renovate 44.151.4 → 44.151.5

package/dist/config/options/scopes.js

@@ -0,0 +1,49 @@
+import { coerceArray } from "../../util/array.js";
+import { AllManagersListLiteral } from "../../manager-list.generated.js";
+import { UpdateTypesOptions, configScopes } from "../types.js";
+//#region lib/config/options/scopes.ts
+const scopeDescriptions = {
+	repo: "at the top level of a config",
+	packageRule: "in a `packageRules` entry",
+	manager: "in a manager's config",
+	updateType: "in an update type's config"
+};
+const scopeParents = {
+	repo: ["."],
+	packageRule: ["packageRules"],
+	manager: AllManagersListLiteral,
+	updateType: UpdateTypesOptions
+};
+/**
+* Every object an option can be used in, from the objects it names in `parents` and the kinds of place it names in `scopes`.
+*
+* Returns `undefined` for an option which declares neither, which we treat as being valid anywhere until it's been given its scopes as part of #43020.
+*/
+function getAllowedParents(option) {
+	if (!option.parents && !option.scopes) return;
+	const parents = new Set(option.parents);
+	for (const scope of coerceArray(option.scopes)) for (const parent of scopeParents[scope]) parents.add(parent);
+	return [...parents];
+}
+/**
+* A human-readable description of the locations that an option can be used.
+*
+* Returns `undefined` for an option which can be used anywhere.
+*/
+function describeAllowedLocations(option) {
+	if (!getAllowedParents(option)) return;
+	const scopes = new Set(coerceArray(option.scopes));
+	if (option.parents?.includes(".")) scopes.add("repo");
+	const locations = configScopes.filter((scope) => scopes.has(scope)).map((scope) => scopeDescriptions[scope]);
+	const parents = coerceArray(option.parents).filter((parent) => parent !== ".").toSorted();
+	if (parents.length) locations.push(`in ${joinWithOr(parents.map((parent) => `\`${parent}\``))}`);
+	return joinWithOr(locations);
+}
+function joinWithOr(parts) {
+	if (parts.length < 2) return parts.join("");
+	return `${parts.slice(0, -1).join(", ")} or ${parts.at(-1)}`;
+}
+//#endregion
+export { describeAllowedLocations, getAllowedParents };
+
+//# sourceMappingURL=scopes.js.map

package/dist/config/options/scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.js","names":[],"sources":["../../../lib/config/options/scopes.ts"],"sourcesContent":["import { AllManagersListLiteral } from '../../manager-list.generated.ts';\nimport { coerceArray } from '../../util/array.ts';\nimport type { AllowedParents, ConfigScope, RenovateOptions } from '../types.ts';\nimport { UpdateTypesOptions, configScopes } from '../types.ts';\n\nconst scopeDescriptions: Record<ConfigScope, string> = {\n  repo: 'at the top level of a config',\n  packageRule: 'in a `packageRules` entry',\n  manager: \"in a manager's config\",\n  updateType: \"in an update type's config\",\n};\n\nconst scopeParents: Record<ConfigScope, readonly AllowedParents[]> = {\n  repo: ['.'],\n  packageRule: ['packageRules'],\n  manager: AllManagersListLiteral,\n  updateType: UpdateTypesOptions,\n};\n\n/**\n * Every object an option can be used in, from the objects it names in `parents` and the kinds of place it names in `scopes`.\n *\n * Returns `undefined` for an option which declares neither, which we treat as being valid anywhere until it's been given its scopes as part of #43020.\n */\nexport function getAllowedParents(\n  option: RenovateOptions,\n): AllowedParents[] | undefined {\n  if (!option.parents && !option.scopes) {\n    return undefined;\n  }\n\n  const parents = new Set<AllowedParents>(option.parents);\n  for (const scope of coerceArray(option.scopes)) {\n    for (const parent of scopeParents[scope]) {\n      parents.add(parent);\n    }\n  }\n\n  return [...parents];\n}\n\n/**\n * A human-readable description of the locations that an option can be used.\n *\n * Returns `undefined` for an option which can be used anywhere.\n */\nexport function describeAllowedLocations(\n  option: RenovateOptions,\n): string | undefined {\n  if (!getAllowedParents(option)) {\n    return undefined;\n  }\n\n  const scopes = new Set(coerceArray(option.scopes));\n  if (option.parents?.includes('.')) {\n    scopes.add('repo');\n  }\n\n  const locations = configScopes\n    .filter((scope) => scopes.has(scope))\n    .map((scope) => scopeDescriptions[scope]);\n\n  const parents = coerceArray(option.parents)\n    .filter((parent) => parent !== '.')\n    .toSorted();\n  if (parents.length) {\n    locations.push(\n      `in ${joinWithOr(parents.map((parent) => `\\`${parent}\\``))}`,\n    );\n  }\n\n  return joinWithOr(locations);\n}\n\nfunction joinWithOr(parts: string[]): string {\n  if (parts.length < 2) {\n    return parts.join('');\n  }\n\n  return `${parts.slice(0, -1).join(', ')} or ${parts.at(-1)}`;\n}\n"],"mappings":";;;;AAKA,MAAM,oBAAiD;CACrD,MAAM;CACN,aAAa;CACb,SAAS;CACT,YAAY;AACd;AAEA,MAAM,eAA+D;CACnE,MAAM,CAAC,GAAG;CACV,aAAa,CAAC,cAAc;CAC5B,SAAS;CACT,YAAY;AACd;;;;;;AAOA,SAAgB,kBACd,QAC8B;CAC9B,IAAI,CAAC,OAAO,WAAW,CAAC,OAAO,QAC7B;CAGF,MAAM,UAAU,IAAI,IAAoB,OAAO,OAAO;CACtD,KAAK,MAAM,SAAS,YAAY,OAAO,MAAM,GAC3C,KAAK,MAAM,UAAU,aAAa,QAChC,QAAQ,IAAI,MAAM;CAItB,OAAO,CAAC,GAAG,OAAO;AACpB;;;;;;AAOA,SAAgB,yBACd,QACoB;CACpB,IAAI,CAAC,kBAAkB,MAAM,GAC3B;CAGF,MAAM,SAAS,IAAI,IAAI,YAAY,OAAO,MAAM,CAAC;CACjD,IAAI,OAAO,SAAS,SAAS,GAAG,GAC9B,OAAO,IAAI,MAAM;CAGnB,MAAM,YAAY,aACf,QAAQ,UAAU,OAAO,IAAI,KAAK,CAAC,CAAC,CACpC,KAAK,UAAU,kBAAkB,MAAM;CAE1C,MAAM,UAAU,YAAY,OAAO,OAAO,CAAC,CACxC,QAAQ,WAAW,WAAW,GAAG,CAAC,CAClC,SAAS;CACZ,IAAI,QAAQ,QACV,UAAU,KACR,MAAM,WAAW,QAAQ,KAAK,WAAW,KAAK,OAAO,GAAG,CAAC,GAC3D;CAGF,OAAO,WAAW,SAAS;AAC7B;AAEA,SAAS,WAAW,OAAyB;CAC3C,IAAI,MAAM,SAAS,GACjB,OAAO,MAAM,KAAK,EAAE;CAGtB,OAAO,GAAG,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,MAAM,MAAM,GAAG,EAAE;AAC3D"}

package/dist/config/presets/index.js

@@ -5,12 +5,12 @@ import { GlobalConfig } from "../global.js";
 import { coerceArray } from "../../util/array.js";
 import { logger } from "../../logger/index.js";
 import { clone } from "../../util/clone.js";
+import { buildCacheKey } from "../../util/cache/package/key.js";
 import { massageConfig } from "../massage.js";
 import { removedPresets } from "./common.js";
 import { mergeChildConfig } from "../utils.js";
 import { migrateConfig } from "../migration.js";
 import { compile } from "../../util/template/index.js";
-import { buildCacheKey } from "../../util/cache/package/key.js";
 import { ExternalHostError } from "../../types/errors/external-host-error.js";
 import { getPreset as getPreset$1, isInternal } from "./internal/index.js";
 import { PRESET_DEP_NOT_FOUND, PRESET_RELATIVE_NO_PARENT } from "./util.js";

package/dist/config/types.d.ts

@@ -491,6 +491,21 @@ export interface ValidationMessage {
   topic: ConfigValidationTopic | (string & {});
   message: string;
 }
+/**
+ * The kinds of place a config option can be used, which expand to the {@link AllowedParents} they cover.
+ *
+ * These are for the places which can't reasonably be listed, like every manager or every update type, so an option which is only valid in a specific object - like `hostRules` - should use `parents` instead.
+ */
+export declare const configScopes: readonly [
+/** the top level of a repository, global, inherited or preset config */
+'repo',
+/** a `packageRules` entry */
+'packageRule',
+/** a manager's configuration object, like `npm` */
+'manager',
+/** an update type's configuration object, like `major` */
+'updateType'];
+export type ConfigScope = (typeof configScopes)[number];
 export type AllowedParents = '.' | 'bumpVersions' | 'customDatasources' | 'customManagers' | 'hostRules' | 'logLevelRemap' | 'packageRules' | 'postUpgradeTasks' | 'vulnerabilityAlerts' | 'toolSettings' | ManagerName | UpdateTypeOptions;
 export interface RenovateOptionBase {
   /**
@@ -522,6 +537,12 @@ export interface RenovateOptionBase {
   autogenerated?: boolean;
   name: string;
   parents?: AllowedParents[];
+  /**
+   * The kinds of place this option can be used, which are expanded alongside any `parents`.
+   *
+   * An option which declares neither is treated as valid anywhere, which is what we're working towards removing in #43020.
+   */
+  scopes?: ConfigScope[];
   stage?: RenovateConfigStage;
   experimental?: boolean;
   experimentalDescription?: string;
@@ -593,6 +614,10 @@ export interface RenovateStringOption extends RenovateOptionBase {
 export interface RenovateObjectOption extends RenovateOptionBase {
   default?: any;
   additionalProperties?: Record<string, unknown> | boolean;
+  /**
+   * The keys the object accepts, for an option whose keys are a known set rather than the user's choice.
+   */
+  properties?: Record<string, unknown>;
   mergeable?: boolean;
   type: 'object';
 }

package/dist/config/types.js

@@ -21,7 +21,18 @@ const UpdateTypesOptions = [
 	"rollback",
 	"replacement"
 ];
+/**
+* The kinds of place a config option can be used, which expand to the {@link AllowedParents} they cover.
+*
+* These are for the places which can't reasonably be listed, like every manager or every update type, so an option which is only valid in a specific object - like `hostRules` - should use `parents` instead.
+*/
+const configScopes = [
+	"repo",
+	"packageRule",
+	"manager",
+	"updateType"
+];
 //#endregion
-export { UpdateTypesOptions, allowedStatusCheckStrings, allowedStatusCheckWhenValues };
+export { UpdateTypesOptions, allowedStatusCheckStrings, allowedStatusCheckWhenValues, configScopes };
 
 //# sourceMappingURL=types.js.map

package/dist/config/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":[],"sources":["../../lib/config/types.ts"],"sourcesContent":["import type { Category, PlatformId } from '../constants/index.ts';\nimport type { LogLevelRemap } from '../logger/types.ts';\nimport type { ManagerName } from '../manager-list.generated.ts';\nimport type { CustomManager } from '../modules/manager/custom/types.ts';\nimport type {\n  GitUrlOption,\n  RepoSortMethod,\n  SortMethod,\n} from '../modules/platform/types.ts';\nimport type {\n  AutoMergeType,\n  HostRule,\n  Nullish,\n  RangeStrategy,\n  SkipReason,\n} from '../types/index.ts';\nimport type { StageName } from '../types/skip-reason.ts';\nimport type {\n  AdditionalConstraintName,\n  ConstraintName,\n  ToolName,\n} from '../util/exec/types.ts';\nimport type { GitNoVerifyOption } from '../util/git/types.ts';\nimport type { MergeConfidence } from '../util/merge-confidence/types.ts';\nimport type { Timestamp } from '../util/timestamp.ts';\nimport type { ConfigValidationTopic } from './validation-helpers/types.ts';\n\nexport type RenovateConfigStage =\n  'global' | 'inherit' | 'repository' | 'package' | 'branch' | 'pr';\n\nexport type RenovateSplit =\n  'init' | 'onboarding' | 'extract' | 'lookup' | 'update';\n\nexport type RepositoryCacheConfig = 'disabled' | 'enabled' | 'reset';\nexport type RepositoryCacheType = 'local' | (string & {});\nexport type DryRunConfig = 'extract' | 'lookup' | 'full';\nexport type InternalHostAccess = 'allow' | 'warn' | 'block';\nexport type RequiredConfig = 'required' | 'optional' | 'ignored';\n\nexport interface GroupConfig extends Record<string, unknown> {\n  branchName?: string;\n  branchTopic?: string;\n}\n\nexport type RecreateWhen = 'auto' | 'never' | 'always';\nexport const allowedStatusCheckWhenValues = [\n  'always',\n  'never',\n  'failed',\n] as const;\nexport type StatusCheckWhen = (typeof allowedStatusCheckWhenValues)[number];\nexport type PlatformCommitOptions = 'auto' | 'disabled' | 'enabled';\n\nexport type BinarySource = 'docker' | 'global' | 'install' | 'hermit';\n\n// TODO: Proper typings\n/**\n * Any configuration that could be used either top-level in a repository config (or Global, Inherited or Shareable Preset configuration), or:\n *\n * - in a datasource-specific configuration\n * - in a manager-specific configuration\n * - in a Package Rule\n *\n * @see RenovateConfig for the superset of all configuration allowed in a given repository\n *\n */\nexport interface RenovateSharedConfig {\n  $schema?: string;\n  abandonmentThreshold?: Nullish<string>;\n  addLabels?: string[];\n  assignAutomerge?: boolean;\n  autoApprove?: boolean;\n  autoReplaceGlobalMatch?: boolean;\n  automerge?: boolean;\n  automergeSchedule?: string[];\n  automergeStrategy?: MergeStrategy;\n  automergeType?: AutoMergeType;\n  azureWorkItemId?: number;\n  azureWorkItemType?: string;\n  branchName?: string;\n  branchNameStrict?: boolean;\n  branchPrefix?: string;\n  branchPrefixOld?: string;\n  bumpVersions?: BumpVersionConfig[];\n  commitBody?: string;\n  commitBodyTable?: boolean;\n  commitMessage?: string;\n  commitMessageAction?: string;\n  commitMessageExtra?: string;\n  commitMessageLowerCase?: 'auto' | 'never';\n  commitMessagePrefix?: string;\n  commitMessageTopic?: string;\n  commitTrailers?: string[];\n  confidential?: boolean;\n  configValidationError?: boolean;\n  changelogUrl?: string;\n  dependencyDashboardApproval?: boolean;\n  draftPR?: boolean;\n  enabled?: boolean;\n  enabledManagers?: string[];\n  encrypted?: Record<string, string>;\n  extends?: string[];\n  extractVersion?: string;\n  managerFilePatterns?: string[];\n  followTag?: string;\n  force?: RenovateConfig;\n  gitIgnoredAuthors?: string[];\n  group?: GroupConfig;\n  groupName?: string;\n  groupSingleUpdates?: boolean;\n  groupSlug?: string;\n  hashedBranchLength?: number;\n  ignoreDeps?: string[];\n  ignorePaths?: string[];\n  ignoreTests?: boolean;\n  ignoreUnstable?: boolean;\n  includePaths?: string[];\n  internalChecksAsSuccess?: boolean;\n  internalChecksFilter?: 'strict' | 'flexible' | 'none';\n  keepUpdatedLabel?: string;\n  labels?: string[];\n  manager?: string;\n  milestone?: number;\n  minimumReleaseAge?: Nullish<string>;\n  minimumReleaseAgeBuffer?: Nullish<string>;\n  npmrc?: string;\n  npmrcMerge?: boolean;\n  npmToken?: string;\n\n  pinDigests?: boolean;\n  platformAutomerge?: boolean;\n  platformCommit?: PlatformCommitOptions;\n  postUpgradeTasks?: PostUpgradeTasks;\n  prBodyColumns?: string[];\n  prBodyDefinitions?: Record<string, string>;\n  prBodyHeadingDefinitions?: Record<string, string>;\n  prBodyNotes?: string[];\n  prCreation?: 'immediate' | 'not-pending' | 'status-success' | 'approval';\n  prFooter?: string;\n  prHeader?: string;\n  prPriority?: number;\n  prTitle?: string;\n  prTitleStrict?: boolean;\n  pruneBranchAfterAutomerge?: boolean;\n  rangeStrategy?: RangeStrategy;\n  rebaseLabel?: string;\n  rebaseWhen?: string;\n  recreateClosed?: boolean;\n  recreateWhen?: RecreateWhen;\n  repository?: string;\n  repositoryCache?: RepositoryCacheConfig;\n  repositoryCacheType?: RepositoryCacheType;\n  respectLatest?: boolean;\n  rollbackPrs?: boolean;\n  schedule?: string[];\n  semanticCommitScope?: string | null;\n  semanticCommitType?: string;\n  semanticCommits?: 'auto' | 'enabled' | 'disabled';\n  separateMajorMinor?: boolean;\n  separateMinorPatch?: boolean;\n  separateMultipleMajor?: boolean;\n  separateMultipleMinor?: boolean;\n  skipArtifactsUpdate?: boolean;\n  stopUpdatingLabel?: string;\n  suppressNotifications?: string[];\n  timezone?: string;\n  unicodeEmoji?: boolean;\n  updateNotScheduled?: boolean;\n  versioning?: string;\n  versionCompatibility?: string;\n}\n\n/**\n * Contains all options with globalOnly=true && inheritConfigSupport=true\n */\nexport interface GlobalInheritableConfig {\n  bbUseDevelopmentBranch?: boolean;\n  configFileNames?: string[];\n  onboarding?: boolean;\n  onboardingAutoCloseAge?: number;\n  onboardingBranch?: string;\n  onboardingCommitMessage?: string;\n  onboardingConfig?: RenovateConfig;\n  onboardingConfigFileName?: string;\n  onboardingNoDeps?: 'auto' | 'enabled' | 'disabled';\n  onboardingPrTitle?: string;\n  requireConfig?: RequiredConfig;\n}\n\n// Config options used only within the global worker\n// The below should contain config options where stage=global\n/** @deprecated use `RepoGlobalConfig` instead **/\nexport interface GlobalOnlyConfigLegacy {\n  autodiscover?: boolean;\n  autodiscoverFilter?: string[] | string;\n  autodiscoverNamespaces?: string[];\n  autodiscoverProjects?: string[];\n  autodiscoverTopics?: string[];\n  baseDir?: string;\n  cacheDir?: string;\n  containerbaseDir?: string;\n  detectHostRulesFromEnv?: boolean;\n  dockerCliOptions?: string;\n  endpoint?: string;\n  exitCodeForErrors?: boolean;\n  forceCli?: boolean;\n  gitNoVerify?: GitNoVerifyOption[];\n  gitPrivateKey?: string;\n  gitPrivateKeyPassphrase?: string;\n  globalExtends?: string[];\n  mergeConfidenceDatasources?: string[];\n  mergeConfidenceEndpoint?: string;\n  platform?: PlatformId;\n  processEnv?: Record<string, string>;\n  prCommitsPerRunLimit?: number;\n  privateKey?: string;\n  privateKeyOld?: string;\n  privateKeyPath?: string;\n  privateKeyPathOld?: string;\n  redisPrefix?: string;\n  redisUrl?: string;\n  repositories?: RenovateRepository[];\n  useCloudMetadataServices?: boolean;\n  deleteConfigFile?: boolean;\n  deleteAdditionalConfigFile?: boolean;\n}\n\n/**\n * Any global-only configuration set by self-hosted administrators.\n *\n * Used within the repository worker.\n *\n * Should only contain config options where globalOnly=true.\n */\nexport interface RepoGlobalConfig extends GlobalInheritableConfig {\n  allowedCommands?: string[];\n  allowCustomCrateGitRegistries?: boolean;\n  allowPlugins?: boolean;\n  allowScripts?: boolean;\n  allowShellExecutorForPostUpgradeCommands?: boolean;\n  allowedEnv?: string[];\n  allowedHeaders?: string[];\n  binarySource?: BinarySource;\n  cacheDir?: string;\n  cacheHardTtlMinutes?: number;\n  cacheTtlOverride?: Record<string, number>;\n  checkedBranches?: string[];\n  containerbaseDir?: string;\n  customEnvVariables?: Record<string, string>;\n  dockerChildPrefix?: string;\n  dockerCliOptions?: string;\n  dockerSidecarImage?: string;\n  dockerUser?: string;\n  dryRun?: DryRunConfig;\n  encryptedWarning?: string;\n  endpoint?: string;\n  executionTimeout?: number;\n  exposeAllEnv?: boolean;\n  gitTimeout?: number;\n  githubTokenWarn?: boolean;\n  includeMirrors?: boolean;\n  inheritConfigTrusted?: boolean;\n  internalHostAccess?: InternalHostAccess;\n  migratePresets?: Record<string, string>;\n  platform?: PlatformId;\n  prCacheSyncMaxPages?: number;\n  presetCachePersistence?: boolean;\n  httpCacheTtlDays?: number;\n  autodiscoverRepoSort?: RepoSortMethod;\n  autodiscoverRepoOrder?: SortMethod;\n  userAgent?: string;\n  dockerMaxPages?: number;\n  s3Endpoint?: string;\n  s3PathStyle?: boolean;\n  cachePrivatePackages?: boolean;\n  repositoryCacheForceLocal?: boolean;\n  configFileNames?: string[];\n  ignorePrAuthor?: boolean;\n  allowedUnsafeExecutions?: AllowedUnsafeExecution[];\n  onboardingAutoCloseAge?: number;\n  productLinks?: Record<string, string>;\n  rebaseAllOpenBranches?: boolean;\n  toolSettings?: GlobalToolSettingsOptions;\n}\n\n/**\n * Internal variables which are referenced from `GlobalConfig`, but are *not* user-configurable options.\n */\nexport interface InternalGlobalConfigOptions {\n  localDir?: string;\n}\n\n/**\n * Those options are global only but still passed into the repository worker config.\n *\n * @deprecated https://github.com/renovatebot/renovate/issues/39693\n */\nexport interface LegacyAdminConfig {\n  baseDir?: string;\n  localDir?: string;\n\n  logContext?: string;\n\n  onboarding?: boolean;\n  onboardingBranch?: string;\n  onboardingNoDeps?: 'auto' | 'enabled' | 'disabled';\n  onboardingRebaseCheckbox?: boolean;\n  onboardingConfig?: RenovateConfig;\n  onboardingConfigFileName?: string;\n\n  optimizeForDisabled?: boolean;\n\n  persistRepoData?: boolean;\n\n  prCommitsPerRunLimit?: number;\n\n  requireConfig?: RequiredConfig;\n\n  useCloudMetadataServices?: boolean;\n\n  writeDiscoveredRepos?: string;\n}\n\nexport type ExecutionMode = 'branch' | 'update';\n\nexport interface PostUpgradeTasks {\n  commands?: string[];\n  workingDirTemplate?: string;\n  dataFileTemplate?: string;\n  fileFilters?: string[];\n  executionMode: ExecutionMode;\n  installTools?: Partial<Record<ToolName, Record<never, never>>>;\n}\n\nexport type UpdateConfig<\n  T extends RenovateSharedConfig = RenovateSharedConfig,\n> = Partial<Record<UpdateType, T | null>>;\n\nexport type RenovateRepositoryEntry = AllConfig & {\n  repository: string;\n};\n\nexport type RenovateRepository = string | RenovateRepositoryEntry;\n\nexport type UseBaseBranchConfigType = 'merge' | 'none';\nexport type ConstraintsFilter = 'strict' | 'none';\nexport type MinimumReleaseAgeBehaviour =\n  'timestamp-required' | 'timestamp-optional';\n\nexport const allowedStatusCheckStrings = [\n  'minimumReleaseAge',\n  'mergeConfidence',\n  'configValidation',\n  'artifactError',\n] as const;\nexport type StatusCheckKey = (typeof allowedStatusCheckStrings)[number];\ntype UserEnv = Record<string, string>;\n\n/**\n * Computed properties, for internal use only\n */\nexport interface RenovateInternalConfig {\n  /** computed base branch from patterns - for internal use only */\n  baseBranches?: string[];\n  currentCompatibility?: string;\n  datasource?: string;\n  hasBaseBranches?: boolean;\n  isFork?: boolean;\n  isVulnerabilityAlert?: boolean;\n\n  /** What is this used for? */\n  remediations?: unknown;\n  /** What is this used for? */\n  vulnerabilityAlertsOnly?: boolean;\n}\n\n// TODO: Proper typings\n/**\n * Configuration that could be used either top-level in a repository config (or Global, Inherited or Shareable Preset configuration).\n *\n * This is a superset of any configuration that a Renovate user (not self-hosted administrator) can set.\n */\nexport interface RenovateConfig\n  extends\n    LegacyAdminConfig,\n    RenovateSharedConfig,\n    UpdateConfig<PackageRule>,\n    AssigneesAndReviewersConfig,\n    ConfigMigration,\n    RenovateInternalConfig {\n  s3Endpoint?: string;\n  s3PathStyle?: boolean;\n  reportFormatting?: boolean;\n  reportPath?: string;\n  reportType?: 'logging' | 'file' | 's3' | null;\n  depName?: string;\n  /** user configurable base branch patterns*/\n  baseBranchPatterns?: string[];\n  useBaseBranchConfig?: UseBaseBranchConfigType;\n  baseBranch?: string;\n  defaultBranch?: string;\n  branchList?: string[];\n  cloneSubmodules?: boolean;\n  cloneSubmodulesFilter?: string[];\n  description?: string | string[];\n  overrideDescription?: string | string[];\n  detectGlobalManagerConfig?: boolean;\n  errors?: ValidationMessage[];\n  forkModeDisallowMaintainerEdits?: boolean;\n  forkProcessing?: 'auto' | 'enabled' | 'disabled';\n  forkToken?: string;\n\n  gitAuthor?: string;\n\n  hostRules?: HostRule[];\n\n  inheritConfig?: boolean;\n  inheritConfigFileName?: string;\n  inheritConfigRepoName?: string;\n  inheritConfigStrict?: boolean;\n\n  ignorePresets?: string[];\n\n  fileList?: string[];\n  configWarningReuseIssue?: boolean;\n  dependencyDashboard?: boolean;\n  dependencyDashboardAutoclose?: boolean;\n  dependencyDashboardChecks?: Record<string, string>;\n  dependencyDashboardIssue?: number;\n  dependencyDashboardTitle?: string;\n  dependencyDashboardHeader?: string;\n  dependencyDashboardFooter?: string;\n  dependencyDashboardLabels?: string[];\n  dependencyDashboardOSVVulnerabilitySummary?: 'none' | 'all' | 'unresolved';\n  dependencyDashboardReportAbandonment?: boolean;\n  mode?: 'silent' | 'full';\n  packageFile?: string;\n  packageRules?: PackageRule[];\n  postUpdateOptions?: string[];\n  branchConcurrentLimit?: number | null;\n  parentOrg?: string;\n  prConcurrentLimit?: number;\n  commitHourlyLimit?: number;\n  prHourlyLimit?: number;\n\n  printConfig?: boolean;\n\n  pruneStaleBranches?: boolean;\n\n  defaultRegistryUrls?: string[];\n  registryUrls?: string[] | null;\n  registryAliases?: Record<string, string>;\n\n  /**\n   * What is this used for?\n   * @deprecated\n   */\n  renovateJsonPresent?: boolean;\n\n  repoIsOnboarded?: boolean;\n  repoIsActivated?: boolean;\n\n  topLevelOrg?: string;\n  updateInternalDeps?: boolean;\n  updateType?: UpdateType;\n\n  warnings?: ValidationMessage[];\n  vulnerabilityAlerts?: RenovateSharedConfig;\n  osvVulnerabilityAlerts?: boolean;\n  vulnerabilitySeverity?: string;\n  customManagers?: CustomManager[];\n  customDatasources?: Record<string, CustomDatasourceConfig>;\n\n  fetchChangeLogs?: FetchChangeLogsOptions;\n  secrets?: Record<string, string>;\n  variables?: Record<string, string>;\n\n  constraints?: Partial<Record<ConstraintName, string>>;\n  /**\n   * Any specific overrides for the versioning for the `AdditionalConstraintName`s.\n   */\n  constraintsVersioning?: Partial<Record<AdditionalConstraintName, string>>;\n  skipInstalls?: boolean | null;\n\n  constraintsFiltering?: ConstraintsFilter;\n\n  customizeDashboard?: Record<string, string>;\n\n  statusCheckNames?: Record<StatusCheckKey, string | null>;\n  statusCheckWhen?: Partial<Record<StatusCheckKey, StatusCheckWhen>>;\n  /**\n   * User configured environment variables that Renovate uses when executing package manager commands\n   */\n  env?: UserEnv;\n  logLevelRemap?: LogLevelRemap[];\n\n  branchTopic?: string;\n  additionalBranchPrefix?: string;\n  sharedVariableName?: string;\n  minimumGroupSize?: number;\n  configFileNames?: string[];\n  minimumReleaseAgeBehaviour?: MinimumReleaseAgeBehaviour;\n  toolSettings?: RepoToolSettingsOptions;\n}\n\nconst CustomDatasourceFormats = [\n  'html',\n  'json',\n  'plain',\n  'toml',\n  'yaml',\n] as const;\nexport type CustomDatasourceFormats = (typeof CustomDatasourceFormats)[number];\n\nexport interface CustomDatasourceConfig {\n  defaultRegistryUrlTemplate?: string;\n  format?: CustomDatasourceFormats;\n  transformTemplates?: string[];\n}\n\n/**\n * The superset of all configuration that a self-hosted administrator can set, alongside all repository-level configuration.\n *\n */\nexport interface AllConfig\n  extends RenovateConfig, GlobalOnlyConfigLegacy, RepoGlobalConfig {\n  gitUrl?: GitUrlOption;\n  password?: string;\n  token?: string;\n  username?: string;\n}\n\nexport interface AssigneesAndReviewersConfig {\n  assigneesFromCodeOwners?: boolean;\n  expandCodeOwnersGroups?: boolean;\n  assignees?: string[];\n  assigneesSampleSize?: number;\n  ignoreReviewers?: string[];\n  reviewersFromCodeOwners?: boolean;\n  reviewers?: string[];\n  reviewersSampleSize?: number;\n  additionalReviewers?: string[];\n  filterUnavailableUsers?: boolean;\n}\n\nexport type UpdateType =\n  | 'major'\n  | 'minor'\n  | 'patch'\n  | 'pin'\n  | 'digest'\n  | 'pinDigest'\n  | 'lockFileMaintenance'\n  | 'lockfileUpdate'\n  | 'rollback'\n  | 'bump'\n  | 'replacement';\n\n// These are the update types which can have configuration\nexport const UpdateTypesOptions = [\n  'major',\n  'minor',\n  'patch',\n  'pin',\n  'digest',\n  'pinDigest',\n  'lockFileMaintenance',\n  'rollback',\n  'replacement',\n] as const;\n\nexport type UpdateTypeOptions = (typeof UpdateTypesOptions)[number];\n\nexport type FetchChangeLogsOptions = 'off' | 'branch' | 'pr';\n\nexport type MatchStringsStrategy = 'any' | 'recursive' | 'combination';\n\nexport type MergeStrategy =\n  | 'auto'\n  | 'fast-forward'\n  | 'merge-commit'\n  | 'rebase'\n  | 'rebase-merge'\n  | 'squash';\n\n// This list should be added to as any new unsafe execution commands should be permitted\nexport type AllowedUnsafeExecution =\n  'bazelModDeps' | 'goGenerate' | 'gradleWrapper' | 'mise' | 'pixi';\n\n// TODO: Proper typings\nexport interface PackageRule\n  extends RenovateSharedConfig, RenovateInternalConfig, UpdateConfig {\n  allowedVersions?: string;\n  description?: string | string[];\n  matchBaseBranches?: string[];\n  matchCategories?: string[];\n  matchConfidence?: MergeConfidence[];\n  matchCurrentAge?: string;\n  matchCurrentValue?: string;\n  matchCurrentVersion?: string;\n  matchDatasources?: string[];\n  matchDepNames?: string[];\n  matchDepTypes?: string[];\n  matchFileNames?: string[];\n  matchIsBreaking?: boolean;\n  matchManagers?: string[];\n  matchNewValue?: string;\n  matchPackageNames?: string[];\n  matchRepositories?: string[];\n  matchSourceUrls?: string[];\n  matchRegistryUrls?: string[];\n  matchUpdateTypes?: UpdateType[];\n  matchJsonata?: string[];\n  overrideDatasource?: string;\n  overrideDepName?: string;\n  overridePackageName?: string;\n  registryUrls?: string[] | null;\n  replacementName?: string;\n  replacementVersion?: string;\n  sourceUrl?: string;\n  sourceDirectory?: string;\n  vulnerabilitySeverity?: string;\n  vulnerabilityFixVersion?: string;\n}\n\nexport interface ValidationMessage {\n  // Topic is either the known list of topics, or a dynamically generated one\n  topic: ConfigValidationTopic | (string & {});\n  message: string;\n}\n\nexport type AllowedParents =\n  | '.'\n  | 'bumpVersions'\n  | 'customDatasources'\n  | 'customManagers'\n  | 'hostRules'\n  | 'logLevelRemap'\n  | 'packageRules'\n  | 'postUpgradeTasks'\n  | 'vulnerabilityAlerts'\n  | 'toolSettings'\n  | ManagerName\n  | UpdateTypeOptions;\nexport interface RenovateOptionBase {\n  /**\n   * If true, the option can only be configured by people with access to the Renovate instance.\n   * Furthermore, the option should be documented in docs/usage/self-hosted-configuration.md.\n   */\n  globalOnly?: boolean;\n\n  /**\n   * If true, this option **MUST** be checked at the trust boundary: after resolving the full config that sets it, but **before** the value is applied.\n   *\n   * This is in addition to any existing config validation, and ensures that these options are re-validated due to their sensitive nature.\n   *\n   * A failure of that check **must** lead to a {@link ConfigValidationTopic.Security} error (which is then a full config validation error), stopping the Renovate run.\n   *\n   * After this check has been performed, additional filtering (for defence in depth) could be performed, but may not have an indication of what is repo- or preset-config vs global self-hosted config.\n   */\n  requiresCheckAtTrustBoundary?: boolean;\n\n  inheritConfigSupport?: boolean;\n\n  allowedValues?: string[];\n\n  allowString?: boolean;\n\n  cli?: boolean;\n\n  description: string;\n\n  env?: false | string;\n\n  /**\n   * Do not validate object children\n   */\n  freeChoice?: boolean;\n\n  mergeable?: boolean;\n\n  autogenerated?: boolean;\n\n  name: string;\n\n  parents?: AllowedParents[];\n\n  stage?: RenovateConfigStage;\n\n  experimental?: boolean;\n\n  experimentalDescription?: string;\n\n  experimentalIssues?: number[];\n\n  advancedUse?: boolean;\n\n  /**\n   * This is used to add a deprecation message in the docs\n   */\n  deprecationMsg?: string;\n\n  /**\n   * For internal use only: add it to any config option that supports regex or glob matching\n   */\n  patternMatch?: boolean;\n\n  /**\n   * For internal use only: add it to any config option of type integer that supports negative integers\n   */\n  allowNegative?: boolean;\n\n  /**\n   * Managers which support this option, leave undefined if all managers support it.\n   */\n  supportedManagers?: string[];\n\n  /**\n   * Platforms which support this option, leave undefined if all platforms support it.\n   */\n  supportedPlatforms?: PlatformId[];\n\n  /**\n   * Conditions that must be met for this option to be required.\n   */\n  requiredIf?: RenovateRequiredOption[];\n\n  /**\n   * If true, the option's value supports Renovate templating.\n   * @see https://docs.renovatebot.com/templates/\n   */\n  supportsTemplating?: boolean;\n}\n\nexport interface RenovateRequiredOption {\n  siblingProperties: { property: string; value: string }[];\n}\n\nexport interface RenovateArrayOption<\n  T extends string | number | Record<string, unknown> = Record<string, unknown>,\n> extends RenovateOptionBase {\n  default?: T[] | null;\n  mergeable?: boolean;\n  type: 'array';\n  subType?: 'string' | 'object' | 'number';\n}\n\nexport interface RenovateStringArrayOption extends RenovateArrayOption<string> {\n  format?: 'regex';\n  subType: 'string';\n}\n\nexport interface RenovateNumberArrayOption extends RenovateArrayOption<number> {\n  subType: 'number';\n}\n\nexport interface RenovateBooleanOption extends RenovateOptionBase {\n  default?: boolean | null;\n  type: 'boolean';\n}\n\nexport interface RenovateIntegerOption extends RenovateOptionBase {\n  default?: number | null;\n  type: 'integer';\n}\n\nexport interface RenovateStringOption extends RenovateOptionBase {\n  default?: string | null;\n  format?: 'regex';\n\n  // Not used\n  replaceLineReturns?: boolean;\n  type: 'string';\n}\n\nexport interface RenovateObjectOption extends RenovateOptionBase {\n  default?: any;\n  additionalProperties?: Record<string, unknown> | boolean;\n  mergeable?: boolean;\n  type: 'object';\n}\n\nexport type RenovateOptions =\n  | RenovateStringOption\n  | RenovateNumberArrayOption\n  | RenovateStringArrayOption\n  | RenovateIntegerOption\n  | RenovateBooleanOption\n  | RenovateArrayOption\n  | RenovateObjectOption;\n\nexport interface PackageRuleInputConfig extends RenovateConfig {\n  versioning?: string;\n  packageFile?: string;\n  lockFiles?: string[];\n  depType?: string;\n  depTypes?: string[];\n  depName?: string;\n  packageName?: string | null;\n  newValue?: string | null;\n  currentValue?: string | null;\n  currentVersion?: string;\n  lockedVersion?: string;\n  updateType?: UpdateType;\n  mergeConfidenceLevel?: MergeConfidence | undefined;\n  isBump?: boolean;\n  isBreaking?: boolean;\n  sourceUrl?: string | null;\n  categories?: string[];\n  baseBranch?: string;\n  manager?: string;\n  datasource?: string;\n  effectiveDatasource?: string;\n  packageRules?: (PackageRule & PackageRuleInputConfig)[];\n  releaseTimestamp?: Timestamp | null;\n  repository?: string;\n  currentVersionAgeInDays?: number;\n  currentVersionTimestamp?: string;\n  enabled?: boolean;\n  skipReason?: SkipReason;\n  skipStage?: StageName;\n}\n\nexport interface ConfigMigration {\n  configMigration?: boolean;\n}\n\nexport interface MigratedConfig {\n  /**\n   * Indicates whether there was a migration applied to the configuration.