Merge branch 'main' into chore/log-pf

Author: jamietanna

.devcontainer/Dockerfile

@@ -1 +1 @@
-FROM ghcr.io/containerbase/devcontainer:13.24.0
+FROM ghcr.io/containerbase/devcontainer:14.4.3

.github/DISCUSSION_TEMPLATE/mend-hosted-request.yml

@@ -0,0 +1,21 @@
+labels:
+  - mend-app
+body:
+  - type: dropdown
+    id: request-type
+    attributes:
+      label: 'What would you like help with?'
+      options:
+        - 'Upgrade to the Community (OSS) plan'
+
+  - type: input
+    id: organisation-url
+    attributes:
+      label: Please share the URL to the organisation you're creating this request for
+
+  - type: textarea
+    id: remarks
+    attributes:
+      label: Additional information
+      description: |
+        Please provide any relevant information about your project, such as the license(s) used by your project.

.github/DISCUSSION_TEMPLATE/request-help.yml

@@ -3,9 +3,13 @@ body:
     id: how-are-you-running-renovate
     attributes:
       label: How are you running Renovate?
+      description: |
+        Note that if you're using the Mend Renovate Self-Hosted Community/Enterprise Edition (aka "Renovate CE"/"Renovate EE"), please raise an issue on the [mend/renovate-ce-ee issue tracker](https://github.com/mend/renovate-ce-ee/issues/new?template=request-help.yml).
+
+        If it happens to be a Renovate CLI issue, we can continue to support it over there.
       options:
         - 'A Mend.io-hosted app'
-        - 'Self-hosted Renovate'
+        - 'Self-hosted Renovate CLI'
 
   - type: dropdown
     id: self-hosted-platform
@@ -26,7 +30,7 @@ body:
     attributes:
       label: Which version of Renovate are you using?
       description: |
-        Please do not say 'latest' version (as Renovate ships many updates daily), but instead note the exact version.
+        Please do not say 'latest' version (as Renovate ships many updates daily) or the major version number, but instead note the exact version.
         You can find it by checking the `INFO: Repository started` log line.
     validations:
       required: false

.github/actions/calculate-prefetch-matrix/action.yml

@@ -6,6 +6,7 @@
 #   - `env` can be specified per-step only
 #   - if `run` is used, `shell` must be explicitly specified
 name: 'Calculate matrix for `node_modules` prefetch'
+description: 'Calculate matrix for `node_modules` prefetch'
 inputs:
   repo:
     description: 'Repository name'
@@ -34,7 +35,7 @@ runs:
 
     - name: Check cache miss for MacOS
       id: macos-cache
-      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       with:
         path: node_modules
         key: ${{ env.MACOS_KEY }}

.github/actions/setup-node/action.yml

@@ -21,6 +21,25 @@ inputs:
 runs:
   using: 'composite'
   steps:
+    # Per #41288 and #41289, make sure that we fail if the values are provided as an empty string
+    - name: Make sure that required parameters aren't an empty string
+      shell: bash
+      run: |
+        error=0
+        if [[ -z "${{ inputs.node-version }}" ]]; then
+          >&2 echo 'Error: `node-version` is a required argument, but it was empty'
+          error=1
+        fi
+
+        if [[ -z "${{ inputs.os }}" ]]; then
+          >&2 echo 'Error: `os` is a required argument, but it was empty'
+          error=1
+        fi
+
+        if [[ $error -ne 0 ]]; then
+          exit 1
+        fi
+
     - name: Calculate `CACHE_KEY`
       shell: bash
       run: |
@@ -34,7 +53,7 @@ runs:
 
     - name: Restore `node_modules`
       id: node-modules-restore
-      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       with:
         path: node_modules
         key: ${{ env.CACHE_KEY }}
@@ -53,7 +72,7 @@ runs:
         standalone: true
 
     - name: Setup Node
-      uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
       with:
         node-version: ${{ inputs.node-version }}
 
@@ -64,7 +83,7 @@ runs:
 
     - name: Cache and restore `pnpm store`
       if: env.CACHE_HIT != 'true'
-      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       with:
         path: ${{ env.PNPM_STORE }}
         key: |
@@ -87,7 +106,7 @@ runs:
 
     - name: Write `node_modules` cache
       if: inputs.save-cache == 'true' && env.CACHE_HIT != 'true'
-      uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       with:
         path: node_modules
         key: ${{ env.CACHE_KEY }}

.github/contributing.md

@@ -94,6 +94,16 @@ And some options:
 - `--verbose=false` to avoid the test list
 - `--coverage=false` to avoid collecting coverage, faster for the part you need the test to pass
 
+### Quick Local CI Check
+
+For a local check that mirrors CI:
+
+```bash
+pnpm check
+```
+
+This runs all checks in parallel: auto-fixes, lint, type-check, and only the test shards affected by your changes.
+
 ## Do not force push to your pull request branch
 
 Please do not force push to your PR's branch after you have created your PR, as doing so forces us to review the whole PR again.

.github/label-actions.yml

@@ -276,7 +276,7 @@
 
 
     ```ts
-    /* v8 ignore next -- typescript strict null check */
+    /* v8 ignore if -- typescript strict null check */
     if (!url) {
       return null;
     }
@@ -718,4 +718,16 @@
     Otherwise, please be aware that excessive comments or debates inside Issue comments result in them being less likely to be worked on, not more likely.
 
 
+    Thanks, the Renovate team
+
+'auto:specific-version':
+  comment: >
+    Hi there,
+
+    To the Discussion creator: please edit and improve the "Which version of Renovate are you using?" answer.
+
+    You've specified either `latest` or a major version number, but as Renovate ships many updates daily, the specific version of Renovate that runs changes.
+
+    You can find the specific Renovate version by checking the `INFO: Repository started` log line.
+
     Thanks, the Renovate team

.github/pull_request_template.md

@@ -8,9 +8,9 @@
 
 ## Context
 
-Please select one of the below:
+Please select one of the following:
 
-- [ ] This closes an existing Issue, Closes: #
+- [ ] This closes an existing Issue, Closes: # <!-- NOTE that this should NOT be a Discussion -->
 - [ ] This doesn't close an Issue, but I accept the risk that this PR may be closed if maintainers disagree with its opening or implementation
 
 ## AI assistance disclosure
@@ -23,7 +23,7 @@ Please select one option and, if yes, briefly describe how AI was used (e.g., co
 
 - [ ] No — I did not use AI for this contribution.
 - [ ] Yes — minimal assistance (e.g., IDE autocomplete, small code completions, grammar fixes).
-- [ ] Yes — substantive assistance (AI generated non‑trivial portions of code, tests, or documentation).
+- [ ] Yes — substantive assistance (AI-generated non‑trivial portions of code, tests, or documentation).
 - [ ] Yes — other (please describe):
 
 ## Documentation (please check one with an [x])
@@ -37,12 +37,12 @@ I have verified these changes via:
 
 - [ ] Code inspection only, or
 - [ ] Newly added/modified unit tests, or
-- [ ] No unit tests but ran on a real repository, or
+- [ ] No unit tests, but ran on a real repository, or
 - [ ] Both unit tests + ran on a real repository
 
 The public repository: <URL>
 
-<!-- Do you have any suggestions about this PR template? Edit it here: https://github.com/renovatebot/renovate/edit/main/.github/pull_request_template.md -->
+<!-- If you have any suggestions about this PR template, edit it here: https://github.com/renovatebot/renovate/edit/main/.github/pull_request_template.md -->
 
 <!-- Please do not force push to your PR's branch after you have created your PR, as doing so forces us to review the whole PR again. This makes it harder for us to review your work because we don't know what has changed. -->
-<!-- PRs will always be squashed by us when we merge your work. Commit as many times as you need in this branch. -->
+<!-- PRs will always be squashed by us when we merge your work. You can commit as many times as you need in this branch. -->

.github/workflows/auto-pr.yml

@@ -0,0 +1,18 @@
+name: auto-pr
+
+on:
+  pull_request_target:
+    types:
+      - opened
+
+jobs:
+  review:
+    if: github.event.action == 'opened' && !endsWith(github.event.pull_request.user.login, '[bot]')
+    runs-on: ubuntu-24.04
+    permissions:
+      pull-requests: write
+    steps:
+      - uses: hkusu/review-assign-action@5bee595fdb9765d4a0bd35724b6302fa15569158 # v1.4.0
+        with:
+          reviewers: ${{ vars.REVIEWERS }}
+          max-num-of-reviewers: 2