Update dependency renovatebot/renovate from 43.112.1 to v43.138.0 (.github/workflows/renovate.yaml) by renovate[bot] · Pull Request #14709 · DefectDojo/django-DefectDojo

renovate · 2026-04-19T08:54:51Z

This PR contains the following updates:

Package	Update	Change
renovatebot/renovate	minor	`43.112.1` → `43.138.0`

Release Notes

renovatebot/renovate (renovatebot/renovate)

`v43.138.0`

Compare Source

Features

manager/github-actions: use github-actions versioning by default (#42713) (57d5fb3), closes #42331

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.36.3 (main) (#42785) (c1d2f07)
versioning/github-actions: correctly handle major.minor and major (#42769) (413d941)

Miscellaneous Chores

types: add missing ConstraintName enforcement (#42745) (c5a87ef)

Build System

deps: update dependency @redis/client to v5.12.0 (main) (#42786) (8e4cd34)

`v43.137.0`

Compare Source

`v43.136.3`

Compare Source

Bug Fixes

datasource/pypi: sanitize GAR userinfo for authenticated lookups (#42541) (459db80)

`v43.136.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.36.2 (main) (#42777) (63dcc7f)

Miscellaneous Chores

deps: update dependency pdm to v2.26.8 (main) (#42776) (ac4837b)

`v43.136.1`

Compare Source

Bug Fixes

config: resolve repository entry presets in correct order (#41477) (b24b88b)
deps: update ghcr.io/renovatebot/base-image docker tag to v13.36.1 (main) (#42775) (950182f)

Miscellaneous Chores

deps: update dependency @biomejs/biome to v2.4.11 (main) (#42034) (a561b74)
deps: update ghcr.io/containerbase/devcontainer docker tag to v14.7.1 (main) (#42774) (4f3e19f)
move from volta.sh to mise (#40567) (3237a4c)

`v43.136.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.36.0 (main) (#42773) (1f3648a)

`v43.135.0`

Compare Source

Features

mise: add pnpm and yarn tools (#42764) (f484b8f)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.7.0 (main) (#42771) (65a5d0c)

`v43.134.1`

Compare Source

Bug Fixes

vulnerability: use datasource default versioning instead of hardcoded map (#42743) (08031af)

`v43.134.0`

Compare Source

Features

nuget: update lock files when Directory.Build.props is changed (#42735) (945acf6), closes #15696 #8010

Bug Fixes

workers/repository: correctly pass all version numbers to versioning (#42767) (a11f338)

Miscellaneous Chores

deps: update dependency tsdown to v0.21.8 (main) (#42765) (e22b060)

`v43.133.0`

Compare Source

Features

manager/gradle: add support for implicit version catalog accessor syntax (#42746) (4dbfc7a)

`v43.132.3`

Compare Source

`v43.132.2`

Compare Source

Bug Fixes

versioning/github-actions: allow v1.2 to be treated as a version (#42761) (673fb8e)

Documentation

community-tools: add renovate-pretty-log-tui (#42596) (f9f0103)
update references to jaegertracing/jaeger to v2.17.0 (main) (#42749) (476f42a)
update references to python to 63fdc2b (main) (#42748) (6473c40)

Miscellaneous Chores

deps: update actions/setup-node action to v6.4.0 (main) (#42756) (970113c)
deps: update containerbase/internal-tools action to v4.5.26 (main) (#42750) (b4736d0)
deps: update containerbase/internal-tools action to v4.5.27 (main) (#42752) (da01772)
deps: update containerbase/internal-tools action to v4.5.28 (main) (#42755) (3e01ba6)
deps: update dependency @containerbase/istanbul-reports-html to v1.1.44 (main) (#42751) (47a3ba2)
deps: update dependency @containerbase/semantic-release-pnpm to v1.3.34 (main) (#42753) (88c141d)

`v43.132.1`

Compare Source

Build System

deps: update dependency better-sqlite3 to v12.9.0 (main) (#42747) (bb7e5d7)

`v43.132.0`

Compare Source

Features

github-actions: add support for jakebailey/pyright-action version option (#42744) (9510d13)

`v43.131.0`

Compare Source

Features

manager/pixi: set currentVersion field for exact pypi dependency versions (#42741) (e70fb64)

`v43.130.1`

Compare Source

Bug Fixes

Revert "build(deps): update dependency simple-git to v3.36.0 (main)" (#42737) (243b297), closes #42736

