chore(deps): update dependency renovate to v43.126.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF
renovate (source)	devDependencies	minor	43.120.1 → 43.126.0	43.132.1 (+12)

---

Release Notes

renovatebot/renovate (renovate)

v43.126.0

Compare Source

Features

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.34.0 (main) (#​42697) (4b61c70)

Miscellaneous Chores

• deps: update dependency node to v24.15.0 (main) (#​42695) (dc90208)

v43.125.1

Compare Source

Bug Fixes

• manager/github-actions: override versioning for Actions with Immutable Tags (#​42690) (1b0785b)

v43.125.0

Compare Source

Features

• replacements: migrate users to astral/setup-uv v8 (#​42683) (f5859c2)

v43.124.1

Compare Source

Bug Fixes

• docker: only set replaceString if requested (#​42649) (f6d4106)

v43.124.0

Compare Source

Features

• manager/github-actions: use semver-partial as default versioning (#​42685) (da04b8e), closes #​42331

Documentation

• fix link in vulnerabilityAlerts docs (#​42680) (b0fd397)

Continuous Integration

• auto-prs: handle draft PRs better (#​42686) (0a86cc5)

v43.123.8

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.35 (main) (#​42681) (4b597ec)
• package-rules: correctly merge force.enabled (#​42679) (ae22250), closes #​42666

Tests

• git: test failing when no git author is configured (#​42676) (f9bddb9)

v43.123.7

Compare Source

Miscellaneous Chores

• deps: update vitest monorepo to v4.1.4 (main) (#​42677) (7907192)

Build System

• deps: update node.js to v24.15.0 (main) (#​42678) (a40a0f0)

v43.123.6

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.34 (main) (#​42675) (5251496)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.22 (main) (#​42674) (f69abc5)

v43.123.5

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.33 (main) (#​42673) (d33efe2)

v43.123.4

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.32 (main) (#​42669) (a14d85b)

v43.123.3

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v13.33.31 (main) (#​42668) (7d2c1ac)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.6.21 (main) (#​42667) (f891066)

v43.123.2

Compare Source

Bug Fixes

• instrumentation: re-add span_id and trace_id to logs (#​42647) (63618c6)

v43.123.1

Compare Source

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v4.5.22 (main) (#​42658) (9e33c20)

Build System

• deps: update dependency @​renovatebot/pgp to v1.3.6 (main) (#​42657) (80146b2)

Continuous Integration

• auto-label needs-discussion on externally-raised Issues (#​42656) (6a0e718)

v43.123.0

Compare Source

Features

• add XcodeGen manager for Swift package dependencies in project.yml files (#​41889) (0ff55d2)
• presets: add BUN_CONFIG_MAX_HTTP_REQUESTS to safe global env (#​41350) (1316fd7)
• presets: add changelogUrl link for Forgejo and Gitea digest updates (#​41786) (0f9a516)

Miscellaneous Chores

• deps: update containerbase/internal-tools action to v4.5.21 (main) (#​42654) (3891a11)

Code Refactoring

• terraform-module: replace interfaces with zod schemas and inline fixtures (#​42399) (914c55b)

v43.122.0

Compare Source

Features

• manager/ant: support custom registryUrls (#​42641) (28ab04b)

Documentation

• use single quotes (#​42648) (3c8521e)

Miscellaneous Chores

• deps: update github/codeql-action action to v4.35.2 (main) (#​42650) (40100d0)

v43.121.0

Compare Source

Features

• manager/ant: add coords= attribute syntax support (#​42635) (15c8ab5)
• terraform-provider: use registry v2 API for release timestamps (#​42340) (f421075)

Bug Fixes

• git: don't pass extraCloneOpts to ls-remote when local clone exists (#​42491) (70fa962)
• gitlab: loosen re-approve constraints during updatePr (#​42528) (7b4f75b)

Documentation

• correct name of osv-offline (#​42486) (0fbc124)
• minimum-release-age: add reference to cooldowns (#​42640) (25e47df)

Miscellaneous Chores

• deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.24.1 (main) (#​42642) (61947e2)

Code Refactoring

• cache: Remove obsolete compress flag (#​42563) (f49de7a)

Build System

• deps: update dependency @​renovatebot/osv-offline to v2.5.0 (main) (#​42645) (4cb4030)

v43.120.2

Compare Source

Bug Fixes

• vulnerability: remove matchFileNames restriction from GitHub vulnerability alerts (#​42636) (593a2b1)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	renovate@​43.120.1 ⏵ 43.126.0	+1

View full report