Configure Renovate
Welcome to Renovate! This is an onboarding MR to help you understand and configure settings before regular Merge Requests begin.
Detected Package Files
-
.gitlab-ci.yml(gitlabci) -
go.mod(gomod)
Configuration Summary
Based on the default config's presets, Renovate will:
- Start dependency updates only once this onboarding MR is merged
- Enable Renovate Dependency Dashboard creation.
- Use semantic commit type
fixfor dependencies andchorefor all others if semantic commits are in use. - Ignore
node_modules,bower_components,vendorand various test/tests (except for nuget) directories. - Group known monorepo packages together.
- Use curated list of recommended non-monorepo package groupings.
- Apply crowd-sourced package replacement rules.
- Apply crowd-sourced workarounds for known problems with packages.
- Pin Docker digests.
- Pin
github-actiondigests. - Enable Renovate configuration migration MRs when needed.
- Pin dependency versions for
devDependencies. - Raise MR when vulnerability alerts are detected with label
'security'.
renovate.json in this branch. Renovate will update the Merge Request description the next time it runs.
What to Expect
With your current configuration, Renovate will create 1 Merge Request:
Pin sonarsource/sonar-scanner-cli Docker tag to 0b90ded
- Schedule: ["at any time"]
- Branch name:
renovate/pin-dependencies - Merge into:
main - Upgrade sonarsource/sonar-scanner-cli to
sha256:0b90dedf01ef875d69a5a151f73d72b8288a319b39cdfd2ee32a729027a00785
This MR has been generated by Renovate Bot.