ci(deps): update renovate docker tag to v42.66.2

| datasource | package                      | from    | to      |
| ---------- | ---------------------------- | ------- | ------- |
| docker     | ghcr.io/renovatebot/renovate | 42.66.1 | 42.66.2 |

.github/actions/setup-node/action.yml

@@ -18,7 +18,7 @@ runs:
         }}' >> "$GITHUB_ENV"
 
     - name: ♻️ Restore `node_modules`
-      uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       id: node-modules-restore
       with:
         path: node_modules
@@ -33,12 +33,12 @@ runs:
         }}' >> "$GITHUB_ENV"
 
     - name: ⚙️ Setup pnpm
-      uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
+      uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
       with:
         standalone: true
 
     - name: ⚙️ Setup Node.js ${{ inputs.node-version }}
-      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+      uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
       with:
         node-version-file: .node-version
         cache: ${{ env.CACHE_HIT != 'true' && 'pnpm' || '' }}
@@ -53,7 +53,7 @@ runs:
 
     - name: ♻️ Write `node_modules` cache
       if: inputs.save-cache == 'true' && env.CACHE_HIT != 'true'
-      uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       with:
         path: node_modules
         key: ${{ env.CACHE_KEY }}

.github/renovate.json

@@ -40,13 +40,21 @@
     {
       "description": "Don't pin renovate updates",
       "matchPackageNames": ["ghcr.io/renovatebot/renovate"],
-      "matchFileNames": ["action.yml", "src/docker.ts"],
+      "matchFileNames": [
+        "action.yml",
+        "src/docker.ts",
+        ".github/workflows/build.yml"
+      ],
       "pinDigests": false
     },
     {
       "description": "Use feat! semantic type for renovate major",
       "matchPackageNames": ["ghcr.io/renovatebot/renovate"],
-      "matchFileNames": ["action.yml", "src/docker.ts"],
+      "matchFileNames": [
+        "action.yml",
+        "src/docker.ts",
+        ".github/workflows/build.yml"
+      ],
       "matchUpdateTypes": ["major"],
       "commitMessagePrefix": "feat(deps)!:",
       "additionalBranchPrefix": "renovate-major"
@@ -55,7 +63,7 @@
   "customManagers": [
     {
       "customType": "regex",
-      "fileMatch": ["^README\\.md$"],
+      "managerFilePatterns": ["README.md"],
       "matchStrings": [
         "uses: renovatebot/github-action@(?<currentValue>[^\\s]+)"
       ],
@@ -64,7 +72,7 @@
     },
     {
       "customType": "regex",
-      "fileMatch": ["^README\\.md$"],
+      "managerFilePatterns": ["README.md"],
       "matchStrings": ["renovate-version: (?<currentValue>[^\\s]+)"],
       "depNameTemplate": "ghcr.io/renovatebot/renovate",
       "datasourceTemplate": "docker"
@@ -72,7 +80,7 @@
     {
       "description": "Update renovate version in action.yml",
       "customType": "regex",
-      "fileMatch": ["^action\\.yml$"],
+      "managerFilePatterns": ["action.yml"],
       "matchStrings": ["default: '(?<currentValue>[^\\s]+)' # renovate"],
       "depNameTemplate": "ghcr.io/renovatebot/renovate",
       "datasourceTemplate": "docker"
@@ -80,7 +88,7 @@
     {
       "description": "Update renovate version in src/docker.ts",
       "customType": "regex",
-      "fileMatch": ["^src/docker\\.ts$"],
+      "managerFilePatterns": ["src/docker.ts"],
       "matchStrings": ["version = '(?<currentValue>[^\\s]+)'; // renovate"],
       "depNameTemplate": "ghcr.io/renovatebot/renovate",
       "datasourceTemplate": "docker"

.github/workflows/build.yml

@@ -10,7 +10,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  RENOVATE_VERSION: 39.252.0 # renovate: datasource=docker depName=renovate packageName=ghcr.io/renovatebot/renovate
+  RENOVATE_VERSION: 42.66.2 # renovate: datasource=docker depName=renovate packageName=ghcr.io/renovatebot/renovate
 
 jobs:
   prepare:
@@ -18,7 +18,7 @@ jobs:
     timeout-minutes: 10
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           show-progress: false
 
@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
           show-progress: false
@@ -51,7 +51,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           show-progress: false
 
@@ -75,7 +75,7 @@ jobs:
           - example/renovate-config.json
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           show-progress: false
 
@@ -113,11 +113,30 @@ jobs:
           docker-cmd-file: example/entrypoint.sh
           docker-user: root
 
+  renovate-config-validator:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    container:
+      image: ghcr.io/renovatebot/renovate:42.66.2@sha256:8b981eeb9fffad3b68382d1eae58bc64bf8226abd3f7821a4c0375da3d4dd33e
+      # github hosted runners are running as `1001:127` (ubuntu:docker)
+      options: -u 1001:0 --group-add 1000 --group-add 12021 --group-add 127
+
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          show-progress: false
+
+      - name: Validate Renovate configuration
+        working-directory: example
+        run: |
+          renovate-config-validator renovate-config.js renovate-config.json
+
   release:
     needs:
       - lint
       - commitlint
       - e2e
+      - renovate-config-validator
     runs-on: ubuntu-latest
     steps:
       - name: Setup Git user
@@ -129,7 +148,7 @@ jobs:
           git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
 
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # required for semantic release
           ref: 'release'

.node-version

@@ -1 +1 @@
-20.19.0
+24.12.0

README.md

@@ -98,9 +98,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           docker-cmd-file: .github/renovate-entrypoint.sh
           docker-user: root
@@ -141,9 +141,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           token: ${{ secrets.RENOVATE_TOKEN }}
           docker-volumes: |
@@ -192,9 +192,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           renovate-image: myproxyhub.domain.com/renovate/renovate
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -209,9 +209,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           token: ${{ secrets.RENOVATE_TOKEN }}
 ```
@@ -222,7 +222,7 @@ The Renovate version to use.
 If omitted the action will use the [`default version`](./action.yml#L28) Docker tag.
 Check [the available tags on Docker Hub](https://hub.docker.com/r/renovate/renovate/tags).
 
-This sample will use `ghcr.io/renovatebot/renovate:39.252.0` image.
+This sample will use `ghcr.io/renovatebot/renovate:42.64.1` image.
 
 ```yml
 ....
@@ -231,11 +231,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
-          renovate-version: 39.252.0
+          renovate-version: 42.64.1
           token: ${{ secrets.RENOVATE_TOKEN }}
 ```
 
@@ -248,9 +248,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           renovate-version: full
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -283,9 +283,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           configurationFile: example/renovate-config.js
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -298,7 +298,7 @@ If you want to use the Renovate Action on a GitHub Enterprise instance you have
 ```yml
 ....
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           configurationFile: example/renovate-config.js
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -342,10 +342,10 @@ jobs:
           repositories: 'repo1,repo2'
 
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           configurationFile: example/renovate-config.js
           token: '${{ steps.get_token.outputs.token }}'
@@ -360,7 +360,7 @@ For example:
 
 ```yaml
 - name: Self-hosted Renovate
-  uses: renovatebot/github-action@v41.0.20
+  uses: renovatebot/github-action@v44.2.0
   with:
     token: '${{ steps.get_token.outputs.token }}'
   env:
@@ -382,9 +382,9 @@ For example if you wish to pass through some credentials for a [host rule](https
        runs-on: ubuntu-latest
        steps:
          - name: Checkout
-           uses: actions/checkout@v4.2.2
+           uses: actions/checkout@v6.0.1
          - name: Self-hosted Renovate
-           uses: renovatebot/github-action@v41.0.20
+           uses: renovatebot/github-action@v44.2.0
            with:
              configurationFile: example/renovate-config.js
              token: ${{ secrets.RENOVATE_TOKEN }}
@@ -419,9 +419,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.1
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v41.0.20
+        uses: renovatebot/github-action@v44.2.0
         with:
           configurationFile: example/renovate-config.js
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -512,11 +512,11 @@ jobs:
           sudo chown -R 12021:0 /tmp/renovate/
           ls -R $cache_dir
 
-      - uses: renovatebot/github-action@v41.0.20
+      - uses: renovatebot/github-action@v44.2.0
         with:
           configurationFile: renovate.json5
           token: ${{ secrets.RENOVATE_TOKEN }}
-          renovate-version: 39.252.0
+          renovate-version: 42.64.1
         env:
           # This enables the cache -- if this is set, it's not necessary to add it to renovate.json.
           RENOVATE_REPOSITORY_CACHE: ${{ github.event.inputs.repoCache || 'enabled' }}
@@ -550,7 +550,7 @@ To enable debug logging, add the environment variable `LOG_LEVEL: 'debug'` to th
 
 ```yml
 - name: Self-hosted Renovate
-  uses: renovatebot/github-action@v41.0.20
+  uses: renovatebot/github-action@v44.2.0
   with:
     configurationFile: example/renovate-config.js
     token: ${{ secrets.RENOVATE_TOKEN }}

action.yml

@@ -25,7 +25,7 @@ inputs:
     description: |
       Renovate version to use.
     required: false
-    default: '39' # renovate
+    default: '42' # renovate
   renovate-image:
     description: |
       Renovate docker image name.

example/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

example/renovate-config.js

@@ -19,7 +19,7 @@ module.exports = {
         'lockFileMaintenance',
       ],
       dependencyDashboardApproval: false,
-      minimumReleaseAge: '0 days',
+      minimumReleaseAge: null,
     },
   ],
 };

example/renovate-config.json

@@ -23,7 +23,7 @@
         "lockFileMaintenance"
       ],
       "dependencyDashboardApproval": false,
-      "minimumReleaseAge": 0
+      "minimumReleaseAge": "1 day"
     }
   ]
 }

package.json

@@ -20,11 +20,11 @@
     "clean": "rimraf dist/",
     "compile": "node tools/compile.js",
     "lint": "run-s lint-es prettier",
-    "lint:fix": "run-s lint-es:fix prettier-fix",
     "lint-es": "eslint .",
     "lint-es:file": "eslint",
     "lint-es:file:fix": "eslint --fix",
     "lint-es:fix": "eslint --fix .",
+    "lint:fix": "run-s lint-es:fix prettier-fix",
     "prepare": "husky",
     "prettier": "prettier --cache --check --ignore-unknown \"{**/*,*}.*\"",
     "prettier-fix": "prettier --cache --write --ignore-unknown \"{**/*,*}.*\"",
@@ -37,35 +37,35 @@
     "@actions/exec": "1.1.1"
   },
   "devDependencies": {
-    "@commitlint/cli": "19.8.0",
+    "@commitlint/cli": "20.2.0",
-    "@commitlint/config-conventional": "19.8.0",
+    "@commitlint/config-conventional": "20.2.0",
-    "@eslint/js": "9.24.0",
+    "@eslint/js": "9.39.2",
     "@semantic-release/git": "10.0.1",
-    "@semantic-release/github": "11.0.1",
+    "@semantic-release/github": "12.0.2",
-    "@semantic-release/npm": "12.0.1",
+    "@semantic-release/npm": "13.1.3",
-    "@tsconfig/node20": "20.1.5",
+    "@tsconfig/node20": "20.1.8",
-    "@tsconfig/strictest": "2.0.5",
+    "@tsconfig/strictest": "2.0.6",
     "@types/eslint-config-prettier": "6.11.3",
-    "@types/node": "20.17.30",
+    "@types/node": "20.19.27",
-    "conventional-changelog-conventionalcommits": "8.0.0",
+    "conventional-changelog-conventionalcommits": "9.1.0",
-    "esbuild": "0.25.2",
+    "esbuild": "0.27.2",
-    "eslint": "9.24.0",
+    "eslint": "9.39.2",
-    "eslint-config-prettier": "10.1.2",
+    "eslint-config-prettier": "10.1.8",
     "eslint-plugin-json": "4.0.1",
-    "globals": "16.0.0",
+    "globals": "16.5.0",
     "husky": "9.1.7",
-    "lint-staged": "15.5.1",
+    "lint-staged": "16.2.7",
-    "npm-run-all2": "7.0.2",
+    "npm-run-all2": "8.0.4",
-    "prettier": "3.5.3",
+    "prettier": "3.7.4",
-    "prettier-plugin-packagejson": "2.5.10",
+    "prettier-plugin-packagejson": "2.5.20",
-    "rimraf": "6.0.1",
+    "rimraf": "6.1.2",
-    "semantic-release": "24.2.3",
+    "semantic-release": "25.0.2",
-    "typescript": "5.8.3",
+    "typescript": "5.9.3",
-    "typescript-eslint": "8.29.1"
+    "typescript-eslint": "8.50.0"
   },
-  "packageManager": "pnpm@10.8.0",
+  "packageManager": "pnpm@10.26.0",
   "engines": {
-    "node": "^20.9.0 || ^22.11.0",
+    "node": "^20.9.0 || ^22.11.0 || ^24.11.0",
     "pnpm": "^10.0.0"
   },
   "pnpm": {

src/docker.ts

@@ -3,7 +3,7 @@ import { warning } from '@actions/core';
 
 export class Docker {
   private static readonly image = 'ghcr.io/renovatebot/renovate';
-  private static readonly version = '39'; // renovate
+  private static readonly version = '42'; // renovate
 
   private readonly dockerImage: string;
   private readonly fullTag: string;

src/index.ts

@@ -1,12 +1,17 @@
+import { group, notice, setFailed } from '@actions/core';
 import { Input } from './input';
 import { Renovate } from './renovate';
-import { setFailed } from '@actions/core';
 
 async function run(): Promise<void> {
   try {
     const input = new Input();
     const renovate = new Renovate(input);
 
+    await group('Check Renovate version', async () => {
+      const version = await renovate.runDockerContainerForVersion();
+      notice(version, { title: 'Renovate CLI version' });
+    });
+
     await renovate.runDockerContainer();
   } catch (error) {
     console.error(error);

src/renovate.ts

@@ -1,6 +1,6 @@
+import { exec, getExecOutput } from '@actions/exec';
 import { Docker } from './docker';
 import { Input } from './input';
-import { exec } from '@actions/exec';
 import fs from 'node:fs/promises';
 import path from 'node:path';
 
@@ -14,6 +14,17 @@ export class Renovate {
     this.docker = new Docker(input);
   }
 
+  async runDockerContainerForVersion(): Promise<string> {
+    const command = `docker run -t --rm ${this.docker.image()} --version`;
+
+    const { exitCode, stdout } = await getExecOutput(command);
+    if (exitCode !== 0) {
+      new Error(`'docker run' failed with exit code ${exitCode}.`);
+    }
+
+    return stdout.trim();
+  }
+
   async runDockerContainer(): Promise<void> {
     await this.validateArguments();
 
@@ -76,7 +87,7 @@ export class Renovate {
       dockerArguments.push(dockerCmd);
     }
 
-    const command = `docker run ${dockerArguments.join(' ')}`;
+    const command = `docker run -t ${dockerArguments.join(' ')}`;
 
     const code = await exec(command);
     if (code !== 0) {