Skip to content

chore: Configure Renovate #1886

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jun 18, 2025
Merged

chore: Configure Renovate #1886

merged 2 commits into from
Jun 18, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 18, 2025

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .devcontainer.json (devcontainer)
  • contrib/dependency-track/docker-compose.yml (docker-compose)
  • docker-compose.yml (docker-compose)
  • ci/Dockerfile (dockerfile)
  • ci/Dockerfile-bun (dockerfile)
  • ci/Dockerfile-deno (dockerfile)
  • ci/Dockerfile-ppc64 (dockerfile)
  • ci/Dockerfile-secure (dockerfile)
  • ci/images/Dockerfile.dotnet7 (dockerfile)
  • ci/images/Dockerfile.dotnet8 (dockerfile)
  • ci/images/Dockerfile.dotnet9 (dockerfile)
  • ci/images/Dockerfile.java11 (dockerfile)
  • ci/images/Dockerfile.java17 (dockerfile)
  • ci/images/Dockerfile.java17-slim (dockerfile)
  • ci/images/Dockerfile.node20 (dockerfile)
  • ci/images/Dockerfile.python311 (dockerfile)
  • ci/images/Dockerfile.python312 (dockerfile)
  • ci/images/Dockerfile.python313 (dockerfile)
  • ci/images/Dockerfile.python36 (dockerfile)
  • ci/images/Dockerfile.ruby25 (dockerfile)
  • ci/images/al10/Dockerfile.ruby-builder (dockerfile)
  • ci/images/alpine/Dockerfile.dotnet9 (dockerfile)
  • ci/images/alpine/Dockerfile.golang123 (dockerfile)
  • ci/images/alpine/Dockerfile.golang124 (dockerfile)
  • ci/images/alpine/Dockerfile.java21 (dockerfile)
  • ci/images/alpine/Dockerfile.java24 (dockerfile)
  • ci/images/alpine/Dockerfile.node20 (dockerfile)
  • ci/images/alpine/Dockerfile.node24 (dockerfile)
  • ci/images/alpine/Dockerfile.php84 (dockerfile)
  • ci/images/alpine/Dockerfile.ruby344 (dockerfile)
  • ci/images/debian/Dockerfile.dotnet10 (dockerfile)
  • ci/images/debian/Dockerfile.dotnet6 (dockerfile)
  • ci/images/debian/Dockerfile.dotnet8 (dockerfile)
  • ci/images/debian/Dockerfile.dotnet9 (dockerfile)
  • ci/images/debian/Dockerfile.golang123 (dockerfile)
  • ci/images/debian/Dockerfile.golang124 (dockerfile)
  • ci/images/debian/Dockerfile.php83 (dockerfile)
  • ci/images/debian/Dockerfile.php84 (dockerfile)
  • ci/images/debian/Dockerfile.ruby26 (dockerfile)
  • ci/images/debian/Dockerfile.ruby33 (dockerfile)
  • ci/images/debian/Dockerfile.ruby34 (dockerfile)
  • ci/images/debian/Dockerfile.rust1 (dockerfile)
  • ci/images/debian/Dockerfile.swift6 (dockerfile)
  • ci/images/opensuse/Dockerfile.python310 (dockerfile)
  • ci/images/opensuse/Dockerfile.python39 (dockerfile)
  • ci/images/opensuse/Dockerfile.rolling (dockerfile)
  • ci/images/temurin/Dockerfile.java21 (dockerfile)
  • ci/images/temurin/Dockerfile.java24 (dockerfile)
  • ci/images/temurin/Dockerfile.java8 (dockerfile)
  • .github/actions/build-docker-image/action.yml (github-actions)
  • .github/actions/build-docker-images-generate-attach-sboms/action.yml (github-actions)
  • .github/workflows/binary-builds.yml (github-actions)
  • .github/workflows/build-images.yml (github-actions)
  • .github/workflows/build-rolling-image.yml (github-actions)
  • .github/workflows/codeql.yml (github-actions)
  • .github/workflows/dockertests.yml (github-actions)
  • .github/workflows/image-build.yml (github-actions)
  • .github/workflows/java-reachables-test.yml (github-actions)
  • .github/workflows/lint.yml (github-actions)
  • .github/workflows/nodejs.yml (github-actions)
  • .github/workflows/npm-release.yml (github-actions)
  • .github/workflows/nydus-demo.yml (github-actions)
  • .github/workflows/python-atom-tests.yml (github-actions)
  • .github/workflows/repotests.yml (github-actions)
  • .github/workflows/rerun-workflow.yml (github-actions)
  • .github/workflows/snapshot-tests.yml (github-actions)
  • docs/index.html (html)
  • package.json (npm)
  • test/data/Logging.csproj (nuget)
  • test/sample.csproj (nuget)
  • .nvmrc (nvm)
  • pyproject.toml (pep621)
  • contrib/requirements.txt (pip_requirements)
  • biome.json (jsonata)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Hopefully safe environment variables to allow users to configure.
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Separate each major version of dependencies into individual branches/PRs.
  • Raise PR when vulnerability alerts are detected.
  • Weekly schedule on early Monday mornings (before 4 AM).
  • Update $schema version in biome.json configuration files.
  • Pin github-action digests.
  • Run Renovate on following schedule: * 0-3 * * 1

