Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Renovate #51

Merged
merged 1 commit into from
Apr 14, 2022
Merged

Configure Renovate #51

merged 1 commit into from
Apr 14, 2022

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 13, 2022

WhiteSource Renovate

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .github/workflows/codeql-analysis.yml (github-actions)
  • .github/workflows/main.yml (github-actions)
  • .github/workflows/pull-requests.yml (github-actions)
  • package.json (npm)
  • discord_app/pyproject.toml (poetry)
  • infra/pyproject.toml (poetry)
  • pyproject.toml (poetry)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Enable Renovate Dependency Dashboard creation
  • If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
  • Ignore node_modules, bower_components, vendor and various test/tests directories
  • Autodetect whether to pin dependencies or maintain ranges
  • Rate limit PR creation to a maximum of two per hour
  • Limit to maximum 10 open PRs at any time
  • Group known monorepo packages together
  • Use curated list of recommended non-monorepo package groupings
  • Fix some problems with very old Maven commons versions
  • Ignore spring cloud 1.x releases
  • Ignore web3j 5.0.0 release
  • Ignore http4s digest-based 1.x milestones
  • Use node versioning for @types/node
  • Limit concurrent requests to reduce load on Repology servers until we can fix this properly, see issue 10133
  • Do not upgrade from Alpine stable to edge

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.


What to Expect

With your current configuration, Renovate will create 16 Pull Requests:

Update dependency ansi-regex to 5.0.1 [SECURITY]
  • Branch name: renovate/npm-ansi-regex-vulnerability
  • Merge into: main
  • Upgrade ansi-regex to 5.0.1
Update dependency async to 3.2.2 [SECURITY]
  • Branch name: renovate/npm-async-vulnerability
  • Merge into: main
  • Upgrade async to 3.2.2
Update dependency pac-resolver to 5.0.0 [SECURITY]
  • Branch name: renovate/npm-pac-resolver-vulnerability
  • Merge into: main
  • Upgrade pac-resolver to 5.0.0
Update dependency discord-interactions to ^0.3.0
  • Schedule: ["at any time"]
  • Branch name: renovate/discord-interactions-0.x
  • Merge into: main
  • Upgrade discord-interactions to ^0.3.0
Update dependency loguru to ^0.6.0
  • Schedule: ["at any time"]
  • Branch name: renovate/loguru-0.x
  • Merge into: main
  • Upgrade loguru to ^0.6.0
Update snok/install-poetry action to v1.3.1
  • Schedule: ["at any time"]
  • Branch name: renovate/snok-install-poetry-1.x
  • Merge into: main
  • Upgrade snok/install-poetry to v1.3.1
Update actions/cache action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-cache-3.x
  • Merge into: main
  • Upgrade actions/cache to v3
Update actions/checkout action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-checkout-3.x
  • Merge into: main
  • Upgrade actions/checkout to v3
Update actions/download-artifact action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-download-artifact-3.x
  • Merge into: main
  • Upgrade actions/download-artifact to v3
Update actions/setup-node action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-setup-node-3.x
  • Merge into: main
  • Upgrade actions/setup-node to v3
Update actions/setup-python action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-setup-python-3.x
  • Merge into: main
  • Upgrade actions/setup-python to v3
Update actions/upload-artifact action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-upload-artifact-3.x
  • Merge into: main
  • Upgrade actions/upload-artifact to v3
Update codecov/codecov-action action to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/codecov-codecov-action-3.x
  • Merge into: main
  • Upgrade codecov/codecov-action to v3
Update dependency aws-cdk to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/major-aws-cdk-monorepo
  • Merge into: main
  • Upgrade aws-cdk to ^2.0.0
Update dependency coverage to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/coverage-6.x
  • Merge into: main
  • Upgrade coverage to ^6.3
Update dependency pytest to v7
  • Schedule: ["at any time"]
  • Branch name: renovate/pytest-7.x
  • Merge into: main
  • Upgrade pytest to ^7.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by WhiteSource Renovate. View repository job log here.

@lesteenman lesteenman merged commit d025113 into main Apr 14, 2022
@lesteenman lesteenman deleted the renovate/configure branch April 14, 2022 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants