Co-authored-by: GitLab Duo <gitlab-duo@gitlab.com>

chore(renovate-bot): drop the v5.26.0 pin comment now that the release has rewritten the pin

See merge request !1909

feat(charts-gitlab-io-release): start and monitor releases with tokens

See merge request !1901

## [5.30.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-10-02)

### Features

* **charts-gitlab-io-release:** retry back off on status read errors and name the last status ([81f95e9d](81f95e9d))
* **charts-gitlab-io-release:** start and monitor releases with tokens ([3ffa36e1](3ffa36e1))

### Fixes

* **charts-gitlab-io-release:** cap the poll backoff and report the last status ([8c568d8d](8c568d8d))
* **charts-gitlab-io-release:** keep the trigger token out of the curl config ([e427553f](e427553f))

### Docs

* **charts-gitlab-io-release:** describe the vault resolution failure mode ([060a57a0](060a57a0))

### Others

* **renovate-bot:** drop the v5.26.0 pin comment now that the release has rewritten the pin ([de69a181](de69a181))
* run generate script ([91961fb4](91961fb4))

chore(deps): update dependency gitlab-org/labkit to v2.62.0

See merge request !1911

docs(api-docs-refresh): point to api-docs at its new gitlab-org path

See merge request !1922

chore(deps): update dependency open-policy-agent/opa to v1.21.0

See merge request !1919

chore(deps): update dependency bridgecrewio/checkov to v3.3.20

See merge request !1912

chore(deps): update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/chainctl docker tag to v0.2.370

Merge branch 'renovate/registry.gitlab.com-gitlab-com-gl-infra-common-ci-tasks-images-chainctl-0.x' into 'main'

chore(deps): update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/chainctl docker tag to v0.2.370

See merge request !1926

`renovate_bot_dry_run` used `CI_JOB_TOKEN`, which lacks the access Renovate
needs to initialise, so every run failed with "Authentication failure".

Use `.renovate_bot_auth_config` like `renovate_bot`, and skip the job on
unprotected refs where the vault-scoped token is unavailable.

Closes #86

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

fix(renovate-bot): run dry-run only on protected refs using vault token

Closes #86

See merge request !1928

## [5.30.1](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2026-10-06)

### Fixes

* **renovate-bot:** run dry-run only on protected refs using vault token ([ba09c491](ba09c491))

### Docs

* **api-docs-refresh:** point to api-docs at its new gitlab-org path ([1f5d607d](1f5d607d))

### Dependencies

* **deps:** update dependency bridgecrewio/checkov to v3.3.20 ([433dca63](433dca63))
* **deps:** update dependency gitlab-org/labkit to v2.62.0 ([4f3ea44c](4f3ea44c))
* **deps:** update dependency open-policy-agent/opa to v1.21.0 ([af4d8aea](af4d8aea))
* **deps:** update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/chainctl docker tag to v0.2.370 ([b637e7db](b637e7db))