Configure Renovate
Welcome to Renovate! This is an onboarding MR to help you understand and configure settings before regular Merge Requests begin.
Detected Package Files
-
.gitlab-ci.yml
(gitlabci) -
go.mod
(gomod)
Configuration Summary
Based on the default config's presets, Renovate will:
- Start dependency updates only once this onboarding MR is merged
- Enable Renovate Dependency Dashboard creation.
- Use semantic commit type
fix
for dependencies andchore
for all others if semantic commits are in use. - Ignore
node_modules
,bower_components
,vendor
and various test/tests (except for nuget) directories. - Group known monorepo packages together.
- Use curated list of recommended non-monorepo package groupings.
- Apply crowd-sourced package replacement rules.
- Apply crowd-sourced workarounds for known problems with packages.
- Pin Docker digests.
- Pin
github-action
digests. - Enable Renovate configuration migration MRs when needed.
- Pin dependency versions for
devDependencies
. - Raise MR when vulnerability alerts are detected with label
'security'
.
renovate.json
in this branch. Renovate will update the Merge Request description the next time it runs.
What to Expect
With your current configuration, Renovate will create 1 Merge Request:
Pin sonarsource/sonar-scanner-cli Docker tag to 0b90ded
- Schedule: ["at any time"]
- Branch name:
renovate/pin-dependencies
- Merge into:
main
- Upgrade sonarsource/sonar-scanner-cli to
sha256:0b90dedf01ef875d69a5a151f73d72b8288a319b39cdfd2ee32a729027a00785
This MR has been generated by Renovate Bot.