Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• deployment/ansible/ibm-cloud/requirements.yml (ansible-galaxy)
• plugins_rust/Cargo.toml (cargo)
• docker-compose.phoenix-simple.yml (docker-compose)
• docker-compose.with-phoenix.yml (docker-compose)
• docker-compose.yml (docker-compose)
• mcp-servers/python/mcp_eval_server/docker-compose.yml (docker-compose)
• plugins/external/llmguard/docker-compose.yaml (docker-compose)
• .devcontainer/Dockerfile (dockerfile)
• Containerfile (dockerfile)
• Containerfile.lite (dockerfile)
• agent_runtimes/langchain_agent/Dockerfile (dockerfile)
• mcp-servers/go/benchmark-server/Dockerfile (dockerfile)
• mcp-servers/go/fast-time-server/Dockerfile (dockerfile)
• mcp-servers/go/pandoc-server/Dockerfile (dockerfile)
• mcp-servers/go/system-monitor-server/Dockerfile (dockerfile)
• mcp-servers/python/csv_pandas_chat_server/Containerfile (dockerfile)
• mcp-servers/python/data_analysis_server/Containerfile (dockerfile)
• mcp-servers/python/docx_server/Containerfile (dockerfile)
• mcp-servers/python/graphviz_server/Containerfile (dockerfile)
• mcp-servers/python/latex_server/Containerfile (dockerfile)
• mcp-servers/python/libreoffice_server/Containerfile (dockerfile)
• mcp-servers/python/mcp-rss-search/Containerfile (dockerfile)
• mcp-servers/python/mcp_eval_server/Containerfile (dockerfile)
• mcp-servers/python/pm_mcp_server/Containerfile (dockerfile)
• mcp-servers/python/pptx_server/Containerfile (dockerfile)
• mcp-servers/python/python_sandbox_server/Containerfile (dockerfile)
• mcp-servers/python/python_sandbox_server/docker/Dockerfile.sandbox (dockerfile)
• mcp-servers/python/synthetic_data_server/Containerfile (dockerfile)
• mcp-servers/python/url_to_markdown_server/Containerfile (dockerfile)
• mcp-servers/python/xlsx_server/Containerfile (dockerfile)
• mcp-servers/templates/go/Dockerfile.jinja (dockerfile)
• mcp-servers/templates/python/Containerfile.jinja (dockerfile)
• nginx/Dockerfile (dockerfile)
• plugin_templates/external/Containerfile (dockerfile)
• plugins/external/llmguard/Containerfile (dockerfile)
• plugins/external/opa/Containerfile (dockerfile)
• .github/workflows/bandit.yml (github-actions)
• .github/workflows/codeql.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/docker-image.yml (github-actions)
• .github/workflows/docker-release.yml (github-actions)
• .github/workflows/full-build-pipeline.yml (github-actions)
• .github/workflows/ibm-cloud-code-engine.yml (github-actions)
• .github/workflows/lint-plugins.yml (github-actions)
• .github/workflows/lint-web.yml (github-actions)
• .github/workflows/lint.yml (github-actions)
• .github/workflows/pytest.yml (github-actions)
• .github/workflows/python-package.yml (github-actions)
• .github/workflows/rust-plugins.yml (github-actions)
• mcp-servers/go/benchmark-server/go.mod (gomod)
• mcp-servers/go/calculator-server/go.mod (gomod)
• mcp-servers/go/fast-time-server/go.mod (gomod)
• mcp-servers/go/pandoc-server/go.mod (gomod)
• mcp-servers/go/system-monitor-server/go.mod (gomod)
• charts/mcp-stack/values.yaml (helm-values)
• mcpgateway/templates/admin.html (html)
• mcpgateway/templates/login.html (html)
• package.json (npm)
• agent_runtimes/langchain_agent/pyproject.toml (pep621)
• mcp-servers/python/chunker_server/pyproject.toml (pep621)
• mcp-servers/python/code_splitter_server/pyproject.toml (pep621)
• mcp-servers/python/csv_pandas_chat_server/pyproject.toml (pep621)
• mcp-servers/python/data_analysis_server/pyproject.toml (pep621)
• mcp-servers/python/docx_server/pyproject.toml (pep621)
• mcp-servers/python/graphviz_server/pyproject.toml (pep621)
• mcp-servers/python/latex_server/pyproject.toml (pep621)
• mcp-servers/python/libreoffice_server/pyproject.toml (pep621)
• mcp-servers/python/mcp-rss-search/pyproject.toml (pep621)
• mcp-servers/python/mcp_eval_server/pyproject.toml (pep621)
• mcp-servers/python/mermaid_server/pyproject.toml (pep621)
• mcp-servers/python/output_schema_test_server/pyproject.toml (pep621)
• mcp-servers/python/plotly_server/pyproject.toml (pep621)
• mcp-servers/python/pm_mcp_server/pyproject.toml (pep621)
• mcp-servers/python/pptx_server/pyproject.toml (pep621)
• mcp-servers/python/python_sandbox_server/pyproject.toml (pep621)
• mcp-servers/python/synthetic_data_server/pyproject.toml (pep621)
• mcp-servers/python/url_to_markdown_server/pyproject.toml (pep621)
• mcp-servers/python/xlsx_server/pyproject.toml (pep621)
• plugins/external/llmguard/pyproject.toml (pep621)
• plugins/external/opa/pyproject.toml (pep621)
• plugins_rust/pyproject.toml (pep621)
• pyproject.toml (pep621)
• agent_runtimes/langchain_agent/requirements.txt (pip_requirements)
• docs/requirements.txt (pip_requirements)
• mcp-servers/python/data_analysis_server/requirements.txt (pip_requirements)
• deployment/terraform/ibm-cloud/helm_release.tf (terraform)
• deployment/terraform/ibm-cloud/provider.tf (terraform)
• deployment/terraform/ibm-cloud/versions.tf (terraform)
• deployment/terraform/ibm-cloud/vpc_cluster.tf (terraform)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Schedule daily before 4 AM.
• Run Renovate on following schedule: * 0-3 * * *

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 40 Pull Requests:

fix(deps): update dependency fastmcp to v2.13.0 [security]

• Branch name: renovate/pypi-fastmcp-vulnerability
• Merge into: main
• Upgrade fastmcp to ==2.13.0

chore(deps): update mcp-contextforge-gateway digest to 250d218

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/mcp-contextforge-gateway-digest
• Merge into: main
• Upgrade mcp-contextforge-gateway to 250d2185fa10a69482417e2a12debe0b6f5dd995

fix(deps): update github.com/knetic/govaluate digest to 7625b7f

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-knetic-govaluate-digest
• Merge into: main
• Upgrade github.com/Knetic/govaluate to 7625b7f8c03df11d0ec9b5617b0ea21e8b8af61b

chore(deps): update anchore/sbom-action action to v0.20.9

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/anchore-sbom-action-0.x
• Merge into: main
• Upgrade anchore/sbom-action to v0.20.9

chore(deps): update dependency astral-sh/uv to v0.9.7

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/astral-sh-uv-0.x
• Merge into: main
• Upgrade astral-sh/uv to 0.9.7

chore(deps): update dependency codemirror to v5.65.20

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/codemirror-5.x
• Merge into: main
• Upgrade codemirror to 5.65.20

chore(deps): update dependency eslint-config-prettier to v10.1.8

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-config-prettier-10.x-lockfile
• Merge into: main
• Upgrade eslint-config-prettier to 10.1.8

chore(deps): update dependency eslint-plugin-prettier to v5.5.4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-plugin-prettier-5.x-lockfile
• Merge into: main
• Upgrade eslint-plugin-prettier to 5.5.4

chore(deps): update registry.access.redhat.com/ubi9/ubi docker tag to v9.6-1760340943

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/registry.access.redhat.com-ubi9-ubi-9.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/ubi to 9.6-1760340943

chore(deps): update dependency @​biomejs/biome to v2.3.2

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/biomejs-biome-2.x-lockfile
• Merge into: main
• Upgrade @biomejs/biome to 2.3.2

chore(deps): update dependency @​stylistic/eslint-plugin to v5.5.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-stylistic-monorepo
• Merge into: main
• Upgrade @stylistic/eslint-plugin to 5.5.0

chore(deps): update dependency font-awesome to v6.7.2

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/font-awesome-6.x
• Merge into: main
• Upgrade font-awesome to 6.7.2

chore(deps): update dependency go to v1.25.3

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.25.3

chore(deps): update dependency python

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14
• Upgrade python to 3.12-slim
• Upgrade python to 3.12-alpine

chore(deps): update docker/dockerfile docker tag to v1.19

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/docker-dockerfile-1.x
• Merge into: main
• Upgrade docker/dockerfile to 1.19

chore(deps): update docker/login-action action to v3.6.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/docker-login-action-3.x
• Merge into: main
• Upgrade docker/login-action to v3.6.0

chore(deps): update golang docker tag to v1.25

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to 1.25-alpine
• Upgrade golang to 1.25

chore(deps): update nginx docker tag to v1.29

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/nginx-1.x
• Merge into: main
• Upgrade nginx to 1.29-alpine

chore(deps): update quay.io/pypa/manylinux2014_x86_64 docker tag to v2025.11.01

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/quay.io-pypa-manylinux2014_x86_64-2025.x
• Merge into: main
• Upgrade quay.io/pypa/manylinux2014_x86_64 to 2025.11.01-2

chore(deps): update sigstore/cosign-installer action to v3.10.1

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/sigstore-cosign-installer-3.x
• Merge into: main
• Upgrade sigstore/cosign-installer to v3.10.1

fix(deps): update module github.com/mark3labs/mcp-go to v0.43.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-mark3labs-mcp-go-0.x
• Merge into: main
• Upgrade github.com/mark3labs/mcp-go to v0.43.0

fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.5

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-shirou-gopsutil-v3-3.x
• Merge into: main
• Upgrade github.com/shirou/gopsutil/v3 to v3.24.5

fix(deps): update module github.com/shopspring/decimal to v1.4.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-shopspring-decimal-1.x
• Merge into: main
• Upgrade github.com/shopspring/decimal to v1.4.0

fix(deps): update module gonum.org/v1/gonum to v0.16.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/gonum.org-v1-gonum-0.x
• Merge into: main
• Upgrade gonum.org/v1/gonum to v0.16.0

chore(deps): update actions/checkout action to v5

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/actions-checkout-5.x
• Merge into: main
• Upgrade actions/checkout to v5

chore(deps): update actions/setup-node action to v6

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/actions-setup-node-6.x
• Merge into: main
• Upgrade actions/setup-node to v6

chore(deps): update actions/setup-python action to v6

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: main
• Upgrade actions/setup-python to v6

chore(deps): update astral-sh/setup-uv action to v7

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/astral-sh-setup-uv-7.x
• Merge into: main
• Upgrade astral-sh/setup-uv to v7

chore(deps): update codecov/codecov-action action to v5

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/codecov-codecov-action-5.x
• Merge into: main
• Upgrade codecov/codecov-action to v5

chore(deps): update dependency codemirror to v6

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/codemirror-6.x
• Merge into: main
• Upgrade codemirror to 6.65.7

chore(deps): update dependency eslint to v9

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: main
• Upgrade eslint to ^9.0.0

chore(deps): update dependency eslint-plugin-n to v17

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-plugin-n-17.x
• Merge into: main
• Upgrade eslint-plugin-n to ^17.0.0

chore(deps): update dependency eslint-plugin-promise to v7

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-plugin-promise-7.x
• Merge into: main
• Upgrade eslint-plugin-promise to ^7.0.0

chore(deps): update dependency font-awesome to v7

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/font-awesome-7.x
• Merge into: main
• Upgrade font-awesome to 7.0.1

chore(deps): update dependency node to v24

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade node to 24

chore(deps): update github artifact actions to v5 (major)

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/upload-artifact to v5
• Upgrade actions/upload-artifact to v5.0.0

chore(deps): update github/codeql-action action to v4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to v4

chore(deps): update postgres docker tag to v18

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/postgres-18.x
• Merge into: main
• Upgrade postgres to 18

chore(deps): update sigstore/cosign-installer action to v4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/sigstore-cosign-installer-4.x
• Merge into: main
• Upgrade sigstore/cosign-installer to v4.0.0

fix(deps): update module github.com/shirou/gopsutil/v3 to v4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-shirou-gopsutil-v3-4.x
• Merge into: main
• Upgrade github.com/shirou/gopsutil/v3 to v4.25.10

🚸 Branch creation will be limited to maximum 1 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up galaxy-collection package ibm.cloudcollection # IBM Cloud wrapper modules
• Failed to look up galaxy-collection package kubernetes.core # k8s + helm modules
• Failed to look up git-tags package helm/k8s
• Failed to look up galaxy-collection package community.general # random-password lookup
• Failed to look up docker package ghcr.io/ibm/mcp-context-forge-chart/mcp-context-forge-chart/mcpgateway

Files affected: deployment/ansible/ibm-cloud/requirements.yml, deployment/terraform/ibm-cloud/helm_release.tf

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.