Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: renovatebot/renovate
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 39.213.1
Choose a base ref
...
head repository: renovatebot/renovate
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 39.213.2
Choose a head ref
  • 3 commits
  • 6 files changed
  • 1 contributor

Commits on Mar 24, 2025

  1. chore(deps): update github/codeql-action action to v3.28.13 (main) (#… 

    …34974)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored Mar 24, 2025
    Loading
    Loading status checks…
    Copy the full SHA
    33d3be4 View commit details

  2. chore(deps): update dependency pnpm to v10.6.4 (main) (#34973) 

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored Mar 24, 2025
    Loading
    Loading status checks…
    Copy the full SHA
    d625eb5 View commit details

  3. fix(deps): update ghcr.io/renovatebot/base-image docker tag to v9.51.… 

    …2 (main) (#34975)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored Mar 24, 2025
    Loading
    Loading status checks…
    Copy the full SHA
    dbf6df9 View commit details
Showing with 12 additions and 12 deletions.
  1. +1 −1 .devcontainer/Dockerfile
  2. +3 −3 .github/workflows/codeql-analysis.yml
  3. +1 −1 .github/workflows/scorecard.yml
  4. +1 −1 .github/workflows/trivy.yml
  5. +2 −2 package.json
  6. +4 −4 tools/docker/Dockerfile
2 changes: 1 addition & 1 deletion .devcontainer/Dockerfile
View file
Original file line number Diff line number Diff line change
@@ -2,4 +2,4 @@ FROM ghcr.io/containerbase/devcontainer:13.8.8

# https://github.com/pnpm/pnpm/issues/8971
# renovate: datasource=npm
RUN install-tool pnpm 10.6.3
RUN install-tool pnpm 10.6.4
6 changes: 3 additions & 3 deletions .github/workflows/codeql-analysis.yml
View file
Original file line number Diff line number Diff line change
@@ -41,7 +41,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
with:
languages: javascript

@@ -51,7 +51,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
uses: github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13

# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
@@ -65,4 +65,4 @@ jobs:
# make release

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
2 changes: 1 addition & 1 deletion .github/workflows/scorecard.yml
View file
Original file line number Diff line number Diff line change
@@ -51,6 +51,6 @@ jobs:

# Upload the results to GitHub's code scanning dashboard.
- name: 'Upload to code-scanning'
uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
with:
sarif_file: results.sarif
2 changes: 1 addition & 1 deletion .github/workflows/trivy.yml
View file
Original file line number Diff line number Diff line change
@@ -31,7 +31,7 @@ jobs:
format: 'sarif'
output: 'trivy-results.sarif'

- uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
- uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
with:
sarif_file: trivy-results.sarif
category: 'docker-image-${{ matrix.tag }}'
4 changes: 2 additions & 2 deletions package.json
View file
Original file line number Diff line number Diff line change
@@ -142,7 +142,7 @@
},
"volta": {
"node": "22.14.0",
"pnpm": "10.6.3"
"pnpm": "10.6.4"
},
"dependencies": {
"@aws-sdk/client-codecommit": "3.738.0",
@@ -350,7 +350,7 @@
"vitest": "3.0.9",
"vitest-mock-extended": "3.0.1"
},
"packageManager": "pnpm@10.6.3",
"packageManager": "pnpm@10.6.4",
"files": [
"dist",
"renovate-schema.json"
8 changes: 4 additions & 4 deletions tools/docker/Dockerfile
View file
Original file line number Diff line number Diff line change
@@ -5,27 +5,27 @@ ARG BASE_IMAGE_TYPE=slim
# --------------------------------------
# slim image
# --------------------------------------
FROM ghcr.io/renovatebot/base-image:9.51.1@sha256:437f4569035b74cc2dcee38ec6b98362c8ea881d7c50f8da06cd2de3c26c2adb AS slim-base
FROM ghcr.io/renovatebot/base-image:9.51.2@sha256:150b7b809c27d5e9910dd223d6aa878336e211810cb48062a8403e1febfa79eb AS slim-base

# --------------------------------------
# full image
# --------------------------------------
FROM ghcr.io/renovatebot/base-image:9.51.1-full@sha256:f10d04af121a46078544134bb2d271fea6654a338c49d70df740a89985bcb3fa AS full-base
FROM ghcr.io/renovatebot/base-image:9.51.2-full@sha256:4abaa688c9382280f0d99b591cd66a7e5292f592b1fd6c1281f32bde3a0156f9 AS full-base

ENV RENOVATE_BINARY_SOURCE=global

# --------------------------------------
# build image
# --------------------------------------
FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:9.51.1@sha256:437f4569035b74cc2dcee38ec6b98362c8ea881d7c50f8da06cd2de3c26c2adb AS build
FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:9.51.2@sha256:150b7b809c27d5e9910dd223d6aa878336e211810cb48062a8403e1febfa79eb AS build

# We want a specific node version here
# renovate: datasource=github-releases packageName=containerbase/node-prebuild versioning=node
RUN install-tool node 22.14.0

# corepack is too buggy 😞
# renovate: datasource=npm
RUN install-tool pnpm 10.6.3
RUN install-tool pnpm 10.6.4

WORKDIR /usr/local/renovate