renovate 44.151.4 → 44.152.0

package/dist/config/options/index.js

@@ -1,11 +1,56 @@
 import { PLATFORM_HOST_TYPES } from "../../constants/platforms.js";
 import { managerDefaultConfigs } from "../../manager-default-configs.generated.js";
-import { AllManagersListLiteral } from "../../manager-list.generated.js";
+import { getSupportedToolNames } from "../../util/exec/containerbase.js";
+import { additionalConstraintDefinitions, toolDefinitionDocumentation } from "../../util/exec/types.js";
 import { AllVersioningsListLiteral } from "../../versioning-list.generated.js";
 import { supportedDatasources } from "../presets/internal/merge-confidence.preset.js";
-import { UpdateTypesOptions, allowedStatusCheckWhenValues } from "../types.js";
+import { allowedStatusCheckStrings, allowedStatusCheckWhenValues } from "../types.js";
+import { lookupScopes, sharedScopes } from "./scopes.js";
 import { isArray, isObject } from "@sindresorhus/is";
 //#region lib/config/options/index.ts
+/**
+* The constraints which a Containerbase tool defines, as the keys of an object option.
+*/
+function toolConstraintProperties() {
+	const properties = {};
+	for (const toolName of getSupportedToolNames()) {
+		const description = toolDefinitionDocumentation.find((t) => t.name === toolName)?.description ?? "";
+		const base = `A constraint for the \`${toolName}\` Containerbase tool`;
+		properties[toolName] = {
+			type: "string",
+			description: description ? `${base}. ${description}` : base
+		};
+	}
+	return properties;
+}
+/**
+* The constraints which aren't a Containerbase tool, as the keys of an object option.
+*/
+function additionalConstraintProperties() {
+	const properties = {};
+	for (const { name, description } of additionalConstraintDefinitions) properties[name] = {
+		type: "string",
+		/* v8 ignore next -- every current `additionalConstraintDefinitions` entry has a description, but the type allows one to be added without one */
+		description: description ?? `A constraint for \`${name}\``
+	};
+	return properties;
+}
+/**
+* The Containerbase tools which can be installed, as the keys of an object option.
+*/
+function installToolProperties() {
+	const properties = {};
+	for (const toolName of getSupportedToolNames()) {
+		const description = toolDefinitionDocumentation.find((t) => t.name === toolName)?.description ?? "";
+		const base = `A constraint for the \`${toolName}\` Containerbase tool`;
+		properties[toolName] = {
+			type: "object",
+			description: description ? `${base}. ${description}` : base,
+			additionalProperties: false
+		};
+	}
+	return properties;
+}
 const options = [
 	{
 		name: "mode",
@@ -230,11 +275,8 @@ const options = [
 		type: "object",
 		parents: ["postUpgradeTasks"],
 		default: {},
-		additionalProperties: {
-			type: "object",
-			properties: {},
-			additionalProperties: false
-		},
+		properties: installToolProperties(),
+		additionalProperties: false,
 		mergeable: false,
 		freeChoice: true,
 		cli: false
@@ -327,6 +369,7 @@ const options = [
 	},
 	{
 		name: "configMigration",
+		scopes: ["repo"],
 		description: "Enable this to get config migration PRs when needed.",
 		stage: "repository",
 		type: "boolean",
@@ -375,7 +418,8 @@ const options = [
 		type: "object",
 		mergeable: true,
 		advancedUse: true,
-		additionalProperties: { type: ["string", "null"] },
+		properties: Object.fromEntries(allowedStatusCheckStrings.map((statusCheck) => [statusCheck, { type: ["string", "null"] }])),
+		additionalProperties: false,
 		default: {
 			artifactError: "renovate/artifacts",
 			configValidation: "renovate/config-validation",
@@ -389,10 +433,11 @@ const options = [
 		type: "object",
 		mergeable: true,
 		advancedUse: true,
-		additionalProperties: {
+		properties: Object.fromEntries(allowedStatusCheckStrings.map((statusCheck) => [statusCheck, {
 			type: "string",
 			enum: [...allowedStatusCheckWhenValues]
-		},
+		}])),
+		additionalProperties: false,
 		default: {
 			artifactError: "failed",
 			configValidation: "always",
@@ -473,14 +518,13 @@ const options = [
 		stage: "package",
 		type: "boolean",
 		default: true,
-		parents: [
-			".",
-			"packageRules",
-			...AllManagersListLiteral,
-			"hostRules",
-			"vulnerabilityAlerts",
-			...UpdateTypesOptions
-		]
+		scopes: [
+			"repo",
+			"packageRule",
+			"manager",
+			"updateType"
+		],
+		parents: ["hostRules", "vulnerabilityAlerts"]
 	},
 	{
 		name: "constraintsFiltering",
@@ -567,6 +611,7 @@ const options = [
 	},
 	{
 		name: "draftPR",
+		scopes: sharedScopes,
 		description: "If set to `true` then Renovate creates draft PRs, instead of normal status PRs.",
 		type: "boolean",
 		default: false,
@@ -594,6 +639,7 @@ const options = [
 	},
 	{
 		name: "printConfig",
+		scopes: ["repo"],
 		description: "If enabled, Renovate logs the fully resolved config for each repository, plus the fully resolved presets.",
 		type: "boolean",
 		default: false
@@ -667,6 +713,7 @@ const options = [
 		experimental: true,
 		experimentalIssues: [23286],
 		default: {},
+		additionalProperties: { type: "object" },
 		mergeable: true
 	},
 	{
@@ -688,7 +735,7 @@ const options = [
 		name: "dockerSidecarImage",
 		description: "Change this value to override the default Renovate sidecar image.",
 		type: "string",
-		default: "ghcr.io/renovatebot/base-image:13.119.2",
+		default: "ghcr.io/renovatebot/base-image:13.120.0",
 		globalOnly: true,
 		deprecationMsg: "The usage of `binarySource=docker` is deprecated, and will be removed in the future"
 	},
@@ -758,6 +805,7 @@ const options = [
 	},
 	{
 		name: "forkProcessing",
+		scopes: ["repo"],
 		description: "Whether to process forked repositories. By default, all forked repositories are skipped when in `autodiscover` mode.",
 		stage: "repository",
 		type: "string",
@@ -880,24 +928,28 @@ const options = [
 	},
 	{
 		name: "dependencyDashboard",
+		scopes: ["repo"],
 		description: "Whether to create a \"Dependency Dashboard\" issue in the repository.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "dependencyDashboardApproval",
+		scopes: sharedScopes,
 		description: "Controls if updates need manual approval from the Dependency Dashboard issue before PRs are created.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "dependencyDashboardAutoclose",
+		scopes: ["repo"],
 		description: "Set to `true` to let Renovate close the Dependency Dashboard issue if there are no more updates.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "dependencyDashboardTitle",
+		scopes: ["repo"],
 		description: "Title for the Dependency Dashboard issue.",
 		type: "string",
 		default: `Dependency Dashboard`
@@ -912,6 +964,7 @@ const options = [
 	},
 	{
 		name: "dependencyDashboardHeader",
+		scopes: ["repo"],
 		description: "Any text added here will be placed first in the Dependency Dashboard issue body.",
 		type: "string",
 		default: "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.",
@@ -919,12 +972,14 @@ const options = [
 	},
 	{
 		name: "dependencyDashboardFooter",
+		scopes: ["repo"],
 		description: "Any text added here will be placed last in the Dependency Dashboard issue body, with a divider separator before it.",
 		type: "string",
 		supportsTemplating: true
 	},
 	{
 		name: "dependencyDashboardLabels",
+		scopes: ["repo"],
 		description: "These labels will always be applied on the Dependency Dashboard issue, even when they have been removed manually.",
 		type: "array",
 		subType: "string",
@@ -932,6 +987,7 @@ const options = [
 	},
 	{
 		name: "dependencyDashboardOSVVulnerabilitySummary",
+		scopes: ["repo"],
 		description: "Control if the Dependency Dashboard issue lists CVEs supplied by [osv.dev](https://osv.dev).",
 		type: "string",
 		allowedValues: [
@@ -944,6 +1000,7 @@ const options = [
 	},
 	{
 		name: "configWarningReuseIssue",
+		scopes: ["repo"],
 		description: "Set this to `true` to make Renovate reuse/reopen an existing closed Config Warning issue, instead of opening a new one each time.",
 		type: "boolean",
 		default: false
@@ -1236,6 +1293,7 @@ const options = [
 	},
 	{
 		name: "baseBranchPatterns",
+		scopes: ["repo"],
 		description: "List of one or more custom base branches defined as exact strings and/or via regex expressions.",
 		type: "array",
 		subType: "string",
@@ -1244,6 +1302,7 @@ const options = [
 	},
 	{
 		name: "useBaseBranchConfig",
+		scopes: ["repo"],
 		description: "Whether to read configuration from base branches instead of only the default branch.",
 		type: "string",
 		allowedValues: ["merge", "none"],
@@ -1400,6 +1459,7 @@ const options = [
 	},
 	{
 		name: "extractVersion",
+		scopes: lookupScopes,
 		description: "A regex (`re2`) to extract a version from a datasource's raw version string.",
 		type: "string",
 		format: "regex",
@@ -1408,6 +1468,7 @@ const options = [
 	},
 	{
 		name: "versionCompatibility",
+		scopes: lookupScopes,
 		description: "A regex (`re2`) with named capture groups to show how version and compatibility are split from a raw version string.",
 		type: "string",
 		format: "regex",
@@ -1416,6 +1477,7 @@ const options = [
 	},
 	{
 		name: "versioning",
+		scopes: lookupScopes,
 		description: "Versioning to use for filtering and comparisons.",
 		type: "string",
 		allowedValues: [...AllVersioningsListLiteral],
@@ -1424,6 +1486,7 @@ const options = [
 	},
 	{
 		name: "azureWorkItemId",
+		scopes: sharedScopes,
 		description: "The id of an existing work item on Azure Boards to link to each PR.",
 		type: "integer",
 		default: 0,
@@ -1438,6 +1501,7 @@ const options = [
 	},
 	{
 		name: "autoApprove",
+		scopes: sharedScopes,
 		description: "Set to `true` to automatically approve PRs.",
 		type: "boolean",
 		default: false,
@@ -1809,18 +1873,21 @@ const options = [
 	},
 	{
 		name: "pinDigests",
+		scopes: lookupScopes,
 		description: "Whether to add digests to Dockerfile source images.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "separateMajorMinor",
+		scopes: lookupScopes,
 		description: "If set to `false`, Renovate will upgrade dependencies to their latest release only. Renovate will not separate major or minor branches.",
 		type: "boolean",
 		default: true
 	},
 	{
 		name: "separateMultipleMajor",
+		scopes: lookupScopes,
 		description: "If set to `true`, PRs will be raised separately for each available `major` upgrade version.",
 		stage: "package",
 		type: "boolean",
@@ -1828,6 +1895,7 @@ const options = [
 	},
 	{
 		name: "separateMultipleMinor",
+		scopes: lookupScopes,
 		description: "If set to `true`, Renovate creates separate PRs for each `minor` stream.",
 		stage: "package",
 		type: "boolean",
@@ -1836,12 +1904,14 @@ const options = [
 	},
 	{
 		name: "separateMinorPatch",
+		scopes: lookupScopes,
 		description: "If set to `true`, Renovate will separate `minor` and `patch` updates into separate branches.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "ignoreUnstable",
+		scopes: lookupScopes,
 		description: "Ignore versions with unstable SemVer.",
 		stage: "package",
 		type: "boolean",
@@ -1849,6 +1919,7 @@ const options = [
 	},
 	{
 		name: "ignoreDeprecated",
+		scopes: lookupScopes,
 		description: "Avoid upgrading from a non-deprecated version to a deprecated one.",
 		stage: "package",
 		type: "boolean",
@@ -1856,6 +1927,7 @@ const options = [
 	},
 	{
 		name: "followTag",
+		scopes: lookupScopes,
 		description: "If defined, packages will follow this release tag exactly.",
 		stage: "package",
 		type: "string",
@@ -1865,6 +1937,7 @@ const options = [
 	},
 	{
 		name: "maxMajorIncrement",
+		scopes: lookupScopes,
 		description: "Limit the maximum major version increment allowed. Set to 0 to disable.",
 		stage: "package",
 		type: "integer",
@@ -1874,6 +1947,7 @@ const options = [
 	},
 	{
 		name: "respectLatest",
+		scopes: lookupScopes,
 		description: "Ignore versions newer than npm \"latest\" version.",
 		stage: "package",
 		type: "boolean",
@@ -1881,6 +1955,7 @@ const options = [
 	},
 	{
 		name: "rangeStrategy",
+		scopes: lookupScopes,
 		description: "Determines how to modify or update existing ranges.",
 		type: "string",
 		default: "auto",
@@ -1898,6 +1973,7 @@ const options = [
 	},
 	{
 		name: "branchPrefix",
+		scopes: sharedScopes,
 		description: "Prefix to use for all branch names.",
 		stage: "branch",
 		type: "string",
@@ -1906,6 +1982,7 @@ const options = [
 	},
 	{
 		name: "branchPrefixOld",
+		scopes: sharedScopes,
 		description: "Old branchPrefix value to check for existing PRs.",
 		stage: "branch",
 		type: "string",
@@ -2033,6 +2110,7 @@ const options = [
 	},
 	{
 		name: "semanticCommits",
+		scopes: sharedScopes,
 		description: "Enable Semantic Commit prefixes for commits and PR titles.",
 		type: "string",
 		allowedValues: [
@@ -2044,6 +2122,7 @@ const options = [
 	},
 	{
 		name: "semanticCommitType",
+		scopes: sharedScopes,
 		description: "Commit type to use if Semantic Commits is enabled.",
 		type: "string",
 		default: "chore",
@@ -2051,13 +2130,16 @@ const options = [
 	},
 	{
 		name: "semanticCommitScope",
+		scopes: sharedScopes,
 		description: "Commit scope to use if Semantic Commits are enabled.",
 		type: "string",
 		default: "deps",
+		nullable: true,
 		supportsTemplating: true
 	},
 	{
 		name: "commitMessageLowerCase",
+		scopes: sharedScopes,
 		description: "Lowercase PR- and commit titles.",
 		type: "string",
 		allowedValues: ["auto", "never"],
@@ -2065,6 +2147,7 @@ const options = [
 	},
 	{
 		name: "keepUpdatedLabel",
+		scopes: sharedScopes,
 		description: "If set, users can add this label to PRs to request they be kept updated with the base branch.",
 		type: "string",
 		supportedPlatforms: [
@@ -2078,12 +2161,14 @@ const options = [
 	},
 	{
 		name: "rollbackPrs",
+		scopes: lookupScopes,
 		description: "Create PRs to roll back versions if the current version is not found in the registry.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "recreateWhen",
+		scopes: sharedScopes,
 		description: "Recreate PRs even if same ones were closed previously.",
 		type: "string",
 		default: "auto",
@@ -2095,6 +2180,7 @@ const options = [
 	},
 	{
 		name: "rebaseWhen",
+		scopes: sharedScopes,
 		description: "Controls when Renovate rebases an existing branch.",
 		type: "string",
 		allowedValues: [
@@ -2108,12 +2194,14 @@ const options = [
 	},
 	{
 		name: "rebaseLabel",
+		scopes: sharedScopes,
 		description: "Label to request a rebase from Renovate.",
 		type: "string",
 		default: "rebase"
 	},
 	{
 		name: "stopUpdatingLabel",
+		scopes: sharedScopes,
 		description: "Label to make Renovate stop updating a PR.",
 		type: "string",
 		default: "stop-updating",
@@ -2128,12 +2216,14 @@ const options = [
 	},
 	{
 		name: "minimumReleaseAge",
+		scopes: [...lookupScopes, "updateType"],
 		description: "Time required before a new release is considered stable.",
 		type: "string",
 		default: null
 	},
 	{
 		name: "minimumReleaseAgeBehaviour",
+		scopes: [...lookupScopes, "updateType"],
 		description: "When set in conjunction with `minimumReleaseAge`, controls whether the `releaseTimestamp` for a dependency update is required.",
 		type: "string",
 		default: "timestamp-required",
@@ -2141,9 +2231,11 @@ const options = [
 	},
 	{
 		name: "minimumReleaseAgeBuffer",
+		scopes: [...lookupScopes, "updateType"],
 		description: "Extra time added to `minimumReleaseAge` before an update is considered stable.",
 		type: "string",
-		default: "30 minutes"
+		default: "30 minutes",
+		nullable: true
 	},
 	{
 		name: "abandonmentThreshold",
@@ -2153,6 +2245,7 @@ const options = [
 	},
 	{
 		name: "dependencyDashboardReportAbandonment",
+		scopes: ["repo"],
 		description: "Controls whether abandoned packages are reported in the dependency dashboard.",
 		type: "boolean",
 		default: true
@@ -2165,6 +2258,7 @@ const options = [
 	},
 	{
 		name: "internalChecksFilter",
+		scopes: [...lookupScopes, "updateType"],
 		description: "When and how to filter based on internal checks.",
 		type: "string",
 		allowedValues: [
@@ -2185,6 +2279,7 @@ const options = [
 	},
 	{
 		name: "prCreation",
+		scopes: sharedScopes,
 		description: "When to create the PR for a branch.",
 		type: "string",
 		allowedValues: [
@@ -2197,6 +2292,7 @@ const options = [
 	},
 	{
 		name: "prNotPendingHours",
+		scopes: sharedScopes,
 		description: "Timeout in hours for when `prCreation=not-pending`.",
 		type: "integer",
 		default: 25
@@ -2269,6 +2365,7 @@ const options = [
 	},
 	{
 		name: "bbAutoResolvePrTasks",
+		scopes: sharedScopes,
 		description: "The PR tasks will be automatically completed after the PR is raised.",
 		type: "boolean",
 		default: false,
@@ -2276,6 +2373,7 @@ const options = [
 	},
 	{
 		name: "bbUseDefaultReviewers",
+		scopes: sharedScopes,
 		description: "Use the default reviewers (Bitbucket only).",
 		type: "boolean",
 		default: true,
@@ -2380,6 +2478,7 @@ const options = [
 	},
 	{
 		name: "osvVulnerabilityAlerts",
+		scopes: ["repo"],
 		description: "Use vulnerability alerts from `osv.dev`.",
 		type: "boolean",
 		default: false,
@@ -2388,12 +2487,14 @@ const options = [
 	},
 	{
 		name: "pruneBranchAfterAutomerge",
+		scopes: sharedScopes,
 		description: "Set to `true` to enable branch pruning after automerging.",
 		type: "boolean",
 		default: true
 	},
 	{
 		name: "branchName",
+		scopes: sharedScopes,
 		description: "Branch name template.",
 		type: "string",
 		default: "{{{branchPrefix}}}{{{additionalBranchPrefix}}}{{{branchTopic}}}",
@@ -2403,6 +2504,7 @@ const options = [
 	},
 	{
 		name: "additionalBranchPrefix",
+		scopes: sharedScopes,
 		description: "Additional string value to be appended to `branchPrefix`.",
 		type: "string",
 		default: "",
@@ -2411,6 +2513,7 @@ const options = [
 	},
 	{
 		name: "branchTopic",
+		scopes: sharedScopes,
 		description: "Branch topic.",
 		type: "string",
 		default: "{{{depNameSanitized}}}-{{{newMajor}}}{{#if separateMinorPatch}}{{#if isPatch}}.{{{newMinor}}}{{/if}}{{/if}}{{#if separateMultipleMinor}}{{#if isMinor}}.{{{newMinor}}}{{/if}}{{/if}}.x{{#if isLockfileUpdate}}-lockfile{{/if}}",
@@ -2419,6 +2522,7 @@ const options = [
 	},
 	{
 		name: "commitMessage",
+		scopes: sharedScopes,
