ci(deps): update ghcr.io/renovatebot/renovate docker tag to v43.3.0 (#1015)

| datasource | package                      | from   | to     |
| ---------- | ---------------------------- | ------ | ------ |
| docker     | ghcr.io/renovatebot/renovate | 43.2.8 | 43.3.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/actions/setup-node/action.yml

@@ -18,7 +18,7 @@ runs:
         }}' >> "$GITHUB_ENV"
 
     - name: ♻️ Restore `node_modules`
-      uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+      uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       id: node-modules-restore
       with:
         path: node_modules
@@ -38,7 +38,7 @@ runs:
         standalone: true
 
     - name: ⚙️ Setup Node.js ${{ inputs.node-version }}
-      uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
+      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
       with:
         node-version-file: .node-version
         cache: ${{ env.CACHE_HIT != 'true' && 'pnpm' || '' }}
@@ -53,7 +53,7 @@ runs:
 
     - name: ♻️ Write `node_modules` cache
       if: inputs.save-cache == 'true' && env.CACHE_HIT != 'true'
-      uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
+      uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       with:
         path: node_modules
         key: ${{ env.CACHE_KEY }}

.github/renovate.json

@@ -2,18 +2,6 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": ["github>renovatebot/.github", ":pinDependencies"],
   "packageRules": [
-    {
-      "description": "Update references in Markdown files weekly",
-      "matchFileNames": ["**/*.md"],
-      "extends": ["schedule:weekly"],
-      "automerge": true,
-      "minimumReleaseAge": null,
-      "separateMajorMinor": false,
-      "commitMessageTopic": "references to {{{depName}}}",
-      "semanticCommitType": "docs",
-      "semanticCommitScope": null,
-      "additionalBranchPrefix": "docs-"
-    },
     {
       "description": "Use build semantic type for some deps",
       "matchPackageNames": ["@vercel/ncc", "typescript"],
@@ -40,21 +28,11 @@
     {
       "description": "Don't pin renovate updates",
       "matchPackageNames": ["ghcr.io/renovatebot/renovate"],
-      "matchFileNames": [
-        "action.yml",
-        "src/docker.ts",
-        ".github/workflows/build.yml"
-      ],
       "pinDigests": false
     },
     {
       "description": "Use feat! semantic type for renovate major",
       "matchPackageNames": ["ghcr.io/renovatebot/renovate"],
-      "matchFileNames": [
-        "action.yml",
-        "src/docker.ts",
-        ".github/workflows/build.yml"
-      ],
       "matchUpdateTypes": ["major"],
       "commitMessagePrefix": "feat(deps)!:",
       "additionalBranchPrefix": "renovate-major"

.github/workflows/build.yml

@@ -10,7 +10,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  RENOVATE_VERSION: 42.66.11 # renovate: datasource=docker depName=renovate packageName=ghcr.io/renovatebot/renovate
+  RENOVATE_VERSION: 43.3.0 # renovate: datasource=docker depName=ghcr.io/renovatebot/renovate
 
 jobs:
   prepare:
@@ -18,7 +18,7 @@ jobs:
     timeout-minutes: 10
 
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           show-progress: false
 
@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           show-progress: false
@@ -51,7 +51,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           show-progress: false
 
@@ -75,7 +75,7 @@ jobs:
           - example/renovate-config.json
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           show-progress: false
 
@@ -117,12 +117,12 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     container:
-      image: ghcr.io/renovatebot/renovate:42.66.11@sha256:e702d489f4d47302b8c487313296db859722feca134e17f674368f913c4e388d
+      image: ghcr.io/renovatebot/renovate:43.3.0@sha256:2cb09178b7a284ed97e4a94a65404daa4d7af8751d50c2c8352576cfced76050
       # github hosted runners are running as `1001:127` (ubuntu:docker)
       options: -u 1001:0 --group-add 1000 --group-add 12021 --group-add 127
 
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           show-progress: false
 
@@ -148,7 +148,7 @@ jobs:
           git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
 
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0 # required for semantic release
           ref: 'release'

.github/workflows/pr-auto.yml

@@ -0,0 +1,18 @@
+name: auto-pr
+
+on:
+  pull_request_target:
+    types:
+      - opened
+
+jobs:
+  review:
+    if: github.event.action == 'opened' && !endsWith(github.event.pull_request.user.login, '[bot]')
+    runs-on: ubuntu-24.04
+    permissions:
+      pull-requests: write
+    steps:
+      - uses: hkusu/review-assign-action@5bee595fdb9765d4a0bd35724b6302fa15569158 # v1.4.0
+        with:
+          reviewers: ${{ vars.REVIEWERS }}
+          max-num-of-reviewers: 2

.node-version

@@ -1 +1 @@
-24.12.0
+24.13.0

README.md

@@ -98,9 +98,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           docker-cmd-file: .github/renovate-entrypoint.sh
           docker-user: root
@@ -141,9 +141,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           token: ${{ secrets.RENOVATE_TOKEN }}
           docker-volumes: |
@@ -192,9 +192,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           renovate-image: myproxyhub.domain.com/renovate/renovate
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -209,9 +209,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           token: ${{ secrets.RENOVATE_TOKEN }}
 ```
@@ -222,7 +222,7 @@ The Renovate version to use.
 If omitted the action will use the [`default version`](./action.yml#L28) Docker tag.
 Check [the available tags on Docker Hub](https://hub.docker.com/r/renovate/renovate/tags).
 
-This sample will use `ghcr.io/renovatebot/renovate:42.66.11` image.
+This sample will use `ghcr.io/renovatebot/renovate:43.3.0` image.
 
 ```yml
 ....
@@ -231,11 +231,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
-          renovate-version: 42.66.11
+          renovate-version: 43.3.0
           token: ${{ secrets.RENOVATE_TOKEN }}
 ```
 
@@ -248,9 +248,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           renovate-version: full
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -283,9 +283,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           configurationFile: example/renovate-config.js
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -298,7 +298,7 @@ If you want to use the Renovate Action on a GitHub Enterprise instance you have
 ```yml
 ....
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           configurationFile: example/renovate-config.js
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -342,10 +342,10 @@ jobs:
           repositories: 'repo1,repo2'
 
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
 
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           configurationFile: example/renovate-config.js
           token: '${{ steps.get_token.outputs.token }}'
@@ -360,7 +360,7 @@ For example:
 
 ```yaml
 - name: Self-hosted Renovate
-  uses: renovatebot/github-action@v44.2.1
+  uses: renovatebot/github-action@v46.0.1
   with:
     token: '${{ steps.get_token.outputs.token }}'
   env:
@@ -382,9 +382,9 @@ For example if you wish to pass through some credentials for a [host rule](https
        runs-on: ubuntu-latest
        steps:
          - name: Checkout
-           uses: actions/checkout@v6.0.1
+           uses: actions/checkout@v6.0.2
          - name: Self-hosted Renovate
-           uses: renovatebot/github-action@v44.2.1
+           uses: renovatebot/github-action@v46.0.1
            with:
              configurationFile: example/renovate-config.js
              token: ${{ secrets.RENOVATE_TOKEN }}
@@ -419,9 +419,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v44.2.1
+        uses: renovatebot/github-action@v46.0.1
         with:
           configurationFile: example/renovate-config.js
           token: ${{ secrets.RENOVATE_TOKEN }}
@@ -512,11 +512,11 @@ jobs:
           sudo chown -R 12021:0 /tmp/renovate/
           ls -R $cache_dir
 
-      - uses: renovatebot/github-action@v44.2.1
+      - uses: renovatebot/github-action@v46.0.1
         with:
           configurationFile: renovate.json5
           token: ${{ secrets.RENOVATE_TOKEN }}
-          renovate-version: 42.66.11
+          renovate-version: 43.3.0
         env:
           # This enables the cache -- if this is set, it's not necessary to add it to renovate.json.
           RENOVATE_REPOSITORY_CACHE: ${{ github.event.inputs.repoCache || 'enabled' }}
@@ -550,7 +550,7 @@ To enable debug logging, add the environment variable `LOG_LEVEL: 'debug'` to th
 
 ```yml
 - name: Self-hosted Renovate
-  uses: renovatebot/github-action@v44.2.1
+  uses: renovatebot/github-action@v46.0.1
   with:
     configurationFile: example/renovate-config.js
     token: ${{ secrets.RENOVATE_TOKEN }}

action.yml

@@ -25,7 +25,7 @@ inputs:
     description: |
       Renovate version to use.
     required: false
-    default: '42' # renovate
+    default: '43' # renovate
   renovate-image:
     description: |
       Renovate docker image name.
@@ -63,5 +63,5 @@ inputs:
     required: false
 
 runs:
-  using: node20
+  using: node24
   main: dist/index.js

package.json

@@ -1,6 +1,6 @@
 {
   "name": "github-action",
-  "version": "44.2.2",
+  "version": "0.0.0-PLACEHOLDER",
   "private": true,
   "description": "GitHub Action to run Renovate self-hosted.",
   "homepage": "https://github.com/renovatebot/github-action#readme",
@@ -20,11 +20,11 @@
     "clean": "rimraf dist/",
     "compile": "node tools/compile.js",
     "lint": "run-s lint-es prettier",
+    "lint:fix": "run-s lint-es:fix prettier-fix",
     "lint-es": "eslint .",
     "lint-es:file": "eslint",
     "lint-es:file:fix": "eslint --fix",
     "lint-es:fix": "eslint --fix .",
-    "lint:fix": "run-s lint-es:fix prettier-fix",
     "prepare": "husky",
     "prettier": "prettier --cache --check --ignore-unknown \"{**/*,*}.*\"",
     "prettier-fix": "prettier --cache --write --ignore-unknown \"{**/*,*}.*\"",
@@ -33,39 +33,39 @@
     "start": "run-s build && node dist"
   },
   "dependencies": {
-    "@actions/core": "1.11.1",
+    "@actions/core": "3.0.0",
-    "@actions/exec": "1.1.1"
+    "@actions/exec": "3.0.0"
   },
   "devDependencies": {
-    "@commitlint/cli": "20.2.0",
+    "@commitlint/cli": "20.3.1",
-    "@commitlint/config-conventional": "20.2.0",
+    "@commitlint/config-conventional": "20.3.1",
     "@eslint/js": "9.39.2",
     "@semantic-release/git": "10.0.1",
     "@semantic-release/github": "12.0.2",
     "@semantic-release/npm": "13.1.3",
-    "@tsconfig/node20": "20.1.8",
+    "@tsconfig/node24": "24.0.4",
-    "@tsconfig/strictest": "2.0.6",
+    "@tsconfig/strictest": "2.0.8",
     "@types/eslint-config-prettier": "6.11.3",
-    "@types/node": "20.19.27",
+    "@types/node": "24.10.9",
     "conventional-changelog-conventionalcommits": "9.1.0",
     "esbuild": "0.27.2",
     "eslint": "9.39.2",
     "eslint-config-prettier": "10.1.8",
     "eslint-plugin-json": "4.0.1",
-    "globals": "16.5.0",
+    "globals": "17.2.0",
     "husky": "9.1.7",
     "lint-staged": "16.2.7",
     "npm-run-all2": "8.0.4",
-    "prettier": "3.7.4",
+    "prettier": "3.8.1",
-    "prettier-plugin-packagejson": "2.5.20",
+    "prettier-plugin-packagejson": "3.0.0",
     "rimraf": "6.1.2",
     "semantic-release": "25.0.2",
     "typescript": "5.9.3",
-    "typescript-eslint": "8.50.0"
+    "typescript-eslint": "8.54.0"
   },
-  "packageManager": "pnpm@10.26.1",
+  "packageManager": "pnpm@10.28.2",
   "engines": {
-    "node": "^20.9.0 || ^22.11.0 || ^24.11.0",
+    "node": ">=24.11.0",
     "pnpm": "^10.0.0"
   },
   "pnpm": {

src/docker.ts

@@ -3,7 +3,7 @@ import { warning } from '@actions/core';
 
 export class Docker {
   private static readonly image = 'ghcr.io/renovatebot/renovate';
-  private static readonly version = '42'; // renovate
+  private static readonly version = '43'; // renovate
 
   private readonly dockerImage: string;
   private readonly fullTag: string;

tools/compile.js

@@ -5,8 +5,8 @@ await build({
   entryPoints: ['./src/index.ts'],
   bundle: true,
   platform: 'node',
-  target: 'node20',
+  target: 'node24',
-  minify: !!env['CI'],
+  minify: !!env.CI,
   tsconfig: 'tsconfig.dist.json',
   sourcemap: true,
   format: 'esm',

tools/tsconfig.json

@@ -1,7 +1,7 @@
 {
   "extends": [
     "@tsconfig/strictest/tsconfig.json",
-    "@tsconfig/node20/tsconfig.json"
+    "@tsconfig/node24/tsconfig.json"
   ],
   "compilerOptions": {
     "allowSyntheticDefaultImports": true,

tsconfig.json

@@ -1,9 +1,10 @@
 {
   "extends": [
     "@tsconfig/strictest/tsconfig.json",
-    "@tsconfig/node20/tsconfig.json"
+    "@tsconfig/node24/tsconfig.json"
   ],
   "compilerOptions": {
+    "allowJs": true,
     "allowSyntheticDefaultImports": true,
     "outDir": "dist",
     "module": "ESNext",