2.0.0

Note: contents are unchanged since 2.0.0-pre.0.

Version 2.0.0 of whitesource/renovate introduces dynamic package manager installs, starting with npm. This means that Renovate will attempt to detect and install the most appropriate version of npm for each lock file. So while the image is built with node@16 and npm@8, it can downgrade itself to npm@6 when necessary.

Package Manager updates

• node@16.13.1
• npm@8.3.0
• yarn@1.22.17
• php@7.4.26
• composer@2.1.12
• go@1.17.3
• pipenv@2021.11.15
• rust@1.56.1
• pnpm@6.22.2
• dotnet@3.1.415
• helm@3.7.1

Renovate OSS updates

Renovate OSS is updated from v27.31.10 to v31.28.2. For the full list of changes within, see here.

Breaking Changes

• gomod: Go modules lookups will now no longer fallback to Renovate native lookups if GOPROXY is configured and without "direct" explicitly configured.
• config: hostRules are no longer automatically derived from env variables such as NPM_X_TOKEN. Set detectHostRulesFromEnv=true in config to re-enable same functionality
• config: Configurations extending config:base will now default to maximum 10 concurrent PRs instead of 20
• config: Renovate will now fail if RENOVATE_CONFIG_FILE is specified without a file extension

Feature Highlights

• github: platform-native automerge (platformAutomerge)
• bitbucket-pipelines: support bitbucket pipe renovation
• gomod: Add GOPROXY caching
• helmsman: new helmsman manager
• regex: depType can be captured and templated
• cargo: Use --workspace for crate updating
• config: replace secrets in global config as well
• onboardingNoDeps feature
• dockerfile: support default environment variable values
• npm: support updating packageManager field and Yarn binary
• kustomize: Support Component kustomizations
• onboarding: use .editorconfig file to get indentation style
• replace deprecated dependencies with their replacements
• maven: Leverage index HTML for Maven Central
• kustomize: support HelmChartInflationGenerator
• aws-machine-image datasource
• jsonnet-bundler: add support
• support update-lockfile for unconstrained deps
• release notes: Show release notes from monorepo
• composer: support providers without a hash
• binarySource=install
• config: allow exporting async config