ci: renovate for dependency management (#1311)

Dam-99 · web-flow · commit b14477f6dd15 · 2026-03-27T16:46:40.000+01:00
Progressive update of dependencies to allow renovate to work effectively.

This commit is necessary because dependency `prom_ex` cannot be upgraded to a
non-major newer version, without upgrading the major version of
`telemetry_metrics` required in our project.

Run `mix deps.update telemetry_metrics prom_ex` to update `mix.lock`, as these
two dependencies are intertwined and the current version of `prom_ex` in our
project requires `~&gt; 0.6`.

Starting from 1.9.0, `ash_graphql` more properly displays paths when an error
occurs in a mutation/query with input, so some tests need to be updated
accordingly.

Removed unused GraphQL pagination on relationships that are not public, thus
not reachable through the API.

Swap dependabot for Mend Renovate.

Init Renovate app by including its configuration file, and by updating CI
workflows to run on pushes to renovate branches.

Signed-off-by: Damiano Mason &lt;damiano.mason@secomind.com&gt;
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
diff --git a/.github/workflows/backend-ci.yaml b/.github/workflows/backend-ci.yaml
@@ -28,6 +28,7 @@ on:
     branches:
       - "main"
       - "release-*"
+      - "renovate/backend-*"
   # Run on pull requests matching apps
   pull_request:
     paths:
diff --git a/.github/workflows/frontend-ci.yaml b/.github/workflows/frontend-ci.yaml
@@ -30,6 +30,7 @@ on:
     branches:
       - "main"
       - "release-*"
+      - "renovate/frontend-*"
   # Run on pull requests matching apps
   pull_request:
     paths:
diff --git a/REUSE.toml b/REUSE.toml
@@ -86,3 +86,9 @@ path = ".github/CODEOWNERS"
 precedence = "aggregate"
 SPDX-FileCopyrightText = "2026 Seco Mind Srl"
 SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "renovate.json"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2026 Seco Mind Srl"
+SPDX-License-Identifier = "Apache-2.0"
diff --git a/backend/lib/edgehog/campaigns/campaign_target/campaign_target.ex b/backend/lib/edgehog/campaigns/campaign_target/campaign_target.ex
@@ -158,10 +158,8 @@ defmodule Edgehog.Campaigns.CampaignTarget do
       filter expr(device.online == true)
 
       filter expr(
-               exists(
-                 device.application_deployments,
-                 release.application_id == ^arg(:application_id)
-               )
+               exists device.application_deployments,
+                      release.application_id == ^arg(:application_id)
              )
     end
 
diff --git a/backend/lib/edgehog/containers/container/container.ex b/backend/lib/edgehog/containers/container/container.ex
@@ -48,7 +48,6 @@ defmodule Edgehog.Containers.Container do
 
     paginate_relationship_with networks: :relay,
                                devices: :relay,
-                               volumes: :relay,
                                releases: :relay,
                                container_volumes: :relay,
                                device_mappings: :relay
diff --git a/backend/lib/edgehog/devices/system_model_part_number.ex b/backend/lib/edgehog/devices/system_model_part_number.ex
@@ -34,8 +34,6 @@ defmodule Edgehog.Devices.SystemModelPartNumber do
         action_types [:create, :update, :destroy]
       end
     end
-
-    paginate_relationship_with devices: :relay
   end
 
   actions do
diff --git a/backend/lib/edgehog/forwarder/session/manual_actions/request_session.ex b/backend/lib/edgehog/forwarder/session/manual_actions/request_session.ex
@@ -1,7 +1,6 @@
-#
 # This file is part of Edgehog.
 #
-# Copyright 2024 SECO Mind Srl
+# Copyright 2024 - 2026 SECO Mind Srl
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -16,13 +15,12 @@
 # limitations under the License.
 #
 # SPDX-License-Identifier: Apache-2.0
-#
 
 defmodule Edgehog.Forwarder.Session.ManualActions.RequestSession do
   @moduledoc false
   use Ash.Resource.Actions.Implementation
 
-  alias Ash.Error.Changes.InvalidArgument
+  alias Ash.Error.Action.InvalidArgument
   alias Edgehog.Devices.Device
   alias Edgehog.Forwarder
 
diff --git a/backend/lib/edgehog/labeling/tag.ex b/backend/lib/edgehog/labeling/tag.ex
@@ -1,7 +1,6 @@
-#
 # This file is part of Edgehog.
 #
-# Copyright 2022 - 2025 SECO Mind Srl
+# Copyright 2022 - 2026 SECO Mind Srl
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -16,7 +15,6 @@
 # limitations under the License.
 #
 # SPDX-License-Identifier: Apache-2.0
-#
 
 defmodule Edgehog.Labeling.Tag do
   @moduledoc false
@@ -36,8 +34,6 @@ defmodule Edgehog.Labeling.Tag do
 
   graphql do
     type :tag
-
-    paginate_relationship_with device_tags: :relay
   end
 
   actions do
@@ -53,7 +49,7 @@ defmodule Edgehog.Labeling.Tag do
 
     read :read_assigned_to_devices do
       description "Returns Tags currently assigned to some device."
-      prepare build(filter: expr(exists(device_tags, true)))
+      prepare build(filter: expr(exists device_tags, true))
 
       pagination do
         required? false
diff --git a/backend/mix.exs b/backend/mix.exs
@@ -86,7 +86,7 @@ defmodule Edgehog.MixProject do
       {:ecto_sql, "~> 3.6"},
       {:postgrex, "~> 0.16"},
       {:swoosh, "~> 1.3"},
-      {:telemetry_metrics, "~> 0.6"},
+      {:telemetry_metrics, "~> 1.0"},
       {:telemetry_poller, "~> 1.0"},
       {:gettext, "~> 1.0"},
       {:jason, "~> 1.2"},
@@ -124,7 +124,7 @@ defmodule Edgehog.MixProject do
       {:credo, "~> 1.6", only: [:dev, :test], runtime: false},
       {:ash, "~> 3.0"},
       {:ash_postgres, "~> 2.0"},
-      {:ash_graphql, "~> 1.0"},
+      {:ash_graphql, "~> 1.9"},
       {:ash_json_api, "~> 1.3"},
       {:igniter, "~> 0.7", only: [:dev, :test]},
       {:picosat_elixir, "~> 0.2"},
diff --git a/backend/mix.lock b/backend/mix.lock
diff --git a/backend/test/edgehog_web/schema/mutation/create_campaign_test.exs b/backend/test/edgehog_web/schema/mutation/create_campaign_test.exs
@@ -345,7 +345,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "baseImageId"],
                fields: [:base_image_id],
                message: "could not be found",
                code: "invalid_attribute"
@@ -361,7 +361,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "channelId"],
                fields: [:channel_id],
                message: "could not be found",
                code: "invalid_attribute"
@@ -385,7 +385,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "name"],
                fields: [:name],
                message: "is required",
                code: "required"
@@ -411,7 +411,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "campaignMechanism"],
                fields: [:campaign_mechanism],
                message: "Campaign mechanism cannot be an empty map",
                code: "invalid_attribute"
@@ -432,10 +432,9 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               # TODO: Ash doesn't report the full nested path
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "campaignMechanism", "maxFailurePercentage"],
                fields: [:max_failure_percentage],
-               message: "must be more than or equal to 0.0",
+               message: "must be greater than or equal to 0.0",
                code: "invalid_attribute"
              } = error
 
@@ -452,8 +451,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               # TODO: Ash doesn't report the full nested path
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "campaignMechanism", "maxFailurePercentage"],
                fields: [:max_failure_percentage],
                message: "must be less than or equal to 100.0",
                code: "invalid_attribute"
@@ -474,10 +472,9 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               # TODO: Ash doesn't report the full nested path
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "campaignMechanism", "maxInProgressOperations"],
                fields: [:max_in_progress_operations],
-               message: "must be more than or equal to 1",
+               message: "must be greater than or equal to 1",
                code: "invalid_attribute"
              } = error
     end
@@ -497,10 +494,9 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               # TODO: Ash doesn't report the full nested path
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "campaignMechanism", "requestRetries"],
                fields: [:request_retries],
-               message: "must be more than or equal to 0",
+               message: "must be greater than or equal to 0",
                code: "invalid_attribute"
              } = error
     end
@@ -520,10 +516,9 @@ defmodule EdgehogWeb.Schema.Mutation.CreateCampaignTest do
         |> extract_error!()
 
       assert %{
-               # TODO: Ash doesn't report the full nested path
-               path: ["createCampaign"],
+               path: ["createCampaign", "input", "campaignMechanism", "requestTimeoutSeconds"],
                fields: [:request_timeout_seconds],
-               message: "must be more than or equal to 30",
+               message: "must be greater than or equal to 30",
                code: "invalid_attribute"
              } = error
     end
diff --git a/backend/test/edgehog_web/schema/mutation/create_channel_test.exs b/backend/test/edgehog_web/schema/mutation/create_channel_test.exs
@@ -1,7 +1,6 @@
-#
 # This file is part of Edgehog.
 #
-# Copyright 2023-2025 SECO Mind Srl
+# Copyright 2023 - 2026 SECO Mind Srl
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -16,7 +15,6 @@
 # limitations under the License.
 #
 # SPDX-License-Identifier: Apache-2.0
-#
 
 defmodule EdgehogWeb.Schema.Mutation.CreateChannelTest do
   use EdgehogWeb.GraphqlCase, async: true
@@ -97,7 +95,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateChannelTest do
         |> extract_error!()
 
       assert %{
-               path: ["createChannel"],
+               path: ["createChannel", "input", "name"],
                fields: [:name],
                message: "is required",
                code: "required"
@@ -113,7 +111,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateChannelTest do
         |> extract_error!()
 
       assert %{
-               path: ["createChannel"],
+               path: ["createChannel", "input", "name"],
                fields: [:name],
                message: "has already been taken",
                code: "invalid_attribute"
@@ -137,7 +135,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateChannelTest do
         |> extract_error!()
 
       assert %{
-               path: ["createChannel"],
+               path: ["createChannel", "input", "handle"],
                fields: [:handle],
                message: "is required",
                code: "required"
@@ -151,7 +149,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateChannelTest do
         |> extract_error!()
 
       assert %{
-               path: ["createChannel"],
+               path: ["createChannel", "input", "handle"],
                fields: [:handle],
                message: "should only contain lower case ASCII letters (from a to z), digits and -",
                code: "invalid_attribute"
@@ -167,7 +165,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateChannelTest do
         |> extract_error!()
 
       assert %{
-               path: ["createChannel"],
+               path: ["createChannel", "input", "handle"],
                fields: [:handle],
                message: "has already been taken",
                code: "invalid_attribute"
@@ -183,7 +181,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateChannelTest do
         |> extract_error!()
 
       assert %{
-               path: ["createChannel"],
+               path: ["createChannel", "input", "targetGroups", "0", "id"],
                fields: [:target_group_ids],
                message: "One or more target groups could not be found",
                code: "not_found"
@@ -207,7 +205,7 @@ defmodule EdgehogWeb.Schema.Mutation.CreateChannelTest do
         |> extract_error!()
 
       assert %{
-               path: ["createChannel"],
+               path: ["createChannel", "input", "targetGroups", "0", "channelId"],
                fields: [:channel_id],
                message: "The channel is already set for the device group " <> name,
                code: "invalid_attribute"
diff --git a/backend/test/edgehog_web/schema/mutation/delete_channel_test.exs b/backend/test/edgehog_web/schema/mutation/delete_channel_test.exs
@@ -60,7 +60,7 @@ defmodule EdgehogWeb.Schema.Mutation.DeleteChannelTest do
       error = [tenant: tenant, id: id] |> delete_channel_mutation() |> extract_error!()
 
       assert %{
-               path: ["deleteChannel"],
+               path: ["deleteChannel", "input", "id"],
                fields: [:id],
                code: "not_found",
                message: "could not be found"
diff --git a/backend/test/edgehog_web/schema/mutation/delete_network_test.exs b/backend/test/edgehog_web/schema/mutation/delete_network_test.exs
@@ -1,7 +1,6 @@
-#
 # This file is part of Edgehog.
 #
-# Copyright 2025 SECO Mind Srl
+# Copyright 2025 - 2026 SECO Mind Srl
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -16,7 +15,6 @@
 # limitations under the License.
 #
 # SPDX-License-Identifier: Apache-2.0
-#
 
 defmodule EdgehogWeb.Schema.Mutation.DeleteNetworkTest do
   @moduledoc false
@@ -62,7 +60,7 @@ defmodule EdgehogWeb.Schema.Mutation.DeleteNetworkTest do
       error = [tenant: tenant, id: id] |> delete_network_mutation() |> extract_error!()
 
       assert %{
-               path: ["deleteNetwork"],
+               path: ["deleteNetwork", "input", "id"],
                fields: [:id],
                code: "not_found",
                message: "could not be found"
diff --git a/backend/test/edgehog_web/schema/mutation/delete_volume_test.exs b/backend/test/edgehog_web/schema/mutation/delete_volume_test.exs
diff --git a/backend/test/edgehog_web/schema/mutation/request_forwarder_session_test.exs b/backend/test/edgehog_web/schema/mutation/request_forwarder_session_test.exs
diff --git a/backend/test/edgehog_web/schema/mutation/update_channel_test.exs b/backend/test/edgehog_web/schema/mutation/update_channel_test.exs
diff --git a/renovate.json b/renovate.json
