[truecharts-admin]

This PR contains the following updates:

Package	Update	Change
renovate/renovate (source)	minor	44.227.4 → 44.230.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

renovatebot/renovate (renovate/renovate)

v44.230.1

Compare Source

Build System

• deps: update dependency @​renovatebot/pgp to v2.0.5 (main) (#​47950) (aa97abf)

v44.230.0

Compare Source

Features

• datasource/kubernetes-api: add flux v2.10 changes (#​47949) (96edca7)

v44.229.0

Compare Source

Features

• deps: update renovate-base-image to v13.164.0 (main) (#​47945) (f905543)

v44.228.0

Compare Source

Features

• manager/gemspec: add gemspec manager (#​44429) (0f39f10)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[coderabbitai]

No actionable comments were generated in the recent review.

Summary

Summary by CodeRabbit

• Chores
  • Updated the Renovate Docker image version.

The default Renovate Docker image version changes from 44.227.4 to 44.230.1.

Changes: Renovate image update

Layer / File(s)	Summary
Update the Renovate image version apps/renovate/docker-bake.hcl	The default Docker image version changes from 44.227.4 to 44.230.1.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Possibly related issues

• trueforge-org/containerforge#1 tracks Renovate dependency updates and related Renovate PR actions.

Possibly related PRs

• trueforge-org/containerforge#4460: Updates an earlier Renovate Docker tag in the same configuration file.
• trueforge-org/containerforge#4451: Updates an earlier Renovate Docker tag in the same configuration file.

Merge Risk: Minimal · up to 32ecb

This is a routine Renovate image version bump with no identified merge-blocking risk. Normal CI image build checks should confirm it builds.

Security architecture risk: Low · up to 32ecb

The change selects a newer Renovate image without changing repository-defined permissions, secret configuration, or deployment behavior. No introduced security issue was established. The upstream images’ effective privileges and the external deployment’s rollback behavior remain unverified.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• inferred — The directly affected security scope is images built using the new default VERSION. Actual tenant, credential, service, and environment exposure depends on deployment consumers not established by these build definitions.

Trust Boundaries and Controls

• observed — The Dockerfile inherits from the upstream Renovate image without defining its own USER or ENTRYPOINT. Those inherited runtime defaults therefore require upstream-image evidence to compare; the repository version change alone does not prove an authority expansion.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies the Renovate Docker tag update from 44.227.4 to 44.230.1.
Description check		The description directly explains the Renovate Docker tag update and includes related release notes and configuration details.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Usage-based review receipt

• Mode: Continue automatically
• Reviewed files: 1
• Waived: $0.25 (charged $0.00)
• View usage details

Note

This review exceeded your plan’s limits and used usage-based reviews—free during trial, billed after paid activation unless disabled. Manage usage-based reviews.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 2c716b78-4c28-4daf-9ede-1559d53d2abe

Commits

Reviewing files that changed from the base of the PR and between 9c8596c and 32ecb95.

Files selected for processing: 1

• apps/renovate/docker-bake.hcl

Limit details: You’ve used all 10 included reviews currently available.

[trueforge-bot]

📦 App Size Analysis

Note

Comparing ghcr.io/trueforge-org/renovate:rolling ➔ ghcr.io/trueforge-org/renovate:sandbox

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	2.59 GB	2.62 GB	+29.77 MB (+1.15%)	🔼
linux/arm64	2.49 GB	2.52 GB	+28.93 MB (+1.16%)	🔼

[Crow-Control]

Auto approved automated PR