Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• services/clusters-keeper/src/simcore_service_clusters_keeper/data/docker-compose.yml (docker-compose)
• services/director-v2/docker-compose-extra.yml (docker-compose)
• services/docker-compose-build.yml (docker-compose)
• services/docker-compose-deploy.yml (docker-compose)
• services/docker-compose-dev-vendors.yml (docker-compose)
• services/docker-compose-ops-ci.yml (docker-compose)
• services/docker-compose-ops-registry.yml (docker-compose)
• services/docker-compose-ops.yml (docker-compose)
• services/docker-compose.devel-frontend.yml (docker-compose)
• services/docker-compose.devel.yml (docker-compose)
• services/docker-compose.local.yml (docker-compose)
• services/docker-compose.yml (docker-compose)
• services/static-webserver/client/tools/docker-compose.yml (docker-compose)
• packages/postgres-database/docker/Dockerfile (dockerfile)
• packages/postgres-database/scripts/erd/Dockerfile (dockerfile)
• packages/service-integration/Dockerfile (dockerfile)
• requirements/tools/Dockerfile (dockerfile)
• scripts/apt-packages-versions/Dockerfile (dockerfile)
• scripts/erd/Dockerfile (dockerfile)
• scripts/json-schema-to-openapi-schema/Dockerfile (dockerfile)
• scripts/maintenance/migrate_project/Dockerfile (dockerfile)
• scripts/openapi/oas_resolver/Dockerfile (dockerfile)
• scripts/pydeps-docker/Dockerfile (dockerfile)
• services/agent/Dockerfile (dockerfile)
• services/api-server/Dockerfile (dockerfile)
• services/autoscaling/Dockerfile (dockerfile)
• services/catalog/Dockerfile (dockerfile)
• services/clusters-keeper/Dockerfile (dockerfile)
• services/dask-sidecar/Dockerfile (dockerfile)
• services/datcore-adapter/Dockerfile (dockerfile)
• services/director-v2/Dockerfile (dockerfile)
• services/director/Dockerfile (dockerfile)
• services/docker-api-proxy/Dockerfile (dockerfile)
• services/dynamic-scheduler/Dockerfile (dockerfile)
• services/dynamic-sidecar/Dockerfile (dockerfile)
• services/efs-guardian/Dockerfile (dockerfile)
• services/invitations/Dockerfile (dockerfile)
• services/migration/Dockerfile (dockerfile)
• services/notifications/Dockerfile (dockerfile)
• services/payments/Dockerfile (dockerfile)
• services/resource-usage-tracker/Dockerfile (dockerfile)
• services/static-webserver/client/tools/qooxdoo-kit/builder/Dockerfile (dockerfile)
• services/storage/Dockerfile (dockerfile)
• services/web/Dockerfile (dockerfile)
• .github/actions/download-load-docker-images/action.yml (github-actions)
• .github/actions/setup-simcore-env/action.yml (github-actions)
• .github/workflows/_reusable-build-images.yml (github-actions)
• .github/workflows/ci-arm-build.yml (github-actions)
• .github/workflows/ci-multi-architecture-fusing.yml (github-actions)
• .github/workflows/ci-pact-master.yml (github-actions)
• .github/workflows/ci-release.yml (github-actions)
• .github/workflows/ci-staging.yml (github-actions)
• .github/workflows/ci-testing-deploy.yml (github-actions)
• .github/workflows/ci-testing-pull-request.yml (github-actions)
• .github/workflows/cleanup-caches-by-branches.yml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• docs/webdocroot/index.html (html)
• package.json (npm)
• scripts/maintenance/computational-clusters/pyproject.toml (pep621)
• api/specs/web-server/requirements.txt (pip_requirements)
• ci/helpers/requirements/requirements.txt (pip_requirements)
• packages/postgres-database/scripts/erd/requirements.txt (pip_requirements)
• scripts/demo-meta/requirements.txt (pip_requirements)
• scripts/erd/requirements.txt (pip_requirements)
• scripts/maintenance/migrate_project/requirements.txt (pip_requirements)
• scripts/maintenance/requirements.txt (pip_requirements)
• packages/pytest-simcore/setup.py (pip_setup)
• services/api-server/setup.py (pip_setup)
• services/director-v2/setup.py (pip_setup)
• services/dynamic-sidecar/setup.py (pip_setup)
• services/storage/setup.py (pip_setup)
• services/web/server/setup.py (pip_setup)
• scripts/release/pyproject.toml (poetry)
• .python-version (pyenv)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 45 Pull Requests:

Update dependency starlette to v0.49.1 [SECURITY]

• Branch name: renovate/pypi-starlette-vulnerability
• Merge into: master
• Upgrade starlette to ==0.49.1

