From 5a4f1988b2e8dce33daf89a34ce9f5c0aa5233d0 Mon Sep 17 00:00:00 2001
From: ReenigneArcher <42013603+ReenigneArcher@users.noreply.github.com>
Date: Fri, 10 Apr 2026 10:09:11 -0400
Subject: [PATCH 1/2] fix(renovate): allow _TAG suffix in renovate regexes

Update renovate-config.json5 matchStrings to accept identifiers ending with _VERSION or _TAG. Two regexes (single-value and value+SHA256 variants) were adjusted so Renovate can detect tag-based variables as well as version variables when parsing manager files (e.g. package-lock.cmake).
---
 renovate-config.json5 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/renovate-config.json5 b/renovate-config.json5
index 034faa7f..f96a0ebb 100644
--- a/renovate-config.json5
+++ b/renovate-config.json5
@@ -77,8 +77,8 @@
       "customType": "regex",
       "managerFilePatterns": ["/(^|\/)package-lock.cmake$/"],
       "matchStrings": [
-        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?: packageName=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?(?: extractVersion=(?<extractVersion>[^\\s]+?))?(?: registryUrl=(?<registryUrl>[^\\s]+?))?\\s+set\\([A-Za-z0-9_]+?_VERSION\\s+\\\"?(?<currentValue>[^\\\"\\s\\)]+)\\\"?\\s*\\)",
-        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?: packageName=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?(?: extractVersion=(?<extractVersion>[^\\s]+?))?(?: registryUrl=(?<registryUrl>[^\\s]+?))?\\s+set\\([A-Za-z0-9_]+?_VERSION\\s+\\\"?(?<currentValue>[^\\\"\\s\\)]+)\\\"?\\s*\\)\\s+set\\([A-Za-z0-9_]+?_SHA256\\s+(?<currentDigest>[a-fA-F0-9]{64})\\s*\\)",
+        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?: packageName=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?(?: extractVersion=(?<extractVersion>[^\\s]+?))?(?: registryUrl=(?<registryUrl>[^\\s]+?))?\\s+set\\([A-Za-z0-9_]+?_(?:VERSION|TAG)\\s+\\\"?(?<currentValue>[^\\\"\\s\\)]+)\\\"?\\s*\\)",
+        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?: packageName=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?(?: extractVersion=(?<extractVersion>[^\\s]+?))?(?: registryUrl=(?<registryUrl>[^\\s]+?))?\\s+set\\([A-Za-z0-9_]+?_(?:VERSION|TAG)\\s+\\\"?(?<currentValue>[^\\\"\\s\\)]+)\\\"?\\s*\\)\\s+set\\([A-Za-z0-9_]+?_SHA256\\s+(?<currentDigest>[a-fA-F0-9]{64})\\s*\\)",
       ],
       "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{/if}}"
     },

From cf7fa4031efcab9d5d968567ad7f0c360d3f3a8b Mon Sep 17 00:00:00 2001
From: ReenigneArcher <42013603+ReenigneArcher@users.noreply.github.com>
Date: Fri, 10 Apr 2026 10:10:09 -0400
Subject: [PATCH 2/2] fix(renovate): disable git-submodules in Renovate config

Set git-submodules.enabled to false in renovate-config.json5. Renovate cannot update to tagged submodules, so keep using Dependabot for submodule updates (inline comment added to explain rationale).
---
 renovate-config.json5 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/renovate-config.json5 b/renovate-config.json5
index f96a0ebb..7c4b6e34 100644
--- a/renovate-config.json5
+++ b/renovate-config.json5
@@ -33,7 +33,7 @@
   "updatePinnedDependencies": true,
   // beta features
   "git-submodules": {
-    "enabled": true
+    "enabled": false  // renovate cannot update to tagged submodules, so keep using dependabot for this
   },
   // group/package rules
   "packageRules": [