 		description: "Message to use for commit messages and pull request titles.",
 		type: "string",
 		default: "{{{commitMessagePrefix}}} {{{commitMessageAction}}} {{{commitMessageTopic}}} {{{commitMessageExtra}}} {{{commitMessageSuffix}}}",
@@ -2428,6 +2532,7 @@ const options = [
 	},
 	{
 		name: "commitBody",
+		scopes: sharedScopes,
 		description: "Commit message body template. Will be appended to commit message, separated by two line returns.",
 		type: "string",
 		cli: false,
@@ -2435,12 +2540,14 @@ const options = [
 	},
 	{
 		name: "commitBodyTable",
+		scopes: sharedScopes,
 		description: "If enabled, append a table in the commit message body describing all updates in the commit.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "commitTrailers",
+		scopes: sharedScopes,
 		description: "Structured git trailers (`Key: value` lines) to add in the final block of the commit message.",
 		type: "array",
 		subType: "string",
@@ -2451,6 +2558,7 @@ const options = [
 	},
 	{
 		name: "commitMessagePrefix",
+		scopes: sharedScopes,
 		description: "Prefix to add to start of commit messages and PR titles. Uses a semantic prefix if `semanticCommits` is enabled.",
 		type: "string",
 		cli: false,
@@ -2459,6 +2567,7 @@ const options = [
 	},
 	{
 		name: "commitMessageAction",
+		scopes: sharedScopes,
 		description: "Action verb to use in commit messages and PR titles.",
 		type: "string",
 		default: "Update",
@@ -2468,6 +2577,7 @@ const options = [
 	},
 	{
 		name: "commitMessageTopic",
+		scopes: sharedScopes,
 		description: "The upgrade topic/noun used in commit messages and PR titles.",
 		type: "string",
 		default: "dependency {{depName}}",
@@ -2477,6 +2587,7 @@ const options = [
 	},
 	{
 		name: "commitMessageExtra",
+		scopes: sharedScopes,
 		description: "Extra description used after the commit message topic - typically the version.",
 		type: "string",
 		default: "to {{#if isPinDigest}}{{{newDigestShort}}}{{else}}{{#if isMajor}}{{prettyNewMajor}}{{else}}{{#if isSingleVersion}}{{prettyNewVersion}}{{else}}{{#if newValue}}{{{newValue}}}{{else}}{{{newDigestShort}}}{{/if}}{{/if}}{{/if}}{{/if}}",
@@ -2486,6 +2597,7 @@ const options = [
 	},
 	{
 		name: "commitMessageSuffix",
+		scopes: sharedScopes,
 		description: "Suffix to add to end of commit messages and PR titles.",
 		type: "string",
 		cli: false,
@@ -2494,6 +2606,7 @@ const options = [
 	},
 	{
 		name: "prBodyTemplate",
+		scopes: sharedScopes,
 		description: "Pull Request body template. Controls which sections are rendered in the body of the pull request.",
 		type: "string",
 		default: "{{{header}}}{{{table}}}{{{warnings}}}{{{notes}}}{{{changelogs}}}{{{configDescription}}}{{{controls}}}{{{footer}}}",
@@ -2502,6 +2615,7 @@ const options = [
 	},
 	{
 		name: "prTitle",
+		scopes: sharedScopes,
 		description: "Pull Request title template. Inherits from `commitMessage` if null.",
 		type: "string",
 		default: null,
@@ -2511,6 +2625,7 @@ const options = [
 	},
 	{
 		name: "prTitleStrict",
+		scopes: sharedScopes,
 		description: "Whether to bypass appending extra context to the Pull Request title.",
 		type: "boolean",
 		default: false,
@@ -2519,12 +2634,14 @@ const options = [
 	},
 	{
 		name: "prHeader",
+		scopes: sharedScopes,
 		description: "Text added here will be placed first in the PR body.",
 		type: "string",
 		supportsTemplating: true
 	},
 	{
 		name: "prFooter",
+		scopes: sharedScopes,
 		description: "Text added here will be placed last in the PR body, with a divider separator before it.",
 		type: "string",
 		default: `This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).`,
@@ -2532,6 +2649,7 @@ const options = [
 	},
 	{
 		name: "customizeDashboard",
+		scopes: ["repo"],
 		description: "Customize sections in the Dependency Dashboard issue.",
 		type: "object",
 		default: {},
@@ -2559,6 +2677,7 @@ const options = [
 	},
 	{
 		name: "hashedBranchLength",
+		scopes: sharedScopes,
 		description: "If enabled, branch names will use a hashing function to ensure each branch has that length.",
 		type: "integer",
 		default: null,
@@ -2603,6 +2722,7 @@ const options = [
 	},
 	{
 		name: "labels",
+		scopes: sharedScopes,
 		description: "Labels to set in Pull Request.",
 		type: "array",
 		subType: "string",
@@ -2610,6 +2730,7 @@ const options = [
 	},
 	{
 		name: "addLabels",
+		scopes: sharedScopes,
 		description: "Labels to add to Pull Request.",
 		type: "array",
 		subType: "string",
@@ -2618,18 +2739,21 @@ const options = [
 	},
 	{
 		name: "assignees",
+		scopes: sharedScopes,
 		description: "Assignees for Pull Request (either username or email address depending on the platform).",
 		type: "array",
 		subType: "string"
 	},
 	{
 		name: "assigneesFromCodeOwners",
+		scopes: sharedScopes,
 		description: "Determine assignees based on configured code owners and changes in PR.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "expandCodeOwnersGroups",
+		scopes: sharedScopes,
 		description: "Expand the configured code owner groups into a full list of group members.",
 		type: "boolean",
 		default: false,
@@ -2637,36 +2761,42 @@ const options = [
 	},
 	{
 		name: "assigneesSampleSize",
+		scopes: sharedScopes,
 		description: "Take a random sample of given size from `assignees`.",
 		type: "integer",
 		default: null
 	},
 	{
 		name: "assignAutomerge",
+		scopes: sharedScopes,
 		description: "Assign reviewers and assignees even if the PR is to be automerged.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "ignoreReviewers",
+		scopes: sharedScopes,
 		description: "Reviewers to be ignored in PR reviewers presence (either username or email address depending on the platform).",
 		type: "array",
 		subType: "string"
 	},
 	{
 		name: "reviewers",
+		scopes: sharedScopes,
 		description: "Requested reviewers for Pull Requests (either username or email address depending on the platform).",
 		type: "array",
 		subType: "string"
 	},
 	{
 		name: "reviewersFromCodeOwners",
+		scopes: sharedScopes,
 		description: "Determine reviewers based on configured code owners and changes in PR.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "filterUnavailableUsers",
+		scopes: sharedScopes,
 		description: "Filter reviewers and assignees based on their availability.",
 		type: "boolean",
 		default: false,
@@ -2688,12 +2818,14 @@ const options = [
 	},
 	{
 		name: "reviewersSampleSize",
+		scopes: sharedScopes,
 		description: "Take a random sample of given size from `reviewers`.",
 		type: "integer",
 		default: null
 	},
 	{
 		name: "additionalReviewers",
+		scopes: sharedScopes,
 		description: "Additional reviewers for Pull Requests (in contrast to `reviewers`, this option adds to the existing reviewer list, rather than replacing it).",
 		type: "array",
 		subType: "string",
@@ -2710,7 +2842,8 @@ const options = [
 		mergeable: true,
 		cli: false,
 		env: false,
-		parents: [...AllManagersListLiteral, "customManagers"]
+		scopes: ["manager"],
+		parents: ["customManagers"]
 	},
 	{
 		name: "postUpdateOptions",
@@ -2763,10 +2896,15 @@ const options = [
 			"poetry"
 		],
 		freeChoice: true,
-		additionalProperties: { type: "string" }
+		properties: {
+			...toolConstraintProperties(),
+			...additionalConstraintProperties()
+		},
+		additionalProperties: false
 	},
 	{
 		name: "hostRules",
+		scopes: ["repo"],
 		description: "Host rules/configuration including credentials.",
 		type: "array",
 		subType: "object",
@@ -2991,6 +3129,7 @@ const options = [
 	},
 	{
 		name: "prBodyDefinitions",
+		scopes: sharedScopes,
 		description: "Table column definitions to use in PR tables.",
 		type: "object",
 		freeChoice: true,
@@ -3013,6 +3152,7 @@ const options = [
 	},
 	{
 		name: "prBodyHeadingDefinitions",
+		scopes: sharedScopes,
 		description: "Table header definitions to use in PR tables.",
 		type: "object",
 		freeChoice: true,
@@ -3026,6 +3166,7 @@ const options = [
 	},
 	{
 		name: "prBodyColumns",
+		scopes: sharedScopes,
 		description: "List of columns to use in PR bodies.",
 		type: "array",
 		subType: "string",
@@ -3039,6 +3180,7 @@ const options = [
 	},
 	{
 		name: "prBodyNotes",
+		scopes: sharedScopes,
 		description: "List of extra notes or templates to include in the Pull Request body.",
 		type: "array",
 		subType: "string",
@@ -3049,6 +3191,7 @@ const options = [
 	},
 	{
 		name: "suppressNotifications",
+		scopes: sharedScopes,
 		description: "Options to suppress various types of warnings and other notifications.",
 		type: "array",
 		subType: "string",
@@ -3070,6 +3213,7 @@ const options = [
 	},
 	{
 		name: "pruneStaleBranches",
+		scopes: ["repo"],
 		description: "Set to `false` to disable pruning stale branches.",
 		type: "boolean",
 		default: true
@@ -3083,12 +3227,14 @@ const options = [
 	},
 	{
 		name: "gitLabIgnoreApprovals",
+		scopes: sharedScopes,
 		description: `Ignore approval rules for MRs created by Renovate, which is useful for automerge.`,
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "customManagers",
+		scopes: ["repo"],
 		description: "Custom managers using regex matching.",
 		type: "array",
 		subType: "object",
@@ -3243,12 +3389,14 @@ const options = [
 	},
 	{
 		name: "cloneSubmodules",
+		scopes: ["repo"],
 		description: "Set to `true` to initialize submodules during repository clone.",
 		type: "boolean",
 		default: false
 	},
 	{
 		name: "cloneSubmodulesFilter",
+		scopes: ["repo"],
 		description: "List of submodules names or patterns to clone when cloneSubmodules=true.",
 		type: "array",
 		subType: "string",
@@ -3292,6 +3440,7 @@ const options = [
 	},
 	{
 		name: "updatePinnedDependencies",
+		scopes: lookupScopes,
 		description: "Whether to update pinned (single version) dependencies or not.",
 		type: "boolean",
 		default: true
@@ -3326,6 +3475,7 @@ const options = [
 	},
 	{
 		name: "platformAutomerge",
+		scopes: sharedScopes,
 		description: `Controls if platform-native auto-merge is used.`,
 		type: "boolean",
 		default: true,
@@ -3353,6 +3503,7 @@ const options = [
 	},
 	{
 		name: "platformCommit",
+		scopes: sharedScopes,
 		description: "Use platform API to perform commits instead of using Git directly.",
 		type: "string",
 		default: "auto",
@@ -3365,6 +3516,7 @@ const options = [
 	},
 	{
 		name: "branchNameStrict",
+		scopes: sharedScopes,
 		description: `Whether to be strict about the use of special characters within the branch name.`,
 		type: "boolean",
 		default: false
@@ -3434,6 +3586,7 @@ const options = [
 	},
 	{
 		name: "milestone",
+		scopes: sharedScopes,
 		description: `The number of a milestone. If set, the milestone will be set when Renovate creates the PR.`,
 		type: "integer",
 		default: null,
@@ -3552,7 +3705,8 @@ const options = [
 		cli: false,
 		env: false,
 		freeChoice: true,
-		additionalProperties: { type: "string" }
+		properties: additionalConstraintProperties(),
+		additionalProperties: false
 	}
 ];
 function getOptions() {