renovate 44.78.0 → 44.79.0

package/dist/config/global.d.ts

@@ -1,7 +1,7 @@
 import { InternalGlobalConfigOptions, RenovateConfig, RepoGlobalConfig } from "./types.js";
 //#region lib/config/global.d.ts
 declare class GlobalConfig {
-  static OPTIONS: readonly ["allowCustomCrateRegistries", "allowPlugins", "allowScripts", "allowShellExecutorForPostUpgradeCommands", "allowedCommands", "allowedEnv", "allowedHeaders", "allowedUnsafeExecutions", "autodiscoverRepoOrder", "autodiscoverRepoSort", "bbUseDevelopmentBranch", "binarySource", "cacheDir", "cacheHardTtlMinutes", "cachePrivatePackages", "cacheTtlOverride", "checkedBranches", "configFileNames", "containerbaseDir", "customEnvVariables", "dockerChildPrefix", "dockerCliOptions", "dockerMaxPages", "dockerSidecarImage", "dockerUser", "dryRun", "encryptedWarning", "endpoint", "executionTimeout", "exposeAllEnv", "gitTimeout", "githubTokenWarn", "httpCacheTtlDays", "ignorePrAuthor", "includeMirrors", "localDir", "migratePresets", "onboarding", "onboardingAutoCloseAge", "onboardingBranch", "onboardingCommitMessage", "onboardingConfig", "onboardingConfigFileName", "onboardingNoDeps", "onboardingPrTitle", "platform", "prCacheSyncMaxPages", "presetCachePersistence", "productLinks", "rebaseAllOpenBranches", "repositoryCacheForceLocal", "requireConfig", "s3Endpoint", "s3PathStyle", "toolSettings", "userAgent"];
+  static OPTIONS: readonly ["allowCustomCrateRegistries", "allowPlugins", "allowScripts", "allowShellExecutorForPostUpgradeCommands", "allowedCommands", "allowedEnv", "allowedHeaders", "allowedUnsafeExecutions", "autodiscoverRepoOrder", "autodiscoverRepoSort", "bbUseDevelopmentBranch", "binarySource", "cacheDir", "cacheHardTtlMinutes", "cachePrivatePackages", "cacheTtlOverride", "checkedBranches", "configFileNames", "containerbaseDir", "customEnvVariables", "dockerChildPrefix", "dockerCliOptions", "dockerMaxPages", "dockerSidecarImage", "dockerUser", "dryRun", "encryptedWarning", "endpoint", "executionTimeout", "exposeAllEnv", "gitTimeout", "githubTokenWarn", "httpCacheTtlDays", "ignorePrAuthor", "includeMirrors", "inheritConfigTrusted", "internalHostAccess", "localDir", "migratePresets", "onboarding", "onboardingAutoCloseAge", "onboardingBranch", "onboardingCommitMessage", "onboardingConfig", "onboardingConfigFileName", "onboardingNoDeps", "onboardingPrTitle", "platform", "prCacheSyncMaxPages", "presetCachePersistence", "productLinks", "rebaseAllOpenBranches", "repositoryCacheForceLocal", "requireConfig", "s3Endpoint", "s3PathStyle", "toolSettings", "userAgent"];
   private static config;
   static get(): RepoGlobalConfig & InternalGlobalConfigOptions;
   static get<Key extends keyof RepoGlobalConfig | keyof InternalGlobalConfigOptions>(key: Key): Required<RepoGlobalConfig & InternalGlobalConfigOptions>[Key];

package/dist/config/global.js

@@ -37,6 +37,8 @@ var GlobalConfig = class GlobalConfig {
 		"httpCacheTtlDays",
 		"ignorePrAuthor",
 		"includeMirrors",
+		"inheritConfigTrusted",
+		"internalHostAccess",
 		"localDir",
 		"migratePresets",
 		"onboarding",

package/dist/config/global.js.map

@@ -1 +1 @@
-{"version":3,"file":"global.js","names":[],"sources":["../../lib/config/global.ts"],"sourcesContent":["import { globalConfigOptionDefaults } from '../global-config-option-defaults.generated.ts';\nimport type {\n  InternalGlobalConfigOptions,\n  RenovateConfig,\n  RepoGlobalConfig,\n} from './types.ts';\n\nexport class GlobalConfig {\n  // TODO: once global config work is complete, add a test to make sure this list includes all options with globalOnly=true (#9603)\n  static OPTIONS = [\n    'allowCustomCrateRegistries',\n    'allowPlugins',\n    'allowScripts',\n    'allowShellExecutorForPostUpgradeCommands',\n    'allowedCommands',\n    'allowedEnv',\n    'allowedHeaders',\n    'allowedUnsafeExecutions',\n    'autodiscoverRepoOrder',\n    'autodiscoverRepoSort',\n    'bbUseDevelopmentBranch',\n    'binarySource',\n    'cacheDir',\n    'cacheHardTtlMinutes',\n    'cachePrivatePackages',\n    'cacheTtlOverride',\n    'checkedBranches',\n    'configFileNames',\n    'containerbaseDir',\n    'customEnvVariables',\n    'dockerChildPrefix',\n    'dockerCliOptions',\n    'dockerMaxPages',\n    'dockerSidecarImage',\n    'dockerUser',\n    'dryRun',\n    'encryptedWarning',\n    'endpoint',\n    'executionTimeout',\n    'exposeAllEnv',\n    'gitTimeout',\n    'githubTokenWarn',\n    'httpCacheTtlDays',\n    'ignorePrAuthor',\n    'includeMirrors',\n    /** NOTE that this is not a config option, but an internal variable **/\n    'localDir',\n    'migratePresets',\n    'onboarding',\n    'onboardingAutoCloseAge',\n    'onboardingBranch',\n    'onboardingCommitMessage',\n    'onboardingConfig',\n    'onboardingConfigFileName',\n    'onboardingNoDeps',\n    'onboardingPrTitle',\n    'platform',\n    'prCacheSyncMaxPages',\n    'presetCachePersistence',\n    'productLinks',\n    'rebaseAllOpenBranches',\n    'repositoryCacheForceLocal',\n    'requireConfig',\n    's3Endpoint',\n    's3PathStyle',\n    'toolSettings',\n    'userAgent',\n  ] as const satisfies readonly (\n    keyof RepoGlobalConfig | keyof InternalGlobalConfigOptions\n  )[];\n\n  private static config: RepoGlobalConfig & InternalGlobalConfigOptions = {};\n\n  static get(): RepoGlobalConfig & InternalGlobalConfigOptions;\n  static get<\n    Key extends keyof RepoGlobalConfig | keyof InternalGlobalConfigOptions,\n  >(key: Key): Required<RepoGlobalConfig & InternalGlobalConfigOptions>[Key];\n  static get<\n    Key extends keyof RepoGlobalConfig | keyof InternalGlobalConfigOptions,\n  >(\n    key?: Key,\n  ):\n    | (RepoGlobalConfig & InternalGlobalConfigOptions)\n    | Required<RepoGlobalConfig & InternalGlobalConfigOptions>[Key] {\n    const defaultValue = key\n      ? (globalConfigOptionDefaults[key] as Required<\n          RepoGlobalConfig & InternalGlobalConfigOptions\n        >[Key])\n      : undefined;\n\n    return key\n      ? ((GlobalConfig.config[key] ?? defaultValue) as Required<\n          RepoGlobalConfig & InternalGlobalConfigOptions\n        >[Key])\n      : GlobalConfig.config;\n  }\n\n  static set(\n    config: RenovateConfig & RepoGlobalConfig & InternalGlobalConfigOptions,\n  ): RenovateConfig {\n    GlobalConfig.reset();\n\n    const result = { ...config };\n    for (const option of GlobalConfig.OPTIONS) {\n      GlobalConfig.config[option] = config[option] as never;\n      delete result[option];\n    }\n\n    return result;\n  }\n\n  static reset(): void {\n    GlobalConfig.config = {};\n  }\n}\n"],"mappings":";;AAOA,IAAa,eAAb,MAAa,aAAa;CAExB,OAAO,UAAU;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CAIA,OAAe,SAAyD,CAAC;CAMzE,OAAO,IAGL,KAGgE;EAChE,MAAM,eAAe,MAChB,2BAA2B,OAG5B,KAAA;EAEJ,OAAO,MACD,aAAa,OAAO,QAAQ,eAG9B,aAAa;CACnB;CAEA,OAAO,IACL,QACgB;EAChB,aAAa,MAAM;EAEnB,MAAM,SAAS,EAAE,GAAG,OAAO;EAC3B,KAAK,MAAM,UAAU,aAAa,SAAS;GACzC,aAAa,OAAO,UAAU,OAAO;GACrC,OAAO,OAAO;EAChB;EAEA,OAAO;CACT;CAEA,OAAO,QAAc;EACnB,aAAa,SAAS,CAAC;CACzB;AACF"}
+{"version":3,"file":"global.js","names":[],"sources":["../../lib/config/global.ts"],"sourcesContent":["import { globalConfigOptionDefaults } from '../global-config-option-defaults.generated.ts';\nimport type {\n  InternalGlobalConfigOptions,\n  RenovateConfig,\n  RepoGlobalConfig,\n} from './types.ts';\n\nexport class GlobalConfig {\n  // TODO: once global config work is complete, add a test to make sure this list includes all options with globalOnly=true (#9603)\n  static OPTIONS = [\n    'allowCustomCrateRegistries',\n    'allowPlugins',\n    'allowScripts',\n    'allowShellExecutorForPostUpgradeCommands',\n    'allowedCommands',\n    'allowedEnv',\n    'allowedHeaders',\n    'allowedUnsafeExecutions',\n    'autodiscoverRepoOrder',\n    'autodiscoverRepoSort',\n    'bbUseDevelopmentBranch',\n    'binarySource',\n    'cacheDir',\n    'cacheHardTtlMinutes',\n    'cachePrivatePackages',\n    'cacheTtlOverride',\n    'checkedBranches',\n    'configFileNames',\n    'containerbaseDir',\n    'customEnvVariables',\n    'dockerChildPrefix',\n    'dockerCliOptions',\n    'dockerMaxPages',\n    'dockerSidecarImage',\n    'dockerUser',\n    'dryRun',\n    'encryptedWarning',\n    'endpoint',\n    'executionTimeout',\n    'exposeAllEnv',\n    'gitTimeout',\n    'githubTokenWarn',\n    'httpCacheTtlDays',\n    'ignorePrAuthor',\n    'includeMirrors',\n    'inheritConfigTrusted',\n    'internalHostAccess',\n    /** NOTE that this is not a config option, but an internal variable **/\n    'localDir',\n    'migratePresets',\n    'onboarding',\n    'onboardingAutoCloseAge',\n    'onboardingBranch',\n    'onboardingCommitMessage',\n    'onboardingConfig',\n    'onboardingConfigFileName',\n    'onboardingNoDeps',\n    'onboardingPrTitle',\n    'platform',\n    'prCacheSyncMaxPages',\n    'presetCachePersistence',\n    'productLinks',\n    'rebaseAllOpenBranches',\n    'repositoryCacheForceLocal',\n    'requireConfig',\n    's3Endpoint',\n    's3PathStyle',\n    'toolSettings',\n    'userAgent',\n  ] as const satisfies readonly (\n    keyof RepoGlobalConfig | keyof InternalGlobalConfigOptions\n  )[];\n\n  private static config: RepoGlobalConfig & InternalGlobalConfigOptions = {};\n\n  static get(): RepoGlobalConfig & InternalGlobalConfigOptions;\n  static get<\n    Key extends keyof RepoGlobalConfig | keyof InternalGlobalConfigOptions,\n  >(key: Key): Required<RepoGlobalConfig & InternalGlobalConfigOptions>[Key];\n  static get<\n    Key extends keyof RepoGlobalConfig | keyof InternalGlobalConfigOptions,\n  >(\n    key?: Key,\n  ):\n    | (RepoGlobalConfig & InternalGlobalConfigOptions)\n    | Required<RepoGlobalConfig & InternalGlobalConfigOptions>[Key] {\n    const defaultValue = key\n      ? (globalConfigOptionDefaults[key] as Required<\n          RepoGlobalConfig & InternalGlobalConfigOptions\n        >[Key])\n      : undefined;\n\n    return key\n      ? ((GlobalConfig.config[key] ?? defaultValue) as Required<\n          RepoGlobalConfig & InternalGlobalConfigOptions\n        >[Key])\n      : GlobalConfig.config;\n  }\n\n  static set(\n    config: RenovateConfig & RepoGlobalConfig & InternalGlobalConfigOptions,\n  ): RenovateConfig {\n    GlobalConfig.reset();\n\n    const result = { ...config };\n    for (const option of GlobalConfig.OPTIONS) {\n      GlobalConfig.config[option] = config[option] as never;\n      delete result[option];\n    }\n\n    return result;\n  }\n\n  static reset(): void {\n    GlobalConfig.config = {};\n  }\n}\n"],"mappings":";;AAOA,IAAa,eAAb,MAAa,aAAa;CAExB,OAAO,UAAU;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EAEA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CAIA,OAAe,SAAyD,CAAC;CAMzE,OAAO,IAGL,KAGgE;EAChE,MAAM,eAAe,MAChB,2BAA2B,OAG5B,KAAA;EAEJ,OAAO,MACD,aAAa,OAAO,QAAQ,eAG9B,aAAa;CACnB;CAEA,OAAO,IACL,QACgB;EAChB,aAAa,MAAM;EAEnB,MAAM,SAAS,EAAE,GAAG,OAAO;EAC3B,KAAK,MAAM,UAAU,aAAa,SAAS;GACzC,aAAa,OAAO,UAAU,OAAO;GACrC,OAAO,OAAO;EAChB;EAEA,OAAO;CACT;CAEA,OAAO,QAAc;EACnB,aAAa,SAAS,CAAC;CACzB;AACF"}

package/dist/config/options/index.js

@@ -100,6 +100,20 @@ const options = [
 		subType: "string",
 		globalOnly: true
 	},
+	{
+		name: "internalHostAccess",
+		description: "Whether Renovate may make HTTP requests to internal hosts, such as loopback, private-range and link-local addresses. `warn` logs the requests which `block` would refuse.",
+		type: "string",
+		allowedValues: [
+			"allow",
+			"warn",
+			"block"
+		],
+		default: "warn",
+		globalOnly: true,
+		experimental: true,
+		advancedUse: true
+	},
 	{
 		name: "useCloudMetadataServices",
 		description: "If `false`, Renovate does not try to access cloud metadata services.",
@@ -826,6 +840,15 @@ const options = [
 		default: false,
 		globalOnly: true
 	},
+	{
+		name: "inheritConfigTrusted",
+		description: "If `true`, `hostRules` in inherited config may grant access to internal hosts.",
+		type: "boolean",
+		default: false,
+		globalOnly: true,
+		experimental: true,
+		advancedUse: true
+	},
 	{
 		name: "requireConfig",
 		description: "Controls Renovate's behavior regarding repository config files such as `renovate.json`.",
@@ -2776,6 +2799,18 @@ const options = [
 		env: false,
 		advancedUse: true
 	},
+	{
+		name: "allowInternal",
+		description: "Whether requests to this host may reach internal addresses when `internalHostAccess=block`. Only honored from the self-hosted administrator's own configuration, or from inherited config when `inheritConfigTrusted=true`.",
+		type: "boolean",
+		stage: "repository",
+		parents: ["hostRules"],
+		cli: false,
+		env: false,
+		advancedUse: true,
+		globalOnly: true,
+		inheritConfigSupport: true
+	},
 	{
 		name: "abortOnError",
 		description: "If enabled, Renovate aborts its run when HTTP request errors occur.",