chore: Configure Renovate #13

Open
renovate wants to merge 1 commit from renovate/configure into main
Member

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


Detected Package Files

  • docker-compose.yml (docker-compose)
  • ops/docker/techdocs-builder/Dockerfile (dockerfile)
  • .github/workflows/build-and-push.yml (github-actions)
  • .github/workflows/on_dockerfile_change.yml (github-actions)
  • .github/workflows/on_docs_change.yml (github-actions)
  • .github/workflows/release-build-and-push.yml (github-actions)
  • renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Forgejo-platform overrides. Forgejo Actions don't populate the commit-status API that Renovate's prCreation:not-pending reads (GET /commits/{sha}/status is empty even on green CI), so not-pending never resolves and PRs hang the full prNotPendingHours. Force immediate PR creation on the Forgejo path. force: because consumers extend :default (not-pending) at the repo level, which only an admin-level force overrides.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Show only the Age and Confidence Merge Confidence badges for pull requests.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
  • Correctly link to the source code for golang.org/x packages
  • Link to pkg.go.dev/... for golang.org/x packages' title
  • Provide a link to octochangelog's improved breakdown for Renovate's changelogs
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic prefixes for commit messages and PR titles.
  • Separate each major version of dependencies into individual branches/PRs.
  • Raise PR when vulnerability alerts are detected.
  • Evaluate schedules according to timezone Europe/Amsterdam.
  • Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
  • Show all Merge Confidence badges for pull requests.
  • Webgrip org default Renovate preset — strict, conservative defaults for all repositories. Graduated release soak times, per-type semantic commits and labels, OSV vulnerability alerts, and Merge Confidence badges included.
  • Run Renovate on following schedule: after 3am and before 7am every weekday,every weekend

What to Expect

With your current configuration, Renovate will create 5 Pull Requests:

ci(deps): pin dependencies
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/pin-dependencies
  • Merge into: main
  • Upgrade alpine to sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc
  • Upgrade python to sha256:e885b40c1ed9f3134030e99a27bd61e98e376bf6d6709cccfb3c0aa6e856f56a
  • Upgrade webgrip/mkdocs-runner to sha256:86c382e885a4c71837bebe7b56a8ce779415cc21ab4b1c4c931d4ff891106af8
  • Upgrade webgrip/techdocs-runner to sha256:715d423dd6a563fbdc3f97298dde8d96374f3e22bafc08966f623e2445bdb7cf
  • Upgrade webgrip/workflows to e3eaf6025937437ecf6d117306329f777a692420
chore(deps): pin docker digests
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/digests-pin
  • Merge into: main
  • Pin node to sha256:78d6e102e0889545bcf80ded837034f485ba7f7ebe09211d0f2d383082a7a047
fix(deps): update python docker tag ( 3.13.2 ➔ 3.13.3 )
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/python-3.13.x
  • Merge into: main
  • Upgrade python to sha256:40a4559d3d6b2117b1fbe426f17d55b9100fa40609733a1d0c3f39e2151d4b33
feat(deps): update alpine docker tag ( 3.20 ➔ 3.24 )
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/alpine-3.x
  • Merge into: main
  • Upgrade alpine to sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
feat(deps)!: Update Node.js ( 23.11.1 ➔ 24.1.0 )
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/node-24.x
  • Merge into: main
  • Upgrade node to sha256:8fe019e0d57dbdce5f5c27c0b63d2775cf34b00e3755a7dea969802d7e0c2b25

⚠️ Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

  • Can't find version matching 11-jre-slim for docker package openjdk

Files affected: ops/docker/techdocs-builder/Dockerfile


Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Mend Renovate.

Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin. 🚦 Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request. 📚 See our [Reading List](https://docs.renovatebot.com/reading-list/) for relevant documentation you may be interested in reading. 🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to `renovate.json` in this branch. Renovate will update the Pull Request description the next time it runs. --- ### Detected Package Files * `docker-compose.yml` (docker-compose) * `ops/docker/techdocs-builder/Dockerfile` (dockerfile) * `.github/workflows/build-and-push.yml` (github-actions) * `.github/workflows/on_dockerfile_change.yml` (github-actions) * `.github/workflows/on_docs_change.yml` (github-actions) * `.github/workflows/release-build-and-push.yml` (github-actions) * `renovate.json` (renovate-config) ### Configuration Summary Based on the default config's presets, Renovate will: - Start dependency updates only once this onboarding PR is merged - Forgejo-platform overrides. Forgejo Actions don't populate the commit-status API that Renovate's prCreation:not-pending reads (GET /commits/{sha}/status is empty even on green CI), so not-pending never resolves and PRs hang the full prNotPendingHours. Force immediate PR creation on the Forgejo path. force: because consumers extend :default (not-pending) at the repo level, which only an admin-level force overrides. - Enable Renovate Dependency Dashboard creation. - Use semantic commit type `fix` for dependencies and `chore` for all others if semantic commits are in use. - Ignore `node_modules`, `bower_components`, `vendor` and various test/tests (except for nuget) directories. - Group known monorepo packages together. - Use curated list of recommended non-monorepo package groupings. - Show only the Age and Confidence Merge Confidence badges for pull requests. - Apply crowd-sourced package replacement rules. - Apply crowd-sourced workarounds for known problems with packages. - Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff - Correctly link to the source code for golang.org/x packages - Link to pkg.go.dev/... for golang.org/x packages' title - Provide a link to octochangelog's improved breakdown for Renovate's changelogs - Enable Renovate Dependency Dashboard creation. - Use semantic prefixes for commit messages and PR titles. - Separate each `major` version of dependencies into individual branches/PRs. - Raise PR when vulnerability alerts are detected. - Evaluate schedules according to timezone `Europe/Amsterdam`. - Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides. - Show all Merge Confidence badges for pull requests. - Webgrip org default Renovate preset — strict, conservative defaults for all repositories. Graduated release soak times, per-type semantic commits and labels, OSV vulnerability alerts, and Merge Confidence badges included. - Run Renovate on following schedule: after 3am and before 7am every weekday,every weekend --- ### What to Expect With your current configuration, Renovate will create 5 Pull Requests: <details> <summary>ci(deps): pin dependencies</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/pin-dependencies` - Merge into: `main` - Upgrade alpine to `sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc` - Upgrade python to `sha256:e885b40c1ed9f3134030e99a27bd61e98e376bf6d6709cccfb3c0aa6e856f56a` - Upgrade webgrip/mkdocs-runner to `sha256:86c382e885a4c71837bebe7b56a8ce779415cc21ab4b1c4c931d4ff891106af8` - Upgrade webgrip/techdocs-runner to `sha256:715d423dd6a563fbdc3f97298dde8d96374f3e22bafc08966f623e2445bdb7cf` - Upgrade [webgrip/workflows](https://github.com/webgrip/workflows) to `e3eaf6025937437ecf6d117306329f777a692420` </details> <details> <summary>chore(deps): pin docker digests</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/digests-pin` - Merge into: `main` - Pin [node](https://github.com/nodejs/node) to `sha256:78d6e102e0889545bcf80ded837034f485ba7f7ebe09211d0f2d383082a7a047` </details> <details> <summary>fix(deps): update python docker tag ( 3.13.2 ➔ 3.13.3 )</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/python-3.13.x` - Merge into: `main` - Upgrade python to `sha256:40a4559d3d6b2117b1fbe426f17d55b9100fa40609733a1d0c3f39e2151d4b33` </details> <details> <summary>feat(deps): update alpine docker tag ( 3.20 ➔ 3.24 )</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/alpine-3.x` - Merge into: `main` - Upgrade alpine to `sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b` </details> <details> <summary>feat(deps)!: Update Node.js ( 23.11.1 ➔ 24.1.0 )</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/node-24.x` - Merge into: `main` - Upgrade [node](https://github.com/nodejs/node) to `sha256:8fe019e0d57dbdce5f5c27c0b63d2775cf34b00e3755a7dea969802d7e0c2b25` </details> --- > > ⚠️ **Warning** > > Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR. > > - `Can't find version matching 11-jre-slim for docker package openjdk` > > Files affected: `ops/docker/techdocs-builder/Dockerfile` --- ❓ Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section. If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-config-hash:b2f1103e37fc2c0c9669edfd6f4c5476b2c8f24642334cef536b7118f8487c58-->
chore(deps): add renovate.json
Some checks failed
build-and-push.yml / chore(deps): add renovate.json (push) Failing after 0s
release-build-and-push.yml / chore(deps): add renovate.json (push) Failing after 0s
build-and-push.yml / chore(deps): add renovate.json (pull_request) Failing after 0s
release-build-and-push.yml / chore(deps): add renovate.json (pull_request) Failing after 0s
37a927ad93
Commenting is not possible because the repository is archived.
No reviewers
No milestone
No project
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/techdocs-builder!13
No description provided.