[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@semantic-release/changelog	6.0.3 → 7.0.0
@semantic-release/git	10.0.1 → 11.0.1
@semantic-release/github	11.0.1 → 12.0.10
semantic-release	24.2.3 → 25.0.9

---

Release Notes

semantic-release/changelog (@​semantic-release/changelog)

v7.0.0

Compare Source

Features

• ES Module (#​414) (e154214)

BREAKING CHANGES

• @semantic-release/changelog is now a native ES
  Module. It has named exports for each plugin hook (verifyConditions,
  prepare)
• the minimum required version of semantic-release to use
  @semantic-release/changelog is now
  v20.1.0

Other Notable Changes

• Replaced xo with prettier with default configuration; following
  newly established convention
• Replaced nyc with c8 for code coverage
• Replaced lodash with lodash-es for proper esm support

Related Issue

• semantic-release/semantic-release#2133
• semantic-release/semantic-release#4032

semantic-release/git (@​semantic-release/git)

v11.0.1

Compare Source

Bug Fixes

• deps: update dependency execa to v10 (#​564) (b39d5c6)

v11.0.0

Compare Source

Features

• ES Module (#​544) (4d704a2), closes #​491 #​490

BREAKING CHANGES

• @semantic-release/git is now a native ES Module. It
  has named exports for each plugin hook (verifyConditions, prepare)
• the minimum required version of semantic-release to use
  @semantic-release/git is now v20.1.0

semantic-release/github (@​semantic-release/github)

v12.0.10

Compare Source

Bug Fixes

• deps: update dependency @​octokit/plugin-paginate-rest to v15 (#​1284) (a63f458)

v12.0.9

Compare Source

Bug Fixes

• asset-upload: stop setting content-length header manually (241f966), closes #​1224
• local-undici: always use the locally installed undici instead of the node built-in version (40973e3), closes #​1224
• publish: handle content-length header properly for asset uploads (#​1260) (28e3741), closes #​1224 #​1224

v12.0.8

Compare Source

Bug Fixes

• deps: update dependency http-proxy-agent to v9 (#​1203) (edd1652)

v12.0.7

Compare Source

Bug Fixes

• deps: update dependency https-proxy-agent to v9 (#​1204) (1f17362)

v12.0.6

Compare Source

Bug Fixes

• latest: add make_latest property to the GH release PATCH request during publish (#​1169) (f516337)

v12.0.5

Compare Source

Bug Fixes

• latest: add make_latest property to the GH release POST request during publish (#​1157) (38051ba)

v12.0.4

Compare Source

Bug Fixes

• remove failTitle arg in findSRIssues call (#​1164) (f7bdd88)

v12.0.3

Compare Source

Bug Fixes

• extend GraphQL alias prefix to prevent hash collisions (#​1134) (ea6386d)

v12.0.2

Compare Source

Bug Fixes

• add undici ProxyAgent support for GitHub Enterprise Server behind proxies (#​1104) (15def77)

v12.0.1

Compare Source

Bug Fixes

• deps: update dependency @​octokit/plugin-paginate-rest to v14 (#​1112) (8df8d4a)

v12.0.0

Compare Source

Features

• node-versions: drop support for node versions v20, v21, and v23 (6e2ac27)
• node-versions: raise the minimum node version requirement for the v24 range (4d6924d)
• remove github search api consumption (#​1037) (d260bfd), closes #​1022

BREAKING CHANGES

• node-versions: the minimum node version for the v24 range is now v24.10.0
• @semantic-release/github no longer consumes the GitHub Search API in the plugin
• node-versions: a minimum of node v22.14 is now required

v11.0.6

Compare Source

Bug Fixes

• deps: switch to tinyglobby (#​1041) (ed90698)

v11.0.5

Compare Source

Bug Fixes

• remove github search api consumption (#​1086) (95ea166)

v11.0.4

Compare Source

Bug Fixes

• Check failCommentCondition in "success" step (#​1026) (d77b6f4)

v11.0.3

Compare Source

Bug Fixes

• deps: update octokit monorepo (major) (#​1049) (b60a983)

v11.0.2

Compare Source

Bug Fixes

• deps: update octokit monorepo (major) (#​1020) (12f6bfd)

semantic-release/semantic-release (semantic-release)

v25.0.9

Compare Source

Bug Fixes

• do not expose the authenticated repository URL in EGITNOPERMISSION errors (#​4283) (8d905a5)

v25.0.8

Compare Source

Bug Fixes

• handle potential null values in commit message and gitTags trimming (0a60004)
• hide-sensitive: mask key/auth/webhook env vars (973d763)
• mask sensitive environment variables and improve commit handling (#​4252) (1bfdc52)
• prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

Compare Source

Bug Fixes

• argument Injection via repositoryUrl in package.json (#​4245) (c46dbda)

v25.0.6

Compare Source

Bug Fixes

• ensure encoded secrets get masked (8e28dd3)

v25.0.5

Compare Source

Bug Fixes

• revert: next (#​4200) (db8ffaa)

v25.0.4

Compare Source

Bug Fixes

• code-quality: add missing comma in context object for consistency (493d6cd)

v25.0.3

Compare Source

Bug Fixes

• deps: remove deprecated semver-diff (#​3980) (f404124)

v25.0.2

Compare Source

Bug Fixes

• deps: update dependency read-package-up to v12 (#​3935) (1494cb9)

v25.0.1

Compare Source

Bug Fixes

• deps: update to the latest version of the npm plugin to add trusted publishing support (fad173e), closes semantic-release/npm#958

v25.0.0

Compare Source

Bug Fixes

• deps: update dependency hosted-git-info to v9 (9fa04f8)
• deps: update dependency yargs to v18 (#​3745) (cde9a72)
• deps: update to the stable version of the github plugin (f12cf81)
• deps: update to the stable version of the release-notes-generator plugin (d9def72)
• deps: updated to the stable version of the commit-analyzer plugin (291533b)
• deps: upgrade to the new major version of the npm plugin, which upgrades npm to v11 for publishing (1be8290)

Features

• node-versions: drop support for node versions v20, v21, and v23 (56d16f4)
• node-versions: raise the minimum node version for the v24 range (116a188)

BREAKING CHANGES

• node-versions: the minimum node version for the v24 range is now v24.10.0
• node-versions: a minimum of node v22.14 is now required

v24.2.9

Compare Source

Bug Fixes

• deps: update dependency semver-diff to v5 (#​3867) (a834948)

v24.2.8

Compare Source

Bug Fixes

• deps: update dependency hook-std to v4 (#​3859) (67abe56)

v24.2.7

Compare Source

Performance Improvements

• get-tags.js: bulk get for tags notes (#​3732) (85187e2)

v24.2.6

Compare Source

Bug Fixes

• deps: update @​semantic-release/npm to ^12.0.2 (#​3791) (93177d0)

v24.2.5

Compare Source

Bug Fixes

• deps: raise the minimum of the defined range for marked-terminal (#​3742) (fb1ccd4)

v24.2.4

Compare Source

Bug Fixes

• deps: update dependency marked to v15 (#​3499) (e45040e)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code EALLOWREMOTE
npm error Fetching packages of type "remote" have been disabled
npm error Refusing to fetch "https://registry.npmjs.org/npm/-/npm-11.21.1.tgz"
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-26T23_28_59_061Z-debug-0.log