Previously if grouping, all major/minor updates within that group were combined into one. Instead, we now honour the “separateMajorMinor”, "separateMinorPatch", and "separateMultipleMajor" settings and keep the groups separate if necessary.

For maximum compatibility with existing PRs, we name branches like `renovate/group-name` whenever possible and only name them like `renovate/major-group-name` or `renovate/patch-group-name` if major or patch are found.

Closes #2425

Methods to support performing Git operation using filesystem instead of web API. GitHub only and experimental only. Usage: define env variable `RENOVATE_GIT_FS`.

Closes #1925

fix: update dependency gh-got to v7.1.0

Renovate will now attempt to decrypt with existing default padding, and if that fails then try with RSA_PKCS1_PADDING.

Sets Cache-Control to ‘no-cache’ to instruct the http layer to always revalidate cached responses with the registry. Otherwise we can be up to 5 minutes “behind” because npmjs default cache time is 300s.

The authorization header can interfere with caching because npmjs doesn’t return “public” in the “Cache-Control” header.

npmjs has fixed/lowered the cache expiry time now

Closes #2363

Added content as suggested/contributed by @swashata.

Closes https://github.com/renovatebot/config-help/issues/71

Changes PR body to show both homepage and source repo if both are present in the datasource metadata.

Closes #2387

npm’s —package-lock-only implementation seems to have a bug and produces incorrect lock files when file: references are present. If file: dependencies are detected, skipInstalls is set to false.

Closes #2401

Ref: https://npm.community/t/scoped-packages-have-latest-version-disappear-temporarily-soon-after-publish/633/7