[truecharts-admin]

This PR contains the following updates:

Package	Update	Change
renovate/renovate (source)	patch	44.227.2 → 44.227.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

renovatebot/renovate (renovate/renovate)

v44.227.4

Compare Source

Bug Fixes

• deps: update renovate-base-image to v13.163.7 (main) (#​47938) (83794a8)

Miscellaneous Chores

• deps: update ghcr.io/containerbase/devcontainer docker tag to v14.66.16 (main) (#​47940) (5b6421e)

v44.227.3

Compare Source

Build System

• deps: update dependency markdown-table to v3.1.0 (main) (#​47939) (e529745)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[coderabbitai]

No actionable comments were generated in the recent review.

Summary

Summary by CodeRabbit

• Chores
  • Updated the default Docker image version from 44.227.2 to 44.227.4. Deployments that use the default image version will now use 44.227.4; deployments configured to use a different version are unaffected.

The default Renovate Docker image version changes from 44.227.2 to 44.227.4 in the Docker bake configuration.

Changes: Renovate image version

Layer / File(s)	Summary
Update default image version apps/renovate/docker-bake.hcl	The default VERSION value changes from 44.227.2 to 44.227.4.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Possibly related issues

• trueforge-org/containerforge#1 — This update advances the Renovate image dependency. It does not change dependency lookup warnings or dashboard behavior.

Possibly related PRs

• trueforge-org/containerforge#4460 — Updates the Renovate Docker image version in the same configuration file.
• trueforge-org/containerforge#4451 — Updates the Renovate Docker image version in the same configuration file.

Merge Risk: Minimal · up to 4655a

The Renovate image update is mergeable after normal build checks.

Security architecture risk: Low · up to 4655a

The update preserves the existing image source and build configuration. No introduced authority expansion or unsafe rollout condition was identified. The remaining uncertainty concerns changes inside the upstream image, which were not independently verified.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• inferred — Builds using the updated default inherit the replacement upstream image's contents. The evidenced scope is the Renovate image build; tenant exposure, deployed credentials, and effective runtime privileges are not established by the supplied evidence.

Trust Boundaries and Controls

• observed — The repository continues trusting the same upstream image publisher through the existing FROM instruction. The changed build setting does not itself add credentials, IAM permissions, network access, or deployment controls; authority inherited from upstream image behavior remains unverified.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies the Renovate Docker tag update from 44.227.2 to 44.227.4.
Description check		The description explains the Renovate Docker tag update and includes related release notes.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 23d035c8-3363-4e61-b578-84d83d65200b

Commits

Reviewing files that changed from the base of the PR and between 112e748 and 4655a2d.

Files selected for processing: 1

• apps/renovate/docker-bake.hcl

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

[trueforge-bot]

📦 App Size Analysis

Note

Comparing ghcr.io/trueforge-org/renovate:rolling ➔ ghcr.io/trueforge-org/renovate:sandbox

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	2.59 GB	2.59 GB	+7.67 kB (+0%)	🔼
linux/arm64	2.49 GB	2.49 GB	+106.45 kB (+0%)	🔼

[Crow-Control]

Auto approved automated PR