chore: update dependency renovate to v43 #159

renovate · 2026-02-02T01:45:16Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
renovate (source)	`^39.264.1` → `^43.2.7`

Release Notes

renovatebot/renovate (renovate)

`v43.2.7`

Compare Source

Build System

deps: update dependency re2 to v1.23.2 (main) (#40906) (b120461)

`v43.2.6`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.13 (main) (#40899) (6545c08)

`v43.2.5`

Compare Source

Bug Fixes

gitlab: skip automerge retry when merge_when_pipeline_succeeds already set (#39979) (0f54593)

Miscellaneous Chores

deps: update dependency globals to v17.2.0 (main) (#40883) (127af7b)
deps: update dependency type-fest to v5.4.2 (main) (#40882) (50ada6e)
renovate: enable maintenance branch (#40871) (75274a4)

`v43.2.4`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.12 (main) (#40880) (e0d383c)

`v43.2.3`

Compare Source

Bug Fixes

workers: re-attempt platform automerge only in case of new commits (#40028) (c396b58)

`v43.2.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.11 (main) (#40870) (9945be3)
set defaul docker user for sidecar (#40869) (054cf2c)

Miscellaneous Chores

deps: update dependency @containerbase/semantic-release-pnpm to v1.3.18 (main) (#40669) (4310d07)
deps: update dependency typescript-eslint to v8.54.0 (main) (#40864) (956a3cd)
deps: update dependency vite-tsconfig-paths to v6 (main) (#40872) (9e32fde)
deps: update dessant/label-actions action to v5 (main) (#40873) (f038065)
deps: update dessant/lock-threads action to v6 (main) (#40874) (38107a0)
deps: update github artifact actions (main) (major) (#40876) (87436ba)
deps: update peter-evans/create-pull-request action to v8 (main) (#40877) (5b70890)

Build System

deps: update dependency protobufjs to v8 (main) (#40878) (d24e7ac)

`v43.2.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.10 (main) (#40863) (179abe4)

Miscellaneous Chores

deps: update dependency pnpm to v10.28.2 (main) (#40860) (9293099)
deps: update github/codeql-action action to v4.32.1 (main) (#40862) (c4a2919)
deps: update linters to v1.42.0 (main) (#40861) (d9e7a28)

`v43.2.0`

Compare Source

Features

Add github-digest datasource (#40226) (c246f81)

`v43.1.0`

Compare Source

Features

bitbucket-server: add support for platformAutomerge (#39885) (2254178)
pip-compile: Support the --group uv pip compile option (#40665) (2062788)

`v43.0.10`

Compare Source

Bug Fixes

onboardingAutoCloseAge: don't allow higher inherited value than global (#40810) (#40817) (dc9f868)

Documentation

update references to renovate/renovate to v43.0.9 (main) (#40836) (38ab16b)
update references to renovatebot/github-action to v46.0.1 (main) (#40843) (8dfe853)

Miscellaneous Chores

deps: lock file maintenance (main) (#40837) (3ad3cf2)
deps: update containerbase/internal-tools action to v4.0.6 (main) (#40838) (d53a5ac)
deps: update containerbase/internal-tools action to v4.0.7 (main) (#40841) (2be2969)
deps: update dependency @containerbase/eslint-plugin to v1.1.30 (main) (#40839) (f95f33b)
deps: update dependency @containerbase/istanbul-reports-html to v1.1.28 (main) (#40842) (f607cbe)
logging: include PR number when detecting existing branch PR (#40832) (7373eae), closes #123

`v43.0.9`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.9 (main) (#40833) (8797acc)

`v43.0.8`

Compare Source

Build System

deps: update dependency re2 to v1.23.1 (main) (#40831) (39dbc07)

`v43.0.7`

Compare Source

Code Refactoring

typo (#40825) (9327821)

Build System

deps: update aws-sdk-js-v3 monorepo to v3.980.0 (main) (#40828) (da2c4b9)

`v43.0.6`

Compare Source

Miscellaneous Chores

deps: update actions/cache action to v5 (main) (#40820) (eb7d33c)
deps: update containerbase/internal-tools action to v4.0.4 (main) (#40819) (fb0a354)
deps: update dependency @types/node to v24 (main) (#40821) (5997152)
deps: update dependency eslint-formatter-gha to v2 (main) (#40822) (6064667)
deps: update dependency globals to v17 (main) (#40823) (ac23ffc)
deps: update dependency renovatebot/github-action to v46 (main) (#40814) (48de4a1)
deps: update renovate/renovate docker tag to v43 (main) (#40807) (b44d3d5)

Build System

trim channel for docker builds (#40818) (e004f84)

`v43.0.5`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.8 (main) (#40803) (a73b6e1)

`v43.0.4`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.7 (main) (#40801) (2b958f3)

`v43.0.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.6 (main) (#40795) (7394478)

Miscellaneous Chores

onboarding: capitalise the prHourlyLimit (#39443) (991fdbf)

`v43.0.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.5 (main) (#40793) (00a1006)

Documentation

mise: Fix invalid configuration example (#40792) (24ae070)

`v43.0.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.1.4 (main) (#40788) (1e4f4d3)

Documentation

opentelemetry: revamp documentation (#40765) (18c7915), closes #40126

`v43.0.0`

Breaking changes for 43

Allowlisting required for "unsafe commands" #40684

[!NOTE]
This should only affect you if you work with repositories that have a Gradle Wrapper.

Prior to Renovate 43, when performing updates in a repository that used Gradle, Renovate would execute the Gradle Wrapper (./gradlew or gradlew.bat).

This is a well-documented "insider attack" risk that could lead to remote code execution in the context of the Renovate process, as execution of the Gradle buildscript:

is controlled by the anyone with write access to the repository being processed
can look for specific tasks to execute specific code
can execute code from source-tracked scripts
can execute code from third-party libraries

This can occur during updates to the Gradle wrapper or using Gradle's Dependency Verification Metadata when updating Gradle dependencies.

As of Renovate 43, this long-standing risk is disabled by default to make Renovate more "secure by default".

Self-hosted administrators can re-enable this using the global self-hosted configuration allowedUnsafeExecutions.

`postUpgradeTasks` will no longer run with `shell` mode by default #40230

As noted in #40403 and GHSA-pfq2-hh62-7m96, existing access to a repository could lead to remote code execution due to incorrectly quoted shell commands.

The fix for GHSA-pfq2-hh62-7m96 applied to commands invoked by Renovate, but did not cover postUpgradeTasks, which are allowlisted by a self-hosted administrator.

To provide a safer default, commands that run through postUpgradeTasks will no longer run inside a shell.

Self-hosted administrators can re-enable this using the global self-hosted configuration allowShellExecutorForPostUpgradeCommands=true.

`binarySource=docker` is officially deprecated #40735

As noted in #40747, we have now officially deprecated the binarySource=docker option.

There is no timeline decided on the removal of the functionality.

For more details and/or to provide feedback on your use case and why binarySource=install does not work for you, please see #40747.

Renovate now ships as ESM (ECMAScript Modules) #9890 / #40756

This should not affect users, only cases where Renovate is imported as a library. Given our previous support of Node 22, ESM can still be imported from Common JS (CJS) files.

Out of caution and for visibility, this is part of the major release.

`config:best-practices` will now perform weekly lockfile maintenance #40735

As part of the Renovate maintainers' opinionated "best practices" configuration, Renovate will now perform a weekly lockfile maintenance task, keeping your lockfiles updated.

This is due to an increase in package managers using lock files, but users not necessarily being aware of the need to enable this explicitly.

If this is not applicable to you, you can use ignorePresets, i.e.

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:best-practices"
  ],
  "ignorePresets": [
    ":maintainLockFilesWeekly"
  ]
}

JSON Schema split for repo or global configuration #38619

Renovate now has separate JSON Schemas for repository configuration, repository configuration (and inherit config) for writing org-inherited-config.json, and global self-hosted configuration:

https://docs.renovatebot.com/renovate-schema.json (repository configuration)
https://docs.renovatebot.com/renovate-global-schema.json (global self-hosted configuration)
https://docs.renovatebot.com/renovate-inherited-schema.json (repository configuration, including inherited config options)

This provides better validation for your editor/agent, as you now only see documentation for the relevant configuration type you're writing.

You can read more in the Renovate JSON Schema documentation.

This does not affect renovate-config-validator.

Replacements cannot be grouped with other updates #40758

To prevent replacements being grouped in with other updates, which can sometimes lead to them failing to correctly replace a package, they will no longer be grouped.

This may lead to some PRs being modified/created when you upgrade to this version of Renovate.

Lock file maintenance cannot be grouped with other updates #40781

To prevent lock file maintenance being grouped in with other updates, which can sometimes lead to them failing to perform the lock file maintenance.

This may lead to some PRs being modified/created when you upgrade to this version of Renovate.

Use `wasm-java` build of Bouncy Castle #40678

To improve performance for encryption/decryption of secrets, as well as supporting AEAD, we have moved the default Bouncy Castle build to use wasm-java.

Renovate now requires a minimum of Node 24 #40675

The existing requirements of Node 24.11.0 has not changed.

This only drops support for Node 22.x.

Package name for Node.JS in Mise has changed to `node` #40466

To be more consistent with other package managers, the Node.JS package has been renamed to node.

This ensures that updates to NodeJS (when using Mise) are grouped with other package updates.

The `useCloudMetadataServices` configuration is now environment variable only #40638

As a first step towards solving #38604, we have migrated this configuration option to being environment variable configuration only.

Note that technically Renovate will still detect it if it's set in a config.js, but with changes in #38604 it will not affect the execution.

Default tool version updates #39100

For users of the upstream Renovate container images, the following tools have been updated to new major versions:

Tool	Version
Bundler	4.0.4
Dotnet	10.0.102
Helm	v4.1.0
PHP	8.5.2
Pipenv	2026.0.3
Ruby	4.0.1

Commentary for 43

There aren't any big changes as part of this release to call out - this is a fairly "routine" major version, where we're doing a little cleanup, making some improvements to be "secure by default", and updating our default tool versions.

Deprecations

As part of this release, we want to make you aware of deprecated features which will be removed as of Renovate 44:

Removal of x-access-token: prefix for GitHub

⚠ BREAKING CHANGES

deps: Update ghcr.io/renovatebot/base-image Docker tag to v13 (main) (#40730)
prevent grouping of lockfile maintenance updates (#40781)
Switch to ESM modules (#40756)
prevent grouping of replacement updates (#40758)
config: deprecate binarySource=docker (#40754)
presets: add maintainLockFilesWeekly to best-practices preset (#40735)
config: make useCloudMetadataServices environment-only (#40638)
self-hosted: don't allow any unsafe commands by default (#40684)
self-hosted: don't use shell: true for postUpgradeTasks (#40230)
json-schema: forbid global-only options in repo configuration (#38619)
presets: add hostType=github to :githubComToken (#38975)
use wasm-java build of Bouncy Castle (#40678)
mise: rename packageName from nodejs to node (#40466)
require node v24 (#40675)

Features

config: deprecate binarySource=docker (#40754) (3644ac8), closes #40747
deps: Update ghcr.io/renovatebot/base-image Docker tag to v13 (main) (#40730) (5a2107d)
presets: add hostType=github to :githubComToken (#38975) (0d912db), closes #38961
presets: add maintainLockFilesWeekly to best-practices preset (#40735) (28dccba)
require node v24 (#40675) (dcdd1c3)
Switch to ESM modules (#40756) (2b0e80b)
use wasm-java build of Bouncy Castle (#40678) (4e19e7c)

Bug Fixes

config: make useCloudMetadataServices environment-only (#40638) (a630187), closes #38604
mise: rename packageName from nodejs to node (#40466) (8dc1133)
prevent grouping of lockfile maintenance updates (#40781) (3ed1817)
prevent grouping of replacement updates (#40758) (c7222c6)
self-hosted: don't allow any unsafe commands by default (#40684) (b6ef3e1)
self-hosted: don't use shell: true for postUpgradeTasks (#40230) (cb49754)

Documentation

add announcement bar for v43 (93423cf)

Miscellaneous Chores

json-schema: forbid global-only options in repo configuration (#38619) (192ae36), closes #38728
use updateType in log message (d1e3f13)

`v42.95.5`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.31.13 (maint/42.x) (#40902) (257208b)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v4.0.7 (maint/42.x) (#40888) (d88e3e0)
deps: update dependency @containerbase/eslint-plugin to v1.1.30 (maint/42.x) (#40889) (28eff83)
deps: update dependency @containerbase/istanbul-reports-html to v1.1.28 (maint/42.x) (#40891) (f9bc0d9)
deps: update dependency @containerbase/semantic-release-pnpm to v1.3.18 (maint/42.x) (#40892) (787ea42)
deps: update dependency pnpm to v10.28.2 (maint/42.x) (#40894) (48fd285)
deps: update dependency type-fest to v5.4.2 (maint/42.x) (#40895) (7735f14)
deps: update github/codeql-action action to v4.32.1 (maint/42.x) (#40900) (3b47b24)

`v42.95.4`

Compare Source

Build System

deps: update dependency re2 to v1.23.1 (maint/42.x) (#40886) (8e142c2)

`v42.95.3`

Compare Source

Bug Fixes

set defaul docker user for sidecar (#40869) (9cd752b)

Miscellaneous Chores

onboardingAutoCloseAge: correct comment (#40844) (45a4456)

`v42.95.2`

Compare Source

Bug Fixes

onboardingAutoCloseAge: don't allow higher inherited value than global (#40810) (ffb95ed)

Build System

trim channel for docker builds (cd27b1d)

`v42.95.1`

Compare Source

Bug Fixes

pnpm: don't update workspace when no pnpm-lock.yaml found (#40780) (0c49124), closes #40774

Miscellaneous Chores

deps: update containerbase/internal-tools action to v4.0.3 (main) (#40783) (b2e1382)

Continuous Integration

add auto reviewer (#40782) (e55ad44)

`v42.95.0`

Compare Source

Features

sidecar: use renovatebot/base-image instead of containerbase/sidecar (#40772) (cd0426b)

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.31.2 (main) (#40776) (dbe0cf7)

Build System

deps: update opentelemetry-js-contrib monorepo (main) (#40775) (a94398b)

`v42.94.7`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.31.2 (main) (#40773) (f1790af)

`v42.94.6`

Compare Source

Bug Fixes

gerrit: not cloning submodules (#40089) (5db0218)

`v42.94.5`

Compare Source

Bug Fixes

presets: dockerfile globs (#40770) (ca446fb)

`v42.94.4`

Compare Source

Build System

deps: update opentelemetry-js monorepo (main) (#40769) (e95089a)
deps: update opentelemetry-js monorepo to v2.5.0 (main) (#40768) (7c43e8f)

`v42.94.3`

Compare Source

Bug Fixes

override tar (#40766) (ce12e9f)

Miscellaneous Chores

add proper imports from azure-devops-node-api (#40762) (e36d080)
deps: update containerbase/internal-tools action to v4.0.2 (main) (#40767) (5ad49c3)
deps: update dependency tar to v7.5.7 [security] (main) (#40764) (cd2b768)
fix type import (#40760) (eaed53a)

Code Refactoring

use named simpleGit imports (#40759) (17a1bba)

`v42.94.2`

Compare Source

Bug Fixes

config/validation: show deprecationMsg as a warning if present (#40753) (e049e56)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v4 (main) (#40750) (60d733a)

Code Refactoring

Remove decorators for ESM compatibility (#40736) (c07814c)

Tests

validation: add tests for custom deprecation messages (#40752) (0daf184)

`v42.94.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.31.1 (main) (#40749) (fa7e075)

Code Refactoring

tools: reduce noise in generate-imports script (#40186) (69fedef)

`v42.94.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v12.31.0 (main) (#40746) (ebfbcfd)

Bug Fixes

deps: update ghcr.io/containerbase/sidecar docker tag to v13.26.7 (main) (#40745) (592bf20)

Documentation

correct references to binarySource=install for Mend-hosted (#40740) (783002c)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v3.15.0 (main) (#40732) (b0f4ec3)
deps: update dependency tar to v7.5.6 (main) (#40739) (f29e971)
deps: update ghcr.io/containerbase/devcontainer docker tag to v14.0.1 (main) (#40741) (67964c8)

`v42.93.1`

Compare Source

Bug Fixes

datasource/docker: treat empty string as no architecture (#40715) (1db6be0)

`v42.93.0`

Compare Source

Features

inherit support for onboardingAutoCloseAge (#40086) (c58c16f)

Documentation

json-schema: add separate documentation page (#40722) (1edb6c3), closes #40716

Miscellaneous Chores

deps: update containerbase/internal-tools action to v3.14.57 (main) (#40727) (95958c6)
replace URL.parse (#40703) (e958373)

`v42.92.14`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.30.4 (main) (#40721) (33b0fcd)

Code Refactoring

Extract decorator logic into standalone functions (#40710) (ad47fd2)
Remove constructor parameter properties (#40712) (c5b0a74)

`v42.92.13`

Compare Source

Bug Fixes

gradle-wrapper: don't execute when allowedUnsafeExecutions (#40719) (3e70904)

`v42.92.12`

Compare Source

Bug Fixes

workingDirTemplate must be relative to the repo root (#40068) (bde55d5)

`v42.92.11`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.30.3 (main) (#40711) (c72d818)

Miscellaneous Chores

deps: update dependency eslint-plugin-oxlint to v1.41.0 (main) (#40707) (4d8e18a)

Code Refactoring

Rewrite imports with .ts extensions (#40700) (930cf66)

`v42.92.10`

Compare Source

Bug Fixes

config/validation: handle platform-prefixed onboardingConfigFileName (#40619) (1b6c63a)
reconfigure: migrate before validating (#40647) (7eb1ee9)

Documentation

config-validation: note the behaviour of --no-global (#40584) (30b7421)

Miscellaneous Chores

deps: update dependency oxlint to v1.41.0 (main) (#40704) (dff788f)
deps: update github/codeql-action action to v4.32.0 (main) (#40705) (e73c6aa)
extract KubernetesResource schema for future broader usage (#40264) (a7ddfcc)
replace URL.resolve (#40702) (18bd321)

`v42.92.9`

Compare Source

Bug Fixes

sbt: consider html hrefs in absolute and root-relative format (#39464) (e5c2caa)

`v42.92.8`

Compare Source

Miscellaneous Chores

deps: update dependency typescript-eslint to v8.53.1 (main) (#40698) (3106c46)

Code Refactoring

replace nanoid with crypto.randomUUID (#40695) (5c796e1)

Build System

Switch to tsdown for .d.ts generation (#40696) (98d0b0f)

`v42.92.7`

Compare Source

Bug Fixes

json-schema: add a separate schema for Inherit Config (#40683) (0b42055)

`v42.92.6`

Compare Source

Bug Fixes

config: ensure that config options are immutable (#40682) (13869dd)
**m

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot added the dependencies label Feb 2, 2026

renovate bot force-pushed the renovate/renovate-43.x branch 6 times, most recently from 0acf16a to a2d5d37 Compare February 4, 2026 01:58

chore: update dependency renovate to v43

3307be2

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/renovate-43.x branch from a2d5d37 to 3307be2 Compare February 4, 2026 10:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update dependency renovate to v43 #159

chore: update dependency renovate to v43 #159

renovate bot commented Feb 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore: update dependency renovate to v43 #159

Are you sure you want to change the base?

chore: update dependency renovate to v43 #159

Conversation

renovate bot commented Feb 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Build System

Bug Fixes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Bug Fixes

Bug Fixes

Miscellaneous Chores

Build System

Bug Fixes

Miscellaneous Chores

Features

Features

Bug Fixes

Documentation

Miscellaneous Chores

Bug Fixes

Build System

Code Refactoring

Build System

Miscellaneous Chores

Build System

Bug Fixes

Bug Fixes

Bug Fixes

Miscellaneous Chores

Bug Fixes

Documentation

Bug Fixes

Documentation

Breaking changes for 43

Allowlisting required for "unsafe commands" #​40684

postUpgradeTasks will no longer run with shell mode by default #​40230

binarySource=docker is officially deprecated #​40735

Renovate now ships as ESM (ECMAScript Modules) #​9890 / #​40756

config:best-practices will now perform weekly lockfile maintenance #​40735

JSON Schema split for repo or global configuration #​38619

Replacements cannot be grouped with other updates #​40758

Lock file maintenance cannot be grouped with other updates #​40781

Use wasm-java build of Bouncy Castle #​40678

Renovate now requires a minimum of Node 24 #​40675

Package name for Node.JS in Mise has changed to node #​40466

The useCloudMetadataServices configuration is now environment variable only #​40638

Default tool version updates #​39100

Commentary for 43

Deprecations

⚠ BREAKING CHANGES

Features

Bug Fixes

Documentation

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Build System

Bug Fixes

Miscellaneous Chores

Bug Fixes

Build System

Bug Fixes

Miscellaneous Chores

Continuous Integration

Features

Bug Fixes

Build System

Bug Fixes

Bug Fixes

Bug Fixes

Build System

Bug Fixes

Miscellaneous Chores

Code Refactoring

Bug Fixes

Miscellaneous Chores

renovate bot commented Feb 2, 2026 •

edited

Loading

Allowlisting required for "unsafe commands" #40684

`postUpgradeTasks` will no longer run with `shell` mode by default #40230

`binarySource=docker` is officially deprecated #40735

Renovate now ships as ESM (ECMAScript Modules) #9890 / #40756

`config:best-practices` will now perform weekly lockfile maintenance #40735

JSON Schema split for repo or global configuration #38619

Replacements cannot be grouped with other updates #40758

Lock file maintenance cannot be grouped with other updates #40781

Use `wasm-java` build of Bouncy Castle #40678

Renovate now requires a minimum of Node 24 #40675

Package name for Node.JS in Mise has changed to `node` #40466

The `useCloudMetadataServices` configuration is now environment variable only #40638

Default tool version updates #39100