Merge branch 'main' into feat/update-baseBranch

.devcontainer/devcontainer.json

@@ -19,7 +19,8 @@
         "dbaeumer.vscode-eslint",
         "esbenp.prettier-vscode",
         "orta.vscode-jest",
-        "EditorConfig.editorconfig"
+        "editorconfig.editorconfig",
+        "github.vscode-github-actions"
       ]
     }
   },

.eslintrc.js

@@ -208,6 +208,7 @@ module.exports = {
           'error',
           { devDependencies: true },
         ],
+        'no-console': 'off',
       },
     },
     {

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -3,12 +3,16 @@ description: Bug reports are only for maintainers. If you are a Renovate user, c
 labels:
   ['type:bug', 'status:requirements', 'priority-5-triage', 'needs-discussion']
 body:
+  - type: markdown
+    attributes:
+      value: '# This form is for Renovate maintainers only.'
+
   - type: markdown
     attributes:
       value: |
-        STOP! Only create a Bug Report if you're a maintainer of Renovate.
+        **Stop!** Only create a Bug Report if you're a maintainer of Renovate.
         If you're a user of Renovate, please create a GitHub Discussion.
-        Please go back a step and select Discussion instead of Issue.
+        Please go back a step and select _Start a discussion_ instead of Issue.
 
   - type: dropdown
     id: how-are-you-running-renovate

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,7 +1,17 @@
 name: Feature request
-description: For maintainers only. For everyone else, please start an Ideas [discussion](https://github.com/renovatebot/renovate/discussions/new).
-labels: ['type:feature', 'status:requirements', 'priority-5-triage']
+description: For maintainers only. For everyone else, please start an Ideas discussion.
+labels:
+  [
+    'type:feature',
+    'status:requirements',
+    'priority-5-triage',
+    'needs-discussion',
+  ]
 body:
+  - type: markdown
+    attributes:
+      value: '# This form is for Renovate maintainers only.'
+
   - type: textarea
     id: what-would-you-like-renovate-to-be-able-to-do
     attributes:

.github/ISSUE_TEMPLATE/refactor.yml

@@ -1,6 +1,12 @@
 name: Refactor (internal)
-description: For internal use only.
-labels: ['type:refactor', 'status:requirements', 'priority-5-triage']
+description: For maintainers only.
+labels:
+  [
+    'type:refactor',
+    'status:requirements',
+    'priority-5-triage',
+    'needs-discussion',
+  ]
 body:
   - type: markdown
     attributes:

.github/contributing.md

@@ -79,7 +79,7 @@ The codebase can be difficult to navigate, especially for a first-time contribut
 We don't want you spending an hour trying to work out something that would take us only a minute to explain.
 
 For that reason, we have a Slack channel dedicated to helping anyone who's working on or considering Pull Requests for Renovate.
-Please email rhys@arkins.net and simply mention that you need an invitation to the channel and you'll be added ASAP.
+Please email <rhys@arkins.net> and simply mention that you need an invitation to the channel and you'll be added ASAP.
 
 Important: this Slack group is restricted to development questions only in order to keep the volume of messages lower - all technical support questions should still be posted to this repository's Discussions instead.
 

.github/label-actions.yml

@@ -23,12 +23,12 @@
 
     The Renovate team
 
-'logs:problem':
+'needs-logs':
   comment: >
     Hi there,
 
 
-    We found a problem with the logs.
+    This issue or discussion is missing some logs, making it difficult or impossible to help you.
     Depending on which situation applies follow one, some or all of these instructions.
 
 
@@ -178,6 +178,26 @@
 
     The Renovate team
 
+'pr:discussion-first':
+  comment: >
+    **Please create a GitHub Discussion before continuing with this PR.**
+
+
+    Thank you for your PR, but we need to discuss the requirements and implementation first.
+    This PR will be closed, but you can reopen it after the discussion has been resolved.
+
+
+    Thanks, The Renovate team
+  close: true
+
+'needs-details':
+  comment: >
+    Hi there,
+
+
+    This discussion is missing some details, making it difficult or impossible to help you.
+    Please try again to provide more details.
+
 'needs-discussion':
   unlabel:
     - 'type:bug'
@@ -199,9 +219,9 @@
   lock: true
   lock-reason: 'resolved'
 
-'needs-code-formatting':
+'format-code-comments':
   comment: >
-    Hi, please format your code or logs so they're readable.
+    Hi, please format any copy/pasted code or logs so they're readable.
 
 
     You can find a Markdown code formatting guide [here](https://www.markdownguide.org/basic-syntax/#code) as well as some GitHub-specific information formatting code blocks [here](https://docs.github.com/en/get-started/writing-on-github/working-with-advanced-formatting/creating-and-highlighting-code-blocks).

.github/workflows/build.yml

@@ -77,7 +77,11 @@ jobs:
           echo "Yarn $(yarn --version)"
 
       - name: Installing dependencies
-        run: yarn install --frozen-lockfile
+        uses: nick-fields/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd # v2.8.3
+        with:
+          timeout_minutes: 10
+          max_attempts: 3
+          command: yarn install --frozen-lockfile
 
       # build before tests to for static file check
       - name: Build
@@ -93,7 +97,7 @@ jobs:
         run: yarn jest --ci --coverage ${{ env.coverage }}
 
       - name: Codecov
-        uses: codecov/codecov-action@894ff025c7b54547a9a2a1e9f228beae737ad3c2 # v3.1.3
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
         if: always() && env.coverage == 'true'
 
       - name: E2E Test
@@ -131,12 +135,14 @@ jobs:
       - name: Type check
         run: yarn type-check
 
+      - name: markdownlint
+        uses: DavidAnson/markdownlint-cli2-action@bb4bb94c73936643d73d345b48fead3e96f90a5e # v10.0.1
+
       - name: Lint
         run: |
           yarn ls-lint
           yarn eslint -f gha
           yarn prettier
-          yarn markdown-lint
           yarn git-check
           yarn doc-fence-check
 

.github/workflows/codeql-analysis.yml

@@ -30,7 +30,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2
+        uses: github/codeql-action/init@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
         with:
           languages: javascript
 
@@ -40,7 +40,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2
+        uses: github/codeql-action/autobuild@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -54,4 +54,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2
+        uses: github/codeql-action/analyze@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3

.github/workflows/label-actions.yml

@@ -5,11 +5,14 @@ on:
     types: [labeled]
   discussion:
     types: [labeled]
+  pull_request_target:
+    types: [labeled]
 
 permissions:
   contents: read
   issues: write
   discussions: write
+  pull-requests: write
 
 jobs:
   reaction:
@@ -18,4 +21,3 @@ jobs:
       - uses: dessant/label-actions@074b96a62f35c226ecb38e840f44941bde0343a6 # v3.0.0
         with:
           github-token: ${{ github.token }}
-          process-only: 'issues, discussions'

.github/workflows/release-npm.yml

@@ -58,7 +58,11 @@ jobs:
           yarn config set version-git-tag false
 
       - name: Installing dependencies
-        run: yarn install --frozen-lockfile
+        uses: nick-fields/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd # v2.8.3
+        with:
+          timeout_minutes: 10
+          max_attempts: 3
+          command: yarn install --frozen-lockfile
 
       - name: Build ${{ env.NPM_VERSION }}
         run: yarn build

.github/workflows/update-data.yml

@@ -33,7 +33,7 @@ jobs:
         run: yarn prettier-fix
 
       - name: Create pull request
-        uses: peter-evans/create-pull-request@5b4a9f6a9e2af26e5f02351490b90d01eb8ec1e5 # v5.0.0
+        uses: peter-evans/create-pull-request@284f54f989303d2699d373481a0cfa13ad5a6666 # v5.0.1
         with:
           author: 'Renovate Bot <renovate@whitesourcesoftware.com>'
           branch: 'chore/update-static-data'

.husky/pre-commit

@@ -1,7 +1,6 @@
 #!/bin/sh
 . "$(dirname "$0")/_/husky.sh"
 
-yarn lint-staged
 yarn ls-lint
 
 BRANCH_NAME=$(git branch --show-current)

.releaserc

@@ -17,7 +17,6 @@
     [
       "@semantic-release/exec",
       {
-        "verifyConditionsCmd": "run-s verify",
         "prepareCmd": "run-s \"release:prepare -- {@}\" -- --release=${nextRelease.version} --sha=${nextRelease.gitHead} --tag=${nextRelease.channel}",
         "publishCmd": "run-s \"release:publish -- {@}\" -- --release=${nextRelease.version} --sha=${nextRelease.gitHead} --tag=${nextRelease.channel}"
       }

.vscode/extensions.json

@@ -3,6 +3,7 @@
     "dbaeumer.vscode-eslint",
     "esbenp.prettier-vscode",
     "orta.vscode-jest",
-    "EditorConfig.editorconfig"
+    "editorconfig.editorconfig",
+    "github.vscode-github-actions"
   ]
 }