`v43.130.0`

Compare Source

Features

manager/cake: Take nuget.config into account for registryUrls of nuget packages (#41545) (a6238a4)

`v43.129.1`

Compare Source

Miscellaneous Chores

deps: update containerbase/internal-tools action to v4.5.25 (main) (#42731) (469c2a3)

Build System

deps: update dependency simple-git to v3.36.0 (main) (#42736) (722c0b2)

`v43.129.0`

Compare Source

Features

versioning: add a github-actions versioning (#42712) (d508716)

`v43.128.1`

Compare Source

Bug Fixes

datasource/npm: catch invalid engines (#42718) (06cf949)

Continuous Integration

add an auto-label for new monorepo.json onboarding (#42660) (5cfb467)
auto-label: manually comment + close issues (#42722) (170cf56)

`v43.128.0`

Compare Source

Features

vulnerability: improve GitHub advisory PR body notes with summary, GHSA ID and references (#42670) (be2eacd)

Miscellaneous Chores

versioning: allow providing known versions to module (#42719) (171d177)

`v43.127.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.35.2 (main) (#42717) (a4456c1)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v4.5.24 (main) (#42665) (19a2409)
deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.23 (main) (#42715) (1953812)

Code Refactoring

logger: use expose to load bunyan (#42714) (954ec4f)

`v43.127.2`

Compare Source

Bug Fixes

manager/github-actions: revert recent changes (#42707) (db64cc6), closes #42690 #42683 #42685
presets: restore custom versioning (#42693) (5437860)

Miscellaneous Chores

deps: update devcontainers/ci action to v0.3.1900000449 (main) (#42705) (fe10c94)

`v43.127.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.35.1 (main) (#42703) (ff5d33c)

`v43.127.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.35.0 (main) (#42702) (9607626)

Miscellaneous Chores

deps: update devcontainers/ci action to v0.3.1900000448 (main) (#42699) (5a75eff)

`v43.126.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.34.0 (main) (#42697) (4b61c70)

Miscellaneous Chores

deps: update dependency node to v24.15.0 (main) (#42695) (dc90208)

`v43.125.1`

Compare Source

Bug Fixes

manager/github-actions: override versioning for Actions with Immutable Tags (#42690) (1b0785b)

`v43.125.0`

Compare Source

Features

replacements: migrate users to astral/setup-uv v8 (#42683) (f5859c2)

`v43.124.1`

Compare Source

Bug Fixes

docker: only set replaceString if requested (#42649) (f6d4106)

`v43.124.0`

Compare Source

Features

manager/github-actions: use semver-partial as default versioning (#42685) (da04b8e), closes #42331

Documentation

fix link in vulnerabilityAlerts docs (#42680) (b0fd397)

Continuous Integration

auto-prs: handle draft PRs better (#42686) (0a86cc5)

`v43.123.8`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.35 (main) (#42681) (4b597ec)
package-rules: correctly merge force.enabled (#42679) (ae22250), closes #42666

Tests

git: test failing when no git author is configured (#42676) (f9bddb9)

`v43.123.7`

Compare Source

Miscellaneous Chores

deps: update vitest monorepo to v4.1.4 (main) (#42677) (7907192)

Build System

deps: update node.js to v24.15.0 (main) (#42678) (a40a0f0)

`v43.123.6`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.34 (main) (#42675) (5251496)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.22 (main) (#42674) (f69abc5)

`v43.123.5`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.33 (main) (#42673) (d33efe2)

`v43.123.4`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.32 (main) (#42669) (a14d85b)

`v43.123.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.31 (main) (#42668) (7d2c1ac)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.21 (main) (#42667) (f891066)

`v43.123.2`

Compare Source

Bug Fixes

instrumentation: re-add span_id and trace_id to logs (#42647) (63618c6)

`v43.123.1`

Compare Source

Miscellaneous Chores

deps: update containerbase/internal-tools action to v4.5.22 (main) (#42658) (9e33c20)

Build System

deps: update dependency @renovatebot/pgp to v1.3.6 (main) (#42657) (80146b2)

Continuous Integration

auto-label needs-discussion on externally-raised Issues (#42656) (6a0e718)

`v43.123.0`

Compare Source

Features

add XcodeGen manager for Swift package dependencies in project.yml files (#41889) (0ff55d2)
presets: add BUN_CONFIG_MAX_HTTP_REQUESTS to safe global env (#41350) (1316fd7)
presets: add changelogUrl link for Forgejo and Gitea digest updates (#41786) (0f9a516)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v4.5.21 (main) (#42654) (3891a11)

Code Refactoring

terraform-module: replace interfaces with zod schemas and inline fixtures (#42399) (914c55b)

`v43.122.0`

Compare Source

Features

manager/ant: support custom registryUrls (#42641) (28ab04b)

Documentation

use single quotes (#42648) (3c8521e)

Miscellaneous Chores

deps: update github/codeql-action action to v4.35.2 (main) (#42650) (40100d0)

`v43.121.0`

Compare Source

Features

manager/ant: add coords= attribute syntax support (#42635) (15c8ab5)
terraform-provider: use registry v2 API for release timestamps (#42340) (f421075)

Bug Fixes

git: don't pass extraCloneOpts to ls-remote when local clone exists (#42491) (70fa962)
gitlab: loosen re-approve constraints during updatePr (#42528) (7b4f75b)

Documentation

correct name of osv-offline (#42486) (0fbc124)
minimum-release-age: add reference to cooldowns (#42640) (25e47df)

Miscellaneous Chores

deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1 (main) (#42642) (61947e2)

Code Refactoring

cache: Remove obsolete compress flag (#42563) (f49de7a)

Build System

deps: update dependency @renovatebot/osv-offline to v2.5.0 (main) (#42645) (4cb4030)

`v43.120.2`

Compare Source

Bug Fixes

vulnerability: remove matchFileNames restriction from GitHub vulnerability alerts (#42636) (593a2b1)

`v43.120.1`

Compare Source

Bug Fixes

logger: log file using pretty format not working (#42319) (1c886e0)

`v43.120.0`

Compare Source

Features

vulnerability: add severity and CVSS details to GitHub Dependabot alerts (#42568) (1e906e8)

Miscellaneous Chores

instrumentation: add timing statistics for getReleases (#42523) (f635ae2)

`v43.119.0`

Compare Source

Features

manager/ant: add file traversal (#42631) (76dcc66)

`v43.118.2`

Compare Source

Bug Fixes

util/git: allow setting config.hooksPath (#42630) (33c1bf5), closes #42588 #42628

`v43.118.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.30 (main) (#42629) (015264e)

Miscellaneous Chores

expose known environment variables (#42201) (b39b50f)

`v43.118.0`

Compare Source

Features

manager/ant: add property resolution and .properties file support (#42175) (ef8e6c8)

`v43.117.0`

Compare Source

Features

bitbucket-pipelines: update file patterns to support shared configs (#41704) (53bd796)
cache: add a in-memory expiry map to package file cache (#42531) (5184761)

`v43.116.1`

Compare Source

Build System

deps: update dependency @renovatebot/pgp to v1.3.5 (main) (#42626) (7363aee)

`v43.116.0`

Compare Source

Features

osv: mark malicious packages with skipReasons (#42510) (01f2479)

Miscellaneous Chores

deps: update dependency typescript to v6 (main) (#42615) (d9417b0)

Code Refactoring

move requireConfig to InheritConfig (#41385) (36f9d4a)

`v43.115.1`

Compare Source

Miscellaneous Chores

deps: update actions/github-script action to v9 (main) (#42613) (1fac64b)
deps: update actions/upload-pages-artifact action to v5 (main) (#42614) (cf79688)
deps: update dependency vitest-mock-extended to v4 (main) (#42616) (1afe9a7)
deps: update nick-fields/retry action to v4 (main) (#42617) (7eee338)
deps: update slackapi/slack-github-action action to v3 (main) (#42619) (d2d8297)
deps: update vitest monorepo to v4.1.3 (main) (#42623) (6cf2410)
drop obsolete tsconfig (#42622) (fcf1e20)
renovate: disable next branch (#42620) (d2abeb4)
tsdown: migrate config (#42621) (32964bd)
types: add skipStage=enrichment (#42585) (4faa847)

Build System

deps: update dependency p-queue to v9.1.2 (main) (#42624) (19baa76)
deps: update dependency simple-git to v3.35.2 (main) (#42588) (a7b5b48)

`v43.115.0`

Compare Source

Features

packageRules: bumpVersions.type sync (#42540) (0389869)

`v43.114.0`

Compare Source

Features

manager/mise: add support for openfga (#42611) (203c5fe)

Miscellaneous Chores

deps: update zizmorcore/zizmor-action action to v0.5.3 (main) (#42607) (c815d30)
types: add a strong type for ToolName and ConstraintName (#42589) (1044a80), closes #41849

`v43.113.0`

Compare Source

Features

sbt: support anonymous objects and dotted symbols for version declaration (#40699) (ef3c964)

Bug Fixes

workers/repository: don't include skipReason'd dependencies in flattened updates (#42595) (f8b4477), closes #42510

Miscellaneous Chores

deps: update actions/cache action to v5.0.5 (main) (#42598) (a808338)
deps: update containerbase/internal-tools action to v4.5.20 (main) (#42602) (d2131a7)
deps: update dependency @smithy/util-stream to v4.5.22 (main) (#42603) (81e51cb)

Configuration

📅 Schedule: (UTC)

Branch creation
- Only on Sunday (* * * * 0)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

mtesauro

Approved

…ithub/workflows/renovate.yaml)

renovate bot added the dependencies Pull requests that update a dependency file label Apr 19, 2026

renovate bot requested review from Maffooch and mtesauro as code owners April 19, 2026 08:54

renovate bot added the dependencies Pull requests that update a dependency file label Apr 19, 2026

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from 3c7498e to d5edca6 Compare April 19, 2026 10:14

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.129.1 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.130.1 (.github/workflows/renovate.yaml) Apr 19, 2026

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from d5edca6 to 52700b4 Compare April 19, 2026 13:01

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.130.1 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.131.0 (.github/workflows/renovate.yaml) Apr 19, 2026

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from 52700b4 to 591d976 Compare April 19, 2026 16:29

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.131.0 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.132.0 (.github/workflows/renovate.yaml) Apr 19, 2026

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from 591d976 to 24e3cbd Compare April 19, 2026 21:24

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.132.0 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.132.1 (.github/workflows/renovate.yaml) Apr 19, 2026

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from 24e3cbd to 0d800f9 Compare April 20, 2026 13:40

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.132.1 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.133.0 (.github/workflows/renovate.yaml) Apr 20, 2026

mtesauro approved these changes Apr 20, 2026

View reviewed changes

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from 0d800f9 to c7c0ccb Compare April 20, 2026 16:12

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.133.0 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.134.0 (.github/workflows/renovate.yaml) Apr 20, 2026

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from c7c0ccb to 73767c2 Compare April 20, 2026 17:08

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.134.0 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.134.1 (.github/workflows/renovate.yaml) Apr 20, 2026

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from 73767c2 to 704449f Compare April 20, 2026 23:03

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.134.1 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.136.1 (.github/workflows/renovate.yaml) Apr 20, 2026

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from 704449f to 82b53f5 Compare April 21, 2026 08:54

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.136.1 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.136.3 (.github/workflows/renovate.yaml) Apr 21, 2026

Update dependency renovatebot/renovate from 43.112.1 to v43.138.0 (.g…

dc01c0f

…ithub/workflows/renovate.yaml)

renovate bot force-pushed the renovate/renovatebot-renovate-43.x branch from 82b53f5 to dc01c0f Compare April 21, 2026 12:49

renovate bot changed the title ~~Update dependency renovatebot/renovate from 43.112.1 to v43.136.3 (.github/workflows/renovate.yaml)~~ Update dependency renovatebot/renovate from 43.112.1 to v43.138.0 (.github/workflows/renovate.yaml) Apr 21, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency renovatebot/renovate from 43.112.1 to v43.138.0 (.github/workflows/renovate.yaml)#14709

Update dependency renovatebot/renovate from 43.112.1 to v43.138.0 (.github/workflows/renovate.yaml)#14709
renovate[bot] wants to merge 1 commit intodevfrom
renovate/renovatebot-renovate-43.x

renovate bot commented Apr 19, 2026 •

edited

Loading

Uh oh!

mtesauro left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Apr 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Miscellaneous Chores

Build System

Bug Fixes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Features

Features

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Documentation

Miscellaneous Chores

Build System

Features

Features

Bug Fixes

Features

Miscellaneous Chores

Build System

Features

Bug Fixes

Continuous Integration

Features

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Code Refactoring

Bug Fixes

Miscellaneous Chores

Bug Fixes

Features

Miscellaneous Chores

Features

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Features

Documentation

Continuous Integration

Bug Fixes

Tests

Miscellaneous Chores

Build System

Bug Fixes

Miscellaneous Chores

Bug Fixes

Bug Fixes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Build System

Continuous Integration

Features

Miscellaneous Chores

Code Refactoring

Features

Documentation

Miscellaneous Chores

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Build System

Bug Fixes

Bug Fixes

renovate bot commented Apr 19, 2026 •

edited

Loading