This MR contains the following updates:

Package	Update	Change
ghcr.io/renovatebot/renovate (source)	minor	`42.19.7` -> `42.38.1`
gluon	patch	`0.9.6` -> `0.9.7`
registry1.dso.mil/ironbank/container-hardening-tools/renovate/renovate (source)	minor	`42.19.3` -> `42.37.1`
renovate (source)	minor	`45.17.6` -> `45.34.1`

Complete MR checklist

Assignee

Followed upgrade instructions outlined in docs/DEVELOPMENT_MAINTENANCE.md
Update Docs with new/updated steps as needed
Tested and Validated Changes made with supporting info like logs or screenshots from test pipelines

Add supporting info below

Reviewer only

Tested and Validated changes

Release Notes

renovatebot/renovate (ghcr.io/renovatebot/renovate)

`v42.38.1`

Compare Source

Bug Fixes

docs: add required permissions for build:docs (#39809) (bbd30ce)
docs: look up open issues on main builds for Renovate docs (#39801) (ae46c57)
docs: revert lookup for open issues on main (#39813) (83e0b97), closes #39812 #39809 #39801
docs: wire in GH_TOKEN for gh CLI (#39812) (295eaac)
workers/repository: add missing statuses for disabling a repository (#39808) (5d807eb), closes #39793

Miscellaneous Chores

deps: update github/codeql-action action to v4.31.7 (main) (#39810) (218adae)
deps: update peter-evans/create-pull-request action to v7.0.10 (main) (#39807) (d5b432a)
deps: update peter-evans/create-pull-request action to v7.0.11 (main) (#39811) (b897dc4)

Tests

don't sign commits made in submodules created by test suite (#39748) (7b1eddb)

`v42.38.0`

Compare Source

Features

map emojis to repository problems (#39769) (a10b97d)

`v42.37.2`

Compare Source

Bug Fixes

bitbucket-server: resize mend.io merge confidence badges (#39795) (a64ee84)

`v42.37.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.12.1 (main) (#39794) (9e6e86c)

`v42.37.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v12.12.0 (main) (#39792) (8b720ce)

Bug Fixes

presets: correctly wrap helpers for golang.org/x packages in packageRules (#39790) (2f41f4a)

`v42.35.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.8 (main) (#39787) (0c147ff)

Miscellaneous Chores

deps: update dependency pnpm to v10.24.0 (main) (#39788) (1a4a08c)

`v42.35.0`

Compare Source

Features

dashboard: add deprecations / replacements section (#39752) (2020e43)

Bug Fixes

deps: update ghcr.io/containerbase/sidecar docker tag to v13.25.7 (main) (#39786) (2f817a2)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v13.25.7 (main) (#39785) (acbad69)

Code Refactoring

dashboard: consistently use title case for headings (#39754) (68baaa2)

`v42.34.2`

Compare Source

Build System

deps: update dependency @renovatebot/osv-offline to v2 (main) (#39365) (a512769)

Continuous Integration

mend-slack: run on new Discussions (#39776) (3189198)

`v42.34.1`

Compare Source

Bug Fixes

dashboard: formatting for vulnerabilities section (#39775) (ba0ec80)

`v42.34.0`

Compare Source

Features

presets: add helpers for golang.org/x packages (#39738) (0d1b1a4)

Documentation

clarify Mend-hosted log retention (#39405) (bf3ec64)

Continuous Integration

mend-slack: remove extra parenthesis (#39412) (8132e10)

`v42.33.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.7 (main) (#39773) (5c8ff74)

Miscellaneous Chores

deps: update jaegertracing/jaeger docker tag to v2.13.0 (main) (#39774) (cdb84e5)

`v42.33.0`

Compare Source

Features

bitbucket-server: get username from header (#39554) (60f7ffc)
manager/regex: extract depName from file path (#39204) (67d4e34)

Bug Fixes

cargo: Support Git dependencies with a custom hostname (#38017) (a9d5c32)
deps: update ghcr.io/containerbase/sidecar docker tag to v13.25.6 (main) (#39772) (c83f09f)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v13.25.6 (main) (#39771) (fe743be)

Tests

options: ensure that requiredIf is validated (#39705) (e084571)

`v42.32.3`

Compare Source

Build System

deps: update dependency cacache to v20.0.3 (main) (#39623) (6cf4fef)

`v42.32.2`

Compare Source

Bug Fixes

gitlab/schema: change sha field to use nullish instead of optional (#39758) (9724952)

`v42.32.1`

Compare Source

Bug Fixes

presets: correctly apply security:minimumReleaseAgeNpm for npm datasource (#39744) (6005cbf), closes #39610 #39736

Miscellaneous Chores

deps: update dependency vite to v7.2.8 (main) (#39743) (cc3371d)

`v42.32.0`

Compare Source

Features

presets: add helper to add changelog for digest updates for GitHub-based packages (#39650) (8c43bc2), closes #39646

Code Refactoring

gitlab: use http.getJson (#38688) (6dc48db)

`v42.31.0`

Compare Source

Features

bitbucket: massage issue markdown for abandoned deps section (#39717) (b9da569)

Bug Fixes

branch error message logic (#39716) (ea267ba)

Documentation

bitbucket: add comment re: collapsible syntax support (#39715) (20888db)

Miscellaneous Chores

deps: update python docker tag to v3.14.1 (main) (#39718) (a66e92e)

Tests

gitlab: update scenario to match dependency-dashboard text (#39677) (1b020a7)
move test into correct describe block (#39711) (bff9741)

`v42.30.4`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.6 (main) (#39728) (ccabd90)

Miscellaneous Chores

deps: update actions/setup-node action to v6.1.0 (main) (#39721) (62ea350)
deps: update containerbase/internal-tools action to v3.14.26 (main) (#39723) (44dd6eb)
deps: update python:3.14 docker digest to 595140b (main) (#39722) (b92d8fd)

`v42.30.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.5 (main) (#39719) (7d3df47)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v3.14.25 (main) (#39714) (94e286d)

`v42.30.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.4 (main) (#39713) (5d5664f)

Miscellaneous Chores

deps: update actions/checkout action to v6.0.1 (main) (#39712) (7833685)

`v42.30.1`

Compare Source

Bug Fixes

allowedUnsafeExecutions: allow usage in the repository stage (#39704) (77a59c3)

`v42.30.0`

Compare Source

Features

groups: revert markdownlint-cli2 group (#39699) (e4b37fe), closes #39569

Bug Fixes

allowedUnsafeExecutions: add to GlobalConfig options (#39700) (ccb80f2), closes #39573
read only issue (#39676) (e97a886)

Miscellaneous Chores

deprecate GlobalOnlyConfig (#39686) (e272cea), closes #39685
deprecate LegacyAdminConfig (#39696) (1d9c030)
deps: update dependency markdownlint-cli2 to v0.19.1 (main) (#39425) (2ea7855)
deps: update prom/prometheus docker tag to v3.8.0 (main) (#39691) (ce4f315)
deps: update vitest monorepo to v4.0.14 (main) (#39701) (f383805)
document the configuration types (#39698) (68572c9)

`v42.29.5`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.3 (main) (#39689) (e381378)

Documentation

fix empty notes (#39662) (baf1f88)

Miscellaneous Chores

deps: update otel/opentelemetry-collector-contrib docker tag to v0.141.0 (main) (#39690) (6cacf79)
instrumentation: add links to Semantic Convention docs (#39671) (b2f5049)

Code Refactoring

config/options: ensure global options are sorted (#39681) (78e5977)

`v42.29.4`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.2 (main) (#39673) (b673d8e)

`v42.29.3`

Compare Source

Bug Fixes

git: report Git operation statistics at end of run (#39596) (b5cd031)

`v42.29.2`

Compare Source

Bug Fixes

instrumentation: handle Promise-like objects as Promises (#39661) (7f6fcfb)

`v42.29.1`

Compare Source

Build System

deps: update dependency @opentelemetry/instrumentation-redis to v0.57.1 (main) (#39660) (e85bb6e)

`v42.29.0`

Compare Source

Features

Add allowedUnsafeExecution to the global configuration (#39573) (4f9d970), closes #39458

`v42.28.0`

Compare Source

Features

presets: extend jackson monorepo (#37740) (92e176a)

`v42.27.5`

Compare Source

Bug Fixes

git: instrument SimpleGit operations (#39591) (b44544b)

Miscellaneous Chores

deps: update dependency renovatebot/github-action to v44.0.5 (main) (#39651) (0f2c68a)
deps: update github/codeql-action action to v4.31.6 (main) (#39652) (0542fbc)
instrumentation: add helpers for Git instrumentation (#38582) (fe8fe42)
instrumentation: instrument syncGit (#39622) (bb80ec8)

`v42.27.4`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.1 (main) (#39648) (97c06b6)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v13.25.5 (main) (#39647) (0ea4bd8)
instrumentation: add a decorator for functions (#39621) (be7eb13)

`v42.27.3`

Compare Source

Build System

deps: update dependency better-sqlite3 to v12.4.6 (main) (#39629) (c07e3da)

`v42.27.1`

Compare Source

Documentation

update references to renovate/renovate (main) (#39637) (452ffdd)

Build System

deps: update aws-sdk-js-v3 monorepo to v3.940.0 (main) (#39636) (6f79b1e)

`v42.27.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v12.11.0 (main) (#39633) (b1152bb)

Miscellaneous Chores

deps: update dependency @types/lodash to v4.17.21 (main) (#39631) (e2036a1)
fix typo (#39627) (00db105)
lint fix (#39630) (f212641)

`v42.26.11`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.10.2 (main) (#39626) (298f0e6)

`v42.26.10`

Compare Source

Bug Fixes

instrumentation: instrument manager extractions (#39613) (e1ad5c2)

Continuous Integration

re-enable strict docs builds (#39617) (5c46277)

`v42.26.9`

Compare Source

Bug Fixes

docs: correct broken link (#39616) (d5f1c61), closes #39406

`v42.26.8`

Compare Source

Bug Fixes

instrumentation: correctly instrument extract and lookup (#39611) (c1a8da0)
instrumentation: instrument manager lookups (#39612) (498b9df)
instrumentation: wrap branches in spans (#39608) (5282a9a), closes #38609

Miscellaneous Chores

instrumentation: further instrument extract phase (#39614) (55a447e)

`v42.26.7`

Compare Source

Bug Fixes

instrumentation: use Semantic Conventions for repository span (#39609) (1fc78a0), closes #38609

`v42.26.6`

Compare Source

Bug Fixes

use stricter types for renovate config (#39594) (c641239)

Miscellaneous Chores

telemetry: add span attribute for splits (#38633) (ce729a8), closes #38609

Code Refactoring

splits: add a type for repository splits (#39589) (e34af57)

`v42.26.5`

Compare Source

Bug Fixes

monorepos: fix cedar source url (#39497) (f833238)

Continuous Integration

don't fail matrix test fast (#39606) (f732144)
ensure proper test result publishing (#39605) (28f4049)

`v42.26.4`

Compare Source

Bug Fixes

merge-confidence: move links into header (#39461) (f6e29da)

Documentation

mra: clarify support for the Crate datasource (#39592) (4429e8f)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v3.14.22 (main) (#39603) (728cfc3)
instrumentation: add a 4-parameter overload (#39588) (dc046ca)

`v42.26.3`

Compare Source

Build System

deps: update dependency better-sqlite3 to v12.4.5 (main) (#39602) (f8ce749)

`v42.26.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.10.1 (main) (#39597) (0e23981)

`v42.26.1`

Compare Source

Bug Fixes

github: warn on rate limit errors (#39585) (bd6b7c3), closes #39406 #39406

Documentation

constraints: clarify that binarySource=global ignores them (#39561) (70c1075)
self-hosting: further clarify the supply chain security risks (#39456) (254f821)

`v42.26.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v12.10.0 (main) (#39593) (e7687d9)

Documentation

self-hosting: make RENOVATE_GITHUB_COM_TOKEN requirement more clear (#39406) (6058acd), closes #37685 #39399

Miscellaneous Chores

deps: update dependency pnpm to v10.23.0 (main) (#39590) (807aa8f)
deps: update vitest monorepo to v4.0.11 (main) (#39582) (7e043cc)
deps: update vitest monorepo to v4.0.12 (main) (#39584) (71d5cf2)

`v42.25.3`

Compare Source

Bug Fixes

platform: endpoint is a global only option (#39579) (ad710ec)

`v42.25.2`

Compare Source

Bug Fixes

ignorePrAuthor is a global repo config (#39578) (0af7709)

`v42.25.1`

Compare Source

Bug Fixes

tools/generate-docs: correctly pass version flag (#39577) (3401cb1)

`v42.25.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v12.9.0 (main) (#39576) (511b945)

Tests

manager/homebrew: modernize testing (#39575) (add8b15)

`v42.24.1`

Compare Source

Bug Fixes

bitbucket-server: fix schema to work with tags on bitbucket server 9.x (#39574) (5eb7cf0)

Documentation

add Renovate CLI version to docs footer (#39568) (e621870)

Miscellaneous Chores

tools/generate-docs: allow passing a --version (#39564) (591c578), closes #38796
tools/generate-docs: correctly pass version to generateSchema (#39563) (b78764c)

`v42.24.0`

Compare Source

Features

groups: add markdownlint-cli2 (#39569) (b061408), closes #39540

Miscellaneous Chores

deps: update dependency lint-staged to v16.2.7 (main) (#39572) (0c14782)

Code Refactoring

bitbucket: compare issue type when determining whether to update existing issues (#39571) (0793507)

`v42.23.0`

Compare Source

Features

bitbucket: raise issue as tasks not bugs (#39565) (d226777)

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.8.3 (main) (#39570) (ff53534)

`v42.22.1`

Compare Source

Miscellaneous Chores

add a Discussion type for Mend-hosted requests (#39557) (4c889f8)
deps: update dependency rimraf to v6.1.2 (main) (#39566) (b2b5dba)

Build System

deps: update dependency redis to v5.10.0 (main) (#39567) (a23f6b3)

`v42.22.0`

Compare Source

Features

prBodyHeadingDefinitons (#39460) (61c943c)

`v42.21.4`

Compare Source

Build System

deps: update dependency @renovatebot/pgp to v1.2.1 (main) (#39556) (1a29f61)

`v42.21.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.8.2 (main) (#39552) (4a9947f)

`v42.21.2`

Compare Source

Bug Fixes

deps: update ghcr.io/containerbase/sidecar docker tag to v13.25.4 (main) (#39550) (19a0c4d)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v13.25.4 (main) (#39549) (841d6c4)

`v42.21.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.8.1 (main) (#39548) (d9408e3)

Documentation

update documentation on branchConcurrentLimit (#39526) (93b1bac)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v3.14.21 (main) (#39547) (2ad2653)

`v42.21.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v12.8.0 (main) (#39546) (81b15ec)

`v42.20.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.7.6 (main) (#39543) (98030eb)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v3.14.19 (main) (#39542) (5f50a75)

`v42.20.0`

Compare Source

Features

platform/pr-body: add note if body is truncated (#39457) (977db29)

Bug Fixes

deps: update ghcr.io/containerbase/sidecar docker tag to v13.25.3 (main) (#39539) (58b0c63)

Miscellaneous Chores

better code coverage (#39518) (050ac8d)
deps: update ghcr.io/containerbase/devcontainer docker tag to v13.25.3 (main) (#39538) (3df15b1)

`v42.19.10`

Compare Source

Bug Fixes

forgejo: properly handle team reviewers (#39533) (77de384)

`v42.19.9`

Compare Source

Bug Fixes

presets: don't override prCreation on security:minimumReleaseAgeNpm (#39536) (58612b9), closes #39525 #39477 #39066 #39066 #39116 #38873 #39066

`v42.19.8`

Compare Source

Build System

deps: update dependency p-queue to v9.0.1 (main) (#39530) (f81c0b5)

renovatebot/helm-charts (renovate)