fix(config)!: Use depNameSanitized in branch name for vulnerability…

… alerts (#25166)

Use sanitized depName in vulnerability/remediation branches instead of raw depName. This will result in some open remediation branches being autoclosed and replaced for ecosystems like go in particular which have special characters in depNames.

BREAKING CHANGE: Branch names for remediation will be sanitized to exclude special characters, potentially resulting in some autoclosing/replacing of existing PRs.

lib/config/options/index.ts

@@ -2084,7 +2084,7 @@ const options: RenovateOptions[] = [
       minimumReleaseAge: null,
       rangeStrategy: 'update-lockfile',
       commitMessageSuffix: '[SECURITY]',
-      branchTopic: `{{{datasource}}}-{{{depName}}}-vulnerability`,
+      branchTopic: `{{{datasource}}}-{{{depNameSanitized}}}-vulnerability`,
       prCreation: 'immediate',
     },
     mergeable: true,

lib/workers/repository/init/__snapshots__/vulnerability.spec.ts.snap

@@ -5,7 +5,7 @@ exports[`workers/repository/init/vulnerability detectVulnerabilityAlerts() retur
   {
     "allowedVersions": "1.8.3",
     "force": {
-      "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
+      "branchTopic": "{{{datasource}}}-{{{depNameSanitized}}}-vulnerability",
       "commitMessageSuffix": "[SECURITY]",
       "dependencyDashboardApproval": false,
       "groupName": null,
@@ -40,7 +40,7 @@ exports[`workers/repository/init/vulnerability detectVulnerabilityAlerts() retur
   {
     "allowedVersions": "1.8.3",
     "force": {
-      "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
+      "branchTopic": "{{{datasource}}}-{{{depNameSanitized}}}-vulnerability",
       "commitMessageSuffix": "[SECURITY]",
       "dependencyDashboardApproval": false,
       "groupName": null,
@@ -75,7 +75,7 @@ exports[`workers/repository/init/vulnerability detectVulnerabilityAlerts() retur
   {
     "allowedVersions": "2.7.9.4",
     "force": {
-      "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
+      "branchTopic": "{{{datasource}}}-{{{depNameSanitized}}}-vulnerability",
       "commitMessageSuffix": "[SECURITY]",
       "dependencyDashboardApproval": false,
       "groupName": null,
@@ -110,7 +110,7 @@ exports[`workers/repository/init/vulnerability detectVulnerabilityAlerts() retur
   {
     "allowedVersions": "==2.2.1.0",
     "force": {
-      "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
+      "branchTopic": "{{{datasource}}}-{{{depNameSanitized}}}-vulnerability",
       "commitMessageSuffix": "[SECURITY]",
       "dependencyDashboardApproval": false,
       "groupName": null,