\n   *\n   * @returns\n   * `false` if the configuration does not need migrating, and `migratedConfig` can be ignored\n   * `true` if the configuration was migrated, and if so, `migratedConfig` should be used instead of the provided config\n   */\n  isMigrated: boolean;\n  migratedConfig: RenovateConfig;\n}\n\nexport interface MigratedRenovateConfig extends RenovateConfig {\n  endpoints?: HostRule[];\n  pathRules: PackageRule[];\n  packages: PackageRule[];\n\n  node?: RenovateConfig;\n  travis?: RenovateConfig;\n  gradle?: RenovateConfig;\n}\n\nexport interface ManagerConfig extends RenovateConfig {\n  manager: string;\n  categories?: Category[];\n}\n\nexport interface ValidationResult {\n  errors: ValidationMessage[];\n  warnings: ValidationMessage[];\n}\n\nexport interface BumpVersionConfig {\n  bumpType?: string;\n  filePatterns: string[];\n  matchStrings: string[];\n  name?: string;\n}\n\n/**\n * Global Config for specified `toolSettings` options.\n *\n */\nexport interface GlobalToolSettingsOptions {\n  /** An upper limit on what the Java Virtual Machine's maximum memory can be set to. Repositories can specify <= this value */\n  jvmMaxMemory?: number;\n  /** An upper limit on what the Java Virtual Machine's starting memory can be set to. Repositories can specify <= this value */\n  jvmMemory?: number;\n  /** An upper limit on what the Node.JS process' maximum memory can be set to. Repositories can specify <= this value */\n  nodeMaxMemory?: number;\n}\n\n/**\n * Repository config options for `toolSettings` options.\n */\nexport interface RepoToolSettingsOptions {\n  /** The maximum memory the Java Virtual Machine can use. If greater than the Global Self-Hosted configuration setting, it will be set to that limit **/\n  jvmMaxMemory?: number;\n  /** The starting memory the Java Virtual Machine can use. If greater than the Global Self-Hosted configuration setting, it will be set to that limit **/\n  jvmMemory?: number;\n  /** The maximum memory child Node.JS processes can use. If greater than the Global Self-Hosted configuration setting, it will be set to that limit **/\n  nodeMaxMemory?: number;\n}\n"],"mappings":";AA6CA,MAAa,+BAA+B;CAC1C;CACA;CACA;AACF;AA4SA,MAAa,4BAA4B;CACvC;CACA;CACA;CACA;AACF;AA6MA,MAAa,qBAAqB;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF"}
+{"version":3,"file":"types.js","names":[],"sources":["../../lib/config/types.ts"],"sourcesContent":["import type { Category, PlatformId } from '../constants/index.ts';\nimport type { LogLevelRemap } from '../logger/types.ts';\nimport type { ManagerName } from '../manager-list.generated.ts';\nimport type { CustomManager } from '../modules/manager/custom/types.ts';\nimport type {\n  GitUrlOption,\n  RepoSortMethod,\n  SortMethod,\n} from '../modules/platform/types.ts';\nimport type {\n  AutoMergeType,\n  HostRule,\n  Nullish,\n  RangeStrategy,\n  SkipReason,\n} from '../types/index.ts';\nimport type { StageName } from '../types/skip-reason.ts';\nimport type {\n  AdditionalConstraintName,\n  ConstraintName,\n  ToolName,\n} from '../util/exec/types.ts';\nimport type { GitNoVerifyOption } from '../util/git/types.ts';\nimport type { MergeConfidence } from '../util/merge-confidence/types.ts';\nimport type { Timestamp } from '../util/timestamp.ts';\nimport type { ConfigValidationTopic } from './validation-helpers/types.ts';\n\nexport type RenovateConfigStage =\n  'global' | 'inherit' | 'repository' | 'package' | 'branch' | 'pr';\n\nexport type RenovateSplit =\n  'init' | 'onboarding' | 'extract' | 'lookup' | 'update';\n\nexport type RepositoryCacheConfig = 'disabled' | 'enabled' | 'reset';\nexport type RepositoryCacheType = 'local' | (string & {});\nexport type DryRunConfig = 'extract' | 'lookup' | 'full';\nexport type InternalHostAccess = 'allow' | 'warn' | 'block';\nexport type RequiredConfig = 'required' | 'optional' | 'ignored';\n\nexport interface GroupConfig extends Record<string, unknown> {\n  branchName?: string;\n  branchTopic?: string;\n}\n\nexport type RecreateWhen = 'auto' | 'never' | 'always';\nexport const allowedStatusCheckWhenValues = [\n  'always',\n  'never',\n  'failed',\n] as const;\nexport type StatusCheckWhen = (typeof allowedStatusCheckWhenValues)[number];\nexport type PlatformCommitOptions = 'auto' | 'disabled' | 'enabled';\n\nexport type BinarySource = 'docker' | 'global' | 'install' | 'hermit';\n\n// TODO: Proper typings\n/**\n * Any configuration that could be used either top-level in a repository config (or Global, Inherited or Shareable Preset configuration), or:\n *\n * - in a datasource-specific configuration\n * - in a manager-specific configuration\n * - in a Package Rule\n *\n * @see RenovateConfig for the superset of all configuration allowed in a given repository\n *\n */\nexport interface RenovateSharedConfig {\n  $schema?: string;\n  abandonmentThreshold?: Nullish<string>;\n  addLabels?: string[];\n  assignAutomerge?: boolean;\n  autoApprove?: boolean;\n  autoReplaceGlobalMatch?: boolean;\n  automerge?: boolean;\n  automergeSchedule?: string[];\n  automergeStrategy?: MergeStrategy;\n  automergeType?: AutoMergeType;\n  azureWorkItemId?: number;\n  azureWorkItemType?: string;\n  branchName?: string;\n  branchNameStrict?: boolean;\n  branchPrefix?: string;\n  branchPrefixOld?: string;\n  bumpVersions?: BumpVersionConfig[];\n  commitBody?: string;\n  commitBodyTable?: boolean;\n  commitMessage?: string;\n  commitMessageAction?: string;\n  commitMessageExtra?: string;\n  commitMessageLowerCase?: 'auto' | 'never';\n  commitMessagePrefix?: string;\n  commitMessageTopic?: string;\n  commitTrailers?: string[];\n  confidential?: boolean;\n  configValidationError?: boolean;\n  changelogUrl?: string;\n  dependencyDashboardApproval?: boolean;\n  draftPR?: boolean;\n  enabled?: boolean;\n  enabledManagers?: string[];\n  encrypted?: Record<string, string>;\n  extends?: string[];\n  extractVersion?: string;\n  managerFilePatterns?: string[];\n  followTag?: string;\n  force?: RenovateConfig;\n  gitIgnoredAuthors?: string[];\n  group?: GroupConfig;\n  groupName?: string;\n  groupSingleUpdates?: boolean;\n  groupSlug?: string;\n  hashedBranchLength?: number;\n  ignoreDeps?: string[];\n  ignorePaths?: string[];\n  ignoreTests?: boolean;\n  ignoreUnstable?: boolean;\n  includePaths?: string[];\n  internalChecksAsSuccess?: boolean;\n  internalChecksFilter?: 'strict' | 'flexible' | 'none';\n  keepUpdatedLabel?: string;\n  labels?: string[];\n  manager?: string;\n  milestone?: number;\n  minimumReleaseAge?: Nullish<string>;\n  minimumReleaseAgeBuffer?: Nullish<string>;\n  npmrc?: string;\n  npmrcMerge?: boolean;\n  npmToken?: string;\n\n  pinDigests?: boolean;\n  platformAutomerge?: boolean;\n  platformCommit?: PlatformCommitOptions;\n  postUpgradeTasks?: PostUpgradeTasks;\n  prBodyColumns?: string[];\n  prBodyDefinitions?: Record<string, string>;\n  prBodyHeadingDefinitions?: Record<string, string>;\n  prBodyNotes?: string[];\n  prCreation?: 'immediate' | 'not-pending' | 'status-success' | 'approval';\n  prFooter?: string;\n  prHeader?: string;\n  prPriority?: number;\n  prTitle?: string;\n  prTitleStrict?: boolean;\n  pruneBranchAfterAutomerge?: boolean;\n  rangeStrategy?: RangeStrategy;\n  rebaseLabel?: string;\n  rebaseWhen?: string;\n  recreateClosed?: boolean;\n  recreateWhen?: RecreateWhen;\n  repository?: string;\n  repositoryCache?: RepositoryCacheConfig;\n  repositoryCacheType?: RepositoryCacheType;\n  respectLatest?: boolean;\n  rollbackPrs?: boolean;\n  schedule?: string[];\n  semanticCommitScope?: string | null;\n  semanticCommitType?: string;\n  semanticCommits?: 'auto' | 'enabled' | 'disabled';\n  separateMajorMinor?: boolean;\n  separateMinorPatch?: boolean;\n  separateMultipleMajor?: boolean;\n  separateMultipleMinor?: boolean;\n  skipArtifactsUpdate?: boolean;\n  stopUpdatingLabel?: string;\n  suppressNotifications?: string[];\n  timezone?: string;\n  unicodeEmoji?: boolean;\n  updateNotScheduled?: boolean;\n  versioning?: string;\n  versionCompatibility?: string;\n}\n\n/**\n * Contains all options with globalOnly=true && inheritConfigSupport=true\n */\nexport interface GlobalInheritableConfig {\n  bbUseDevelopmentBranch?: boolean;\n  configFileNames?: string[];\n  onboarding?: boolean;\n  onboardingAutoCloseAge?: number;\n  onboardingBranch?: string;\n  onboardingCommitMessage?: string;\n  onboardingConfig?: RenovateConfig;\n  onboardingConfigFileName?: string;\n  onboardingNoDeps?: 'auto' | 'enabled' | 'disabled';\n  onboardingPrTitle?: string;\n  requireConfig?: RequiredConfig;\n}\n\n// Config options used only within the global worker\n// The below should contain config options where stage=global\n/** @deprecated use `RepoGlobalConfig` instead **/\nexport interface GlobalOnlyConfigLegacy {\n  autodiscover?: boolean;\n  autodiscoverFilter?: string[] | string;\n  autodiscoverNamespaces?: string[];\n  autodiscoverProjects?: string[];\n  autodiscoverTopics?: string[];\n  baseDir?: string;\n  cacheDir?: string;\n  containerbaseDir?: string;\n  detectHostRulesFromEnv?: boolean;\n  dockerCliOptions?: string;\n  endpoint?: string;\n  exitCodeForErrors?: boolean;\n  forceCli?: boolean;\n  gitNoVerify?: GitNoVerifyOption[];\n  gitPrivateKey?: string;\n  gitPrivateKeyPassphrase?: string;\n  globalExtends?: string[];\n  mergeConfidenceDatasources?: string[];\n  mergeConfidenceEndpoint?: string;\n  platform?: PlatformId;\n  processEnv?: Record<string, string>;\n  prCommitsPerRunLimit?: number;\n  privateKey?: string;\n  privateKeyOld?: string;\n  privateKeyPath?: string;\n  privateKeyPathOld?: string;\n  redisPrefix?: string;\n  redisUrl?: string;\n  repositories?: RenovateRepository[];\n  useCloudMetadataServices?: boolean;\n  deleteConfigFile?: boolean;\n  deleteAdditionalConfigFile?: boolean;\n}\n\n/**\n * Any global-only configuration set by self-hosted administrators.\n *\n * Used within the repository worker.\n *\n * Should only contain config options where globalOnly=true.\n */\nexport interface RepoGlobalConfig extends GlobalInheritableConfig {\n  allowedCommands?: string[];\n  allowCustomCrateGitRegistries?: boolean;\n  allowPlugins?: boolean;\n  allowScripts?: boolean;\n  allowShellExecutorForPostUpgradeCommands?: boolean;\n  allowedEnv?: string[];\n  allowedHeaders?: string[];\n  binarySource?: BinarySource;\n  cacheDir?: string;\n  cacheHardTtlMinutes?: number;\n  cacheTtlOverride?: Record<string, number>;\n  checkedBranches?: string[];\n  containerbaseDir?: string;\n  customEnvVariables?: Record<string, string>;\n  dockerChildPrefix?: string;\n  dockerCliOptions?: string;\n  dockerSidecarImage?: string;\n  dockerUser?: string;\n  dryRun?: DryRunConfig;\n  encryptedWarning?: string;\n  endpoint?: string;\n  executionTimeout?: number;\n  exposeAllEnv?: boolean;\n  gitTimeout?: number;\n  githubTokenWarn?: boolean;\n  includeMirrors?: boolean;\n  inheritConfigTrusted?: boolean;\n  internalHostAccess?: InternalHostAccess;\n  migratePresets?: Record<string, string>;\n  platform?: PlatformId;\n  prCacheSyncMaxPages?: number;\n  presetCachePersistence?: boolean;\n  httpCacheTtlDays?: number;\n  autodiscoverRepoSort?: RepoSortMethod;\n  autodiscoverRepoOrder?: SortMethod;\n  userAgent?: string;\n  dockerMaxPages?: number;\n  s3Endpoint?: string;\n  s3PathStyle?: boolean;\n  cachePrivatePackages?: boolean;\n  repositoryCacheForceLocal?: boolean;\n  configFileNames?: string[];\n  ignorePrAuthor?: boolean;\n  allowedUnsafeExecutions?: AllowedUnsafeExecution[];\n  onboardingAutoCloseAge?: number;\n  productLinks?: Record<string, string>;\n  rebaseAllOpenBranches?: boolean;\n  toolSettings?: GlobalToolSettingsOptions;\n}\n\n/**\n * Internal variables which are referenced from `GlobalConfig`, but are *not* user-configurable options.\n */\nexport interface InternalGlobalConfigOptions {\n  localDir?: string;\n}\n\n/**\n * Those options are global only but still passed into the repository worker config.\n *\n * @deprecated https://github.com/renovatebot/renovate/issues/39693\n */\nexport interface LegacyAdminConfig {\n  baseDir?: string;\n  localDir?: string;\n\n  logContext?: string;\n\n  onboarding?: boolean;\n  onboardingBranch?: string;\n  onboardingNoDeps?: 'auto' | 'enabled' | 'disabled';\n  onboardingRebaseCheckbox?: boolean;\n  onboardingConfig?: RenovateConfig;\n  onboardingConfigFileName?: string;\n\n  optimizeForDisabled?: boolean;\n\n  persistRepoData?: boolean;\n\n  prCommitsPerRunLimit?: number;\n\n  requireConfig?: RequiredConfig;\n\n  useCloudMetadataServices?: boolean;\n\n  writeDiscoveredRepos?: string;\n}\n\nexport type ExecutionMode = 'branch' | 'update';\n\nexport interface PostUpgradeTasks {\n  commands?: string[];\n  workingDirTemplate?: string;\n  dataFileTemplate?: string;\n  fileFilters?: string[];\n  executionMode: ExecutionMode;\n  installTools?: Partial<Record<ToolName, Record<never, never>>>;\n}\n\nexport type UpdateConfig<\n  T extends RenovateSharedConfig = RenovateSharedConfig,\n> = Partial<Record<UpdateType, T | null>>;\n\nexport type RenovateRepositoryEntry = AllConfig & {\n  repository: string;\n};\n\nexport type RenovateRepository = string | RenovateRepositoryEntry;\n\nexport type UseBaseBranchConfigType = 'merge' | 'none';\nexport type ConstraintsFilter = 'strict' | 'none';\nexport type MinimumReleaseAgeBehaviour =\n  'timestamp-required' | 'timestamp-optional';\n\nexport const allowedStatusCheckStrings = [\n  'minimumReleaseAge',\n  'mergeConfidence',\n  'configValidation',\n  'artifactError',\n] as const;\nexport type StatusCheckKey = (typeof allowedStatusCheckStrings)[number];\ntype UserEnv = Record<string, string>;\n\n/**\n * Computed properties, for internal use only\n */\nexport interface RenovateInternalConfig {\n  /** computed base branch from patterns - for internal use only */\n  baseBranches?: string[];\n  currentCompatibility?: string;\n  datasource?: string;\n  hasBaseBranches?: boolean;\n  isFork?: boolean;\n  isVulnerabilityAlert?: boolean;\n\n  /** What is this used for? */\n  remediations?: unknown;\n  /** What is this used for? */\n  vulnerabilityAlertsOnly?: boolean;\n}\n\n// TODO: Proper typings\n/**\n * Configuration that could be used either top-level in a repository config (or Global, Inherited or Shareable Preset configuration).\n *\n * This is a superset of any configuration that a Renovate user (not self-hosted administrator) can set.\n */\nexport interface RenovateConfig\n  extends\n    LegacyAdminConfig,\n    RenovateSharedConfig,\n    UpdateConfig<PackageRule>,\n    AssigneesAndReviewersConfig,\n    ConfigMigration,\n    RenovateInternalConfig {\n  s3Endpoint?: string;\n  s3PathStyle?: boolean;\n  reportFormatting?: boolean;\n  reportPath?: string;\n  reportType?: 'logging' | 'file' | 's3' | null;\n  depName?: string;\n  /** user configurable base branch patterns*/\n  baseBranchPatterns?: string[];\n  useBaseBranchConfig?: UseBaseBranchConfigType;\n  baseBranch?: string;\n  defaultBranch?: string;\n  branchList?: string[];\n  cloneSubmodules?: boolean;\n  cloneSubmodulesFilter?: string[];\n  description?: string | string[];\n  overrideDescription?: string | string[];\n  detectGlobalManagerConfig?: boolean;\n  errors?: ValidationMessage[];\n  forkModeDisallowMaintainerEdits?: boolean;\n  forkProcessing?: 'auto' | 'enabled' | 'disabled';\n  forkToken?: string;\n\n  gitAuthor?: string;\n\n  hostRules?: HostRule[];\n\n  inheritConfig?: boolean;\n  inheritConfigFileName?: string;\n  inheritConfigRepoName?: string;\n  inheritConfigStrict?: boolean;\n\n  ignorePresets?: string[];\n\n  fileList?: string[];\n  configWarningReuseIssue?: boolean;\n  dependencyDashboard?: boolean;\n  dependencyDashboardAutoclose?: boolean;\n  dependencyDashboardChecks?: Record<string, string>;\n  dependencyDashboardIssue?: number;\n  dependencyDashboardTitle?: string;\n  dependencyDashboardHeader?: string;\n  dependencyDashboardFooter?: string;\n  dependencyDashboardLabels?: string[];\n  dependencyDashboardOSVVulnerabilitySummary?: 'none' | 'all' | 'unresolved';\n  dependencyDashboardReportAbandonment?: boolean;\n  mode?: 'silent' | 'full';\n  packageFile?: string;\n  packageRules?: PackageRule[];\n  postUpdateOptions?: string[];\n  branchConcurrentLimit?: number | null;\n  parentOrg?: string;\n  prConcurrentLimit?: number;\n  commitHourlyLimit?: number;\n  prHourlyLimit?: number;\n\n  printConfig?: boolean;\n\n  pruneStaleBranches?: boolean;\n\n  defaultRegistryUrls?: string[];\n  registryUrls?: string[] | null;\n  registryAliases?: Record<string, string>;\n\n  /**\n   * What is this used for?\n   * @deprecated\n   */\n  renovateJsonPresent?: boolean;\n\n  repoIsOnboarded?: boolean;\n  repoIsActivated?: boolean;\n\n  topLevelOrg?: string;\n  updateInternalDeps?: boolean;\n  updateType?: UpdateType;\n\n  warnings?: ValidationMessage[];\n  vulnerabilityAlerts?: RenovateSharedConfig;\n  osvVulnerabilityAlerts?: boolean;\n  vulnerabilitySeverity?: string;\n  customManagers?: CustomManager[];\n  customDatasources?: Record<string, CustomDatasourceConfig>;\n\n  fetchChangeLogs?: FetchChangeLogsOptions;\n  secrets?: Record<string, string>;\n  variables?: Record<string, string>;\n\n  constraints?: Partial<Record<ConstraintName, string>>;\n  /**\n   * Any specific overrides for the versioning for the `AdditionalConstraintName`s.\n   */\n  constraintsVersioning?: Partial<Record<AdditionalConstraintName, string>>;\n  skipInstalls?: boolean | null;\n\n  constraintsFiltering?: ConstraintsFilter;\n\n  customizeDashboard?: Record<string, string>;\n\n  statusCheckNames?: Record<StatusCheckKey, string | null>;\n  statusCheckWhen?: Partial<Record<StatusCheckKey, StatusCheckWhen>>;\n  /**\n   * User configured environment variables that Renovate uses when executing package manager commands\n   */\n  env?: UserEnv;\n  logLevelRemap?: LogLevelRemap[];\n\n  branchTopic?: string;\n  additionalBranchPrefix?: string;\n  sharedVariableName?: string;\n  minimumGroupSize?: number;\n  configFileNames?: string[];\n  minimumReleaseAgeBehaviour?: MinimumReleaseAgeBehaviour;\n  toolSettings?: RepoToolSettingsOptions;\n}\n\nconst CustomDatasourceFormats = [\n  'html',\n  'json',\n  'plain',\n  'toml',\n  'yaml',\n] as const;\nexport type CustomDatasourceFormats = (typeof CustomDatasourceFormats)[number];\n\nexport interface CustomDatasourceConfig {\n  defaultRegistryUrlTemplate?: string;\n  format?: CustomDatasourceFormats;\n  transformTemplates?: string[];\n}\n\n/**\n * The superset of all configuration that a self-hosted administrator can set, alongside all repository-level configuration.\n *\n */\nexport interface AllConfig\n  extends RenovateConfig, GlobalOnlyConfigLegacy, RepoGlobalConfig {\n  gitUrl?: GitUrlOption;\n  password?: string;\n  token?: string;\n  username?: string;\n}\n\nexport interface AssigneesAndReviewersConfig {\n  assigneesFromCodeOwners?: boolean;\n  expandCodeOwnersGroups?: boolean;\n  assignees?: string[];\n  assigneesSampleSize?: number;\n  ignoreReviewers?: string[];\n  reviewersFromCodeOwners?: boolean;\n  reviewers?: string[];\n  reviewersSampleSize?: number;\n  additionalReviewers?: string[];\n  filterUnavailableUsers?: boolean;\n}\n\nexport type UpdateType =\n  | 'major'\n  | 'minor'\n  | 'patch'\n  | 'pin'\n  | 'digest'\n  | 'pinDigest'\n  | 'lockFileMaintenance'\n  | 'lockfileUpdate'\n  | 'rollback'\n  | 'bump'\n  | 'replacement';\n\n// These are the update types which can have configuration\nexport const UpdateTypesOptions = [\n  'major',\n  'minor',\n  'patch',\n  'pin',\n  'digest',\n  'pinDigest',\n  'lockFileMaintenance',\n  'rollback',\n  'replacement',\n] as const;\n\nexport type UpdateTypeOptions = (typeof UpdateTypesOptions)[number];\n\nexport type FetchChangeLogsOptions = 'off' | 'branch' | 'pr';\n\nexport type MatchStringsStrategy = 'any' | 'recursive' | 'combination';\n\nexport type MergeStrategy =\n  | 'auto'\n  | 'fast-forward'\n  | 'merge-commit'\n  | 'rebase'\n  | 'rebase-merge'\n  | 'squash';\n\n// This list should be added to as any new unsafe execution commands should be permitted\nexport type AllowedUnsafeExecution =\n  'bazelModDeps' | 'goGenerate' | 'gradleWrapper' | 'mise' | 'pixi';\n\n// TODO: Proper typings\nexport interface PackageRule\n  extends RenovateSharedConfig, RenovateInternalConfig, UpdateConfig {\n  allowedVersions?: string;\n  description?: string | string[];\n  matchBaseBranches?: string[];\n  matchCategories?: string[];\n  matchConfidence?: MergeConfidence[];\n  matchCurrentAge?: string;\n  matchCurrentValue?: string;\n  matchCurrentVersion?: string;\n  matchDatasources?: string[];\n  matchDepNames?: string[];\n  matchDepTypes?: string[];\n  matchFileNames?: string[];\n  matchIsBreaking?: boolean;\n  matchManagers?: string[];\n  matchNewValue?: string;\n  matchPackageNames?: string[];\n  matchRepositories?: string[];\n  matchSourceUrls?: string[];\n  matchRegistryUrls?: string[];\n  matchUpdateTypes?: UpdateType[];\n  matchJsonata?: string[];\n  overrideDatasource?: string;\n  overrideDepName?: string;\n  overridePackageName?: string;\n  registryUrls?: string[] | null;\n  replacementName?: string;\n  replacementVersion?: string;\n  sourceUrl?: string;\n  sourceDirectory?: string;\n  vulnerabilitySeverity?: string;\n  vulnerabilityFixVersion?: string;\n}\n\nexport interface ValidationMessage {\n  // Topic is either the known list of topics, or a dynamically generated one\n  topic: ConfigValidationTopic | (string & {});\n  message: string;\n}\n\n/**\n * The kinds of place a config option can be used, which expand to the {@link AllowedParents} they cover.\n *\n * These are for the places which can't reasonably be listed, like every manager or every update type, so an option which is only valid in a specific object - like `hostRules` - should use `parents` instead.\n */\nexport const configScopes = [\n  /** the top level of a repository, global, inherited or preset config */\n  'repo',\n  /** a `packageRules` entry */\n  'packageRule',\n  /** a manager's configuration object, like `npm` */\n  'manager',\n  /** an update type's configuration object, like `major` */\n  'updateType',\n] as const;\n\nexport type ConfigScope = (typeof configScopes)[number];\n\nexport type AllowedParents =\n  | '.'\n  | 'bumpVersions'\n  | 'customDatasources'\n  | 'customManagers'\n  | 'hostRules'\n  | 'logLevelRemap'\n  | 'packageRules'\n  | 'postUpgradeTasks'\n  | 'vulnerabilityAlerts'\n  | 'toolSettings'\n  | ManagerName\n  | UpdateTypeOptions;\nexport interface RenovateOptionBase {\n  /**\n   * If true, the option can only be configured by people with access to the Renovate instance.\n   * Furthermore, the option should be documented in docs/usage/self-hosted-configuration.md.\n   */\n  globalOnly?: boolean;\n\n  /**\n   * If true, this option **MUST** be checked at the trust boundary: after resolving the full config that sets it, but **before** the value is applied.\n   *\n   * This is in addition to any existing config validation, and ensures that these options are re-validated due to their sensitive nature.\n   *\n   * A failure of that check **must** lead to a {@link ConfigValidationTopic.Security} error (which is then a full config validation error), stopping the Renovate run.\n   *\n   * After this check has been performed, additional filtering (for defence in depth) could be performed, but may not have an indication of what is repo- or preset-config vs global self-hosted config.\n   */\n  requiresCheckAtTrustBoundary?: boolean;\n\n  inheritConfigSupport?: boolean;\n\n  allowedValues?: string[];\n\n  allowString?: boolean;\n\n  cli?: boolean;\n\n  description: string;\n\n  env?: false | string;\n\n  /**\n   * Do not validate object children\n   */\n  freeChoice?: boolean;\n\n  mergeable?: boolean;\n\n  autogenerated?: boolean;\n\n  name: string;\n\n  parents?: AllowedParents[];\n\n  /**\n   * The kinds of place this option can be used, which are expanded alongside any `parents`.\n   *\n   * An option which declares neither is treated as valid anywhere, which is what we're working towards removing in #43020.\n   */\n  scopes?: ConfigScope[];\n\n  stage?: RenovateConfigStage;\n\n  experimental?: boolean;\n\n  experimentalDescription?: string;\n\n  experimentalIssues?: number[];\n\n  advancedUse?: boolean;\n\n  /**\n   * This is used to add a deprecation message in the docs\n   */\n  deprecationMsg?: string;\n\n  /**\n   * For internal use only: add it to any config option that supports regex or glob matching\n   */\n  patternMatch?: boolean;\n\n  /**\n   * For internal use only: add it to any config option of type integer that supports negative integers\n   */\n  allowNegative?: boolean;\n\n  /**\n   * Managers which support this option, leave undefined if all managers support it.\n   */\n  supportedManagers?: string[];\n\n  /**\n   * Platforms which support this option, leave undefined if all platforms support it.\n   */\n  supportedPlatforms?: PlatformId[];\n\n  /**\n   * Conditions that must be met for this option to be required.\n   */\n  requiredIf?: RenovateRequiredOption[];\n\n  /**\n   * If true, the option's value supports Renovate templating.\n   * @see https://docs.renovatebot.com/templates/\n   */\n  supportsTemplating?: boolean;\n}\n\nexport interface RenovateRequiredOption {\n  siblingProperties: { property: string; value: string }[];\n}\n\nexport interface RenovateArrayOption<\n  T extends string | number | Record<string, unknown> = Record<string, unknown>,\n> extends RenovateOptionBase {\n  default?: T[] | null;\n  mergeable?: boolean;\n  type: 'array';\n  subType?: 'string' | 'object' | 'number';\n}\n\nexport interface RenovateStringArrayOption extends RenovateArrayOption<string> {\n  format?: 'regex';\n  subType: 'string';\n}\n\nexport interface RenovateNumberArrayOption extends RenovateArrayOption<number> {\n  subType: 'number';\n}\n\nexport interface RenovateBooleanOption extends RenovateOptionBase {\n  default?: boolean | null;\n  type: 'boolean';\n}\n\nexport interface RenovateIntegerOption extends RenovateOptionBase {\n  default?: number | null;\n  type: 'integer';\n}\n\nexport interface RenovateStringOption extends RenovateOptionBase {\n  default?: string | null;\n  format?: 'regex';\n\n  // Not used\n  replaceLineReturns?: boolean;\n  type: 'string';\n}\n\nexport interface RenovateObjectOption extends RenovateOptionBase {\n  default?: any;\n  additionalProperties?: Record<string, unknown> | boolean;\n\n  /**\n   * The keys the object accepts, for an option whose keys are a known set rather than the user's choice.\n   */\n  properties?: Record<string, unknown>;\n  mergeable?: boolean;\n  type: 'object';\n}\n\nexport type RenovateOptions =\n  | RenovateStringOption\n  | RenovateNumberArrayOption\n  | RenovateStringArrayOption\n  | RenovateIntegerOption\n  | RenovateBooleanOption\n  | RenovateArrayOption\n  | RenovateObjectOption;\n\nexport interface PackageRuleInputConfig extends RenovateConfig {\n  versioning?: string;\n  packageFile?: string;\n  lockFiles?: string[];\n  depType?: string;\n  depTypes?: string[];\n  depName?: string;\n  packageName?: string | null;\n  newValue?: string | null;\n  currentValue?: string | null;\n  currentVersion?: string;\n  lockedVersion?: string;\n  updateType?: UpdateType;\n  mergeConfidenceLevel?: MergeConfidence | undefined;\n  isBump?: boolean;\n  isBreaking?: boolean;\n  sourceUrl?: string | null;\n  categories?: string[];\n  baseBranch?: string;\n  manager?: string;\n  datasource?: string;\n  effectiveDatasource?: string;\n  packageRules?: (PackageRule & PackageRuleInputConfig)[];\n  releaseTimestamp?: Timestamp | null;\n  repository?: string;\n  currentVersionAgeInDays?: number;\n  currentVersionTimestamp?: string;\n  enabled?: boolean;\n  skipReason?: SkipReason;\n  skipStage?: StageName;\n}\n\nexport interface ConfigMigration {\n  configMigration?: boolean;\n}\n\nexport interface MigratedConfig {\n  /**\n   * Indicates whether there was a migration applied to the configuration.\n   *\n   * @returns\n   * `false` if the configuration does not need migrating, and `migratedConfig` can be ignored\n   * `true` if the configuration was migrated, and if so, `migratedConfig` should be used instead of the provided config\n   */\n  isMigrated: boolean;\n  migratedConfig: RenovateConfig;\n}\n\nexport interface MigratedRenovateConfig extends RenovateConfig {\n  endpoints?: HostRule[];\n  pathRules: PackageRule[];\n  packages: PackageRule[];\n\n  node?: RenovateConfig;\n  travis?: RenovateConfig;\n  gradle?: RenovateConfig;\n}\n\nexport interface ManagerConfig extends RenovateConfig {\n  manager: string;\n  categories?: Category[];\n}\n\nexport interface ValidationResult {\n  errors: ValidationMessage[];\n  warnings: ValidationMessage[];\n}\n\nexport interface BumpVersionConfig {\n  bumpType?: string;\n  filePatterns: string[];\n  matchStrings: string[];\n  name?: string;\n}\n\n/**\n * Global Config for specified `toolSettings` options.\n *\n */\nexport interface GlobalToolSettingsOptions {\n  /** An upper limit on what the Java Virtual Machine's maximum memory can be set to. Repositories can specify <= this value */\n  jvmMaxMemory?: number;\n  /** An upper limit on what the Java Virtual Machine's starting memory can be set to. Repositories can specify <= this value */\n  jvmMemory?: number;\n  /** An upper limit on what the Node.JS process' maximum memory can be set to. Repositories can specify <= this value */\n  nodeMaxMemory?: number;\n}\n\n/**\n * Repository config options for `toolSettings` options.\n */\nexport interface RepoToolSettingsOptions {\n  /** The maximum memory the Java Virtual Machine can use. If greater than the Global Self-Hosted configuration setting, it will be set to that limit **/\n  jvmMaxMemory?: number;\n  /** The starting memory the Java Virtual Machine can use. If greater than the Global Self-Hosted configuration setting, it will be set to that limit **/\n  jvmMemory?: number;\n  /** The maximum memory child Node.JS processes can use. If greater than the Global Self-Hosted configuration setting, it will be set to that limit **/\n  nodeMaxMemory?: number;\n}\n"],"mappings":";AA6CA,MAAa,+BAA+B;CAC1C;CACA;CACA;AACF;AA4SA,MAAa,4BAA4B;CACvC;CACA;CACA;CACA;AACF;AA6MA,MAAa,qBAAqB;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;;AAmEA,MAAa,eAAe;CAE1B;CAEA;CAEA;CAEA;AACF"}

package/dist/config/validation.js

@@ -6,6 +6,8 @@ import { anyMatchRegexOrGlobList, getRegexPredicate, isRegexMatch, matchRegexOrG
 import { logger } from "../logger/index.js";
 import { clone } from "../util/clone.js";
 import { AllManagersListLiteral, CustomManagersListLiteral } from "../manager-list.generated.js";
+import { getToolConfig } from "../util/exec/containerbase.js";
+import { isConstraintName, isToolName } from "../util/exec/types.js";
 import { AllVersioningsListLiteral } from "../versioning-list.generated.js";
 import { supportedDatasources } from "./presets/internal/merge-confidence.preset.js";
 import { allowedStatusCheckStrings, allowedStatusCheckWhenValues } from "./types.js";
@@ -16,11 +18,10 @@ import { migrateConfig } from "./migration.js";
 import { validate } from "../util/template/index.js";
 import { isCustomManager } from "../modules/manager/custom/index.js";
 import { packageCacheNamespaces } from "../util/cache/package/namespaces.js";
-import { getToolConfig } from "../util/exec/containerbase.js";
-import { isConstraintName, isToolName } from "../util/exec/types.js";
 import { isValidCommitTrailer } from "../util/git/commit-trailers.js";
 import { getExpression } from "../util/jsonata.js";
 import { hasValidSchedule, hasValidTimezone } from "../workers/repository/update/branch/schedule.js";
+import { describeAllowedLocations, getAllowedParents } from "./options/scopes.js";
 import { isRelativePresetReference, parsePreset } from "./presets/parse.js";
 import { resolveConfigPresets } from "./presets/index.js";
 import { ConfigValidationTopic } from "./validation-helpers/types.js";
@@ -33,6 +34,7 @@ const options = getOptions();
 let optionsInitialized = false;
 let optionTypes;
 let optionParents;
+let optionLocations;
 let optionGlobals;
 let optionInherits;
 let optionRegexOrGlob;
@@ -90,6 +92,7 @@ function isGlobalOption(key) {
 function initOptions() {
 	if (optionsInitialized) return;
 	optionParents = {};
+	optionLocations = {};
 	optionInherits = /* @__PURE__ */ new Set();
 	optionTypes = {};
 	optionRegexOrGlob = /* @__PURE__ */ new Set();
@@ -98,7 +101,11 @@ function initOptions() {
 	optionSupportsTemplating = /* @__PURE__ */ new Set();
 	for (const option of options) {
 		optionTypes[option.name] = option.type;
-		if (option.parents) optionParents[option.name] = option.parents;
+		const parents = getAllowedParents(option);
+		if (parents) {
+			optionParents[option.name] = parents;
+			optionLocations[option.name] = describeAllowedLocations(option);
+		}
 		if (option.inheritConfigSupport) optionInherits.add(option.name);
 		if (option.patternMatch) optionRegexOrGlob.add(option.name);
 		if (option.globalOnly) optionGlobals.add(option.name);
@@ -218,7 +225,7 @@ async function validateConfig(configType, config, isPreset, parentPath) {
 				}
 				const parentName = parentPath && repoEntryRe.test(parentPath) ? "." : getParentName(parentPath);
 				if (!isPreset && parentName && optionParents[key] && !optionParents[key].includes(parentName)) {
-					const message = `"${key}" can't be used in "${parentName}". Allowed objects: ${optionParents[key]?.toSorted().join(", ")}.`;
+					const message = `"${key}" can't be used ${parentName === "." ? "at the top level of a config" : `in "${parentName}"`}, as it can only be used ${optionLocations[key]}.`;
 					warnings.push({
 						topic: `${parentPath ? `${parentPath}.` : ""}${key}`,
 						message