Bump simple-git and renovate

[dependabot]

Bumps simple-git to 3.36.0 and updates ancestor dependency renovate. These dependencies need to be updated together.

Updates simple-git from 3.33.0 to 3.36.0

Release notes

Sourced from simple-git's releases.

simple-git@3.36.0

Minor Changes

• 89a2294: Extend known exploitable configuration keys and per-task environment variables.

  Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

  Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

• 1ad57e8: Remove conflicting node:buffer import
• Updated dependencies [89a2294]
• Updated dependencies [675570a]
  • @​simple-git/argv-parser@​1.1.0
  • @​simple-git/args-pathspec@​1.0.3

simple-git@3.35.2

Patch Changes

• 0cf9d8c: Improvements for mono-repo publishing pipeline
• Updated dependencies [0cf9d8c]
  • @​simple-git/args-pathspec@​1.0.2
  • @​simple-git/argv-parser@​1.0.3

simple-git@3.35.1

Patch Changes

• 0de400e: Update monorepo version handling during publish
• Updated dependencies [0de400e]
  • @​simple-git/argv-parser@​1.0.2

Changelog

Sourced from simple-git's changelog.

3.36.0

Minor Changes

• 89a2294: Extend known exploitable configuration keys and per-task environment variables.

  Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

  Thanks to @​zebbern for identifying the need to block core.fsmonitor. Thanks to @​kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

• 1ad57e8: Remove conflicting node:buffer import
• Updated dependencies [89a2294]
• Updated dependencies [675570a]
  • @​simple-git/argv-parser@​1.1.0
  • @​simple-git/args-pathspec@​1.0.3

3.35.2

Patch Changes

• 0cf9d8c: Improvements for mono-repo publishing pipeline
• Updated dependencies [0cf9d8c]
  • @​simple-git/args-pathspec@​1.0.2
  • @​simple-git/argv-parser@​1.0.3

3.35.1

Patch Changes

• 0de400e: Update monorepo version handling during publish
• Updated dependencies [0de400e]
  • @​simple-git/argv-parser@​1.0.2

3.35.0

Minor Changes

• 3d8708b: Updating publish config

Patch Changes

• Updated dependencies [3d8708b]
  • @​simple-git/args-pathspec@​1.0.1
  • @​simple-git/argv-parser@​1.0.1

3.34.0

... (truncated)

Commits

• 7dc1a53 Version Packages
• 76f5376 Merge pull request #1061 from Vinzent03/fix/buffer-import
• 89a2294 Environment Parsing (#1156)
• 1b91b76 fix: remove explicit node:buffer import
• e390685 Version Packages
• 3c9e4b8 Pin version of @​simple-git/args-pathspec
• 94ee21f Export pathspec types through simple-git for backward compatibility
• 6d7cb51 Version Packages
• 0de400e Switch to semver from workspace revisions
• 2264722 Version Packages
• Additional commits viewable in compare view

Updates renovate from 43.104.1 to 43.130.0

Commits

• a6238a4 feat(manager/cake): Take nuget.config into account for registryUrls of nuget ...
• 722c0b2 build(deps): update dependency simple-git to v3.36.0 (main) (#42736)
• 469c2a3 chore(deps): update containerbase/internal-tools action to v4.5.25 (main) (#4...
• d508716 feat(versioning): add a github-actions versioning (#42712)
• 06cf949 fix(datasource/npm): catch invalid engines (#42718)
• 5cfb467 ci: add an auto-label for new monorepo.json onboarding (#42660)
• 170cf56 ci(auto-label): manually comment + close issues (#42722)
• be2eacd feat(vulnerability): improve GitHub advisory PR body notes with summary, GHSA...
• 171d177 chore(versioning): allow providing known versions to module (#42719)
• a4456c1 fix(deps): update ghcr.io/renovatebot/base-image docker tag to v13.35.2 (main...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[cursor]

PR Summary

Low Risk
Low risk: this only updates dev tooling dependencies (renovate and lockfile transitive deps) with no application/runtime code changes, but it may subtly affect Renovate/CI behavior.

Overview
Bumps the renovate devDependency from 43.104.1 to 43.130.0.

Regenerates package-lock.json, which updates simple-git to 3.36.0 and rolls forward multiple transitive packages (e.g., @renovatebot/*, re2, node-gyp), including adding new helper deps for simple-git and dropping some previously-locked optional packages.

^{Reviewed by Cursor Bugbot for commit 1da020c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[augmentcode]

🤖 Augment PR Summary

Summary: Updates repository maintenance tooling dependencies used for automated dependency management.

Changes:

• Bumps renovate devDependency from 43.104.1 to 43.130.0 in package.json.
• Regenerates package-lock.json to reflect the new Renovate version and updated transitive dependencies.
• Lockfile update includes rolling simple-git forward to 3.36.0 (as pulled in by Renovate) alongside other dependency graph changes.

Why: Keeps Renovate and its related dependency set in sync with upstream updates; these packages are expected to be upgraded together.

Technical Notes: No application/runtime code changes; the primary impact is on Renovate/CI behavior via updated tooling internals.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. No suggestions at this time.

Items Reviewed

• ✅ Potential Bugs
• ✅ Functional Correctness
• ✅ Security Concerns
• ✅ Documentation
• ✅ API contract violations
• ✅ Database and data-related errors
• ✅ High Value Typos

Comment augment review to trigger a new review at any time.