Update renovate to 37.287.2

Changes relevant to us:

Features

• Add new keepUpdatedLabel config setting (#27542) (62d678d) {37.222.0}
• update labels when config changes (#25340) (f889079) {37.277.0}
• asdf: add support for opentofu (#26989) (d265e5e) {37.167.0}
• manager/asdf: support vault (#25542) (e1f0c16) {37.42.0}

GitLab related:

• platform: re-attempt platform automerge on github and gitlab (#26567) (ebf0c7b) {37.255.0}
• platform/gitlab: stabilize PR/MR auto-merge for Gitlab (#27356) (1f8e535) {37.209.0}
• gitlab: support GitLab CI/CD component references (#26660) (487d933) {37.148.0}

Node and related:

• support pnpm.overrides (#28199) (6f785fd) {37.281.0}
• npm: support corepack packageManager URLs (#27852) (450f67f) {37.237.0}
• yarn: set http proxy config from environment variables (#27794) (049c59c) {37.232.0}
• manager/npm: handle pnpm lockfile updates (#26770) (11658df) {37.207.0}
• npm: fuzzy merge registries in .yarnrc.yml (#26922) (88daaf5) {37.161.0}
• manager/npm: Optimize npm dedupe option (#25466) (e0f9266) {37.41.0}
• manager/npm: ignore scripts for pnpmDedupe (#24505) (0d758a3) {37.9.0}

Ruby and related:

• manager/bundler: support groups within source blocks (#27424) (58bf6e3) {37.268.0}

Bug Fixes

GitLab related:

• gitlab: Don't delete report_approver and code_owner approval rules (#27963) (92ab91b) {37.252.0}
• gitlab: reduce attempts (#25994) (802f86d) {37.71.2}
• platform/gitlab: double pipelines issue (#24500) (f549a86) {37.21.0}

yarn related:

• yarn: support v4 lock file detection and add forwards compatibility (#27835) (33959ef) {37.235.3}
• yarn: Don't parse empty yarnrc files (#25609) (e702895) {37.48.1}
• yarn: do not set registryUrls from yarnrc on non-npm dependencies (#25146) (e33def6) {37.13.2}

bundler related:

• manager/bundler: Allow upgrading bundler itself (#27460) (2c2608f) {37.203.5}
• manager/bundler: Update Gemfile.lock when only Ruby upgraded (#27451) (aad2222) {37.202.3}
• manager/bundler: Multiple indications of strict mode failure (#26946) (33450de) {37.162.1}
• manager/bundler: Update conservatively if strict fails (#26929) (9608537) {37.159.1}
• rubygems: Ensure consistency between versions and metadata (#25127) (bb0a2d3) {37.36.1}

npm related:

• npm: add npmrc newline only if missing (#28313) (e4233c9) {37.282.1}
• npm: resolve registry URL using packageName, if set (#28247) (e0115f9) {37.280.3}
• npm: don't set default versioning (#26927) (eb782cc) {37.158.2}
• npm: use lockfileVersion from npm-shrinkwrap (#26726) (5fdf4fc) {37.140.7}
• npm: pass through COREPACK env to child process (#26664) (0352aed) {37.137.1}
• npm: use lockfileVersion to determine npm version (#25820) (08be9b8) {37.60.5}
• npm: better detect workspace packages (#25692) (16b3862) {37.55.1}
• npm: re-enable lock file maintenance (#25045) (0c5df8e) {37.6.2}
• manager/npm: use --config.ignore-scripts=true for pnpm dedupe (#25210) (526ebe6) {37.19.3}
• datasource/npm: respect abortOnError hostRule for registries (#26196) (0445d3f) {37.267.1}
• datasource/npm: mark all releases deprecated if latest deprecated (#27875) (c1517aa) {37.246.2}

Go related:

• datasource/go: don't strip api/ from packageName on gitlab (#27635) (158fa38) {37.220.4}
• datasource/go: Fixes splitting of gitlab go package name (#26477) (54a0233) {37.128.1}

Documentation

• core/config: add warning for deprecated options (#28216) (fe206f7) {37.280.1}
• config overview (#28035) (3ee1a42) {37.267.1}
• gitlab: Add coloring info (#27907) (b4dc29b) {37.246.2}
• Update self-hosted-configuration.md (#27405) (7103ecd) {37.198.2}
• gitlab: add permission note for group level access token (#26583) (739b6e4) {37.130.0}

Build System

• deps: update dependency @renovatebot/ruby-semver to v3.0.23 (#26921) (39ae151) {37.157.1}
  • Note: No code changes: https://app.renovatebot.com/package-diff?name=@renovatebot/ruby-semver&from=3.0.15&to=3.0.23

Code Refactoring

• manager: move some logic from gitlabci-include to gitlabci manager (#26722) (6256983) {37.140.3}
• npm: Simplify .yarnrc parsing (#24931) (906c982) {37.2.0}