renovate 44.7.1 → 44.7.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/config/presets/internal/security.preset.js +12 -0
- package/dist/config/presets/internal/security.preset.js.map +1 -1
- package/dist/modules/manager/pre-commit/index.js +1 -3
- package/dist/modules/manager/pre-commit/index.js.map +1 -1
- package/package.json +4 -4
- package/renovate-schema.json +2 -2
|
@@ -20,6 +20,8 @@ const minimumReleaseAgeDatasources = {
|
|
|
20
20
|
*
|
|
21
21
|
* Instead, we opt them out of `minimumReleaseAge`, and add a warning for the user.
|
|
22
22
|
*
|
|
23
|
+
* This must stay in sync with the update types documented as _not_ supported (❌) in `docs/usage/key-concepts/minimum-release-age.md`, so we opt-out any unsupported `updateType`s.
|
|
24
|
+
*
|
|
23
25
|
* These rules are datasource-agnostic (`matchDatasources` is added per preset), so they are shared across every generated `security:minimumReleaseAge*` preset to keep the warnings consistent.
|
|
24
26
|
*/
|
|
25
27
|
const unsupportedUpdateTypeRules = [
|
|
@@ -40,6 +42,16 @@ const unsupportedUpdateTypeRules = [
|
|
|
40
42
|
matchUpdateTypes: ["pin"],
|
|
41
43
|
minimumReleaseAge: null,
|
|
42
44
|
prBodyNotes: ["⚠️ Renovate's pin functionality [does not currently](https://github.com/renovatebot/renovate/issues/40288) wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s)."]
|
|
45
|
+
},
|
|
46
|
+
{
|
|
47
|
+
description: "Do not require Minimum Release Age for update types that do not provide a release timestamp",
|
|
48
|
+
matchUpdateTypes: [
|
|
49
|
+
"bump",
|
|
50
|
+
"lockfileUpdate",
|
|
51
|
+
"rollback"
|
|
52
|
+
],
|
|
53
|
+
minimumReleaseAge: null,
|
|
54
|
+
prBodyNotes: ["⚠️ Renovate does not enforce Minimum Release Age for `bump`, `lockfileUpdate`, or `rollback` updates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s)."]
|
|
43
55
|
}
|
|
44
56
|
];
|
|
45
57
|
function buildMinimumReleaseAgePreset(datasource, { description, minimumReleaseAge }) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"security.preset.js","names":[],"sources":["../../../../lib/config/presets/internal/security.preset.ts"],"sourcesContent":["import type { DatasourceName } from '../../../datasource-list.generated.ts';\nimport type { PackageRule } from '../../types.ts';\nimport { UpdateTypesOptions } from '../../types.ts';\nimport type { Preset } from '../types.ts';\n\ninterface MinimumReleaseAgeDatasource {\n description: string;\n minimumReleaseAge: string;\n}\n\n/**\n * Datasources for which we expose a `security:minimumReleaseAge*` preset.\n *\n * Only supported for Datasources that have `releaseTimestampSupport`.\n */\nconst minimumReleaseAgeDatasources: Partial<\n Record<DatasourceName, MinimumReleaseAgeDatasource>\n> = {\n crate: {\n description:\n \"Wait until the Crate version is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in crates, and b) reduces the risk of upgrading to a newly published crate that its owner deletes during crates.io's initial 72-hour deletion window.\",\n minimumReleaseAge: '3 days',\n },\n npm: {\n description:\n 'Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.',\n minimumReleaseAge: '3 days',\n },\n};\n\n/**\n * Certain update types don't currently support `releaseTimestamp`s, so applying `minimumReleaseAge` to them results in updates that will never come.\n *\n * Instead, we opt them out of `minimumReleaseAge`, and add a warning for the user.\n *\n * These rules are datasource-agnostic (`matchDatasources` is added per preset), so they are shared across every generated `security:minimumReleaseAge*` preset to keep the warnings consistent.\n */\nconst unsupportedUpdateTypeRules: PackageRule[] = [\n {\n description:\n 'Do not require Minimum Release Age for update types that are controlled by the package manager',\n matchUpdateTypes: ['lockFileMaintenance'],\n minimumReleaseAge: null,\n prBodyNotes: [\n \"⚠️ Renovate's lock file maintenance functionality does not support validating Minimum Release Age, as the package manager performs the required changes to update package(s). Confirm whether your package manager perform its own validation for the Minimum Release Age of packages.\",\n ],\n },\n // TODO #39400\n {\n description: 'Do not require Minimum Release Age for package replacements',\n matchUpdateTypes: ['replacement'],\n minimumReleaseAge: null,\n prBodyNotes: [\n \"⚠️ Renovate's replacement functionality [does not currently](https://github.com/renovatebot/renovate/issues/39400) wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).\",\n ],\n },\n // TODO #40288\n {\n description: 'Do not require Minimum Release Age for package pinning',\n matchUpdateTypes: ['pin'],\n minimumReleaseAge: null,\n prBodyNotes: [\n \"⚠️ Renovate's pin functionality [does not currently](https://github.com/renovatebot/renovate/issues/40288) wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).\",\n ],\n },\n];\n\nfunction buildMinimumReleaseAgePreset(\n datasource: string,\n { description, minimumReleaseAge }: MinimumReleaseAgeDatasource,\n): Preset {\n const packageRules: PackageRule[] = [\n {\n internalChecksFilter: 'strict',\n matchDatasources: [datasource],\n minimumReleaseAge,\n },\n ...unsupportedUpdateTypeRules.map(\n (rule): PackageRule => ({ ...rule, matchDatasources: [datasource] }),\n ),\n ];\n\n return { description, packageRules };\n}\n\nfunction loadMinimumReleaseAgePresets(): Record<string, Preset> {\n const presets: Record<string, Preset> = {};\n\n for (const [datasource, config] of Object.entries(\n minimumReleaseAgeDatasources,\n )) {\n const suffix = datasource[0].toUpperCase() + datasource.slice(1);\n presets[`minimumReleaseAge${suffix}`] = buildMinimumReleaseAgePreset(\n datasource,\n config,\n );\n }\n\n return presets;\n}\n\nexport const presets: Record<string, Preset> = {\n gomodIndirectSecurityUpdates: {\n description:\n 'Enable go.mod indirect dependency updates only when vulnerabilities have been detected.',\n extends: [':enableVulnerabilityAlerts'],\n packageRules: [\n {\n description: 'Enable lookups for indirect go.mod dependencies',\n enabled: true,\n matchDepTypes: ['indirect'],\n matchManagers: ['gomod'],\n },\n {\n description:\n 'Disable non-security updates for indirect go.mod dependencies (vulnerability alerts use force to override this)',\n enabled: false,\n matchDepTypes: ['indirect'],\n matchManagers: ['gomod'],\n matchUpdateTypes: [...UpdateTypesOptions],\n },\n ],\n },\n ...loadMinimumReleaseAgePresets(),\n 'only-security-updates': {\n description:\n 'Only update dependencies if vulnerabilities have been detected.',\n extends: ['config:recommended'],\n osvVulnerabilityAlerts: true,\n packageRules: [\n {\n enabled: false,\n matchPackageNames: ['*'],\n },\n ],\n vulnerabilityAlerts: {\n enabled: true,\n },\n },\n 'openssf-scorecard': {\n description: 'Show OpenSSF badge on pull requests.',\n packageRules: [\n {\n matchSourceUrls: ['https://github.com/**'],\n prBodyColumns: [\n 'Package',\n 'Type',\n 'Update',\n 'Change',\n 'Pending',\n 'OpenSSF',\n ],\n prBodyDefinitions: {\n OpenSSF:\n '[](https://securityscorecards.dev/viewer/?uri=github.com/{{sourceRepo}})',\n },\n },\n ],\n },\n};\n\nexport const minimumReleaseAgeDatasourceNames = Object.keys(\n minimumReleaseAgeDatasources,\n);\n"],"mappings":";;;;;;;AAeA,MAAM,+BAEF;CACF,OAAO;EACL,aACE;EACF,mBAAmB;CACrB;CACA,KAAK;EACH,aACE;EACF,mBAAmB;CACrB;AACF
|
|
1
|
+
{"version":3,"file":"security.preset.js","names":[],"sources":["../../../../lib/config/presets/internal/security.preset.ts"],"sourcesContent":["import type { DatasourceName } from '../../../datasource-list.generated.ts';\nimport type { PackageRule } from '../../types.ts';\nimport { UpdateTypesOptions } from '../../types.ts';\nimport type { Preset } from '../types.ts';\n\ninterface MinimumReleaseAgeDatasource {\n description: string;\n minimumReleaseAge: string;\n}\n\n/**\n * Datasources for which we expose a `security:minimumReleaseAge*` preset.\n *\n * Only supported for Datasources that have `releaseTimestampSupport`.\n */\nconst minimumReleaseAgeDatasources: Partial<\n Record<DatasourceName, MinimumReleaseAgeDatasource>\n> = {\n crate: {\n description:\n \"Wait until the Crate version is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in crates, and b) reduces the risk of upgrading to a newly published crate that its owner deletes during crates.io's initial 72-hour deletion window.\",\n minimumReleaseAge: '3 days',\n },\n npm: {\n description:\n 'Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.',\n minimumReleaseAge: '3 days',\n },\n};\n\n/**\n * Certain update types don't currently support `releaseTimestamp`s, so applying `minimumReleaseAge` to them results in updates that will never come.\n *\n * Instead, we opt them out of `minimumReleaseAge`, and add a warning for the user.\n *\n * This must stay in sync with the update types documented as _not_ supported (❌) in `docs/usage/key-concepts/minimum-release-age.md`, so we opt-out any unsupported `updateType`s.\n *\n * These rules are datasource-agnostic (`matchDatasources` is added per preset), so they are shared across every generated `security:minimumReleaseAge*` preset to keep the warnings consistent.\n */\nconst unsupportedUpdateTypeRules: PackageRule[] = [\n {\n description:\n 'Do not require Minimum Release Age for update types that are controlled by the package manager',\n matchUpdateTypes: ['lockFileMaintenance'],\n minimumReleaseAge: null,\n prBodyNotes: [\n \"⚠️ Renovate's lock file maintenance functionality does not support validating Minimum Release Age, as the package manager performs the required changes to update package(s). Confirm whether your package manager perform its own validation for the Minimum Release Age of packages.\",\n ],\n },\n // TODO #39400\n {\n description: 'Do not require Minimum Release Age for package replacements',\n matchUpdateTypes: ['replacement'],\n minimumReleaseAge: null,\n prBodyNotes: [\n \"⚠️ Renovate's replacement functionality [does not currently](https://github.com/renovatebot/renovate/issues/39400) wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).\",\n ],\n },\n // TODO #40288\n {\n description: 'Do not require Minimum Release Age for package pinning',\n matchUpdateTypes: ['pin'],\n minimumReleaseAge: null,\n prBodyNotes: [\n \"⚠️ Renovate's pin functionality [does not currently](https://github.com/renovatebot/renovate/issues/40288) wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).\",\n ],\n },\n {\n description:\n 'Do not require Minimum Release Age for update types that do not provide a release timestamp',\n matchUpdateTypes: ['bump', 'lockfileUpdate', 'rollback'],\n minimumReleaseAge: null,\n prBodyNotes: [\n '⚠️ Renovate does not enforce Minimum Release Age for `bump`, `lockfileUpdate`, or `rollback` updates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s).',\n ],\n },\n];\n\nfunction buildMinimumReleaseAgePreset(\n datasource: string,\n { description, minimumReleaseAge }: MinimumReleaseAgeDatasource,\n): Preset {\n const packageRules: PackageRule[] = [\n {\n internalChecksFilter: 'strict',\n matchDatasources: [datasource],\n minimumReleaseAge,\n },\n ...unsupportedUpdateTypeRules.map(\n (rule): PackageRule => ({ ...rule, matchDatasources: [datasource] }),\n ),\n ];\n\n return { description, packageRules };\n}\n\nfunction loadMinimumReleaseAgePresets(): Record<string, Preset> {\n const presets: Record<string, Preset> = {};\n\n for (const [datasource, config] of Object.entries(\n minimumReleaseAgeDatasources,\n )) {\n const suffix = datasource[0].toUpperCase() + datasource.slice(1);\n presets[`minimumReleaseAge${suffix}`] = buildMinimumReleaseAgePreset(\n datasource,\n config,\n );\n }\n\n return presets;\n}\n\nexport const presets: Record<string, Preset> = {\n gomodIndirectSecurityUpdates: {\n description:\n 'Enable go.mod indirect dependency updates only when vulnerabilities have been detected.',\n extends: [':enableVulnerabilityAlerts'],\n packageRules: [\n {\n description: 'Enable lookups for indirect go.mod dependencies',\n enabled: true,\n matchDepTypes: ['indirect'],\n matchManagers: ['gomod'],\n },\n {\n description:\n 'Disable non-security updates for indirect go.mod dependencies (vulnerability alerts use force to override this)',\n enabled: false,\n matchDepTypes: ['indirect'],\n matchManagers: ['gomod'],\n matchUpdateTypes: [...UpdateTypesOptions],\n },\n ],\n },\n ...loadMinimumReleaseAgePresets(),\n 'only-security-updates': {\n description:\n 'Only update dependencies if vulnerabilities have been detected.',\n extends: ['config:recommended'],\n osvVulnerabilityAlerts: true,\n packageRules: [\n {\n enabled: false,\n matchPackageNames: ['*'],\n },\n ],\n vulnerabilityAlerts: {\n enabled: true,\n },\n },\n 'openssf-scorecard': {\n description: 'Show OpenSSF badge on pull requests.',\n packageRules: [\n {\n matchSourceUrls: ['https://github.com/**'],\n prBodyColumns: [\n 'Package',\n 'Type',\n 'Update',\n 'Change',\n 'Pending',\n 'OpenSSF',\n ],\n prBodyDefinitions: {\n OpenSSF:\n '[](https://securityscorecards.dev/viewer/?uri=github.com/{{sourceRepo}})',\n },\n },\n ],\n },\n};\n\nexport const minimumReleaseAgeDatasourceNames = Object.keys(\n minimumReleaseAgeDatasources,\n);\n"],"mappings":";;;;;;;AAeA,MAAM,+BAEF;CACF,OAAO;EACL,aACE;EACF,mBAAmB;CACrB;CACA,KAAK;EACH,aACE;EACF,mBAAmB;CACrB;AACF;;;;;;;;;;AAWA,MAAM,6BAA4C;CAChD;EACE,aACE;EACF,kBAAkB,CAAC,qBAAqB;EACxC,mBAAmB;EACnB,aAAa,CACX,wRACF;CACF;CAEA;EACE,aAAa;EACb,kBAAkB,CAAC,aAAa;EAChC,mBAAmB;EACnB,aAAa,CACX,yRACF;CACF;CAEA;EACE,aAAa;EACb,kBAAkB,CAAC,KAAK;EACxB,mBAAmB;EACnB,aAAa,CACX,iRACF;CACF;CACA;EACE,aACE;EACF,kBAAkB;GAAC;GAAQ;GAAkB;EAAU;EACvD,mBAAmB;EACnB,aAAa,CACX,iPACF;CACF;AACF;AAEA,SAAS,6BACP,YACA,EAAE,aAAa,qBACP;CAYR,OAAO;EAAE;EAAa,cAAA,CAVpB;GACE,sBAAsB;GACtB,kBAAkB,CAAC,UAAU;GAC7B;EACF,GACA,GAAG,2BAA2B,KAC3B,UAAuB;GAAE,GAAG;GAAM,kBAAkB,CAAC,UAAU;EAAE,EACpE,CAG+B;CAAE;AACrC;AAEA,SAAS,+BAAuD;CAC9D,MAAM,UAAkC,CAAC;CAEzC,KAAK,MAAM,CAAC,YAAY,WAAW,OAAO,QACxC,4BACF,GAAG;EACD,MAAM,SAAS,WAAW,EAAE,CAAC,YAAY,IAAI,WAAW,MAAM,CAAC;EAC/D,QAAQ,oBAAoB,YAAY,6BACtC,YACA,MACF;CACF;CAEA,OAAO;AACT;AAEA,MAAa,UAAkC;CAC7C,8BAA8B;EAC5B,aACE;EACF,SAAS,CAAC,4BAA4B;EACtC,cAAc,CACZ;GACE,aAAa;GACb,SAAS;GACT,eAAe,CAAC,UAAU;GAC1B,eAAe,CAAC,OAAO;EACzB,GACA;GACE,aACE;GACF,SAAS;GACT,eAAe,CAAC,UAAU;GAC1B,eAAe,CAAC,OAAO;GACvB,kBAAkB,CAAC,GAAG,kBAAkB;EAC1C,CACF;CACF;CACA,GAAG,6BAA6B;CAChC,yBAAyB;EACvB,aACE;EACF,SAAS,CAAC,oBAAoB;EAC9B,wBAAwB;EACxB,cAAc,CACZ;GACE,SAAS;GACT,mBAAmB,CAAC,GAAG;EACzB,CACF;EACA,qBAAqB,EACnB,SAAS,KACX;CACF;CACA,qBAAqB;EACnB,aAAa;EACb,cAAc,CACZ;GACE,iBAAiB,CAAC,uBAAuB;GACzC,eAAe;IACb;IACA;IACA;IACA;IACA;IACA;GACF;GACA,mBAAmB,EACjB,SACE,4KACJ;EACF,CACF;CACF;AACF;AAEgD,OAAO,KACrD,4BACF"}
|
|
@@ -7,7 +7,6 @@ import { extractPackageFile } from "./extract.js";
|
|
|
7
7
|
import { knownDepTypes } from "./dep-types.js";
|
|
8
8
|
//#region lib/modules/manager/pre-commit/index.ts
|
|
9
9
|
var pre_commit_exports = /* @__PURE__ */ __exportAll({
|
|
10
|
-
categories: () => categories,
|
|
11
10
|
defaultConfig: () => defaultConfig,
|
|
12
11
|
displayName: () => displayName,
|
|
13
12
|
extractPackageFile: () => extractPackageFile,
|
|
@@ -15,7 +14,6 @@ var pre_commit_exports = /* @__PURE__ */ __exportAll({
|
|
|
15
14
|
supportedDatasources: () => supportedDatasources,
|
|
16
15
|
url: () => url
|
|
17
16
|
});
|
|
18
|
-
const categories = ["python"];
|
|
19
17
|
const displayName = "pre-commit";
|
|
20
18
|
const url = "https://pre-commit.com";
|
|
21
19
|
const defaultConfig = {
|
|
@@ -30,6 +28,6 @@ const supportedDatasources = [
|
|
|
30
28
|
GitlabTagsDatasource.id
|
|
31
29
|
];
|
|
32
30
|
//#endregion
|
|
33
|
-
export {
|
|
31
|
+
export { defaultConfig, displayName, extractPackageFile, knownDepTypes, pre_commit_exports, supportedDatasources, url };
|
|
34
32
|
|
|
35
33
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","names":[],"sources":["../../../../lib/modules/manager/pre-commit/index.ts"],"sourcesContent":["import
|
|
1
|
+
{"version":3,"file":"index.js","names":[],"sources":["../../../../lib/modules/manager/pre-commit/index.ts"],"sourcesContent":["import { getEnv } from '../../../util/env.ts';\n\nimport { ForgejoTagsDatasource } from '../../datasource/forgejo-tags/index.ts';\nimport { GithubTagsDatasource } from '../../datasource/github-tags/index.ts';\nimport { GitlabTagsDatasource } from '../../datasource/gitlab-tags/index.ts';\n\nexport { extractPackageFile } from './extract.ts';\n\nexport const displayName = 'pre-commit';\nexport const url = 'https://pre-commit.com';\n\nexport const defaultConfig = {\n commitMessageTopic: 'pre-commit hook {{depName}}',\n enabled: false,\n managerFilePatterns: ['/(^|/)\\\\.pre-commit-config\\\\.ya?ml$/'],\n prBodyNotes: getEnv().RENOVATE_X_SUPPRESS_PRE_COMMIT_WARNING\n ? /* istanbul ignore next */\n []\n : [\n 'Note: The `pre-commit` manager in Renovate is not supported by the `pre-commit` maintainers or community. Please do not report any problems there, instead [create a Discussion in the Renovate repository](https://github.com/renovatebot/renovate/discussions/new) if you have any questions.',\n ],\n};\n\nexport const supportedDatasources = [\n ForgejoTagsDatasource.id,\n GithubTagsDatasource.id,\n GitlabTagsDatasource.id,\n];\n\nexport { knownDepTypes } from './dep-types.ts';\n"],"mappings":";;;;;;;;;;;;;;;;AAQA,MAAa,cAAc;AAC3B,MAAa,MAAM;AAEnB,MAAa,gBAAgB;CAC3B,oBAAoB;CACpB,SAAS;CACT,qBAAqB,CAAC,sCAAsC;CAC5D,aAAa,OAAO,CAAC,CAAC,yCAElB,CAAC,IACD,CACE,iSACF;AACN;AAEA,MAAa,uBAAuB;CAClC,sBAAsB;CACtB,qBAAqB;CACrB,qBAAqB;AACvB"}
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "renovate",
|
|
3
3
|
"description": "Automated dependency updates. Flexible so you don't need to be.",
|
|
4
|
-
"version": "44.7.
|
|
4
|
+
"version": "44.7.3",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"bin": {
|
|
7
7
|
"renovate": "dist/renovate.js",
|
|
@@ -150,7 +150,7 @@
|
|
|
150
150
|
"execa": "8.0.1",
|
|
151
151
|
"find-packages": "10.0.4",
|
|
152
152
|
"find-up": "8.0.0",
|
|
153
|
-
"fs-extra": "11.
|
|
153
|
+
"fs-extra": "11.4.0",
|
|
154
154
|
"git-url-parse": "16.1.0",
|
|
155
155
|
"github-url-from-git": "1.5.0",
|
|
156
156
|
"glob": "13.0.6",
|
|
@@ -213,7 +213,7 @@
|
|
|
213
213
|
"devDependencies": {
|
|
214
214
|
"@biomejs/biome": "2.5.5",
|
|
215
215
|
"@commander-js/extra-typings": "14.0.0",
|
|
216
|
-
"@containerbase/istanbul-reports-html": "2.0.
|
|
216
|
+
"@containerbase/istanbul-reports-html": "2.0.14",
|
|
217
217
|
"@containerbase/semantic-release-pnpm": "1.4.2",
|
|
218
218
|
"@hyrious/marshal": "0.3.3",
|
|
219
219
|
"@ls-lint/ls-lint": "2.3.1",
|
|
@@ -268,7 +268,7 @@
|
|
|
268
268
|
"husky": "9.1.7",
|
|
269
269
|
"jest-extended": "7.0.0",
|
|
270
270
|
"lint-staged": "17.2.0",
|
|
271
|
-
"markdownlint-cli2": "0.23.
|
|
271
|
+
"markdownlint-cli2": "0.23.2",
|
|
272
272
|
"markdownlint-cli2-formatter-template": "0.0.4",
|
|
273
273
|
"memfs": "4.64.0",
|
|
274
274
|
"nock": "14.0.16",
|
package/renovate-schema.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"$id": "https://docs.renovatebot.com/renovate-schema.json",
|
|
3
|
-
"title": "JSON schema for Renovate 44.7.
|
|
3
|
+
"title": "JSON schema for Renovate 44.7.3 config files (https://renovatebot.com/)",
|
|
4
4
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
5
|
-
"x-renovate-version": "44.7.
|
|
5
|
+
"x-renovate-version": "44.7.3",
|
|
6
6
|
"allowComments": true,
|
|
7
7
|
"type": "object",
|
|
8
8
|
"definitions": {
|