renovate

There is time for malware researchers and scanners to (possibly) detect any malicious behaviour in new releases, before your CI infrastructure or developers receive a malicious version upgrade

You are not at risk of the package being unpublished in the 3 day window that the npm registry allows

However, we're releasing it as part of this major release, and highlighting it, in case it does lead to breaking changes.

deps: Update ghcr.io/renovatebot/base-image Docker tag to v12 (main)

deps: Needs NodeJS v24.11.0 instead of v24.10.0. NodeJS v22 is still supported.

npm: communit plugin yarn-catalogs-plugin is not supported anymore

Drop legacy rsa encryption

Remove rangeStrategy=pin from versioning modules

minimumReleaseAge: require a release timestamp by default

best-practices: provide default minimumReleaseAge for npm