Skip to content

chore: Configure Renovate#5

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/configure
Open

chore: Configure Renovate#5
renovate[bot] wants to merge 1 commit intomainfrom
renovate/configure

Conversation

@renovate
Copy link

@renovate renovate bot commented Mar 1, 2026

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • tools/mock-server/Cargo.toml (cargo)
  • docker-compose.yml (docker-compose)
  • .github/workflows/ci-docs.yaml (github-actions)
  • .github/workflows/ci.yaml (github-actions)
  • .github/workflows/secrets-scanner.yaml (github-actions)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Hopefully safe environment variables to allow users to configure.
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Show only the Age and Confidence Merge Confidence badges for pull requests.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
  • Correctly link to the source code for golang.org/x packages
  • Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 8 Pull Requests:

chore(deps): update rust crate time to v0.3.47 [security]
  • Branch name: renovate/crate-time-vulnerability
  • Merge into: main
  • Upgrade time to 0.3.47
chore(deps): update actions-rust-lang/setup-rust-toolchain action to v1.15.3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-rust-lang-setup-rust-toolchain-1.x
  • Merge into: main
  • Upgrade actions-rust-lang/setup-rust-toolchain to a0b538fa0b742a6aa35d6e2c169b4bd06d225a98
chore(deps): update embarkstudios/cargo-deny-action action to v2.0.15
  • Schedule: ["at any time"]
  • Branch name: renovate/embarkstudios-cargo-deny-action-2.x
  • Merge into: main
  • Upgrade EmbarkStudios/cargo-deny-action to 3fd3802e88374d3fe9159b834c7714ec57d6c979
chore(deps): update rust crate hmac-sha256 to v1.1.14
  • Schedule: ["at any time"]
  • Branch name: renovate/hmac-sha256-1.x-lockfile
  • Merge into: main
  • Upgrade hmac-sha256 to 1.1.14
chore(deps): update actions/checkout action to v4.3.1
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-checkout-4.x
  • Merge into: main
  • Upgrade actions/checkout to 34e114876b0b11c390a56381ad16ebd13914f8d5
chore(deps): update trufflesecurity/trufflehog action to v3.93.6
  • Schedule: ["at any time"]
  • Branch name: renovate/trufflesecurity-trufflehog-3.x
  • Merge into: main
  • Upgrade trufflesecurity/trufflehog to 041f07e9df901a1038a528e5525b0226d04dd5ea
chore(deps): update actions/checkout action
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-checkout-6.x
  • Merge into: main
  • Upgrade actions/checkout to de0fac2e4500dabe0009e67214ff5f5447ce83dd
chore(deps): update postgres docker tag to v18
  • Schedule: ["at any time"]
  • Branch name: renovate/postgres-18.x
  • Merge into: main
  • Upgrade postgres to 18-alpine

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.


Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

  • Failed to look up docker package quay.io/matterlabs_enterprise/webhook-service

Files affected: docker-compose.yml


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants