Renovate clones repos into its default base-dir under /tmp. When a manager
needs a toolchain installed on the fly (e.g. cargo lockfile updates trigger
`install-tool rust` under binarySource: install), containerbase's
install-tool wipes /tmp -- deleting the active repo clone. The next
`git checkout -f main --` / `git reset --hard` then runs in a directory that
no longer exists and Node throws `spawn git ENOENT`, so cargo (and any other
non-pre-baked-tool) update branches never open an MR.

Pin Renovate's base-dir to ${CI_PROJECT_DIR}/renovate-base (under /builds,
not /tmp) for both renovate_bot and renovate_bot_immediate, next to the
existing --cache-dir, so the /tmp cleanup can no longer delete the clone.
gomod and friends are unaffected because golang is pre-baked (no on-the-fly
install). No image change, so all consuming repos benefit.

Supersedes the add-Rust-toolchain approach in !1634 (wrong layer, +197 MB).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

chore(deps): update dependency gitlab-com/gl-infra/platform/runway/runwayctl to v4.48.0

See merge request !1636

Brings in:
- runwayctl v4.50.0: CloudSQL Auth Proxy support for v2 GKE deployments
  via spec.infrastructure.cloudsql_instance.
- runwayctl v4.49.0: Redis infrastructure support for v2 GKE deployments
  via spec.infrastructure.redis.
- fairway v1.32.0: NEG name annotations + various proto cleanups.

Using feat (not chore) so the release platform cuts a new minor tag;
consumers (notably artifact-registry!671) need a released
release-platform tag to pick up the new defaults via renovate.

feat(release-platform): bump runwayctl to v4.50.0 and fairway to v1.32.0

See merge request !1639

## [4.19.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-06-24)

### Features

* **release-platform:** bump runwayctl to v4.50.0 and fairway to v1.32.0 ([9700a3b9](9700a3b9))

### Dependencies

* **deps:** update dependency gitlab-com/gl-infra/platform/runway/runwayctl to v4.48.0 ([2c17e257](2c17e257))

Fairway v1.32.1 lifts the unconditional min_items=1 on Redis.addrs so
services that source per-region Redis endpoints via a CUSTOM secret
projection pass the manifest validator. Runwayctl v4.50.1 picks up the
new Fairway proto.

fix(release-platform): bump runwayctl to v4.50.1 and Fairway to v1.32.1

See merge request !1643

## [4.19.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-06-25)

### Fixes

* **release-platform:** bump runwayctl to v4.50.1 and Fairway to v1.32.1 ([07aac08f](07aac08f))

chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v4.19

See merge request !1641

chore(deps): update dependency gitlab-org/labkit to v2.25.1

See merge request !1637

fix(renovate-bot): clone repos outside /tmp so install-tool can't delete them

See merge request !1638

## [4.19.2](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-06-29)

### Fixes

* **renovate-bot:** clone repos outside /tmp so install-tool can't delete them ([6733eca8](6733eca8))

### Dependencies

* **deps:** update dependency gitlab-org/labkit to v2.25.1 ([05cb4c28](05cb4c28))
* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v4.19 ([3390aa1e](3390aa1e))