chore(deps): update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v5.48

renovate-botrequested to merge
renovate/common-ci-tasks into master

This MR contains the following updates:

Package Type Update Change
gitlab-com/gl-infra/common-ci-tasks repository minor v5.23 → v5.48

View the Renovate pipeline for this MR

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

gitlab-com/gl-infra/common-ci-tasks (gitlab-com/gl-infra/common-ci-tasks)

v5.48

Compare Source

5.48.2 (2026-11-09)
Fixes
  • renovate: update renovate-image (c6cac20)

v5.47

Compare Source

5.47.2 (2026-11-04)
Fixes
  • renovate: bump renovate and containerbase base image together (4d69850)
Dependencies
  • deps: update ghcr.io/containerbase/base docker tag to v14.63.0 (7079a29)

v5.46

Compare Source

5.46.0 (2026-10-30)
Features
  • tube: bump BSR image to 0.4.0 (fd10ab3)

v5.45

Compare Source

5.45.2 (2026-10-30)
Fixes
  • danger: pin the git gem below 6.0.0 for projects with a Gemfile (8d8e126)
Dependencies
  • deps: update dependency helm/helm to v4.3.1 (afe4ea6)
  • deps: update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/chainctl docker tag to v0.2.391 (717f925)

v5.44

Compare Source

5.44.0 (2026-10-22)
Features
  • release-platform: update runway to v4.101.0 (01f9a9f)
Others
  • remove reprazent from CODEOWNERS (1739ee2)
Dependencies
  • deps: update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v5.43 (7524cc5)
  • deps: update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/chainctl docker tag to v0.2.388 (86196a2)

v5.43

Compare Source

5.43.0 (2026-10-21)
Features
  • renovate: bump the openapi-ruleset pin in Redocly configurations (e54b16c)
  • renovate: bump the openapi-ruleset pin only on the first weekend of the month (8d0d494)

v5.42

Compare Source

5.42.0 (2026-10-20)
Features
  • release-platform: update runway to v4.91.1 (519771c)
Dependencies
  • deps: update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v5.41 (cc6327f)

v5.41

Compare Source

5.41.0 (2026-10-20)
Features
  • release-platform: update runway to v4.91.0 (ee7c48c)
Dependencies
  • deps: update dependency bridgecrewio/checkov to v3.3.27 (179dca3)
  • deps: update dependency gitlab-org/quality/quality-engineering/modular-feature-testing to v0.5.0 (32ef9a9)
  • deps: update dependency gitlab-org/theseus/migrator to v1.11.1 (3bcf334)
  • deps: update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.86.2 (4d25f12)
  • deps: update dependency python/cpython to v3.15.0 (ef594cd)
  • deps: update dependency renovate to v44.151.3 (f796b61)
  • deps: update ghcr.io/containerbase/base docker tag to v14.42.0 (1165db0)
  • deps: update nixos/nix docker tag to v2.35.3 (c0d0a94)
  • deps: update node.js to v24.22.0 (1cd7c36)
  • deps: update python docker tag to v3.15 (c966054)
  • deps: update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/chainctl docker tag to v0.2.385 (b32b30a)

v5.40

Compare Source

5.40.0 (2026-10-19)
Features
  • release-platform: update fairway to v3.22.0 (2727051)
Dependencies
  • deps: update dependency gitlab-com/gl-infra/jsonnet-tool to v1.23.0 (4448172)

v5.39

Compare Source

5.39.0 (2026-10-15)
Features
  • release-platform: update fairway to v3.20.1 (5743313)
Docs
  • Update inputs documentation URLs in template READMEs (061ce9c)
Dependencies
  • deps: update dependency gitlab-org/labkit to v2.63.1 (37ffd97)
  • deps: update dependency gitlab-org/labkit to v2.63.2 (dbc84a0)
  • deps: update dependency mikefarah/yq to v4.54.1 (57d0d40)
  • deps: update dependency open-policy-agent/conftest to v0.71.1 (81ae279)
  • deps: update dependency yoheimuta/protolint to v0.58.0 (b4001ff)
  • deps: update ghcr.io/containerbase/base docker tag to v14.33.0 (0f9d584)

v5.38

Compare Source

5.38.0 (2026-10-13)
Features
  • release-platform: update runway to v4.78.0 (39462d0)

