⬆️ Update ☕ NodeJS Package renovate to v38

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
renovate (source)	37.440.7 -> 38.8.5

---

Release Notes

renovatebot/renovate (renovate)

v38.8.5

Compare Source

v38.8.4

Compare Source

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v11.1.3 (#​30427) (f2a4833)
• deps: update ghcr.io/containerbase/sidecar docker tag to v11.1.5 (#​30432) (f702925)
• deps: update ghcr.io/renovatebot/base-image docker tag to v7.2.3 (#​30428) (03a0c7e)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v3.3.12 (#​30424) (70cc17f)
• deps: update dependency eslint-plugin-promise to v6.5.1 (#​30410) (8b30e56)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v11.1.3 (#​30426) (e342e81)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v11.1.4 (#​30431) (b713609)
• deps: update linters (#​30422) (a404e49)
• logs: log url stats as trace (#​30421) (73ed5a1)

v38.8.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v7.2.2 (#​30414) (562c537)

v38.8.2

Compare Source

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v11.1.2 (#​30413) (161a9d8)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v11.1.2 (#​30412) (21f17b0)
• deps: update ossf/scorecard-action action to v2.4.0 (#​30408) (3d602d2)

v38.8.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v7.2.1 (#​30407) (4bf2794)

Miscellaneous Chores

• deps: update github/codeql-action action to v3.25.15 (#​30406) (8aa64c3)

v38.8.0

Compare Source

Features

• http: Increase concurrency limit for npm registry (#​30400) (c737c8a)

Bug Fixes

• deps: update ghcr.io/containerbase/sidecar docker tag to v11.1.1 (#​30402) (2e0c287)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v11.1.1 (#​30403) (b3b0860)

Code Refactoring

• https: Separate rules lists by rate limit type (#​30399) (6da6817)

v38.7.1

Compare Source

Bug Fixes

• gitea: wrong state for merged PR (#​30398) (6cc830a)

Tests

• git: enhance commit signing tests (#​30396) (e5f4a1e)

v38.7.0

Compare Source

Features

• manager: add bitrise manager (#​30256) (d439f84)

v38.6.1

Compare Source

Bug Fixes

• package-rules: wrong prefix match glob (#​30394) (4da584a)

Miscellaneous Chores

• drop invalid file (#​30393) (ac9933e)

v38.6.0

Compare Source

Features

• managers/git-submodules: support updating git-tag versions (#​30104) (ba7a39d)

Code Refactoring

• go: Simplify .git suffix handling for GitLab EE (#​30336) (5f0a235)

v38.5.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v7.2.0 (#​30390) (0af6470)

v38.4.0

Compare Source

Features

• manager/argocd: Add support for Kustomize image overrides (#​27670) (a18790c)

v38.3.0

Compare Source

Features

• datasources: add bitrise datasource (#​30138) (4c15038)

v38.2.1

Compare Source

Bug Fixes

• config/migration: migrate wildcard patterns for matchPackagePatterns (#​30382) (442a31c)

Documentation

• fix broken link (#​30383) (fbdb06d)

Miscellaneous Chores

• deps: update dependency ts-jest to v29.2.3 (#​30380) (6935f90)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v11.1.0 (#​30381) (9702a72)

v38.2.0

Compare Source

Features

• templates: allow upgrades in commitMessage and prTitle (#​29955) (08549e2)

v38.1.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v7.1.0 (#​30375) (b2f24db)
• presets: Add monorepo Aspire (#​30363) (8f14d2b)
• presets: add TanStack/table monorepo (#​30342) (14258d5)

Bug Fixes

• submodules: make git submodule update always recursive (#​30361) (0e9e938)

Code Refactoring

• go: Tidy datasource code (#​30335) (9ae6940)
• include parentKey in migration logic (#​30364) (779be77)

Build System

• deps: update dependency node to v20.16.0 (#​30374) (2381ed3)

v38.0.0

Compare Source

⚠ BREAKING CHANGES

• bitbucket-server: autodetect gitAuthor if possible (#​29525)
• require node v20 (#​30291)
• http: dnsCache is now removed
• github: platformCommit will be automatically enabled if running as a GitHub app
• npm: remove RENOVATE_CACHE_NPM_MINUTES (#​28715)
• git: determine branch modification based on all branch commits (#​28225)
• packageRules: matchPackageNames exact matches are now case-insensitive
• datasource/docker: Docker Hub lookups prefer hub.docker.com over index.docker.io. Set RENOVATE_X_DOCKER_HUB_TAGS_DISABLE=true in env to revert behavior.
• package-rules: matchPackageNames and related functions no longer fall back to checking depName.
• logging: File logging must now be set via env and not in config.js
• config: onboardingNoDeps changes from boolean to enum. Repositories with no dependencies will be onboarded unless in autodiscover mode.
• npm: Transitive remediation for npm <7 is no longer supported.
• config: Branch names for remediation will be sanitized to exclude special characters, potentially resulting in some autoclosing/replacing of existing PRs.
• Renovate docker images no longer have -slim tags. Drop the -slim prefix as this is now the default behavior.
• gitea: Gitea platfor authentication will now be done using Bearer auth instead of token auth.
• manager/pep621: depName for pep621 dependencies changes, which will lead to branch name changes, which will lead to some autoclosing and reopening of PRs.
• config: order of globalExtends resolution is changed so that it is applied first and remaining global config takes precedence.

Features

• bitbucket-server: autodetect gitAuthor if possible (#​29525) (716c8cf)
• config: * pattern matches everything (#​28556) (219108d)
• config: change onboardingNoDeps from boolean to enum (#​28133) (0c500f5), closes #​28101
• datasource/docker: prefer hub.docker.com over index.docker.io for tag lookups (#​28400) (adcffd2), closes #​24666
• deps: update ghcr.io/renovatebot/base-image docker tag to v7 (#​30373) (77c0266)
• git: determine branch modification based on all branch commits (#​28225) (03919bb)
• gitea: use Bearer instead of token for auth (#​28308) (a3e29a0)
• github: convert platformCommit to enum (#​29156) (bb6c27f)
• http: remove dnsCache option (#​29449) (2eb7c76)
• logging: drop logFile and logFileLevel (#​29104) (cf29c33)
• logging: initialize file logging via env (#​28104) (c6c4572), closes #​14705
• manager/pep621: remove group name from depName (#​28193) (2ad12cc), closes #​28131
• npm: drop transitiveRemediation option (#​27985) (b05f389)
• npm: remove RENOVATE_CACHE_NPM_MINUTES (#​28715) (23eb2de)
• package-rules: remove depName fallback (#​28548) (3d78ae7)
• packageRules: migrate matchers and excludes (#​28602) (879f7cc)
• packageRules: support glob/regex patterns for matchPackageNames (#​28551) (1e5cf6d)
• packageRules: support regex or glob matching for all (#​28591) (69dab29)
• prepare for containerbase changes (#​29989) (80b0252)
• stop publishing slim docker tags (#​27993) (9b4fb81)

Bug Fixes

• config: globalExtends merge order (#​28145) (e3175a3), closes #​28131
• config: Use depNameSanitized in branch name for vulnerability alerts (#​25166) (33b1cdb)
• deps: update ghcr.io/containerbase/sidecar docker tag to v11 (#​30357) (46f0357)
• normalize Python depName in every manager (#​27733) (2e78a71)
• presets: replace matchPackagePrefix/Patterns with matchPackageNames (#​29159) (2c13498)

Miscellaneous Chores

• deps: update dependency @​swc/core to v1.7.0 (#​30367) (e93b071)
• deps: update dependency @​swc/core to v1.7.1 (#​30371) (6bad833)
• deps: update dependency @​types/node to v20 (e629b2b)
• deps: update ghcr.io/containerbase/devcontainer docker tag to v11 (#​30368) (3bee6bf)
• deps: update github/codeql-action action to v3.25.14 (#​30372) (0b9d899)

Code Refactoring

• vulnerability-alerts: move to REST API (#​27378) (5ed97aa)

Tests

• update wrong assertion (#​28741) (31c6602)

Build System

• drop compatibility from docker image (#​28588) (8859e64)
• require node v20 (#​30291) (09824b1)

---

Configuration

📅 Schedule: Branch creation - "after 12pm on sunday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.