.devcontainer/Dockerfile

-FROM containerbase/node:14.20.1@sha256:e275fb819c433373dbcdd7e7fc7c4fbdf6a08880e66eb9617ff311b6766e6a2c
+FROM containerbase/node:18.14.2@sha256:d3817b7251a8b3389d759394171e84c5afb7352f61d5ed5b12703977673a444c
 
 USER root
 

.devcontainer/devcontainer.json

 {
+  "hostRequirements": {
+    "cpus": 4,
+    "memory": "8gb",
+    "storage": "32gb"
+  },
   "name": "Renovate",
   "dockerFile": "Dockerfile",
   "settings": {

.eslintrc.js

@@ -41,8 +41,18 @@ module.exports = {
     ],
     'import/prefer-default-export': 0, // no benefit
 
+    'import/no-cycle': 2, // cycles don't work when moving to esm
+
+    /*
+     * This rule is not needed since the project uses typescript and the rule
+     * `@typescript-eslint/explicit-function-return-type`.
+     *
+     * Any non-exhaustive definition of the function will therefore result in a
+     * typescript TS2366 error.
+     */
+    'consistent-return': 0,
+
     // other rules
-    'consistent-return': 'error',
     eqeqeq: 'error',
     'no-console': 'error',
     'no-negated-condition': 'error',

.github/DISCUSSION_TEMPLATE/ideas-general-discussion.yml

+body:
+  - type: dropdown
+    id: type-of-discussion
+    attributes:
+      label: Type of discussion.
+      description: Are you proposing an idea, or do you just want to chat?
+      options:
+        - I'm proposing an idea
+        - I just want to chat
+    validations:
+      required: true
+
+  - type: textarea
+    id: discussion-field
+    attributes:
+      label: Tell us more.
+      description: Explain your idea or chat away in this box.
+    validations:
+      required: true

.github/DISCUSSION_TEMPLATE/mend-renovate-app-support.yml

+body:
+  - type: checkboxes
+    id: hosted-app-checkbox
+    attributes:
+      label: I'm using the Mend Renovate hosted app.
+      description: Only use this discussion if you're using the Mend Renovate hosted app.
+      options:
+        - label: I'm using the Mend Renovate hosted app.
+          required: true
+
+  - type: dropdown
+    id: regression-error
+    attributes:
+      label: Was this something which used to work for you, and then stopped?
+      options:
+        - 'It used to work, and then stopped'
+        - 'I never saw this working'
+    validations:
+      required: true
+
+  - type: textarea
+    id: describe-problem
+    attributes:
+      label: Describe your problem.
+      description: 'Do not report any security concerns here. Email [renovate-disclosure@mend.io](mailto:renovate-disclosure@mend.io) instead.'
+    validations:
+      required: true
+
+  - type: textarea
+    id: debug-logs
+    attributes:
+      label: Relevant debug logs.
+      description: |
+        Log into [Renovate's app dashboard](https://app.renovatebot.com/dashboard) and locate the correct job log for when the problem occurred (e.g. when the PR was created).
+        Try to paste the *relevant* logs here, not the entire thing and not just a link to the dashboard (others don't have permissions to view them).
+        If you're not sure about the relevant parts of the log, then feel free to post the full log to a [Github Gist](https://gist.github.com/) and link to it.
+        Try to highlight the important logs into the issue itself.
+      value: |
+        <details><summary>Logs</summary>
+
+        ```
+        Copy/paste the relevant log(s) here, between the starting and ending backticks
+        ```
+
+        </details>
+    validations:
+      required: false

.github/DISCUSSION_TEMPLATE/questions-answers.yml

+body:
+  - type: dropdown
+    id: how-are-you-running-renovate
+    attributes:
+      label: How are you running Renovate?
+      options:
+        - 'Mend Renovate hosted app on github.com'
+        - 'Self-hosted'
+    validations:
+      required: true
+
+  - type: input
+    id: renovate-version-if-selfhosting
+    attributes:
+      label: If you're self-hosting Renovate, tell us what version of Renovate you run.
+    validations:
+      required: false
+
+  - type: dropdown
+    id: platform-select
+    attributes:
+      label: If you're self-hosting Renovate, select which platform you are using.
+      options:
+        - 'AWS CodeCommit'
+        - 'Azure DevOps (dev.azure.com)'
+        - 'Azure DevOps Server'
+        - 'Bitbucket Cloud (bitbucket.org)'
+        - 'Bitbucket Server'
+        - 'Gitea'
+        - 'github.com'
+        - 'GitHub Enterprise Server'
+        - 'gitlab.com'
+        - 'GitLab self-hosted'
+    validations:
+      required: false
+
+  - type: input
+    id: platform-version-if-selfhosting
+    attributes:
+      label: If you're self-hosting Renovate, tell us what version of the platform you run.
+      description: |
+        This field is for the version number of your _platform_, so one of these:
+          - AWS CodeCommit
+          - Azure DevOps
+          - Bitbucket Cloud
+          - Bitbucket Server
+          - Azure DevOps
+          - Gitea
+          - GitHub (.com and Enterprise Server)
+          - GitLab (.com and CE/EE)
+    validations:
+      required: false
+
+  - type: dropdown
+    id: regression-error
+    attributes:
+      label: Was this something which used to work for you, and then stopped?
+      options:
+        - 'It used to work, and then stopped'
+        - 'I never saw this working'
+    validations:
+      required: true
+
+  - type: textarea
+    id: wanted-end-result
+    attributes:
+      label: Wanted end result.
+      description: 'Describe the wanted end result. Do not report any security concerns here. Email [renovate-disclosure@mend.io](mailto:renovate-disclosure@mend.io) instead.'
+    validations:
+      required: true
+
+  - type: textarea
+    id: describe-what-you-tried
+    attributes:
+      label: What you tried so far.
+      description: 'Tell us what you tried so far, what worked, what did not work, and so on.'
+    validations:
+      required: true
+
+  - type: textarea
+    id: debug-logs
+    attributes:
+      label: Relevant debug logs
+      description: |
+        If you're running self-hosted, run with `LOG_LEVEL=debug` in your environment variables and search for whatever dependency/branch/PR that is causing the problem.
+        If you are using the Renovate App, log into [Renovate's app dashboard](https://app.renovatebot.com/dashboard) and locate the correct job log for when the problem occurred (e.g. when the PR was created).
+        Try to paste the *relevant* logs here, not the entire thing and not just a link to the dashboard (others don't have permissions to view them).
+        If you're not sure about the relevant parts of the log, then feel free to post the full log to a [Github Gist](https://gist.github.com/) and link to it.
+        Try to highlight the important logs into the issue itself.
+      value: |
+        <details><summary>Logs</summary>
+
+        ```
+        Copy/paste the relevant log(s) here, between the starting and ending backticks
+        ```
+
+        </details>
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -31,11 +31,12 @@ body:
     attributes:
       label: If you're self-hosting Renovate, select which platform you are using.
       options:
+        - 'AWS CodeCommit'
         - 'Azure DevOps (dev.azure.com)'
         - 'Azure DevOps Server'
         - 'Bitbucket Cloud (bitbucket.org)'
         - 'Bitbucket Server'
-        - 'Gitea'
+        - 'Gitea or Forgejo'
         - 'github.com'
         - 'GitHub Enterprise Server'
         - 'gitlab.com'
@@ -49,12 +50,14 @@ body:
       label: If you're self-hosting Renovate, tell us what version of the platform you run.
       description: |
         This field is for the version number of your _platform_, so one of these:
-          - GitHub (.com and Enterprise Server)
-          - GitLab (.com and CE/EE)
+          - AWS CodeCommit
+          - Azure DevOps
           - Bitbucket Cloud
           - Bitbucket Server
           - Azure DevOps
-          - Gitea
+          - Gitea or Forgejo
+          - GitHub (.com and Enterprise Server)
+          - GitLab (.com and CE/EE)
     validations:
       required: false
 
@@ -104,8 +107,8 @@ body:
       label: Have you created a minimal reproduction repository?
       description: Please read the [minimal reproductions documentation](https://github.com/renovatebot/renovate/blob/main/docs/development/minimal-reproductions.md) to learn how to make a good minimal reproduction repository.
       options:
-        - 'I have linked to a minimal reproduction repository in the bug description'
-        - 'No reproduction, but I have linked to a public repo where it occurs'
         - 'No reproduction repository'
+        - 'No reproduction, but I have linked to a public repo where it occurs'
+        - 'I have linked to a minimal reproduction repository in the bug description'
     validations:
       required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -2,4 +2,4 @@ blank_issues_enabled: false
 contact_links:
   - name: Start a discussion (config, doubts, docs)
     url: https://github.com/renovatebot/renovate/discussions/new
-    about: If you have any questions about bot configuration or doubts about whether you should create a feature request or bug report, or have problems with the documentation please click here to create a Discussion instead of an Issue.
+    about: If you have any questions about bot configuration or doubts about whether you should create a feature request or bug report, or have problems with the documentation please select the button to create a Discussion instead of an Issue.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -25,8 +25,8 @@ body:
     attributes:
       label: Is this a feature you are interested in implementing yourself?
       options:
-        - 'Yes'
-        - 'Maybe'
         - 'No'
+        - 'Maybe'
+        - 'Yes'
     validations:
       required: true

.github/contributing.md

@@ -46,8 +46,8 @@ Force pushing a PR is OK when:
 
 Maintainers can suggest changes while reviewing your pull request, please follow these steps to apply them:
 
-1. Batch the suggestions into a logical group by clicking on the **Add suggestion to batch** button
-2. Click on the **Commit suggestions** button
+1. Batch the suggestions into a logical group by selecting the **Add suggestion to batch** button
+1. Select the **Commit suggestions** button
 
 Read the [GitHub docs, Applying suggested changes](https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/incorporating-feedback-in-your-pull-request#applying-suggested-changes) to learn more.
 
@@ -56,7 +56,7 @@ Read the [GitHub docs, Applying suggested changes](https://docs.github.com/en/pu
 A maintainer/contributor can ask you to make changes, without providing a suggestion that you can apply.
 In this case you need to do some work yourself to address the feedback.
 
-Once you've done the work, resolve the conversation by clicking on the **Resolve conversation** button in the PR overview.
+Once you've done the work, resolve the conversation by selecting the **Resolve conversation** button in the PR overview.
 Avoid posting comments like "I've done the work", or "Done".
 
 Read the [GitHub Docs, resolving conversations](https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/commenting-on-a-pull-request#resolving-conversations) to learn more.

.github/label-actions.yml

@@ -39,14 +39,14 @@
 
     #### Finding logs on hosted app
 
-    <details><summary>Click me to read instructions</summary>
+    <details><summary>Select me to read instructions</summary>
 
 
     If you use the Renovate app (GitHub):
 
     1. Go to the affected PR, and search for "View repository job log here"
 
-    1. Click on the link to go to the "Mend Renovate Dashboard" and log in
+    1. Select the link to go to the "Mend Renovate Dashboard" and log in
 
     1. You are now in the correct repository log overview screen
 
@@ -59,7 +59,7 @@
 
     #### Finding logs when self-hosting
 
-    <details><summary>Click me to read instructions</summary>
+    <details><summary>Select me to read instructions</summary>
 
 
     If you're running self-hosted, run with `LOG_LEVEL=debug` in your environment variables and search for whatever dependency/branch/PR that is causing the problem.
@@ -69,7 +69,7 @@
 
     ### Insufficient logs
 
-    <details><summary>Click me to read instructions</summary>
+    <details><summary>Select me to read instructions</summary>
 
 
     If you already gave us a log, and the Renovate team said it's not enough, then follow the instructions from the **No logs at all** section.
@@ -79,13 +79,13 @@
 
     ### Formatting your logs
 
-    <details><summary>Click me to read instructions</summary>
+    <details><summary>Select me to read instructions</summary>
 
 
     Please put your logs in a `<details>` and `<summary>` element like this:
 
 
-        <details><summary>Click me to see logs</summary>
+        <details><summary>Select me to see logs</summary>
 
         ```
         Copy/paste your logs here, between the starting and ending backticks
@@ -125,4 +125,43 @@
     Good luck,
 
 
+    The Renovate team
+
+'pr:no-coverage-ignore':
+  comment: >
+    Hi there,
+
+
+    You're skipping code tests with `istanbul ignore`.
+    Please only skip tests if:
+      - you cannot test the code, or
+      - the code is very difficult to test, or
+      - the edge case won't usually happen at runtime
+    If you skip a test then always comment why:
+    ```ts
+    // istanbul ignore next: typescript strict null check
+    if (!url) {
+      return null;
+    }
+    ```
+
+
+    Good luck,
+
+
+    The Renovate team
+
+'pr:no-done-comments':
+  comment: >
+    Hi there,
+
+
+    You are using simple `done` comments which cause a lot of noise.
+    Instead, please use GitHub's web interface to request another review.
+    Please read our [contributing guidelines](https://github.com/renovatebot/renovate/blob/main/.github/contributing.md#resolve-review-comments-instead-of-commenting) to reduce noise.
+
+
+    Good luck,
+
+
     The Renovate team

.github/pull_request_template.md

@@ -9,14 +9,15 @@
 ## Context
 
 <!-- Describe why you're making these changes if it's not already explained in a corresponding issue. -->
-<!-- If you're closing an existing issue with this pull request, use the keyword Closes #issue_number -->
+<!-- If you're closing an existing issue with this pull request, use the keyword Closes #issue_number. -->
+<!-- If you're referencing an issue with this pull request, put it in a Markdown list like this: - #issue_number. -->
 
 ## Documentation (please check one with an [x])
 
 - [ ] I have updated the documentation, or
 - [ ] No documentation update is required
 
-## How I've tested my work (please tick one)
+## How I've tested my work (please select one)
 
 I have verified these changes via:
 

.github/workflows/build.yml

@@ -6,6 +6,7 @@ on:
       - main
 
   pull_request:
+  merge_group:
 
   workflow_dispatch:
     inputs:
@@ -24,12 +25,12 @@ concurrency:
 env:
   # Currently no way to detect automatically (#8153)
   DEFAULT_BRANCH: main
-  NODE_VERSION: 14
+  NODE_VERSION: 18
   DRY_RUN: true
 
 jobs:
   test:
-    name: ${{ matrix.node-version == 14 && format('test ({0})', matrix.os) || format('test ({0}, node-{1})', matrix.os, matrix.node-version) }}
+    name: ${{ matrix.node-version == 18 && format('test ({0})', matrix.os) || format('test ({0}, node-{1})', matrix.os, matrix.node-version) }}
     runs-on: ${{ matrix.os }}
 
     # tests shouldn't need more time
@@ -38,28 +39,28 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        node-version: [14, 16]
+        node-version: [16, 18]
         # skip macOS and Windows test on pull requests without 'ci:fulltest' label
         include: >-
           ${{ fromJSON((github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'ci:fulltest')) && '[{
             "os": "macos-latest",
-            "node-version": 16
+            "node-version": 18
           }, {
             "os": "windows-latest",
-            "node-version": 16
+            "node-version": 18
           }]' || '[]') }}
 
     env:
-      coverage: ${{ matrix.os == 'ubuntu-latest' && (matrix.node-version == 14 || matrix.node-version == 16) }}
+      coverage: ${{ matrix.os == 'ubuntu-latest' && matrix.node-version == 18 }}
       NODE_VERSION: ${{ matrix.node-version }}
 
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
         with:
           fetch-depth: 2
 
       - name: Set up Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516 # tag=v3.5.1
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: yarn
@@ -71,20 +72,19 @@ jobs:
           git config --global core.symlinks true
           git config --global user.email 'renovate@whitesourcesoftware.com'
           git config --global user.name  'Renovate Bot'
-          npm config set scripts-prepend-node-path true
           git --version
           echo "Node $(node --version)"
           echo "Yarn $(yarn --version)"
 
       - name: Installing dependencies
-        run: yarn install --frozen-lockfile
+        run: yarn install --frozen-lockfile --ignore-engines # semantic release will fail to install otherwise
 
       # build before tests to for static file check
       - name: Build
         run: yarn build
 
       - name: Cache jest cache
-        uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3.0.11
+        uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3.2.6
         with:
           path: .cache/jest
           key: ${{ runner.os }}-${{ matrix.node-version }}-jest-${{ hashFiles('yarn.lock') }}
@@ -106,12 +106,12 @@ jobs:
     timeout-minutes: 15
 
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
         with:
           fetch-depth: 2
 
       - name: Set up Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516 # tag=v3.5.1
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: yarn
@@ -122,13 +122,15 @@ jobs:
           git config --global core.symlinks true
           git config --global user.email 'renovate@whitesourcesoftware.com'
           git config --global user.name  'Renovate Bot'
-          npm config set scripts-prepend-node-path true
           echo "Node $(node --version)"
           echo "Yarn $(yarn --version)"
 
       - name: Installing dependencies
         run: yarn install --frozen-lockfile
 
+      - name: Type check
+        run: yarn type-check
+
       - name: Lint
         run: |
           yarn ls-lint
@@ -141,12 +143,6 @@ jobs:
       - name: Test schema
         run: yarn test-schema
 
-      - name: Type check
-        run: yarn type-check
-
-      - name: Strict check
-        run: yarn strict-check
-
   release:
     needs: [lint, test]
     if: github.repository == 'renovatebot/renovate' && github.event_name != 'pull_request'
@@ -160,12 +156,12 @@ jobs:
 
     steps:
       # full checkout for semantic-release
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
         with:
           fetch-depth: 0
 
       - name: Set up Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516 # tag=v3.5.1
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: yarn
@@ -176,8 +172,6 @@ jobs:
           git config --global core.symlinks true
           git config --global user.email 'renovate@whitesourcesoftware.com'
           git config --global user.name  'Renovate Bot'
-          yarn config set version-git-tag false
-          npm config set scripts-prepend-node-path true
 
       - name: Check dry run
         run: |
@@ -194,15 +188,15 @@ jobs:
 
       - name: semantic-release
         run: |
-          echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' >> ./.npmrc
-          npx semantic-release --dry-run ${{env.DRY_RUN}}
+          echo '//registry.yarnpkg.com/:_authToken=${NPM_TOKEN}' >> ./.npmrc
+          yarn semantic-release --dry-run ${{env.DRY_RUN}}
           git checkout -- .npmrc
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Upload docs
-        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3.1.0
+        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
         with:
           name: docs
           path: tmp/docs/

.github/workflows/codeql-analysis.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
 
       - name: Delete fixtures to suppress false positives
         run: |
@@ -30,7 +30,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@807578363a7869ca324a79039e6db9c843e0e100 # tag=v2.1.27
+        uses: github/codeql-action/init@32dc499307d133bb5085bae78498c0ac2cf762d5 # v2.2.5
         with:
           languages: javascript
 
@@ -40,7 +40,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@807578363a7869ca324a79039e6db9c843e0e100 # tag=v2.1.27
+        uses: github/codeql-action/autobuild@32dc499307d133bb5085bae78498c0ac2cf762d5 # v2.2.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -54,4 +54,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@807578363a7869ca324a79039e6db9c843e0e100 # tag=v2.1.27
+        uses: github/codeql-action/analyze@32dc499307d133bb5085bae78498c0ac2cf762d5 # v2.2.5

.github/workflows/dependency-review.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
 
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@fd675ced9c17f1393071e1a2e685ab527e585a0c # tag=v2.5.0
+        uses: actions/dependency-review-action@c090f4e553673e6e505ea70d6a95362ee12adb94 # v3.0.3

.github/workflows/label-actions.yml

@@ -15,7 +15,7 @@ jobs:
   reaction:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/label-actions@93ea5ec1d65e6a21427a1571a18a5b8861206b0b # renovate: tag=v2.2.0
+      - uses: dessant/label-actions@074b96a62f35c226ecb38e840f44941bde0343a6 # v3.0.0
         with:
           github-token: ${{ github.token }}
           process-only: 'issues, discussions'

.github/workflows/lock.yml

@@ -20,7 +20,7 @@ jobs:
   lock:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@e460dfeb36e731f3aeb214be6b0c9a9d9a67eda6 # renovate: tag=v3.0.0
+      - uses: dessant/lock-threads@c1b35aecc5cdb1a34539d14196df55838bb2f836 # v4.0.0
         if: github.repository == 'renovatebot/renovate'
         with:
           github-token: ${{ github.token }}

.github/workflows/release-npm.yml

@@ -18,7 +18,7 @@ on:
         required: false
 
 env:
-  NODE_VERSION: 14
+  NODE_VERSION: 18
   GIT_SHA: ${{ github.event.client_payload.sha }}
   NPM_VERSION: ${{ github.event.client_payload.version }}
   NPM_TAG: ${{ github.event.client_payload.tag }}
@@ -38,12 +38,12 @@ jobs:
             echo "NPM_TAG=${{ github.event.inputs.tag }}" >> $GITHUB_ENV
           fi
 
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
         with:
           ref: ${{ env.GIT_SHA }}
 
       - name: Set up Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516 # tag=v3.5.1
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: yarn
@@ -55,7 +55,6 @@ jobs:
           git config --global user.email 'renovate@whitesourcesoftware.com'
           git config --global user.name  'Renovate Bot'
           yarn config set version-git-tag false
-          npm config set scripts-prepend-node-path true
 
       - name: Installing dependencies
         run: yarn install --frozen-lockfile

.github/workflows/stale-action.yml

@@ -13,7 +13,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@99b6c709598e2b0d0841cd037aaf1ba07a4410bd # tag=v5.2.0
+      - uses: actions/stale@6f05e4244c9a0b2ed3401882b05d701dd0a7289b # v7.0.0
         with:
           # Rate limit per run, (defaults to 30, but we've increased it to 40 for now).
           operations-per-run: 40
@@ -36,9 +36,6 @@ jobs:
           days-before-issue-close: 7
           close-issue-message: 'This bug report has been closed as we need a reproduction to work on this. If the original poster or anybody else with the same problem discovers that they can reproduce it, please create a new issue, and reference this issue.'
 
-          # Close stale issues as "not planned" on GitHub.
-          close-issue-reason: 'not_planned'
-
           # Never label/close any pull requests.
           days-before-pr-close: -1
           days-before-pr-stale: -1

.github/workflows/update-data.yml

@@ -15,10 +15,10 @@ jobs:
   update-data:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
+      - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
 
       - name: Set up Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@8c91899e586c5b171469028077307d293428b516 # tag=v3.5.1
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: yarn
@@ -33,7 +33,7 @@ jobs:
         run: yarn prettier-fix
 
       - name: Create pull request
-        uses: peter-evans/create-pull-request@671dc9c9e0c2d73f07fa45a3eb0220e1622f0c5f # tag=v4.1.3
+        uses: peter-evans/create-pull-request@2b011faafdcbc9ceb11414d64d0573f37c774b04 # v4.2.3
         with:
           author: 'Renovate Bot <renovate@whitesourcesoftware.com>'
           branch: 'chore/update-static-data'