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 56 Pull Requests:

chore(deps): pin docker digests
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/digests-pin
  • Merge into: master
  • Pin node to 24.2.0-alpine
  • Pin node to 20.19.2-alpine
fix(deps): pin dependencies
chore(deps): update dependency microsoft.aspnetcore.mvc.newtonsoftjson to 3.1.32
chore(deps): update alpine docker tag to v3.22
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/alpine-3.x
  • Merge into: master
  • Upgrade alpine to 3.22
chore(deps): update dependency adaptivecards to 1.2.4
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/adaptivecards-1.x
  • Merge into: master
  • Upgrade AdaptiveCards to 1.2.4
chore(deps): update dependency font-awesome to v6.7.2
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/font-awesome-6.x
  • Merge into: master
  • Upgrade font-awesome to 6.7.2
chore(deps): update dependency go to 1.24
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/go-1.x
  • Merge into: master
  • Upgrade go to 1.24
chore(deps): update dependency microsoft.bot.builder.dialogs to 4.23.0
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/microsoft.bot.builder.dialogs-4.x
  • Merge into: master
  • Upgrade Microsoft.Bot.Builder.Dialogs to 4.23.0
chore(deps): update dependency microsoft.bot.builder.integration.aspnet.core to 4.23.0
chore(deps): update dependency python to 3.13
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/python-3.x
  • Merge into: master
  • Upgrade python to 3.13
chore(deps): update golang docker tag to v1.24
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/golang-1.x
  • Merge into: master
  • Upgrade golang to 1.24-bookworm
  • Upgrade golang to 1.24-alpine
chore(deps): update php docker tag to v8.4
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/php-8.x
  • Merge into: master
  • Upgrade php to 8.4-bookworm
chore(deps): update registry.opensuse.org/opensuse/bci/python docker tag to v3.13
chore(deps): update registry.suse.com/bci/python docker tag to v3.13
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/registry.suse.com-bci-python-3.x
  • Merge into: master
  • Upgrade registry.suse.com/bci/python to 3.13
chore(deps): update ruby docker tag to v2.7.8
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/ruby-2.x
  • Merge into: master
  • Upgrade ruby to 2.7.8-slim
fix(deps): update dependency packageurl-js to v1.2.1
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/packageurl-js-1.x
  • Merge into: master
  • Upgrade packageurl-js to 1.2.1
chore(deps): update cachix/cachix-action action to v15
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/cachix-cachix-action-15.x
  • Merge into: master
  • Upgrade cachix/cachix-action to ad2ddac53f961de1989924296a1f236fcfbaa4fc
chore(deps): update cachix/cachix-action action to v16
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/cachix-cachix-action-16.x
  • Merge into: master
  • Upgrade cachix/cachix-action to 0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad
chore(deps): update cachix/install-nix-action action to v27
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/cachix-install-nix-action-27.x
  • Merge into: master
  • Upgrade cachix/install-nix-action to ba0dd844c9180cbf77aa72a116d6fbc515d0e87b
chore(deps): update cachix/install-nix-action action to v29
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/cachix-install-nix-action-29.x
  • Merge into: master
  • Upgrade cachix/install-nix-action to 9f70348d77d0422624097c4b7a75563948901306
chore(deps): update cachix/install-nix-action action to v30
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/cachix-install-nix-action-30.x
  • Merge into: master
  • Upgrade cachix/install-nix-action to 08dcb3a5e62fa31e2da3d490afc4176ef55ecd72
chore(deps): update cachix/install-nix-action action to v31
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/cachix-install-nix-action-31.x
  • Merge into: master
  • Upgrade cachix/install-nix-action to 17fe5fb4a23ad6cbbe47d6b3f359611ad276644c
chore(deps): update dependency adaptivecards to v2
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/adaptivecards-2.x
  • Merge into: master
  • Upgrade AdaptiveCards to 2.7.3
chore(deps): update dependency adaptivecards to v3
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/adaptivecards-3.x
  • Merge into: master
  • Upgrade AdaptiveCards to 3.1.0
chore(deps): update dependency brace-expansion to v3
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/brace-expansion-3.x
  • Merge into: master
  • Upgrade brace-expansion to 3.0.1
chore(deps): update dependency brace-expansion to v4
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/brace-expansion-4.x
  • Merge into: master
  • Upgrade brace-expansion to 4.0.1
chore(deps): update dependency camelcase to v7
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/camelcase-7.x
  • Merge into: master
  • Upgrade camelcase to ^7.0.0
chore(deps): update dependency camelcase to v8
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/camelcase-8.x
  • Merge into: master
  • Upgrade camelcase to ^8.0.0
chore(deps): update dependency escape-string-regexp to v5
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/escape-string-regexp-5.x
  • Merge into: master
  • Upgrade escape-string-regexp to ^5.0.0
chore(deps): update dependency microsoft.aspnetcore.mvc.newtonsoftjson to v5
chore(deps): update dependency microsoft.aspnetcore.mvc.newtonsoftjson to v6
chore(deps): update dependency negotiator to v1
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/negotiator-1.x
  • Merge into: master
  • Upgrade negotiator to ^1.0.0
chore(deps): update dependency node-gyp to v11
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/node-gyp-11.x
  • Merge into: master
  • Upgrade node-gyp to ^11.0.0
chore(deps): update dependency pacote to v21
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/pacote-21.x
  • Merge into: master
  • Upgrade pacote to ^21.0.0
chore(deps): update dependency strip-json-comments to v4
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/strip-json-comments-4.x
  • Merge into: master
  • Upgrade strip-json-comments to ^4.0.0
chore(deps): update dependency strip-json-comments to v5
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/strip-json-comments-5.x
  • Merge into: master
  • Upgrade strip-json-comments to ^5.0.0
chore(deps): update dependency supports-color to v9
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/supports-color-9.x
  • Merge into: master
  • Upgrade supports-color to ^9.0.0
chore(deps): update dependency supports-color to v10
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/supports-color-10.x
  • Merge into: master
  • Upgrade supports-color to ^10.0.0
chore(deps): update docker/build-push-action action to v6
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/docker-build-push-action-6.x
  • Merge into: master
  • Upgrade docker/build-push-action to 263435318d21b8e681c14492fe198d362a7d2c83
chore(deps): update dotnet monorepo to v7 (major)
chore(deps): update dotnet monorepo to v8 (major)
chore(deps): update dotnet monorepo to v9 (major)
chore(deps): update eclipse-temurin docker tag
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/eclipse-temurin-21.x
  • Merge into: master
  • Upgrade eclipse-temurin to 21.0.7_6-jdk-ubi9-minimal
  • Upgrade eclipse-temurin to 21.0.7_6-jdk-alpine
chore(deps): update eclipse-temurin docker tag to v11
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/eclipse-temurin-11.x
  • Merge into: master
  • Upgrade eclipse-temurin to 11.0.27_6-jdk-ubi9-minimal
chore(deps): update eclipse-temurin docker tag to v17
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/eclipse-temurin-17.x
  • Merge into: master
  • Upgrade eclipse-temurin to 17.0.15_6-jdk-ubi9-minimal
chore(deps): update node.js to v22
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/node-22.x
  • Merge into: master
  • Upgrade node to 22-alpine
chore(deps): update oven-sh/setup-bun action to v2
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/oven-sh-setup-bun-2.x
  • Merge into: master
  • Upgrade oven-sh/setup-bun to 735343b667d3e6f658f44d0eca948eb6282f2b76
chore(deps): update registry.suse.com/bci/dotnet-sdk docker tag to v8
chore(deps): update registry.suse.com/bci/dotnet-sdk docker tag to v9
chore(deps): update registry.suse.com/bci/nodejs docker tag to v22
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/registry.suse.com-bci-nodejs-22.x
  • Merge into: master
  • Upgrade registry.suse.com/bci/nodejs to 22
chore(deps): update registry.suse.com/bci/openjdk-devel docker tag to v17
chore(deps): update registry.suse.com/bci/openjdk-devel docker tag to v21
chore(deps): update registry.suse.com/bci/ruby docker tag to v3
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/registry.suse.com-bci-ruby-3.x
  • Merge into: master
  • Upgrade registry.suse.com/bci/ruby to 3.4
chore(deps): update ruby docker tag to v3.4.4
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/ruby-3.x
  • Merge into: master
  • Upgrade ruby to 3.4.4-slim
fix(deps): update dependency packageurl-js to v2
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/packageurl-js-2.x
  • Merge into: master
  • Upgrade packageurl-js to 2.0.1
fix(deps): update dependency yargs to v18
  • Schedule: ["* 0-3 * * 1"]
  • Branch name: renovate/yargs-18.x
  • Merge into: master
  • Upgrade yargs to ^18.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from prabhu as a code owner June 18, 2025 13:56
Signed-off-by: Adam Setch <adam.setch@outlook.com>
@setchy
Copy link
Member

setchy commented Jun 18, 2025

Will merge this and then continue to configure rules as we best see fit

@setchy setchy merged commit 1a2330a into master Jun 18, 2025
72 checks passed
@setchy setchy deleted the renovate/configure branch June 18, 2025 14:03
@setchy setchy mentioned this pull request Jun 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant