...
This page describes package manager updates for WhiteSource Renovate and WhiteSource Remediate.
Version 21.8.1
WhiteSource Renovate
The WhiteSource Renovate OSS was updated from 25.48.0 to 25.76.2. These changes mostly do not affect Remediate users, which use Remediate-only mode and have not enabled Renovate.
Important changes:
Branches with double hyphens will be changed to single hyphens, which can result in some existing PRs being auto-closed and replacements opened.
Renovate will now override any package manager cache locations configured in env variables.
Git Submodules cloning now needs to be explicitly enabled.
It is no longer supported to configure a "yarnrc" override in Renovate config.
Gradle extraction now defaults to JS-based parsing (previously "gradle-lite").
Package Managers
The following package manager default versions have been updated:
dotnet@5.0.400
gradel@7.2
openjdk@16.0.2
php@8.0.9
Version 21.6.2
WhiteSource Renovate
The WhiteSource Renovate OSS was updated from 24.119.14 to 25.48.0. These changes mostly do not affect Remediate users, which use Remediate-only mode and have not enabled Renovate.
...
Remediate will no longer read
~/.npmrc
from disk. npm credentials can be configured in multiple other ways described in https://docs.renovatebot.com/private-npm-modules/ including environment variables or a configuration file.Major updates for Docker dependencies will now be enabled by default.
Grouping of Node.js packages into a single PR is no longer hardcoded. If you are not already using the
config:base
preset then you can addgroup:Nodejs
to yourextends
instead.Patch updates are not considered updateType=minor by default, so any rules you have for
minor
need to havepatch
added to them in order to take effect. It is no necessary to configureseparateMinorPatch
in order to applypatch
rules.trustLevel
is no longer supported and instead broken intoallowCustomCrateRegistries
,allowScripts
, andexposeAllEnv
.
Package Managers
The following package manager default versions have been updated:
...