renovatebot/renovate 35.0.0

on GitHub

35.0.0 (2023-03-10)

⚠ BREAKING CHANGES

• require NodeJS v18.12+ (#20838)
• config: Forked repos will now be processed automatically if autodiscover=false. includeForks is removed and replaced by new option forkProcessing.
• Internal checks such as renovate/stability-days will no longer count as passing/green, meaning that actions such as automerge won't
  occur if the only checks are Renovate internal ones. Set internalChecksAsSuccess=true to restore existing behavior.
• versioning: default versioning is now semver-coerced, instead of semver.
• datasource/github-releases: Regex Manager configurations relying on the github-release data-source with digests will have different digest semantics. The digest
  will now always correspond to the underlying Git SHA of the release/version. The old behavior can be preserved by switching to the
  github-release-attachments datasource.
• versioning: bump short ranges to version (#20494)
• config: containerbase/ account used for sidecar containers instead of renovate/
• go: Renovate will now use go's default GOPROXY settings. To avoid using the public proxy, configure GOPROXY=direct.
• datasource/npm: Package cache will include entries for up to 24 hours after the last lookup. Set cacheHardTtlMinutes=0 to revert to existing behavior.
• config: Renovate now defaults to applying hourly and concurrent PR limits. To revert to unlimited, configure them back to 0.
• config: Renovate will now default to updating locked dependency versions. To revert to previous behavior, configure rangeStrategy=replace.
• config: PyPI releases will no longer be filtered by default based on constraints.python compatibility. To retain existing functionality, set
  constraintsFiltering=strict.

Features

• cache: file cache cleanup (#20061) (222cda6), closes #13732
• config: add new option constraintsFiltering (#19992) (dcd298a), closes #19979
• config: default dockerImagePrefix to containerbase (#20150) (ec4b17b)
• config: default to rangeStrategy=auto, prefer update-lockfile (#19942) (016e647), closes #19800
• config: forkProcessing (#20759) (a4ab452), closes #20752
• config: non-zero defaults for PR concurrent, hourly limits (#19958) (a75f9d7), closes #19800
• datasource/github-releases: digest computation use git tag, not file digest (#20178) (177ffed), closes #20160 #19552
• datasource/npm: default cacheHardTtlMinutes to 24 hours (#20079) (d28763f)
• go: default GOPROXY (#20081) (d92e194), closes #20040
• internalChecksAsSuccess (#20572) (f765e6f), closes #7800
• require NodeJS v18.12+ (#20838) (2102b70)
• versioning: default to semver-coerced instead of semver (#20573) (8e2df85)

Bug Fixes

• regex: don’t escape forward slash in fileMatch (#19314) (b6ed33e)
• versioning: bump short ranges to version (#20494) (73c8227), closes #20488

Code Refactoring

• datasource: prefer packageName over depName in datasource (#20221) (d53d39b)
• datasource: use packageName and not depName for datasource lookups (#20474) (b17bcf2)

Miscellaneous Chores

• fix artifacts tests (0f86d31)
• fix coverage (b53b8bc)