Daily Autohealing Report — 2026-05-06

[fro-bot]

Daily Autohealing Report — 2026-05-06 (UTC)

Errored PRs

PR	Failure	Fix	Status
#3064	TypeScript v6 deprecated baseUrl compiler option; tsconfig.json extends @bfra.me/tsconfig which defines baseUrl	Requires org-level tsconfig update	⚠️ Needs review

Details: PR #3064 has been failing for 29 consecutive days (since 2026-04-07). The Check step fails because TypeScript v6 deprecated the baseUrl compiler option. The repo's tsconfig.json extends @bfra.me/tsconfig which still defines baseUrl. This is a Renovate-authored dependency-update PR; per dependency ownership rules it was not auto-fixed. Organization-level coordination is required.

Security

Advisory / PR	Severity	Action Taken
Dependabot #83 (yaml)	Medium	Open — transitive dependency, no direct fix available

Code Quality & Repo Hygiene

Check	Result	Action
Build + dist/ consistency	✅ Clean	No drift detected
Tests	✅ 3/3 passing	None needed
Type check + lint	✅ Clean	None needed
Action config validation	✅ Valid	allowedCommands, protected fields, merge logic all intact
Stale TODOs	None	No TODO/FIXME/HACK annotations found
Convention compliance	✅ Clean	No any, @ts-ignore, require(), module.exports; all workflow actions pinned to full SHA

Developer Experience

None. All lint/format/convention checks pass on the main branch.

Progressive Improvement

Area	Status	Notes
Renovate version	✅ Current	43.165.1 matches latest release
Release health	✅ Healthy	.releaserc.yaml consistent; semantic-release config valid
Reusable workflows	⚠️ Outdated	update-repo-settings.yaml pinned to v4.16.0 (latest is v4.16.12, 12 minor versions behind). renovate.yaml and trigger-org-renovate.yaml are current at v4.16.12.
Analytics integrity	✅ Valid	docker/entrypoint.sh metrics/failure collection intact

Needs Human Attention

1. PR build(dev): update dependency typescript to v6 #3064 (TypeScript v6) — 29 days: Failing for 29 consecutive days. Requires @bfra.me/tsconfig to remove deprecated baseUrl, or a local tsconfig override. Organization-level coordination needed urgently.

2. Dependabot ci(renovate): shorten Renovate depName in README.md preset #83 (yaml vulnerability): Medium severity, transitive dependency. Monitor for upstream patch.

3. update-repo-settings.yaml severely outdated: Pinned to bfra-me/.github@v4.16.0 while latest is v4.16.12 (12 minor versions behind). Flagged for 22+ consecutive reports. This workflow reference has never been updated by Renovate, unlike the other two references which update correctly.