Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Renovate #93

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Configure Renovate #93

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Oct 5, 2023

Mend Renovate

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .github/workflows/T01-codeql-scan.yml (github-actions)
  • package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.


What to Expect

With your current configuration, Renovate will create 10 Pull Requests:

Update dependency fast-xml-parser to v4.2.5 [SECURITY]
  • Branch name: renovate/npm-fast-xml-parser-vulnerability
  • Merge into: master
  • Upgrade fast-xml-parser to 4.2.5
Update dependency ws to v6.2.2 [SECURITY]
  • Branch name: renovate/npm-ws-vulnerability
  • Merge into: master
  • Upgrade ws to 6.2.2
Update dependency jszip to v3.8.0 [SECURITY]
  • Branch name: renovate/npm-jszip-vulnerability
  • Merge into: master
  • Upgrade jszip to 3.8.0
Update dependency commander to v2.20.3
  • Schedule: ["at any time"]
  • Branch name: renovate/commander-2.x
  • Merge into: master
  • Upgrade commander to 2.20.3
Update dependency sprintf-js to v1.1.3
  • Schedule: ["at any time"]
  • Branch name: renovate/sprintf-js-1.x
  • Merge into: master
  • Upgrade sprintf-js to 1.1.3
Update dependency tmp to v0.2.1
  • Schedule: ["at any time"]
  • Branch name: renovate/tmp-0.x
  • Merge into: master
  • Upgrade tmp to 0.2.1
Update actions/checkout action to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-checkout-4.x
  • Merge into: master
  • Upgrade actions/checkout to v4
Update dependency commander to v11
  • Schedule: ["at any time"]
  • Branch name: renovate/commander-11.x
  • Merge into: master
  • Upgrade commander to 11.1.0
Update dependency eslint to v8
  • Schedule: ["at any time"]
  • Branch name: renovate/eslint-8.x
  • Merge into: master
  • Upgrade eslint to 8.51.0
Update dependency superagent to v8
  • Schedule: ["at any time"]
  • Branch name: renovate/superagent-8.x
  • Merge into: master
  • Upgrade superagent to 8.1.2

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Mend Renovate. View repository job log here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants