarningsOnboardingPR,\n  getErrors,\n  getWarnings,\n} from '../errors-warnings.ts';\nimport { getBaseBranchDesc } from '../onboarding/pr/base-branch.ts';\nimport { getScheduleDesc } from '../onboarding/pr/config-description.ts';\nimport {\n  getPackageFilesDesc,\n  getPackageFilesSummary,\n} from '../onboarding/pr/package-files.ts';\nimport {\n  getExpectedPrList,\n  getExpectedPrListSummary,\n} from '../onboarding/pr/pr-list.ts';\n\nexport async function ensureReconfigurePrComment(\n  config: RenovateConfig,\n  packageFiles: Record<string, PackageFile[]> | null,\n  branches: BranchConfig[],\n  branchName: string,\n  pr: Pr,\n): Promise<boolean> {\n  logger.debug('ensureReconfigurePrComment()');\n  logger.trace({ config });\n  let prCommentTemplate = `This is a reconfigure PR comment to help you understand and re-configure your renovate bot settings. If this Reconfigure PR were to be merged, we'd expect to see the following outcome:\\n\\n`;\n\n  // TODO #22198\n  prCommentTemplate += `\n---\n{{PACKAGE FILES}}\n{{CONFIG}}\n{{BASEBRANCH}}\n{{PRLIST}}\n{{WARNINGS}}\n{{ERRORS}}\n`;\n  let prBody = prCommentTemplate;\n  const packageFilesDesc = getPackageFilesDesc(packageFiles);\n  if (packageFilesDesc) {\n    prBody = `${prBody.replace('{{PACKAGE FILES}}', packageFilesDesc)}\\n`;\n  } else {\n    prBody = prBody.replace('{{PACKAGE FILES}}\\n', '');\n  }\n  let configDesc = '';\n  if (GlobalConfig.get('dryRun')) {\n    logger.info(`DRY-RUN: Would check branch ${branchName}`);\n  } else {\n    configDesc = getConfigDesc(config);\n  }\n  prBody = prBody.replace('{{CONFIG}}\\n', configDesc);\n  prBody = prBody.replace(\n    '{{WARNINGS}}\\n',\n    getWarnings(config) + getDepWarningsOnboardingPR(packageFiles!, config),\n  );\n  prBody = prBody.replace('{{ERRORS}}\\n', getErrors(config));\n  prBody = prBody.replace('{{BASEBRANCH}}\\n', getBaseBranchDesc(config));\n  const prList = getExpectedPrList(config, branches);\n  prBody = prBody.replace('{{PRLIST}}\\n', prList);\n\n  if (prBody.length > platform.maxBodyLength()) {\n    logger.debug(\n      'Reconfigure PR body exceeds platform limit, switching to summary PR list and package files',\n    );\n    prBody = prBody.replace(prList, getExpectedPrListSummary(config, branches));\n    if (packageFilesDesc) {\n      prBody = prBody.replace(\n        packageFilesDesc,\n        `### Detected Package Files\\n\\n${getPackageFilesSummary(packageFiles)}`,\n      );\n    }\n  }\n\n  logger.trace(`prBody:\\n${prBody}`);\n\n  prBody = platform.massageMarkdown(prBody);\n\n  if (GlobalConfig.get('dryRun')) {\n    logger.info('DRY-RUN: Would ensure comment');\n    return true;\n  }\n\n  return await ensureComment({\n    number: pr.number,\n    topic: 'Reconfigure PR Results',\n    content: prBody,\n  });\n}\n\nfunction getDescriptionArray(config: RenovateConfig): string[] {\n  logger.debug('getDescriptionArray()');\n  logger.trace({ config });\n  const desc = isArray(config.description, isString) ? config.description : [];\n  return desc.concat(getScheduleDesc(config));\n}\n\nexport function getConfigDesc(config: RenovateConfig): string {\n  logger.debug('getConfigDesc()');\n  logger.trace({ config });\n  const descriptionArr = getDescriptionArray(config);\n  if (!descriptionArr.length) {\n    logger.debug('No config description found');\n    return '';\n  }\n  logger.debug(`Found description array with length:${descriptionArr.length}`);\n  let desc = `\\n### Configuration Summary\\n\\nBased on the default config's presets, Renovate will:\\n\\n`;\n  descriptionArr.forEach((d) => {\n    desc += `  - ${d}\\n`;\n  });\n  desc += '\\n\\n---\\n';\n  return desc;\n}\n"],"mappings":";;;;;;;;;;;AAyBA,eAAsB,2BACpB,QACA,cACA,UACA,YACA,IACkB;CAClB,OAAO,MAAM,8BAA8B;CAC3C,OAAO,MAAM,EAAE,OAAO,CAAC;CACvB,IAAI,oBAAoB;CAGxB,qBAAqB;;;;;;;;;CASrB,IAAI,SAAS;CACb,MAAM,mBAAmB,oBAAoB,YAAY;CACzD,IAAI,kBACF,SAAS,GAAG,OAAO,QAAQ,qBAAqB,gBAAgB,EAAE;MAElE,SAAS,OAAO,QAAQ,uBAAuB,EAAE;CAEnD,IAAI,aAAa;CACjB,IAAI,aAAa,IAAI,QAAQ,GAC3B,OAAO,KAAK,+BAA+B,YAAY;MAEvD,aAAa,cAAc,MAAM;CAEnC,SAAS,OAAO,QAAQ,gBAAgB,UAAU;CAClD,SAAS,OAAO,QACd,kBACA,YAAY,MAAM,IAAI,2BAA2B,cAAe,MAAM,CACxE;CACA,SAAS,OAAO,QAAQ,gBAAgB,UAAU,MAAM,CAAC;CACzD,SAAS,OAAO,QAAQ,oBAAoB,kBAAkB,MAAM,CAAC;CACrE,MAAM,SAAS,kBAAkB,QAAQ,QAAQ;CACjD,SAAS,OAAO,QAAQ,gBAAgB,MAAM;CAE9C,IAAI,OAAO,SAAS,SAAS,cAAc,GAAG;EAC5C,OAAO,MACL,4FACF;EACA,SAAS,OAAO,QAAQ,QAAQ,yBAAyB,QAAQ,QAAQ,CAAC;EAC1E,IAAI,kBACF,SAAS,OAAO,QACd,kBACA,iCAAiC,uBAAuB,YAAY,GACtE;CAEJ;CAEA,OAAO,MAAM,YAAY,QAAQ;CAEjC,SAAS,SAAS,gBAAgB,MAAM;CAExC,IAAI,aAAa,IAAI,QAAQ,GAAG;EAC9B,OAAO,KAAK,+BAA+B;EAC3C,OAAO;CACT;CAEA,OAAO,MAAM,cAAc;EACzB,QAAQ,GAAG;EACX,OAAO;EACP,SAAS;CACX,CAAC;AACH;AAEA,SAAS,oBAAoB,QAAkC;CAC7D,OAAO,MAAM,uBAAuB;CACpC,OAAO,MAAM,EAAE,OAAO,CAAC;CAEvB,QADa,QAAQ,OAAO,aAAa,QAAQ,IAAI,OAAO,cAAc,CAAC,EAAA,CAC/D,OAAO,gBAAgB,MAAM,CAAC;AAC5C;AAEA,SAAgB,cAAc,QAAgC;CAC5D,OAAO,MAAM,iBAAiB;CAC9B,OAAO,MAAM,EAAE,OAAO,CAAC;CACvB,MAAM,iBAAiB,oBAAoB,MAAM;CACjD,IAAI,CAAC,eAAe,QAAQ;EAC1B,OAAO,MAAM,6BAA6B;EAC1C,OAAO;CACT;CACA,OAAO,MAAM,uCAAuC,eAAe,QAAQ;CAC3E,IAAI,OAAO;CACX,eAAe,SAAS,MAAM;EAC5B,QAAQ,OAAO,EAAE;CACnB,CAAC;CACD,QAAQ;CACR,OAAO;AACT"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "renovate",
   "description": "Automated dependency updates. Flexible so you don't need to be.",
-  "version": "43.273.0",
+  "version": "43.275.0",
   "type": "module",
   "bin": {
     "renovate": "dist/renovate.js",

package/renovate-schema.json

@@ -1,8 +1,8 @@
 {
   "$id": "https://docs.renovatebot.com/renovate-schema.json",
-  "title": "JSON schema for Renovate 43.273.0 config files (https://renovatebot.com/)",
+  "title": "JSON schema for Renovate 43.275.0 config files (https://renovatebot.com/)",
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "x-renovate-version": "43.273.0",
+  "x-renovate-version": "43.275.0",
   "allowComments": true,
   "type": "object",
   "definitions": {