Merge branch 'main' into feat/maas-ephemeral-key-cleanup-tests

Author: dbasunag

.pre-commit-config.yaml

@@ -1,5 +1,7 @@
 ci:
     autofix_prs: true
+    autoupdate_schedule: weekly
+    autoupdate_commit_msg: "chore: update pre-commit hooks"
 
 minimum_pre_commit_version: 3.3.0
 default_install_hook_types: [pre-commit, commit-msg]
@@ -39,7 +41,7 @@ repos:
         exclude: .*/__snapshots__/.*|.*-input\.json$|^semgrep\.yaml$
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.7
+    rev: v0.15.8
     hooks:
       - id: ruff
       - id: ruff-format
@@ -88,7 +90,7 @@ repos:
           pass_filenames: false
 
   - repo: https://github.com/rhysd/actionlint
-    rev: v1.7.11
+    rev: v1.7.12
     hooks:
       - id: actionlint
 

renovate.json

@@ -2,14 +2,18 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended",
-    ":dependencyDashboardApproval",
+    ":prHourlyLimitNone",
+    ":dependencyDashboard",
     ":maintainLockFilesWeekly",
-    ":prHourlyLimitNone"
+    ":semanticCommitTypeAll(chore)"
   ],
   "prConcurrentLimit": 0,
-  "lockFileMaintenance": {
+  "rangeStrategy": "update-lockfile",
+  "commitBody": "Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
+  "labels": ["dependencies"],
+  "vulnerabilityAlerts": {
     "enabled": true,
-    "dependencyDashboardApproval": false
+    "labels": ["security"]
   },
   "baseBranchPatterns": [
     "main"
@@ -56,7 +60,7 @@
         "before 6pm on wednesday"
       ],
       "prPriority": 5,
-      "dependencyDashboardApproval": false
+      "pinDigests": true
     }
   ]
 }