v5.37

Compare Source

5.37.0 (2026-10-13)
Features
  • openapi-lint: add the standard OpenAPI ruleset (50a1ee7)
  • openapi-lint: raise 14 ruleset warnings to errors (0df7d23)
Fixes
  • openapi-lint: move operation-2xx-response back to warn (a5d38db)
Docs
  • openapi-lint: use placeholder tags in the ruleset usage example (6e6a7a5)
Others
  • openapi-lint: add API Platform as optional code owners (f0016e8)

v5.36

Compare Source

5.36.0 (2026-10-12)
Features
  • release-platform: update fairway to v3.19.0 (1273c4e)
Dependencies
  • deps: update dependency bridgecrewio/checkov to v3.3.21 (8647cf2)
  • deps: update dependency docker/cli to v29.8.2 (207a1d2)
  • deps: update dependency git/git to v2.56.0 (27aba02)
  • deps: update dependency gitlab-org/labkit to v2.63.0 (4764c05)
  • deps: update dependency gitlab-org/theseus/migrator to v1.10.0 (2d6a151)
  • deps: update dependency jdx/mise to v2026.10.3 (7da8a29)
  • deps: update dependency python/cpython to v3.14.8 (287eb6e)
  • deps: update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/chainctl docker tag to v0.2.379 (0ad82cd)

v5.35

Compare Source

5.35.0 (2026-10-08)
Features
  • migrator: .install_migrator step for jobs without Docker (0cee650)
  • migrator: install script for the CLI and engine from release assets (a29dffa)
  • release-platform: update runway to v4.75.0 (6c1d047)
Fixes
  • migrator: confine the install step and verify checksums on busybox (5ad99cc)
  • migrator: keep the install cache key free of the slash in CI_RUNNER_EXECUTABLE_ARCH (04a3470)
  • migrator: key the install cache and marker on the runner architecture (15890a5)
Tests
  • migrator: give the restricted-PATH bats cases gzip; shfmt -s (01e937e)
  • migrator: prove .install_migrator on golang and alpine images (597e8b6)
Others
  • migrator: indent with spaces (shfmt -s -i 2), matching the repo's editorconfig (a496033)
  • migrator: regenerate the component README after the applied docs suggestion (c827344)
  • migrator: shfmt the install script and its tests (5653ccb)

v5.34

Compare Source

5.34.0 (2026-10-08)
Features
  • release-platform: update runway to v4.74.0 (c592373)

v5.33

Compare Source

5.33.0 (2026-10-06)
Features
  • add the migrator CI component (6f24ff4)
Fixes
  • explain why build_migrations failed on an unset APP_VERSION (e42d360)
  • make the migrator chart-versions dependency optional (65c570f)
  • run the migrator dind jobs on .docker_buildx_base (50e2e02)
  • surface the Postgres log when the migrator round trip cannot connect (5ff4fda)
Docs
  • correct the Fairway job names in release-platform (505a17c)
  • drop the migrator warning about release-platform's job names (eb460e0)
  • explain how version_job tracks release-platform's runway_dir (ae5d3f8)
  • migrator: label the job-name code fence (e8ab6a0)
Tests
  • migrator: assert on the generated rules, needs and tagging (4af5d5f)
Others
  • appease jsonnetfmt (bc668d2)
  • regenerate templates/migrator via scripts/generate.sh (9033850)

v5.32

Compare Source

5.32.0 (2026-10-06)
Features
  • release-platform: update runway to v4.73.3 (9bf32e4)

v5.31

Compare Source

5.31.0 (2026-10-06)
Features
  • release-platform: update runway to v4.73.0 (4c228f7)
Dependencies
  • deps: update dependency docker/cli to v29.8.1 (da04ef1)
  • deps: update dependency hashicorp/hcl to v2.25.0 (ca0a6c2)
  • deps: update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.83.0 (eefa3cb)
  • deps: update dependency jdx/mise to v2026.9.16 (7be9d96)
  • deps: update dependency open-policy-agent/conftest to v0.70.1 (6459a85)
  • deps: update dependency renovate to v44.117.2 (5fc734c)
  • deps: update dependency ruby/ruby to v3.4.11 (8c3165b)
  • deps: update ghcr.io/containerbase/base docker tag to v14.26.2 (74a9826)
  • deps: update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v5.30 (f04e303)
  • deps: update quay.io/skopeo/stable docker tag to v1.22.3 (62bd31c)

v5.30

Compare Source

5.30.1 (2026-10-06)
Fixes
  • renovate-bot: run dry-run only on protected refs using vault token (ba09c49)
Docs
  • api-docs-refresh: point to api-docs at its new gitlab-org path (1f5d607)
Dependencies
  • deps: update dependency bridgecrewio/checkov to v3.3.20 (433dca6)
  • deps: update dependency gitlab-org/labkit to v2.62.0 (4f3ea44)
  • deps: update dependency open-policy-agent/opa to v1.21.0 (af4d8ae)
  • deps: update registry.gitlab.com/gitlab-com/gl-infra/common-ci-tasks-images/chainctl docker tag to v0.2.370 (b637e7d)

v5.29

Compare Source

5.29.0 (2026-10-01)
Features
  • release-platform: sync extra Helm charts to canonical under .runway/ dir (0861fec)
Dependencies
  • deps: update dependency gitlab-org/labkit to v2.60.0 (62658ed)
  • deps: update dependency gitlab-org/labkit to v2.61.0 (6b00c5c)

v5.28

Compare Source

5.28.0 (2026-09-29)
Features
  • update-release-manifest job must pass when enabled (9027680)

v5.27

Compare Source

5.27.0 (2026-09-28)
Features
  • chainguard-auth: add component exchanging a CI id_token for a cgr.dev credential (e4a0d8c)
  • chainguard-auth: run on the pre-built chainctl image (0ee5d88)
  • chainguard-auth: verify the chainctl download against a Renovate-managed sha256; share self-test rules via extends (e752b10)
Fixes
  • chainguard-auth: address review — retry, mint guard, fork-MR gating, dotenv and needs semantics in docs (58601d7)
  • chainguard-auth: restrict the credential artifact to access: none (5566867)
  • renovate-bot: pin the last published renovate image; v5.26.0 was never built (3257eb9)
Docs
  • address the !1904 review threads (7284251)
  • chainguard-auth: correct the long-pipeline remedy and dotenv opt-out guidance; make the self-test assert HTTP 200 (c956e6c)
  • chainguard-auth: document the component and its 1h credential lifetime (c1ea5bb)
  • chainguard-auth: say token, not identity; quote the null sentinel in the self-test (e25bcac)
Others
  • chainguard-auth: move the self-test off end-of-life alpine 3.21 (0f234c9)
  • chainguard-auth: self-test the component against cgr.dev in this repository's pipeline (bd42b84)
  • renovate-bot: drop the explanatory comment on the image pin (f0f0f72)
  • renovate-bot: say why the image pin points at v5.25.0 (5e4d6c5)
  • stop enabling the docker template's cgr.dev login for the renovate image build; nothing in it pulls from cgr.dev (16ad258)

v5.26

Compare Source

5.26.0 (2026-09-23)
Features
  • release-platform: update runway to v4.68.0 (c5175fc)
Dependencies
  • deps: update dependency gitlab-org/labkit to v2.52.0 (ed688ef)
  • deps: update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v5.25 (232f980)

v5.25

Compare Source

5.25.0 (2026-09-21)
Features
  • skip deterministic validation on mirrors by default (39a9fbb)
Others
  • codeowners: add mjhoad, bwilkerson13, and john.mcdonnell as owners (1f050d7)
Dependencies
  • deps: update dependency bridgecrewio/checkov to v3.3.17 (690d3c9)
  • deps: update dependency gitlab-org/labkit to v2.50.1 (67cd957)
  • deps: update dependency gitlab-org/labkit to v2.51.0 (b0985b8)
  • deps: update dependency helm/helm to v4.3.0 (e9758c2)
  • deps: update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.82.0 (b4c98e8)
  • deps: update dependency mvdan/sh to v3.14.1 (abe8a17)
  • deps: update dependency open-policy-agent/conftest to v0.70.0 (cfbb946)
  • deps: update dependency renovate to v44.83.2 (ed01273)
  • deps: update ghcr.io/containerbase/base docker tag to v14.16.0 (72186d7)
  • deps: update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v5.24 (8621f49)

v5.24

Compare Source

5.24.0 (2026-09-18)
Features
  • release-platform: update runway to v4.67.0 (a7f2635)
Dependencies

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about these updates again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Mend Renovate CLI.

Edited by renovate-bot

Merge request reports