Replace dependency babel-eslint with @​babel/eslint-parser ^7.11.0

• Schedule: ["at any time"]
• Branch name: renovate/babel-eslint-replacement
• Merge into: master
• Upgrade babel-eslint to ^7.11.0

Update postgres:14.8-alpine Docker digest to fa48198

• Schedule: ["at any time"]
• Branch name: renovate/postgres-14.8-alpine
• Merge into: master
• Upgrade postgres to sha256:fa48198f8c88d5563e7ff3f6d5d269be58a7571e4464d70e4cb6c0987d903ba3

Update redis:6.2.6 Docker digest to b7fd1a2

• Schedule: ["at any time"]
• Branch name: renovate/redis-6.2.6
• Merge into: master
• Upgrade redis to sha256:b7fd1a2c89d09a836f659d72c52d27b9f71202c97014a47639f87c992e8c0f1b

Update caddy Docker tag to v2.10.2

• Schedule: ["at any time"]
• Branch name: renovate/caddy-2.x
• Merge into: master
• Upgrade caddy to 2.10.2-alpine

Update dependency charset-normalizer to v3.4.4

• Schedule: ["at any time"]
• Branch name: renovate/charset-normalizer-3.x
• Merge into: master
• Upgrade charset-normalizer to ==3.4.4

Update dependency requests to v2.32.5

• Schedule: ["at any time"]
• Branch name: renovate/requests-2.x
• Merge into: master
• Upgrade requests to ==2.32.5

Update dependency typing-inspection to v0.4.2

• Schedule: ["at any time"]
• Branch name: renovate/typing-inspection-0.x
• Merge into: master
• Upgrade typing-inspection to ==0.4.2

Update redis Docker tag to v6.2.21

• Schedule: ["at any time"]
• Branch name: renovate/redis-6.x
• Merge into: master
• Upgrade redis to sha256:80134b1560fc64f83f15a5ba683ef1e566a2338ebb01153941ee75ee2955cef4

Update traefik Docker tag to v3.6.2

• Schedule: ["at any time"]
• Branch name: renovate/traefik-3.x
• Merge into: master
• Upgrade traefik to sha256:aaf0f6185419a50c74651448c1a5bf4606bd2d2ddb7b8749eed505d55bf8b8ea

Update adminer Docker tag to v4.17.1

• Schedule: ["at any time"]
• Branch name: renovate/adminer-4.x
• Merge into: master
• Upgrade adminer to 4.17.1

Update busybox Docker tag to v1.37.0

• Schedule: ["at any time"]
• Branch name: renovate/busybox-1.x
• Merge into: master
• Upgrade busybox to 1.37.0

Update dependency aiohttp to v3.13.2

• Schedule: ["at any time"]
• Branch name: renovate/aiohttp-3.x
• Merge into: master
• Upgrade aiohttp to ==3.13.2

Update dependency aiosignal to v1.4.0

• Schedule: ["at any time"]
• Branch name: renovate/aiosignal-1.x
• Merge into: master
• Upgrade aiosignal to ==1.4.0

Update dependency anyio to v4.11.0

• Schedule: ["at any time"]
• Branch name: renovate/anyio-4.x
• Merge into: master
• Upgrade anyio to ==4.11.0

Update dependency eslint-config-qx to ^0.2.0

• Schedule: ["at any time"]
• Branch name: renovate/eslint-config-qx-0.x
• Merge into: master
• Upgrade eslint-config-qx to ^0.2.0

Update dependency fastapi to v0.121.3

• Schedule: ["at any time"]
• Branch name: renovate/fastapi-0.x
• Merge into: master
• Upgrade fastapi to ==0.121.3

Update dependency frozenlist to v1.8.0

• Schedule: ["at any time"]
• Branch name: renovate/frozenlist-1.x
• Merge into: master
• Upgrade frozenlist to ==1.8.0

Update dependency idna to v3.11

• Schedule: ["at any time"]
• Branch name: renovate/idna-3.x
• Merge into: master
• Upgrade idna to ==3.11

Update dependency multidict to v6.7.0

• Schedule: ["at any time"]
• Branch name: renovate/multidict-6.x
• Merge into: master
• Upgrade multidict to ==6.7.0

Update dependency propcache to v0.4.1

• Schedule: ["at any time"]
• Branch name: renovate/propcache-0.x
• Merge into: master
• Upgrade propcache to ==0.4.1

Update dependency pydantic-core to v2.41.5

• Schedule: ["at any time"]
• Branch name: renovate/pydantic-core-2.x
• Merge into: master
• Upgrade pydantic-core to ==2.41.5

Update dependency typing-extensions to v4.15.0

• Schedule: ["at any time"]
• Branch name: renovate/typing-extensions-4.x
• Merge into: master
• Upgrade typing-extensions to ==4.15.0

Update dependency yarl to v1.22.0

• Schedule: ["at any time"]
• Branch name: renovate/yarl-1.x
• Merge into: master
• Upgrade yarl to ==1.22.0

Update jaegertracing/all-in-one Docker tag to v1.60

• Schedule: ["at any time"]
• Branch name: renovate/jaegertracing-all-in-one-1.x
• Merge into: master
• Upgrade jaegertracing/all-in-one to 1.60

Update joseluisq/static-web-server Docker tag to v2.39.0

• Schedule: ["at any time"]
• Branch name: renovate/joseluisq-static-web-server-2.x
• Merge into: master
• Upgrade joseluisq/static-web-server to 2.39.0-alpine

Update otel/opentelemetry-collector-contrib Docker tag to v0.140.1

• Schedule: ["at any time"]
• Branch name: renovate/otel-opentelemetry-collector-contrib-0.x
• Merge into: master
• Upgrade otel/opentelemetry-collector-contrib to 0.140.1

Update postgres Docker tag to v14.20

• Schedule: ["at any time"]
• Branch name: renovate/postgres-14.x
• Merge into: master
• Upgrade postgres to sha256:1bf14357b97fe10f21f2eda7f0d230b2514ab5770ab81cb9cd6cce6750d68b26

Update prom/prometheus Docker tag to v2.55.1

• Schedule: ["at any time"]
• Branch name: renovate/prom-prometheus-2.x
• Merge into: master
• Upgrade prom/prometheus to sha256:2659f4c2ebb718e7695cb9b25ffa7d6be64db013daba13e05c875451cf51b0d3

Update python Docker tag

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to 3.14.0
• Upgrade python to 3.14
• Upgrade python to 3.14.0-slim-bookworm
• Upgrade python to 3.14-alpine

Update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: master
• Upgrade actions/checkout to v6

Update actions/setup-python action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: master
• Upgrade actions/setup-python to v6

Update adminer Docker tag to v5

• Schedule: ["at any time"]
• Branch name: renovate/adminer-5.x
• Merge into: master
• Upgrade adminer to 5.4.1

Update dependency attrs to v25

• Schedule: ["at any time"]
• Branch name: renovate/attrs-25.x
• Merge into: master
• Upgrade attrs to ==25.4.0

Update dependency certifi to v2025

• Schedule: ["at any time"]
• Branch name: renovate/certifi-2025.x
• Merge into: master
• Upgrade certifi to ==2025.11.12

Update dependency eslint to v9

• Schedule: ["at any time"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: master
• Upgrade eslint to ^9.0.0

Update dependency puppeteer to v24

• Schedule: ["at any time"]
• Branch name: renovate/major-puppeteer
• Merge into: master
• Upgrade puppeteer to ^24.0.0

Update dependency pydantic to v2.12.4

• Schedule: ["at any time"]
• Branch name: renovate/pydantic-2.x
• Merge into: master
• Upgrade pydantic to <3
• Upgrade pydantic to ==2.12.4

Update dependency SQLAlchemy to v2

• Schedule: ["at any time"]
• Branch name: renovate/sqlalchemy-2.x
• Merge into: master
• Upgrade SQLAlchemy to <2.1

Update dependency yargs to v18

• Schedule: ["at any time"]
• Branch name: renovate/yargs-18.x
• Merge into: master
• Upgrade yargs to ^18.0.0

Update dependency yargs-parser to v22

• Schedule: ["at any time"]
• Branch name: renovate/yargs-parser-22.x-lockfile
• Merge into: master
• Upgrade yargs-parser to 22.0.0

Update Node.js to v20

• Schedule: ["at any time"]
• Branch name: renovate/node-20.x
• Merge into: master
• Upgrade node to 20.15.0-buster-slim

Update postgres Docker tag to v18

• Schedule: ["at any time"]
• Branch name: renovate/postgres-18.x
• Merge into: master
• Upgrade postgres to sha256:154ea39af68ff30dec041cd1f1b5600009993724c811dbadde54126eb10bedd1

Update prom/prometheus Docker tag to v3

• Schedule: ["at any time"]
• Branch name: renovate/prom-prometheus-3.x
• Merge into: master
• Upgrade prom/prometheus to sha256:49214755b6153f90a597adcbff0252cc61069f8ab69ce8411285cd4a560e8038

Update redis Docker tag to v8

• Schedule: ["at any time"]
• Branch name: renovate/redis-8.x
• Merge into: master
• Upgrade redis to sha256:43355efd22490e31ca14b9d569367d05121e2be61fd8e47937563ae2a80952ae

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up pypi package simcore-sdk
• Failed to look up pypi package simcore-service-library

Files affected: services/api-server/setup.py, services/director-v2/setup.py, services/dynamic-sidecar/setup.py, services/storage/setup.py, services/web/server/setup.py

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud