Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Configure Renovate #1869

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore: Configure Renovate #1869

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Feb 6, 2024

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .github/workflows/PullRequestClosed.yml (github-actions)
  • .github/workflows/PullRequestCreated.yml (github-actions)
  • .github/workflows/RequestReview.yml (github-actions)
  • .github/workflows/SlackNotification.yml (github-actions)
  • .github/workflows/SubmitReview.yml (github-actions)
  • .github/workflows/ToggleLockBranch.yml (github-actions)
  • .github/workflows/release.yml (github-actions)
  • its/pom.xml (maven)
  • pom.xml (maven)
  • its/projects/MultiLanguageSupportAngular/ClientApp/package.json (npm)
  • its/projects/MultiLanguageSupportReact/ClientApp/package.json (npm)
  • its/projects/VueWithAspBackend/package.json (npm)
  • StylingAnalyzers.targets (nuget)
  • Tests/SonarScanner.MSBuild.Common.Test/SonarScanner.MSBuild.Common.Test.csproj (nuget)
  • Tests/SonarScanner.MSBuild.PostProcessor.Test/SonarScanner.MSBuild.PostProcessor.Test.csproj (nuget)
  • Tests/SonarScanner.MSBuild.PreProcessor.Test/SonarScanner.MSBuild.PreProcessor.Test.csproj (nuget)
  • Tests/SonarScanner.MSBuild.Shim.Test/SonarScanner.MSBuild.Shim.Test.csproj (nuget)
  • Tests/SonarScanner.MSBuild.TFS.Test/SonarScanner.MSBuild.TFS.Test.csproj (nuget)
  • Tests/SonarScanner.MSBuild.Tasks.IntegrationTest/SonarScanner.MSBuild.Tasks.IntegrationTest.csproj (nuget)
  • Tests/SonarScanner.MSBuild.Tasks.UnitTest/SonarScanner.MSBuild.Tasks.UnitTest.csproj (nuget)
  • Tests/SonarScanner.MSBuild.Test/SonarScanner.MSBuild.Test.csproj (nuget)
  • Tests/TestUtilities/TestUtilities.csproj (nuget)
  • its/projects/CSharp.SDK.8/UTs/UTs.csproj (nuget)
  • its/projects/CSharp.SDK.8/global.json (nuget)
  • its/projects/CSharp.SDK.Latest/UTs/UTs.csproj (nuget)
  • its/projects/CodeCoverage/CodeCoverage.Test/CodeCoverage.Test.csproj (nuget)
  • its/projects/CodeCoverage/global.json (nuget)
  • its/projects/DotCoverExcludedCoverage/DotCoverExcludedCoverage.Test/DotCoverExcludedCoverage.Test.csproj (nuget)
  • its/projects/DotnetProjectTypeDetection/TestProjectWrongReferenceCasing/TestProjectWrongReferenceCasing.csproj (nuget)
  • its/projects/DuplicateAnalyzerReferences/SourceGenerator/SourceGenerator.csproj (nuget)
  • its/projects/DuplicateAnalyzerReferences/global.json (nuget)
  • its/projects/ExcludedTest/Test/Test.csproj (nuget)
  • its/projects/ExclusionsAndCoverage/ExclusionsAndCoverage.Test/ExclusionsAndCoverage.Test.csproj (nuget)
  • its/projects/IgnoreIssuesDoesNotRemoveSourceGenerator/ProjectWithSourceGenAndAnalyzer/ProjectWithSourceGenAndAnalyzer.csproj (nuget)
  • its/projects/IgnoreIssuesDoesNotRemoveSourceGenerator/SourceGenerator/SourceGenerator.csproj (nuget)
  • its/projects/IgnoreIssuesDoesNotRemoveSourceGenerator/global.json (nuget)
  • its/projects/MultiLanguageSupportAngular/MultiLanguageSupportAngular.csproj (nuget)
  • its/projects/MultiLanguageSupportReact/MultiLanguageSupportReact.csproj (nuget)
  • its/projects/RazorWebApplication.net9.withSourceGenerators/global.json (nuget)
  • its/projects/RazorWebApplication.net9.withoutSourceGenerators/global.json (nuget)
  • its/projects/ReproAzureFunctions/ReproAzureFunctions/ReproAzureFunctions.csproj (nuget)
  • its/projects/VueWithAspBackend/AspBackend/AspBackend.csproj (nuget)
  • its/projects/XamarinApplication/XamarinApplication.iOS/XamarinApplication.iOS.csproj (nuget)
  • its/projects/XamarinApplication/XamarinApplication/XamarinApplication.csproj (nuget)
  • src/SonarScanner.MSBuild.Common/SonarScanner.MSBuild.Common.csproj (nuget)
  • src/SonarScanner.MSBuild.PreProcessor/SonarScanner.MSBuild.PreProcessor.csproj (nuget)
  • src/SonarScanner.MSBuild.Shim/SonarScanner.MSBuild.Shim.csproj (nuget)
  • src/SonarScanner.MSBuild.TFS.Classic/SonarScanner.MSBuild.TFS.Classic.csproj (nuget)
  • src/SonarScanner.MSBuild.Tasks/SonarScanner.MSBuild.Tasks.csproj (nuget)
  • src/SonarScanner.MSBuild/SonarScanner.MSBuild.csproj (nuget)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Hopefully safe environment variables to allow users to configure.
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Evaluate schedules according to timezone CET.
  • Schedule during typical non-office hours on weekdays (i.e., 10 PM - 5 AM) and anytime on weekends.
  • Remove hourly and concurrent rate limits.
  • Disable Renovate Dependency Dashboard creation.
  • Rebase existing PRs any time the base branch has been updated.
  • Run Renovate on following schedule: * 0-4,22-23 * * 1-5,* * * * 0,6

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 71 Pull Requests:

Pin dependencies
Roll back SonarSource/gh-action_build-notify action to 1.3.1
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/sonarsource-gh-action_build-notify-rollback
  • Merge into: master
  • Upgrade SonarSource/gh-action_build-notify to 1.3.1
Roll back SonarSource/vault-action-wrapper action to 3.0.2
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/sonarsource-vault-action-wrapper-rollback
  • Merge into: master
  • Upgrade SonarSource/vault-action-wrapper to 3.0.2
Update dependency @​types/node to v18.19.74
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/node-18.x-lockfile
  • Merge into: master
  • Upgrade @types/node to 18.19.74
Update dependency FluentAssertions to 6.12.2
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/fluentassertions-6.x
  • Merge into: master
  • Upgrade FluentAssertions to 6.12.2
Update dependency MSBuild.StructuredLogger to 2.2.386
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/msbuild.structuredlogger-2.x
  • Merge into: master
  • Upgrade MSBuild.StructuredLogger to 2.2.386
Update dependency Xamarin.Forms to 5.0.0.2662
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/xamarin.forms-5.x
  • Merge into: master
  • Upgrade Xamarin.Forms to 5.0.0.2662
Update dependency autoprefixer to v10.4.20
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/autoprefixer-10.x
  • Merge into: master
  • Upgrade autoprefixer to 10.4.20
Update dependency coverlet.msbuild to 6.0.4
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/coverlet.msbuild-6.x
  • Merge into: master
  • Upgrade coverlet.msbuild to 6.0.4
Update dependency eslint-plugin-jsx-a11y to v6.10.2
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/eslint-plugin-jsx-a11y-6.x-lockfile
  • Merge into: master
  • Upgrade eslint-plugin-jsx-a11y to 6.10.2
Update dependency eslint-plugin-react to v7.37.4
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/eslint-plugin-react-7.x-lockfile
  • Merge into: master
  • Upgrade eslint-plugin-react to 7.37.4
Update dependency org.awaitility:awaitility to v4.2.2
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/org.awaitility-awaitility-4.x
  • Merge into: master
  • Upgrade org.awaitility:awaitility to 4.2.2
Update dependency tslib to v2.8.1
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/tslib-2.x-lockfile
  • Merge into: master
  • Upgrade tslib to 2.8.1
Update dependency workbox-cacheable-response to v6.6.1
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/workbox-monorepo
  • Merge into: master
  • Upgrade workbox-cacheable-response to 6.6.1
Update mstest monorepo
Update SonarSource/jfrog-setup-wrapper action to v3.2.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/sonarsource-jfrog-setup-wrapper-3.x
  • Merge into: master
  • Upgrade SonarSource/jfrog-setup-wrapper to dbb01e502ff15257756c7fcb3b7ec3daa246c74d
Update SonarSource/vault-action-wrapper action to v2.7.4
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/sonarsource-vault-action-wrapper-2.x
  • Merge into: master
  • Upgrade SonarSource/vault-action-wrapper to dc8fe04652687f7278f3ecd27905967836bab0eb
Update azure-functions-dotnet-worker monorepo
Update dependency @​types/jasmine to ~4.6.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/jasmine-4.x
  • Merge into: master
  • Upgrade @types/jasmine to ~4.6.0
Update dependency FluentAssertions.Analyzers to 0.34.1
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/fluentassertions.analyzers-0.x
  • Merge into: master
  • Upgrade FluentAssertions.Analyzers to 0.34.1
Update dependency Google.Protobuf to 3.29.3
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/protobuf-monorepo
  • Merge into: master
  • Upgrade Google.Protobuf to 3.29.3
Update dependency Grpc.Tools to 2.69.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/grpc.tools-2.x
  • Merge into: master
  • Upgrade Grpc.Tools to 2.69.0
Update dependency Microsoft.Build.Framework to 17.12.6
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/microsoft.build.framework-17.x
  • Merge into: master
  • Upgrade Microsoft.Build.Framework to 17.12.6
Update dependency Microsoft.CodeAnalysis.Analyzers to 3.11.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/microsoft.codeanalysis.analyzers-3.x
  • Merge into: master
  • Upgrade Microsoft.CodeAnalysis.Analyzers to 3.11.0
Update dependency Microsoft.NET.Test.Sdk to 17.12.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/vstest-monorepo
  • Merge into: master
  • Upgrade Microsoft.NET.Test.Sdk to 17.12.0
Update dependency NSubstitute to 5.3.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/nsubstitute-5.x
  • Merge into: master
  • Upgrade NSubstitute to 5.3.0
Update dependency SonarAnalyzer.CSharp.Styling to 9.32.0.97167
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/sonaranalyzer.csharp.styling-9.x
  • Merge into: master
  • Upgrade SonarAnalyzer.CSharp.Styling to 9.32.0.97167
Update dependency Swashbuckle.AspNetCore to 6.9.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/swashbuckle-aspnetcore-monorepo
  • Merge into: master
  • Upgrade Swashbuckle.AspNetCore to 6.9.0
Update dependency coverlet.collector to 3.2.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/coverlet.collector-3.x
  • Merge into: master
  • Upgrade coverlet.collector to 3.2.0
Update dependency moq to 4.20.72
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/moq-4.x
  • Merge into: master
  • Upgrade moq to 4.20.72
Update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.8.1
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/org.apache.maven.plugins-maven-dependency-plugin-3.x
  • Merge into: master
  • Upgrade org.apache.maven.plugins:maven-dependency-plugin to 3.8.1
Update dependency org.assertj:assertj-core to v3.27.3
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/org.assertj-assertj-core-3.x
  • Merge into: master
  • Upgrade org.assertj:assertj-core to 3.27.3
Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.0
Update dependency org.sonarsource.sonarqube:sonar-ws to v10.7.0.96327
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/org.sonarsource.sonarqube-sonar-ws-10.x
  • Merge into: master
  • Upgrade org.sonarsource.sonarqube:sonar-ws to 10.7.0.96327
Update dependency react-router-dom to v6.29.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/react-router-monorepo
  • Merge into: master
  • Upgrade react-router-dom to 6.29.0
Update dependency webpack to v5.97.1
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/webpack-5.x
  • Merge into: master
  • Upgrade webpack to 5.97.1
Update dependency zone.js to ~0.15.0
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/angular-monorepo
  • Merge into: master
  • Upgrade zone.js to ~0.15.0
Update dotnet monorepo
Update junit5 monorepo to v5.11.4
Update angular monorepo to v19 (major)
Update angular-cli monorepo to v19 (major)
Update azure-functions-dotnet-worker monorepo to v2 (major)
Update dependency @​types/jasmine to v5
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/jasmine-5.x
  • Merge into: master
  • Upgrade @types/jasmine to ~5.1.0
Update dependency @​types/node to v22
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/node-22.x
  • Merge into: master
  • Upgrade @types/node to ^22.0.0
Update dependency FluentAssertions to v8
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/fluentassertions-8.x
  • Merge into: master
  • Upgrade FluentAssertions to 8.0.1
Update dependency Microsoft.AspNetCore.SpaProxy to v9
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/microsoft.aspnetcore.spaproxy-9.x
  • Merge into: master
  • Upgrade Microsoft.AspNetCore.SpaProxy to 9.0.1
Update dependency Microsoft.Build to v17
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/microsoft.build-17.x
  • Merge into: master
  • Upgrade Microsoft.Build to 17.12.6
Update dependency Microsoft.Build.Utilities.Core to v17
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/microsoft.build.utilities.core-17.x
  • Merge into: master
  • Upgrade Microsoft.Build.Utilities.Core to 17.12.6
Update dependency SonarAnalyzer.CSharp.Styling to v10
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/sonaranalyzer.csharp.styling-10.x
  • Merge into: master
  • Upgrade SonarAnalyzer.CSharp.Styling to 10.6.0.109712
Update dependency Swashbuckle.AspNetCore to v7
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/major-swashbuckle-aspnetcore-monorepo
  • Merge into: master
  • Upgrade Swashbuckle.AspNetCore to 7.2.0
Update dependency System.Text.Json to v9
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/system.text.json-9.x
  • Merge into: master
  • Upgrade System.Text.Json to 9.0.1
Update dependency coverlet.collector to v6.0.4
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/coverlet.collector-6.x
  • Merge into: master
  • Upgrade coverlet.collector to 6.0.4
Update dependency eslint to v9
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/major-eslint-monorepo
  • Merge into: master
  • Upgrade eslint to ^9.0.0
Update dependency eslint-plugin-vue to v9
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/eslint-plugin-vue-9.x
  • Merge into: master
  • Upgrade eslint-plugin-vue to ^9.0.0
Update dependency http-proxy-middleware to v3
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/http-proxy-middleware-3.x
  • Merge into: master
  • Upgrade http-proxy-middleware to ^3.0.0
Update dependency jasmine-core to v5
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/major-jasmine-monorepo
  • Merge into: master
  • Upgrade jasmine-core to ~5.5.0
Update dependency jest to v29
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/major-jest-monorepo
  • Merge into: master
  • Upgrade jest to ^29.0.0
Update dependency jest-editor-support to v31
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/jest-editor-support-31.x
  • Merge into: master
  • Upgrade jest-editor-support to ^31.0.0
Update dependency org.sonarsource.scanner.msbuild:sonar-scanner to v9
Update dependency org.sonarsource.sonarqube:sonar-ws to v25
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/org.sonarsource.sonarqube-sonar-ws-25.x
  • Merge into: master
  • Upgrade org.sonarsource.sonarqube:sonar-ws to 25.1.0.102122
Update dependency react-router-dom to v7
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/major-react-router-monorepo
  • Merge into: master
  • Upgrade react-router-dom to ^7.0.0
Update dependency rimraf to v6
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/rimraf-6.x
  • Merge into: master
  • Upgrade rimraf to ^6.0.0
Update dependency typescript to v5
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/typescript-5.x
  • Merge into: master
  • Upgrade typescript to ^5.0.0
  • Upgrade typescript to ~5.7.0
Update dependency vue to v3
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/major-vue-monorepo
  • Merge into: master
  • Upgrade vue to ^3.0.0
Update dependency web-vitals to v4
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/web-vitals-4.x
  • Merge into: master
  • Upgrade web-vitals to ^4.0.0
Update dotnet monorepo (major)
Update jetty monorepo to v12 (major)
Update mstest monorepo to v3 (major)
Update react monorepo to v19 (major)
  • Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
  • Branch name: renovate/major-react-monorepo
  • Merge into: master
  • Upgrade react to ^19.0.0
  • Upgrade react-dom to ^19.0.0
Update vue-cli monorepo to v5 (major)
Update workbox monorepo to v7 (major)

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR was generated by Mend Renovate. View the repository job log.

@pavel-mikula-sonarsource
Copy link
Contributor

Related to https://trello.com/c/FBou1byB/1206-replace-dependabot-with-renovate
Currently blocked

@costin-zaharia-sonarsource
Copy link
Member

This PR is in this state since February. Do we still want to move to renovate?

@sebastien-marichal
Copy link
Contributor

For the next backlog cleanup, this PR is still relevant.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants