[pull] main from renovatebot:main#946
Merged
pull[bot] merged 8 commits intoryrodriguez25:mainfrom Mar 13, 2026
Merged
Conversation
) As part of changes in e438887, we'd missed the `renovate-config-validator` logging.
In an alternative to #41842, we can also introduce a warning when the logger has been called before any initialization, as a way to surface this misconfiguration.
To make them even more well-formed schemas, we should add the `$id`. This allows `ajv-cli` to be able to validate using it.
chore(deps): update dependency @biomejs/biome to v2.4.6 | datasource | package | from | to | | ---------- | -------------- | ----- | ----- | | npm | @biomejs/biome | 2.4.5 | 2.4.6 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…in) (#41858) chore(deps): update containerbase/internal-tools action to v4.2.2 | datasource | package | from | to | | ----------- | ---------------------------- | ------- | ------ | | github-tags | containerbase/internal-tools | v4.1.23 | v4.2.2 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* feat(exec): register bazelisk as containerbase tool * test(bazel-module): add failing tests for updateArtifacts * feat(bazel-module): implement updateArtifacts for lockfile support * feat(bazel-module): export updateArtifacts from manager index * fix(bazel-module): address code review feedback - Use logger.warn instead of debug for artifact errors - Add utf8 encoding to readLocalFile calls - Use getSiblingFileName for lockfile path derivation - Add empty updatedDeps guard - Strengthen test assertions * docs(bazel-module): document lockfile support * Update lib/modules/manager/bazel-module/index.ts Co-authored-by: Michael Kriese <michael.kriese@gmx.de> * Apply suggestions from code review Co-authored-by: Michael Kriese <michael.kriese@gmx.de> * fix(bazel-module): address review feedback - Remove unnecessary afterEach in tests - Use partial<StatusResult> for all StatusResult mocks - Add lockfile maintenance support - Export supportsLockFileMaintenance flag * fix(bazel-module): handle untracked lock files and clarify docs Check status.not_added alongside status.modified for lock file changes, matching the pattern used by other managers (composer, gomod, etc.). Clarify that Bazelisk (not Renovate) reads .bazelversion. Add test for lockfile maintenance with no changes. * feat(bazelisk): implement updateArtifacts for MODULE.bazel.lock When the Bazel version in .bazelversion changes, run `bazel mod deps` to regenerate MODULE.bazel.lock and return the updated lockfile as an artifact. * feat(bazelisk): add lockfile maintenance support * docs(bazelisk): add lockfile support section linking to bazel-module docs * refactor(bazel-module): extract shared lockfile update helper * refactor(bazel-module): delegate lockfile update to shared helper Replace inline lockfile update logic in artifacts.ts with a call to the shared updateBazelLockfile() helper, and update tests to mock the helper. * refactor(bazelisk): delegate lockfile update to shared helper Replace inline lockfile update logic in bazelisk/artifacts.ts with a call to the shared updateBazelLockfile() helper from bazel-module/lockfile.ts. * fix(bazelisk): use index.md for cross-manager docs link The docs pipeline renames readme.md to index.md, so cross-manager links must reference index.md to pass the docs link checker. * feat(bazel-module,bazelisk): support bazelisk version constraint Pass config.constraints.bazelisk through to toolConstraints so users can pin the bazelisk version if the newest release is broken. * fix(bazel-module): rename lockFile to fileName in ArtifactError Upstream renamed lockFile to fileName in ArtifactError type (#41631). --------- Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
* feat(git-refs): use dereferenced commit hash for annotated tags
When git ls-remote lists annotated tags, it returns two entries:
1. The tag object hash: refs/tags/v1.0.0 -> abc123
2. The dereferenced commit hash: refs/tags/v1.0.0^{} -> def456
Previously, Renovate used the tag object hash (abc123). However, `git submodule status` returns the actual commit hash (def456). This mismatch caused false-positive dependency updates that resulted in empty commits, since the tag object and commit hash differ even when pointing to the same version.
This feature:
- Parses both entries from git ls-remote into allRefs
- Builds a lookup map of tag names to their dereferenced commit hashes
- For annotated tags, replaces the tag object hash with the commit hash
- Lightweight tags are unaffected (they already return the commit hash)
This ensures Renovate's detected digest matches what git submodule operations actually use, preventing unnecessary update PRs.
* Apply suggestions from code review
Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
* fix typo in dereferencedTags variable name
---------
Co-authored-by: Michael Kriese <michael.kriese@gmx.de>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )