renovate 44.188.4 → 44.189.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -34,7 +34,8 @@ async function lookup(packageFileConfig, indep) {
34
34
  const dep = clone(indep);
35
35
  dep.updates = [];
36
36
  const mayBeGivenARegistry = dep.skipReason === "unknown-registry" && !isNonEmptyArray(dep.registryUrls);
37
- if (dep.skipReason && !mayBeGivenARegistry) return Result.ok(dep);
37
+ const mayBeAVulnerabilityAlert = dep.skipReason === "lockfile-only";
38
+ if (dep.skipReason && !mayBeGivenARegistry && !mayBeAVulnerabilityAlert) return Result.ok(dep);
38
39
  if (!isNonEmptyString(dep.packageName)) {
39
40
  dep.skipReason = "invalid-name";
40
41
  return Result.ok(dep);
@@ -57,6 +58,12 @@ async function lookup(packageFileConfig, indep) {
57
58
  delete dep.skipReason;
58
59
  delete dep.skipStage;
59
60
  }
61
+ if (mayBeAVulnerabilityAlert) {
62
+ if (!depConfig.isVulnerabilityAlert) return Result.ok(dep);
63
+ logger.debug(`Dependency: ${depName}, is only in a lock file, but a vulnerability alert matches it - looking it up`);
64
+ delete dep.skipReason;
65
+ delete dep.skipStage;
66
+ }
60
67
  if (depConfig.ignoreDeps.includes(depName)) {
61
68
  logger.debug(`Dependency: ${depName}, is ignored`);
62
69
  dep.skipReason = "ignored";
@@ -1 +1 @@
1
- {"version":3,"file":"fetch.js","names":["p.all"],"sources":["../../../../lib/workers/repository/process/fetch.ts"],"sourcesContent":["// TODO #22198\nimport { isNonEmptyArray, isNonEmptyString } from '@sindresorhus/is';\nimport {\n applyDatasourceDefaultConfig,\n getManagerConfig,\n mergeChildConfig,\n} from '../../../config/index.ts';\nimport type { RenovateConfig } from '../../../config/types.ts';\nimport { instrument } from '../../../instrumentation/index.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { getDefaultVersioning } from '../../../modules/datasource/common.ts';\nimport type {\n PackageDependency,\n PackageFile,\n PackageFileContent,\n} from '../../../modules/manager/types.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { clone } from '../../../util/clone.ts';\nimport { applyPackageRules } from '../../../util/package-rules/index.ts';\nimport * as p from '../../../util/promises.ts';\nimport { Result } from '../../../util/result.ts';\nimport { LookupStats } from '../../../util/stats.ts';\nimport { withoutUrlCredentials } from '../../../util/url.ts';\nimport { PackageFiles } from '../package-files.ts';\nimport { lookupUpdates } from './lookup/index.ts';\nimport type { LookupUpdateConfig, UpdateResult } from './lookup/types.ts';\n\ntype LookupResult = Result<PackageDependency>;\n\n/**\n * Merge the constraints which a manager extracted into `target`, without ever letting them override a value which was configured.\n *\n * `overrides` holds the values which must win over the extracted ones: the repository config for a package file, the package file config for a dependency. They cannot be read from `target`, because `mergeChildConfig()` has already merged `constraintsVersioning` from `extracted` into it, the other way round.\n */\nfunction mergeExtractedConstraints(\n target: RenovateConfig,\n extracted: Pick<\n PackageFileContent,\n 'extractedConstraints' | 'constraintsVersioning'\n >,\n overrides: Pick<RenovateConfig, 'constraints' | 'constraintsVersioning'>,\n): void {\n if (extracted.extractedConstraints) {\n target.constraints = {\n ...extracted.extractedConstraints,\n ...overrides.constraints,\n };\n }\n const constraintsVersioning = {\n ...extracted.constraintsVersioning,\n ...overrides.constraintsVersioning,\n };\n if (Object.keys(constraintsVersioning).length > 0) {\n target.constraintsVersioning = constraintsVersioning;\n }\n}\n\nasync function lookup(\n packageFileConfig: RenovateConfig & PackageFile,\n indep: PackageDependency,\n): Promise<LookupResult> {\n const dep = clone(indep);\n\n dep.updates = [];\n\n // `unknown-registry` says the manager could not work out where to look, which\n // `applyPackageRules()` clears when config supplies a registry. Such a dep has\n // to reach the rules to be given one, so it is dropped afterwards rather than\n // here - unless its manager already gave it a registry it could not use.\n const mayBeGivenARegistry =\n dep.skipReason === 'unknown-registry' && !isNonEmptyArray(dep.registryUrls);\n if (dep.skipReason && !mayBeGivenARegistry) {\n return Result.ok(dep);\n }\n\n if (!isNonEmptyString(dep.packageName)) {\n dep.skipReason = 'invalid-name';\n return Result.ok(dep);\n }\n\n if (dep.isInternal && !packageFileConfig.updateInternalDeps) {\n dep.skipReason = 'internal-package';\n return Result.ok(dep);\n }\n\n const { depName } = dep;\n // TODO: fix types\n let depConfig = mergeChildConfig(packageFileConfig, dep);\n mergeExtractedConstraints(depConfig, dep, packageFileConfig);\n depConfig = await applyDatasourceDefaultConfig(depConfig);\n depConfig.versioning ??= getDefaultVersioning(depConfig.datasource);\n depConfig = await applyPackageRules(depConfig, 'pre-lookup');\n\n if (mayBeGivenARegistry) {\n if (depConfig.skipReason === 'unknown-registry') {\n logger.debug(\n `Dependency: ${depName!}, has no registry to be looked up in - set registryUrls to say which one to use`,\n );\n return Result.ok(dep);\n }\n\n delete dep.skipReason;\n delete dep.skipStage;\n }\n\n if (depConfig.ignoreDeps!.includes(depName!)) {\n // TODO: fix types (#22198)\n logger.debug(`Dependency: ${depName!}, is ignored`);\n dep.skipReason = 'ignored';\n return Result.ok(dep);\n }\n\n // A manager may disable a dependency by default, but a vulnerability fix\n // still goes through - unless a package rule disabled it as well\n if (\n depConfig.enabled === false &&\n dep.enabled === false &&\n depConfig.isVulnerabilityAlert &&\n depConfig.skipReason !== 'package-rules'\n ) {\n logger.debug(\n `Dependency: ${depName!}, is disabled by default, but has a vulnerability alert`,\n );\n depConfig.enabled = true;\n dep.enabled = true;\n }\n\n if (depConfig.enabled === false) {\n logger.debug(`Dependency: ${depName!}, is disabled`);\n dep.skipReason = 'disabled';\n return Result.ok(dep);\n }\n\n if (!depConfig.datasource) {\n return Result.ok(dep);\n }\n\n return LookupStats.wrap(depConfig.datasource, async () => {\n const { packageFile, manager } = packageFileConfig;\n return await Result.wrap(lookupUpdates(depConfig as LookupUpdateConfig))\n .onValue((dep) => {\n logger.trace(\n { dep, packageFile, manager },\n 'Dependency lookup success',\n );\n })\n .onError((err) => {\n logger.trace(\n { err, depName, packageFile, manager },\n 'Dependency lookup error',\n );\n })\n .catch((err): Result<UpdateResult> => {\n if (\n packageFileConfig.repoIsOnboarded === true ||\n !(err instanceof ExternalHostError)\n ) {\n return Result.err(err);\n }\n\n const cause = err.err;\n return Result.ok({\n updates: [],\n warnings: [\n {\n topic: 'Lookup Error',\n message: withoutUrlCredentials(`${depName}: ${cause.message}`),\n },\n ],\n });\n })\n .transform((upd): PackageDependency => Object.assign(dep, upd));\n });\n}\n\nasync function fetchManagerPackagerFileUpdates(\n config: RenovateConfig,\n managerConfig: RenovateConfig,\n pFile: PackageFile,\n): Promise<void> {\n const { packageFile } = pFile;\n const packageFileConfig = mergeChildConfig(managerConfig, pFile);\n mergeExtractedConstraints(packageFileConfig, pFile, config);\n const { manager } = packageFileConfig;\n const queue = pFile.deps.map(\n (dep) => async (): Promise<PackageDependency> => {\n const updates = await lookup(packageFileConfig, dep);\n return updates.unwrapOrThrow();\n },\n );\n logger.trace(\n { manager, packageFile, queueLength: queue.length },\n 'fetchManagerPackagerFileUpdates starting with concurrency',\n );\n\n pFile.deps = await p.all(queue);\n logger.trace(\n { manager, packageFile },\n 'fetchManagerPackagerFileUpdates finished',\n );\n}\n\nasync function fetchManagerUpdates(\n config: RenovateConfig,\n packageFiles: Record<string, PackageFile[]>,\n manager: string,\n): Promise<void> {\n const managerConfig = getManagerConfig(config, manager);\n const queue = packageFiles[manager].map(\n (pFile) => (): Promise<void> =>\n fetchManagerPackagerFileUpdates(config, managerConfig, pFile),\n );\n logger.trace(\n { manager, queueLength: queue.length },\n 'fetchManagerUpdates starting',\n );\n await p.all(queue);\n logger.trace({ manager }, 'fetchManagerUpdates finished');\n}\n\nexport async function fetchUpdates(\n config: RenovateConfig,\n packageFiles: Record<string, PackageFile[]>,\n): Promise<void> {\n const managers = Object.keys(packageFiles);\n const allManagerJobs = managers.map((manager) =>\n instrument(manager, () =>\n fetchManagerUpdates(config, packageFiles, manager),\n ),\n );\n await Promise.all(allManagerJobs);\n PackageFiles.add(config.baseBranch!, { ...packageFiles });\n logger.debug(\n { baseBranch: config.baseBranch },\n 'Package releases lookups complete',\n );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAkCA,SAAS,0BACP,QACA,WAIA,WACM;CACN,IAAI,UAAU,sBACZ,OAAO,cAAc;EACnB,GAAG,UAAU;EACb,GAAG,UAAU;CACf;CAEF,MAAM,wBAAwB;EAC5B,GAAG,UAAU;EACb,GAAG,UAAU;CACf;CACA,IAAI,OAAO,KAAK,qBAAqB,CAAC,CAAC,SAAS,GAC9C,OAAO,wBAAwB;AAEnC;AAEA,eAAe,OACb,mBACA,OACuB;CACvB,MAAM,MAAM,MAAM,KAAK;CAEvB,IAAI,UAAU,CAAC;CAMf,MAAM,sBACJ,IAAI,eAAe,sBAAsB,CAAC,gBAAgB,IAAI,YAAY;CAC5E,IAAI,IAAI,cAAc,CAAC,qBACrB,OAAO,OAAO,GAAG,GAAG;CAGtB,IAAI,CAAC,iBAAiB,IAAI,WAAW,GAAG;EACtC,IAAI,aAAa;EACjB,OAAO,OAAO,GAAG,GAAG;CACtB;CAEA,IAAI,IAAI,cAAc,CAAC,kBAAkB,oBAAoB;EAC3D,IAAI,aAAa;EACjB,OAAO,OAAO,GAAG,GAAG;CACtB;CAEA,MAAM,EAAE,YAAY;CAEpB,IAAI,YAAY,iBAAiB,mBAAmB,GAAG;CACvD,0BAA0B,WAAW,KAAK,iBAAiB;CAC3D,YAAY,MAAM,6BAA6B,SAAS;CACxD,UAAU,eAAe,qBAAqB,UAAU,UAAU;CAClE,YAAY,MAAM,kBAAkB,WAAW,YAAY;CAE3D,IAAI,qBAAqB;EACvB,IAAI,UAAU,eAAe,oBAAoB;GAC/C,OAAO,MACL,eAAe,QAAS,gFAC1B;GACA,OAAO,OAAO,GAAG,GAAG;EACtB;EAEA,OAAO,IAAI;EACX,OAAO,IAAI;CACb;CAEA,IAAI,UAAU,WAAY,SAAS,OAAQ,GAAG;EAE5C,OAAO,MAAM,eAAe,QAAS,aAAa;EAClD,IAAI,aAAa;EACjB,OAAO,OAAO,GAAG,GAAG;CACtB;CAIA,IACE,UAAU,YAAY,SACtB,IAAI,YAAY,SAChB,UAAU,wBACV,UAAU,eAAe,iBACzB;EACA,OAAO,MACL,eAAe,QAAS,wDAC1B;EACA,UAAU,UAAU;EACpB,IAAI,UAAU;CAChB;CAEA,IAAI,UAAU,YAAY,OAAO;EAC/B,OAAO,MAAM,eAAe,QAAS,cAAc;EACnD,IAAI,aAAa;EACjB,OAAO,OAAO,GAAG,GAAG;CACtB;CAEA,IAAI,CAAC,UAAU,YACb,OAAO,OAAO,GAAG,GAAG;CAGtB,OAAO,YAAY,KAAK,UAAU,YAAY,YAAY;EACxD,MAAM,EAAE,aAAa,YAAY;EACjC,OAAO,MAAM,OAAO,KAAK,cAAc,SAA+B,CAAC,CAAC,CACrE,SAAS,QAAQ;GAChB,OAAO,MACL;IAAE;IAAK;IAAa;GAAQ,GAC5B,2BACF;EACF,CAAC,CAAC,CACD,SAAS,QAAQ;GAChB,OAAO,MACL;IAAE;IAAK;IAAS;IAAa;GAAQ,GACrC,yBACF;EACF,CAAC,CAAC,CACD,OAAO,QAA8B;GACpC,IACE,kBAAkB,oBAAoB,QACtC,EAAE,eAAe,oBAEjB,OAAO,OAAO,IAAI,GAAG;GAGvB,MAAM,QAAQ,IAAI;GAClB,OAAO,OAAO,GAAG;IACf,SAAS,CAAC;IACV,UAAU,CACR;KACE,OAAO;KACP,SAAS,sBAAsB,GAAG,QAAQ,IAAI,MAAM,SAAS;IAC/D,CACF;GACF,CAAC;EACH,CAAC,CAAC,CACD,WAAW,QAA2B,OAAO,OAAO,KAAK,GAAG,CAAC;CAClE,CAAC;AACH;AAEA,eAAe,gCACb,QACA,eACA,OACe;CACf,MAAM,EAAE,gBAAgB;CACxB,MAAM,oBAAoB,iBAAiB,eAAe,KAAK;CAC/D,0BAA0B,mBAAmB,OAAO,MAAM;CAC1D,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,MAAM,KAAK,KACtB,QAAQ,YAAwC;EAE/C,QAAO,MADe,OAAO,mBAAmB,GAAG,EAAA,CACpC,cAAc;CAC/B,CACF;CACA,OAAO,MACL;EAAE;EAAS;EAAa,aAAa,MAAM;CAAO,GAClD,2DACF;CAEA,MAAM,OAAO,MAAMA,IAAM,KAAK;CAC9B,OAAO,MACL;EAAE;EAAS;CAAY,GACvB,0CACF;AACF;AAEA,eAAe,oBACb,QACA,cACA,SACe;CACf,MAAM,gBAAgB,iBAAiB,QAAQ,OAAO;CACtD,MAAM,QAAQ,aAAa,QAAQ,CAAC,KACjC,gBACC,gCAAgC,QAAQ,eAAe,KAAK,CAChE;CACA,OAAO,MACL;EAAE;EAAS,aAAa,MAAM;CAAO,GACrC,8BACF;CACA,MAAMA,IAAM,KAAK;CACjB,OAAO,MAAM,EAAE,QAAQ,GAAG,8BAA8B;AAC1D;AAEA,eAAsB,aACpB,QACA,cACe;CAEf,MAAM,iBADW,OAAO,KAAK,YACC,CAAC,CAAC,KAAK,YACnC,WAAW,eACT,oBAAoB,QAAQ,cAAc,OAAO,CACnD,CACF;CACA,MAAM,QAAQ,IAAI,cAAc;CAChC,aAAa,IAAI,OAAO,YAAa,EAAE,GAAG,aAAa,CAAC;CACxD,OAAO,MACL,EAAE,YAAY,OAAO,WAAW,GAChC,mCACF;AACF"}
1
+ {"version":3,"file":"fetch.js","names":["p.all"],"sources":["../../../../lib/workers/repository/process/fetch.ts"],"sourcesContent":["// TODO #22198\nimport { isNonEmptyArray, isNonEmptyString } from '@sindresorhus/is';\nimport {\n applyDatasourceDefaultConfig,\n getManagerConfig,\n mergeChildConfig,\n} from '../../../config/index.ts';\nimport type { RenovateConfig } from '../../../config/types.ts';\nimport { instrument } from '../../../instrumentation/index.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { getDefaultVersioning } from '../../../modules/datasource/common.ts';\nimport type {\n PackageDependency,\n PackageFile,\n PackageFileContent,\n} from '../../../modules/manager/types.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { clone } from '../../../util/clone.ts';\nimport { applyPackageRules } from '../../../util/package-rules/index.ts';\nimport * as p from '../../../util/promises.ts';\nimport { Result } from '../../../util/result.ts';\nimport { LookupStats } from '../../../util/stats.ts';\nimport { withoutUrlCredentials } from '../../../util/url.ts';\nimport { PackageFiles } from '../package-files.ts';\nimport { lookupUpdates } from './lookup/index.ts';\nimport type { LookupUpdateConfig, UpdateResult } from './lookup/types.ts';\n\ntype LookupResult = Result<PackageDependency>;\n\n/**\n * Merge the constraints which a manager extracted into `target`, without ever letting them override a value which was configured.\n *\n * `overrides` holds the values which must win over the extracted ones: the repository config for a package file, the package file config for a dependency. They cannot be read from `target`, because `mergeChildConfig()` has already merged `constraintsVersioning` from `extracted` into it, the other way round.\n */\nfunction mergeExtractedConstraints(\n target: RenovateConfig,\n extracted: Pick<\n PackageFileContent,\n 'extractedConstraints' | 'constraintsVersioning'\n >,\n overrides: Pick<RenovateConfig, 'constraints' | 'constraintsVersioning'>,\n): void {\n if (extracted.extractedConstraints) {\n target.constraints = {\n ...extracted.extractedConstraints,\n ...overrides.constraints,\n };\n }\n const constraintsVersioning = {\n ...extracted.constraintsVersioning,\n ...overrides.constraintsVersioning,\n };\n if (Object.keys(constraintsVersioning).length > 0) {\n target.constraintsVersioning = constraintsVersioning;\n }\n}\n\nasync function lookup(\n packageFileConfig: RenovateConfig & PackageFile,\n indep: PackageDependency,\n): Promise<LookupResult> {\n const dep = clone(indep);\n\n dep.updates = [];\n\n // `unknown-registry` says the manager could not work out where to look, which\n // `applyPackageRules()` clears when config supplies a registry. Such a dep has\n // to reach the rules to be given one, so it is dropped afterwards rather than\n // here - unless its manager already gave it a registry it could not use.\n const mayBeGivenARegistry =\n dep.skipReason === 'unknown-registry' && !isNonEmptyArray(dep.registryUrls);\n\n // A `lockfile-only` dependency is skipped for routine updates, because it is\n // not declared anywhere for an update to change. A vulnerability fix still\n // has to be able to reach it.\n // Whether an alert matches is not known until the package rules have been\n // applied, so the dependency passes through to them, and is skipped again\n // below if none did.\n const mayBeAVulnerabilityAlert = dep.skipReason === 'lockfile-only';\n\n if (dep.skipReason && !mayBeGivenARegistry && !mayBeAVulnerabilityAlert) {\n return Result.ok(dep);\n }\n\n if (!isNonEmptyString(dep.packageName)) {\n dep.skipReason = 'invalid-name';\n return Result.ok(dep);\n }\n\n if (dep.isInternal && !packageFileConfig.updateInternalDeps) {\n dep.skipReason = 'internal-package';\n return Result.ok(dep);\n }\n\n const { depName } = dep;\n // TODO: fix types\n let depConfig = mergeChildConfig(packageFileConfig, dep);\n mergeExtractedConstraints(depConfig, dep, packageFileConfig);\n depConfig = await applyDatasourceDefaultConfig(depConfig);\n depConfig.versioning ??= getDefaultVersioning(depConfig.datasource);\n depConfig = await applyPackageRules(depConfig, 'pre-lookup');\n\n if (mayBeGivenARegistry) {\n if (depConfig.skipReason === 'unknown-registry') {\n logger.debug(\n `Dependency: ${depName!}, has no registry to be looked up in - set registryUrls to say which one to use`,\n );\n return Result.ok(dep);\n }\n\n delete dep.skipReason;\n delete dep.skipStage;\n }\n\n if (mayBeAVulnerabilityAlert) {\n if (!depConfig.isVulnerabilityAlert) {\n return Result.ok(dep);\n }\n\n logger.debug(\n `Dependency: ${depName!}, is only in a lock file, but a vulnerability alert matches it - looking it up`,\n );\n delete dep.skipReason;\n delete dep.skipStage;\n }\n\n if (depConfig.ignoreDeps!.includes(depName!)) {\n // TODO: fix types (#22198)\n logger.debug(`Dependency: ${depName!}, is ignored`);\n dep.skipReason = 'ignored';\n return Result.ok(dep);\n }\n\n // A manager may disable a dependency by default, but a vulnerability fix\n // still goes through - unless a package rule disabled it as well\n if (\n depConfig.enabled === false &&\n dep.enabled === false &&\n depConfig.isVulnerabilityAlert &&\n depConfig.skipReason !== 'package-rules'\n ) {\n logger.debug(\n `Dependency: ${depName!}, is disabled by default, but has a vulnerability alert`,\n );\n depConfig.enabled = true;\n dep.enabled = true;\n }\n\n if (depConfig.enabled === false) {\n logger.debug(`Dependency: ${depName!}, is disabled`);\n dep.skipReason = 'disabled';\n return Result.ok(dep);\n }\n\n if (!depConfig.datasource) {\n return Result.ok(dep);\n }\n\n return LookupStats.wrap(depConfig.datasource, async () => {\n const { packageFile, manager } = packageFileConfig;\n return await Result.wrap(lookupUpdates(depConfig as LookupUpdateConfig))\n .onValue((dep) => {\n logger.trace(\n { dep, packageFile, manager },\n 'Dependency lookup success',\n );\n })\n .onError((err) => {\n logger.trace(\n { err, depName, packageFile, manager },\n 'Dependency lookup error',\n );\n })\n .catch((err): Result<UpdateResult> => {\n if (\n packageFileConfig.repoIsOnboarded === true ||\n !(err instanceof ExternalHostError)\n ) {\n return Result.err(err);\n }\n\n const cause = err.err;\n return Result.ok({\n updates: [],\n warnings: [\n {\n topic: 'Lookup Error',\n message: withoutUrlCredentials(`${depName}: ${cause.message}`),\n },\n ],\n });\n })\n .transform((upd): PackageDependency => Object.assign(dep, upd));\n });\n}\n\nasync function fetchManagerPackagerFileUpdates(\n config: RenovateConfig,\n managerConfig: RenovateConfig,\n pFile: PackageFile,\n): Promise<void> {\n const { packageFile } = pFile;\n const packageFileConfig = mergeChildConfig(managerConfig, pFile);\n mergeExtractedConstraints(packageFileConfig, pFile, config);\n const { manager } = packageFileConfig;\n const queue = pFile.deps.map(\n (dep) => async (): Promise<PackageDependency> => {\n const updates = await lookup(packageFileConfig, dep);\n return updates.unwrapOrThrow();\n },\n );\n logger.trace(\n { manager, packageFile, queueLength: queue.length },\n 'fetchManagerPackagerFileUpdates starting with concurrency',\n );\n\n pFile.deps = await p.all(queue);\n logger.trace(\n { manager, packageFile },\n 'fetchManagerPackagerFileUpdates finished',\n );\n}\n\nasync function fetchManagerUpdates(\n config: RenovateConfig,\n packageFiles: Record<string, PackageFile[]>,\n manager: string,\n): Promise<void> {\n const managerConfig = getManagerConfig(config, manager);\n const queue = packageFiles[manager].map(\n (pFile) => (): Promise<void> =>\n fetchManagerPackagerFileUpdates(config, managerConfig, pFile),\n );\n logger.trace(\n { manager, queueLength: queue.length },\n 'fetchManagerUpdates starting',\n );\n await p.all(queue);\n logger.trace({ manager }, 'fetchManagerUpdates finished');\n}\n\nexport async function fetchUpdates(\n config: RenovateConfig,\n packageFiles: Record<string, PackageFile[]>,\n): Promise<void> {\n const managers = Object.keys(packageFiles);\n const allManagerJobs = managers.map((manager) =>\n instrument(manager, () =>\n fetchManagerUpdates(config, packageFiles, manager),\n ),\n );\n await Promise.all(allManagerJobs);\n PackageFiles.add(config.baseBranch!, { ...packageFiles });\n logger.debug(\n { baseBranch: config.baseBranch },\n 'Package releases lookups complete',\n );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAkCA,SAAS,0BACP,QACA,WAIA,WACM;CACN,IAAI,UAAU,sBACZ,OAAO,cAAc;EACnB,GAAG,UAAU;EACb,GAAG,UAAU;CACf;CAEF,MAAM,wBAAwB;EAC5B,GAAG,UAAU;EACb,GAAG,UAAU;CACf;CACA,IAAI,OAAO,KAAK,qBAAqB,CAAC,CAAC,SAAS,GAC9C,OAAO,wBAAwB;AAEnC;AAEA,eAAe,OACb,mBACA,OACuB;CACvB,MAAM,MAAM,MAAM,KAAK;CAEvB,IAAI,UAAU,CAAC;CAMf,MAAM,sBACJ,IAAI,eAAe,sBAAsB,CAAC,gBAAgB,IAAI,YAAY;CAQ5E,MAAM,2BAA2B,IAAI,eAAe;CAEpD,IAAI,IAAI,cAAc,CAAC,uBAAuB,CAAC,0BAC7C,OAAO,OAAO,GAAG,GAAG;CAGtB,IAAI,CAAC,iBAAiB,IAAI,WAAW,GAAG;EACtC,IAAI,aAAa;EACjB,OAAO,OAAO,GAAG,GAAG;CACtB;CAEA,IAAI,IAAI,cAAc,CAAC,kBAAkB,oBAAoB;EAC3D,IAAI,aAAa;EACjB,OAAO,OAAO,GAAG,GAAG;CACtB;CAEA,MAAM,EAAE,YAAY;CAEpB,IAAI,YAAY,iBAAiB,mBAAmB,GAAG;CACvD,0BAA0B,WAAW,KAAK,iBAAiB;CAC3D,YAAY,MAAM,6BAA6B,SAAS;CACxD,UAAU,eAAe,qBAAqB,UAAU,UAAU;CAClE,YAAY,MAAM,kBAAkB,WAAW,YAAY;CAE3D,IAAI,qBAAqB;EACvB,IAAI,UAAU,eAAe,oBAAoB;GAC/C,OAAO,MACL,eAAe,QAAS,gFAC1B;GACA,OAAO,OAAO,GAAG,GAAG;EACtB;EAEA,OAAO,IAAI;EACX,OAAO,IAAI;CACb;CAEA,IAAI,0BAA0B;EAC5B,IAAI,CAAC,UAAU,sBACb,OAAO,OAAO,GAAG,GAAG;EAGtB,OAAO,MACL,eAAe,QAAS,+EAC1B;EACA,OAAO,IAAI;EACX,OAAO,IAAI;CACb;CAEA,IAAI,UAAU,WAAY,SAAS,OAAQ,GAAG;EAE5C,OAAO,MAAM,eAAe,QAAS,aAAa;EAClD,IAAI,aAAa;EACjB,OAAO,OAAO,GAAG,GAAG;CACtB;CAIA,IACE,UAAU,YAAY,SACtB,IAAI,YAAY,SAChB,UAAU,wBACV,UAAU,eAAe,iBACzB;EACA,OAAO,MACL,eAAe,QAAS,wDAC1B;EACA,UAAU,UAAU;EACpB,IAAI,UAAU;CAChB;CAEA,IAAI,UAAU,YAAY,OAAO;EAC/B,OAAO,MAAM,eAAe,QAAS,cAAc;EACnD,IAAI,aAAa;EACjB,OAAO,OAAO,GAAG,GAAG;CACtB;CAEA,IAAI,CAAC,UAAU,YACb,OAAO,OAAO,GAAG,GAAG;CAGtB,OAAO,YAAY,KAAK,UAAU,YAAY,YAAY;EACxD,MAAM,EAAE,aAAa,YAAY;EACjC,OAAO,MAAM,OAAO,KAAK,cAAc,SAA+B,CAAC,CAAC,CACrE,SAAS,QAAQ;GAChB,OAAO,MACL;IAAE;IAAK;IAAa;GAAQ,GAC5B,2BACF;EACF,CAAC,CAAC,CACD,SAAS,QAAQ;GAChB,OAAO,MACL;IAAE;IAAK;IAAS;IAAa;GAAQ,GACrC,yBACF;EACF,CAAC,CAAC,CACD,OAAO,QAA8B;GACpC,IACE,kBAAkB,oBAAoB,QACtC,EAAE,eAAe,oBAEjB,OAAO,OAAO,IAAI,GAAG;GAGvB,MAAM,QAAQ,IAAI;GAClB,OAAO,OAAO,GAAG;IACf,SAAS,CAAC;IACV,UAAU,CACR;KACE,OAAO;KACP,SAAS,sBAAsB,GAAG,QAAQ,IAAI,MAAM,SAAS;IAC/D,CACF;GACF,CAAC;EACH,CAAC,CAAC,CACD,WAAW,QAA2B,OAAO,OAAO,KAAK,GAAG,CAAC;CAClE,CAAC;AACH;AAEA,eAAe,gCACb,QACA,eACA,OACe;CACf,MAAM,EAAE,gBAAgB;CACxB,MAAM,oBAAoB,iBAAiB,eAAe,KAAK;CAC/D,0BAA0B,mBAAmB,OAAO,MAAM;CAC1D,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,MAAM,KAAK,KACtB,QAAQ,YAAwC;EAE/C,QAAO,MADe,OAAO,mBAAmB,GAAG,EAAA,CACpC,cAAc;CAC/B,CACF;CACA,OAAO,MACL;EAAE;EAAS;EAAa,aAAa,MAAM;CAAO,GAClD,2DACF;CAEA,MAAM,OAAO,MAAMA,IAAM,KAAK;CAC9B,OAAO,MACL;EAAE;EAAS;CAAY,GACvB,0CACF;AACF;AAEA,eAAe,oBACb,QACA,cACA,SACe;CACf,MAAM,gBAAgB,iBAAiB,QAAQ,OAAO;CACtD,MAAM,QAAQ,aAAa,QAAQ,CAAC,KACjC,gBACC,gCAAgC,QAAQ,eAAe,KAAK,CAChE;CACA,OAAO,MACL;EAAE;EAAS,aAAa,MAAM;CAAO,GACrC,8BACF;CACA,MAAMA,IAAM,KAAK;CACjB,OAAO,MAAM,EAAE,QAAQ,GAAG,8BAA8B;AAC1D;AAEA,eAAsB,aACpB,QACA,cACe;CAEf,MAAM,iBADW,OAAO,KAAK,YACC,CAAC,CAAC,KAAK,YACnC,WAAW,eACT,oBAAoB,QAAQ,cAAc,OAAO,CACnD,CACF;CACA,MAAM,QAAQ,IAAI,cAAc;CAChC,aAAa,IAAI,OAAO,YAAa,EAAE,GAAG,aAAa,CAAC;CACxD,OAAO,MACL,EAAE,YAAY,OAAO,WAAW,GAChC,mCACF;AACF"}
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "renovate",
3
3
  "description": "Automated dependency updates. Flexible so you don't need to be.",
4
- "version": "44.188.4",
4
+ "version": "44.189.0",
5
5
  "type": "module",
6
6
  "bin": {
7
7
  "renovate": "dist/renovate.js",
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "$id": "https://docs.renovatebot.com/renovate-schema.json",
3
- "title": "JSON schema for Renovate 44.188.4 config files (https://renovatebot.com/)",
3
+ "title": "JSON schema for Renovate 44.189.0 config files (https://renovatebot.com/)",
4
4
  "$schema": "http://json-schema.org/draft-07/schema#",
5
- "x-renovate-version": "44.188.4",
5
+ "x-renovate-version": "44.189.0",
6
6
  "allowComments": true,
7
7
  "type": "object",
8
8
  "definitions": {