webgrip/webgrip.nl
Archived
5
0
Fork 0
Code Issues 2 Pull requests 1 Projects Releases Packages Wiki Activity Actions

chore: Configure Renovate #8

Open
renovate wants to merge 1 commit from renovate/configure into main
pull from: renovate/configure
merge into: webgrip:main
Conversation 0 Commits 1 Files changed 1 +6
renovate commented 2026-07-18 08:08:56 +00:00
Member
Copy link

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

Detected Package Files

  • docker-compose.yml (docker-compose)
  • ops/docker/wordpress/Dockerfile (dockerfile)
  • .github/workflows/deploy.yml (github-actions)
  • .github/workflows/on_docs_change.yml (github-actions)
  • .github/workflows/on_source_change.yml (github-actions)
  • ops/helm/webgrip-nl-wordpress/values.yaml (helm-values)
  • renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Forgejo-platform overrides. Forgejo Actions don't populate the commit-status API that Renovate's prCreation:not-pending reads (GET /commits/{sha}/status is empty even on green CI), so not-pending never resolves and PRs hang the full prNotPendingHours. Force immediate PR creation on the Forgejo path. force: because consumers extend :default (not-pending) at the repo level, which only an admin-level force overrides.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Show only the Age and Confidence Merge Confidence badges for pull requests.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
  • Correctly link to the source code for golang.org/x packages
  • Link to pkg.go.dev/... for golang.org/x packages' title
  • Provide a link to octochangelog's improved breakdown for Renovate's changelogs
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic prefixes for commit messages and PR titles.
  • Separate each major version of dependencies into individual branches/PRs.
  • Raise PR when vulnerability alerts are detected.
  • Evaluate schedules according to timezone Europe/Amsterdam.
  • Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
  • Show all Merge Confidence badges for pull requests.
  • Webgrip org default Renovate preset — strict, conservative defaults for all repositories. Graduated release soak times, per-type semantic commits and labels, OSV vulnerability alerts, and Merge Confidence badges included.
  • Run Renovate on following schedule: after 3am and before 7am every weekday,every weekend

What to Expect

With your current configuration, Renovate will create 4 Pull Requests:

ci(deps): pin dependencies
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/pin-dependencies
  • Merge into: main
  • Upgrade mariadb to sha256:114d40be36852d0a019afd8458f7e1cc63fd300403b115b1f32e31130d5f671b
  • Upgrade webgrip/traefik-local-development-mkcert to sha256:573ec22f3802e2b841b8ad7c8cfd5b336aaed4eaccaa1587de8b778b90e00c7f
  • Upgrade webgrip/workflows to 990a6fa4cb2a0ad16089a0c4b8cbf42d325e28e6
feat(deps): update mariadb docker tag ( 10.6 ➔ 10.11 )
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/mariadb-10.x
  • Merge into: main
  • Upgrade mariadb to sha256:be981e4113326ada8d6004174dd09eeaefc03094037f811182a52d4f2e737350
feat(deps)!: Update mariadb Docker tag ( 10.6 ➔ 11.8 )
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/mariadb-11.x
  • Merge into: main
  • Upgrade mariadb to sha256:efb4959ef2c835cd735dbc388eb9ad6aab0c78dd64febcd51bc17481111890c4
feat(deps)!: Update mariadb Docker tag ( 10.6 ➔ 12.3 )
  • Schedule: ["after 3am and before 7am every weekday","every weekend"]
  • Branch name: renovate/mariadb-12.x
  • Merge into: main
  • Upgrade mariadb to sha256:628f228f0fd5913a220438693576b29b6fe4dc1fa0a1298c0e98579fae28635f

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

This PR has been generated by Mend Renovate.

Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin. 🚦 Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request. 📚 See our [Reading List](https://docs.renovatebot.com/reading-list/) for relevant documentation you may be interested in reading. 🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to `renovate.json` in this branch. Renovate will update the Pull Request description the next time it runs. --- ### Detected Package Files * `docker-compose.yml` (docker-compose) * `ops/docker/wordpress/Dockerfile` (dockerfile) * `.github/workflows/deploy.yml` (github-actions) * `.github/workflows/on_docs_change.yml` (github-actions) * `.github/workflows/on_source_change.yml` (github-actions) * `ops/helm/webgrip-nl-wordpress/values.yaml` (helm-values) * `renovate.json` (renovate-config) ### Configuration Summary Based on the default config's presets, Renovate will: - Start dependency updates only once this onboarding PR is merged - Forgejo-platform overrides. Forgejo Actions don't populate the commit-status API that Renovate's prCreation:not-pending reads (GET /commits/{sha}/status is empty even on green CI), so not-pending never resolves and PRs hang the full prNotPendingHours. Force immediate PR creation on the Forgejo path. force: because consumers extend :default (not-pending) at the repo level, which only an admin-level force overrides. - Enable Renovate Dependency Dashboard creation. - Use semantic commit type `fix` for dependencies and `chore` for all others if semantic commits are in use. - Ignore `node_modules`, `bower_components`, `vendor` and various test/tests (except for nuget) directories. - Group known monorepo packages together. - Use curated list of recommended non-monorepo package groupings. - Show only the Age and Confidence Merge Confidence badges for pull requests. - Apply crowd-sourced package replacement rules. - Apply crowd-sourced workarounds for known problems with packages. - Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff - Correctly link to the source code for golang.org/x packages - Link to pkg.go.dev/... for golang.org/x packages' title - Provide a link to octochangelog's improved breakdown for Renovate's changelogs - Enable Renovate Dependency Dashboard creation. - Use semantic prefixes for commit messages and PR titles. - Separate each `major` version of dependencies into individual branches/PRs. - Raise PR when vulnerability alerts are detected. - Evaluate schedules according to timezone `Europe/Amsterdam`. - Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides. - Show all Merge Confidence badges for pull requests. - Webgrip org default Renovate preset — strict, conservative defaults for all repositories. Graduated release soak times, per-type semantic commits and labels, OSV vulnerability alerts, and Merge Confidence badges included. - Run Renovate on following schedule: after 3am and before 7am every weekday,every weekend --- ### What to Expect With your current configuration, Renovate will create 4 Pull Requests: <details> <summary>ci(deps): pin dependencies</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/pin-dependencies` - Merge into: `main` - Upgrade mariadb to `sha256:114d40be36852d0a019afd8458f7e1cc63fd300403b115b1f32e31130d5f671b` - Upgrade webgrip/traefik-local-development-mkcert to `sha256:573ec22f3802e2b841b8ad7c8cfd5b336aaed4eaccaa1587de8b778b90e00c7f` - Upgrade [webgrip/workflows](https://github.com/webgrip/workflows) to `990a6fa4cb2a0ad16089a0c4b8cbf42d325e28e6` </details> <details> <summary>feat(deps): update mariadb docker tag ( 10.6 ➔ 10.11 )</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/mariadb-10.x` - Merge into: `main` - Upgrade mariadb to `sha256:be981e4113326ada8d6004174dd09eeaefc03094037f811182a52d4f2e737350` </details> <details> <summary>feat(deps)!: Update mariadb Docker tag ( 10.6 ➔ 11.8 )</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/mariadb-11.x` - Merge into: `main` - Upgrade mariadb to `sha256:efb4959ef2c835cd735dbc388eb9ad6aab0c78dd64febcd51bc17481111890c4` </details> <details> <summary>feat(deps)!: Update mariadb Docker tag ( 10.6 ➔ 12.3 )</summary> - Schedule: ["after 3am and before 7am every weekday","every weekend"] - Branch name: `renovate/mariadb-12.x` - Merge into: `main` - Upgrade mariadb to `sha256:628f228f0fd5913a220438693576b29b6fe4dc1fa0a1298c0e98579fae28635f` </details> --- ❓ Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section. If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-config-hash:b2f1103e37fc2c0c9669edfd6f4c5476b2c8f24642334cef536b7118f8487c58-->
Commenting is not possible because the repository is archived.
Reviewers
No reviewers
Labels
Clear labels   
pull-request
Mirrored from GitHub Pull Request

No labels
pull-request
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
webgrip/webgrip.nl!8
No description provided.