[pull] main from renovatebot:main

.devcontainer/Dockerfile

@@ -1,5 +1,5 @@
-FROM ghcr.io/containerbase/devcontainer:13.8.18
+FROM ghcr.io/containerbase/devcontainer:13.8.19
 
 # https://github.com/pnpm/pnpm/issues/8971
 # renovate: datasource=npm
-RUN install-tool pnpm 10.9.0
+RUN install-tool pnpm 10.10.0

.github/workflows/build.yml

@@ -698,7 +698,7 @@ jobs:
           show-progress: false
 
       - name: docker-config
-        uses: containerbase/internal-tools@77f4534ea093557aab79c9fbdbb1e09e4a00f91d # v3.10.28
+        uses: containerbase/internal-tools@29a8cfb9ef1404f159215a36951cee61a52bd937 # v3.10.30
         with:
           command: docker-config
 

docs/usage/docker.md

@@ -307,7 +307,7 @@ Renovate will get the credentials with the [`google-auth-library`](https://www.n
     service_account: ${{ env.SERVICE_ACCOUNT }}
 
 - name: renovate
-  uses: renovatebot/github-action@v42.0.0
+  uses: renovatebot/github-action@v42.0.1
   env:
     RENOVATE_HOST_RULES: |
       [
@@ -478,7 +478,7 @@ Make sure to install the Google Cloud SDK into the custom image, as you need the
 For example:
 
 ```Dockerfile
-FROM renovate/renovate:39.261.4
+FROM renovate/renovate:40.3.1
 # Include the "Docker tip" which you can find here https://cloud.google.com/sdk/docs/install
 # under "Installation" for "Debian/Ubuntu"
 RUN ...

docs/usage/examples/self-hosting.md

@@ -24,9 +24,9 @@ It builds `latest` based on the `main` branch and all SemVer tags are published
 
 ```sh title="Example of valid tags"
 docker run --rm renovate/renovate
-docker run --rm renovate/renovate:39
-docker run --rm renovate/renovate:39.261
-docker run --rm renovate/renovate:39.261.4
+docker run --rm renovate/renovate:40
+docker run --rm renovate/renovate:40.3
+docker run --rm renovate/renovate:40.3.1
 ```
 
 <!-- prettier-ignore -->
@@ -62,7 +62,7 @@ spec:
             - name: renovate
               # Update this to the latest available and then enable Renovate on
               # the manifest
-              image: renovate/renovate:39.261.4
+              image: renovate/renovate:40.3.1
               args:
                 - user/repo
               # Environment Variables
@@ -121,7 +121,7 @@ spec:
       template:
         spec:
           containers:
-            - image: renovate/renovate:39.261.4
+            - image: renovate/renovate:40.3.1
               name: renovate-bot
               env: # For illustration purposes, please use secrets.
                 - name: RENOVATE_PLATFORM
@@ -367,7 +367,7 @@ spec:
           containers:
             - name: renovate
               # Update this to the latest available and then enable Renovate on the manifest
-              image: renovate/renovate:39.261.4
+              image: renovate/renovate:40.3.1
               volumeMounts:
                 - name: ssh-key-volume
                   readOnly: true

docs/usage/release-notes-for-major-versions.md

@@ -196,7 +196,7 @@ If you're on a version of Lerna before v7, you should prioritize upgrading to v7
 - **automerge:** Platform automerge will now be chosen by default whenever automerge is enabled
 - Post upgrade templating is now allowed by default, as long as the post upgrade task command is itself already allowed
 - Official Renovate Docker images now use the "slim" approach with `binarySource=install` by default. e.g. `renovate/renovate:latest` is the slim image, not full
-- The "full" image is now available via the tag `full`, e.g. `renovate/renovate:39-full`, and defaults to `binarySource=global` (no dynamic installs)
+- The "full" image is now available via the tag `full`, e.g. `renovate/renovate:40-full`, and defaults to `binarySource=global` (no dynamic installs)
 - Third party tools in the full image have been updated to latest/LTS major version
 
 ### Commentary for 36

package.json

@@ -142,7 +142,7 @@
   },
   "volta": {
     "node": "22.15.0",
-    "pnpm": "10.9.0"
+    "pnpm": "10.10.0"
   },
   "dependencies": {
     "@aws-sdk/client-codecommit": "3.799.0",
@@ -353,7 +353,7 @@
     "vitest": "3.1.2",
     "vitest-mock-extended": "3.1.0"
   },
-  "packageManager": "pnpm@10.9.0",
+  "packageManager": "pnpm@10.10.0",
   "files": [
     "dist",
     "renovate-schema.json"