Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Renovate #371

Merged
merged 1 commit into from
Feb 23, 2023
Merged

Configure Renovate #371

merged 1 commit into from
Feb 23, 2023

Conversation

bcgov-devops
Copy link
Contributor

@bcgov-devops bcgov-devops commented Feb 23, 2023

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • docker-compose.yml (docker-compose)
  • backend/Dockerfile (dockerfile)
  • database/Dockerfile (dockerfile)
  • frontend/Dockerfile (dockerfile)
  • legacy/Dockerfile (dockerfile)
  • .github/workflows/merge-main.yml (github-actions)
  • .github/workflows/pr-close.yml (github-actions)
  • .github/workflows/pr-open.yml (github-actions)
  • .github/workflows/unit-tests.yml (github-actions)
  • backend/pom.xml (maven)
  • legacy/pom.xml (maven)
  • backend/.mvn/wrapper/maven-wrapper.properties (maven-wrapper)
  • legacy/.mvn/wrapper/maven-wrapper.properties (maven-wrapper)
  • frontend/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Default preset for use with Renovate's repos
  • Enable Renovate Dependency Dashboard creation.
  • If Renovate detects semantic commits, it will use semantic commit type fix for dependencies and chore for all others.
  • Ignore node_modules, bower_components, vendor and various test/tests directories.
  • Automatically detect the best rangeStrategy to use.
  • Rate limit PR creation to a maximum of two per hour.
  • Limit to maximum 10 open PRs at any time.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • A collection of workarounds for known problems with packages.
  • Run lock file maintenance (updates) early Monday mornings.
  • Rebase existing PRs any time the base branch has been updated.
  • Use semantic prefixes for commit messages and PR titles.
  • Use semantic commit scope deps for all commits and PR titles.
  • Enable Docker major updates.
  • Pin Docker digests.
  • Group various lint packages together.

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.


What to Expect

With your current configuration, Renovate will create 17 Pull Requests:

chore(deps): pin dependencies
  • Schedule: ["at any time"]
  • Branch name: renovate/pin-dependencies
  • Merge into: main
  • Upgrade eclipse-temurin to sha256:b99f9457ad5cabdfa02935d1048082dd79d318685cfa0ca79a8f623c052c406a
  • Upgrade eclipse-temurin to sha256:f59c1acc26975859545eabb2051f4b9a41d5ef278aad9dfe42bdb0aff5611613
  • Upgrade gvenzl/oracle-xe to sha256:ddd814078ed25fd05f7c343b796923609300bf438115b342329a2dd19a91b9d6
  • Upgrade openjdk to sha256:528707081fdb9562eb819128a9f85ae7fe000e2fbaeaf9f87662e7b3f38cb7d8
  • Upgrade postgres to sha256:0876afe95f304506a42c6fcd5b3b272340c394389086dcd33fe4c1ac999ff118
  • Upgrade postgres to sha256:43b752e182ad5fd6b12d468f369853257fc88b3ab3494a55bacb60dc7af00c6d
  • Upgrade registry.access.redhat.com/ubi8/ubi to sha256:70fc843d4eb70159799e065d2830726b884c93950f8891e263d6328af6141173
  • Upgrade registry.access.redhat.com/ubi8/ubi-micro to sha256:af0a83c2fb7db1b63a5655c85f3f37d32b114443b8969fd8a40d47429cd87016
chore(deps): update dependency maven-wrapper to v3.1.1
  • Schedule: ["at any time"]
  • Branch name: renovate/maven-wrapper-3.x
  • Merge into: main
  • Upgrade maven-wrapper to 3.1.1
chore(deps): update dependency org.cyclonedx:cyclonedx-maven-plugin to v2.7.5
chore(deps): update eclipse-temurin docker tag
  • Schedule: ["at any time"]
  • Branch name: renovate/eclipse-temurin-17.x
  • Merge into: main
  • Upgrade eclipse-temurin to sha256:b99f9457ad5cabdfa02935d1048082dd79d318685cfa0ca79a8f623c052c406a
  • Upgrade eclipse-temurin to sha256:f59c1acc26975859545eabb2051f4b9a41d5ef278aad9dfe42bdb0aff5611613
chore(deps): update openjdk docker tag to v17.0.2
  • Schedule: ["at any time"]
  • Branch name: renovate/openjdk-17.x
  • Merge into: main
  • Upgrade openjdk to sha256:528707081fdb9562eb819128a9f85ae7fe000e2fbaeaf9f87662e7b3f38cb7d8
chore(deps): update registry.access.redhat.com/ubi8/ubi docker tag to v8.7-1090
  • Schedule: ["at any time"]
  • Branch name: renovate/registry.access.redhat.com-ubi8-ubi-8.x
  • Merge into: main
  • Upgrade registry.access.redhat.com/ubi8/ubi to sha256:70fc843d4eb70159799e065d2830726b884c93950f8891e263d6328af6141173
chore(deps): update registry.access.redhat.com/ubi8/ubi-micro docker tag to v8.7-6
  • Schedule: ["at any time"]
  • Branch name: renovate/registry.access.redhat.com-ubi8-ubi-micro-8.x
  • Merge into: main
  • Upgrade registry.access.redhat.com/ubi8/ubi-micro to sha256:af0a83c2fb7db1b63a5655c85f3f37d32b114443b8969fd8a40d47429cd87016
fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.0.3
fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2022.0.1
chore(deps): update dependency maven to v3.9.0
  • Schedule: ["at any time"]
  • Branch name: renovate/maven-3.x
  • Merge into: main
  • Upgrade maven to 3.9.0
chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.2.1
  • Schedule: ["at any time"]
  • Branch name: renovate/org.apache.maven.plugins-maven-enforcer-plugin-3.x
  • Merge into: main
  • Upgrade org.apache.maven.plugins:maven-enforcer-plugin to 3.2.1
chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.5.0
  • Schedule: ["at any time"]
  • Branch name: renovate/org.apache.maven.plugins-maven-javadoc-plugin-3.x
  • Merge into: main
  • Upgrade org.apache.maven.plugins:maven-javadoc-plugin to 3.5.0
chore(deps): update linters (major)
chore(deps): update postgres docker tag to v15
  • Schedule: ["at any time"]
  • Branch name: renovate/postgres-15.x
  • Merge into: main
  • Upgrade postgres to sha256:901df890146ec46a5cab7a33f4ac84e81bac2fe92b2c9a14fd649502c4adf954
fix(deps): update dependency @​vitejs/plugin-vue to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/vitejs-plugin-vue-4.x
  • Merge into: main
  • Upgrade @vitejs/plugin-vue to ^4.0.0
fix(deps): update dependency vite to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/vite-4.x
  • Merge into: main
  • Upgrade vite to ^4.0.0
chore(deps): lock file maintenance
  • Schedule: ["before 3am on Monday"]
  • Branch name: renovate/npm-all-minor-patch
  • Merge into: main
  • Regenerate lock files to use latest dependency versions

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Renovate Bot.


Thanks for the PR!

Any successful deployments (not always required) will be available below.
Backend available
Frontend available
Legacy available

Once merged, code will be promoted and handed off to following workflow run.
Main Merge Workflow

@github-actions
Copy link
Contributor

Current changelog

Bug Fixes

Features

Reverts

@sonarqubecloud
Copy link

[forest-client-frontend] Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@bcgov-devops bcgov-devops temporarily deployed to dev February 23, 2023 21:37 — with GitHub Actions Inactive
@bcgov-devops bcgov-devops temporarily deployed to dev February 23, 2023 21:37 — with GitHub Actions Inactive
@bcgov-devops bcgov-devops temporarily deployed to dev February 23, 2023 21:37 — with GitHub Actions Inactive
@bcgov-devops bcgov-devops temporarily deployed to dev February 23, 2023 21:37 — with GitHub Actions Inactive
@bcgov-devops bcgov-devops temporarily deployed to dev February 23, 2023 21:39 — with GitHub Actions Inactive
@paulushcgcj paulushcgcj merged commit f801c0b into main Feb 23, 2023
@paulushcgcj paulushcgcj deleted the renovate/configure branch February 23, 2023 21:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants