Direct Renovate to ignore MySQL and RabbitMQ packages

[cneill]

Description

Since we have deprecated MySQL and RabbitMQ as of v2.36.0, this PR will remove them from the list of packages for which Renovate will open PRs for every version bump (as seen with e.g. #10502 #10510). This is part of our gradual removal of these packages now that they are no longer supported.

This PR should be reverted once these packages are totally removed.

Test results

N/A

Documentation

N/A

[dryrunsecurity]

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Configured Codepaths Analyzer	✅	0 findings
IDOR Analyzer	✅	0 findings
Sensitive Files Analyzer	✅	0 findings
Server-Side Request Forgery Analyzer	✅	0 findings
SQL Injection Analyzer	✅	0 findings
Authn/Authz Analyzer	✅	0 findings
Secrets Analyzer	✅	0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective.

Summary:

The provided code change is related to the configuration of the Renovate bot, which is a tool used for automatically managing dependencies in software projects. The changes made in this pull request include ignoring specific dependencies, such as mysql and rabbitmq, as well as expanding the list of file paths that should be ignored by the Renovate bot.

From an application security perspective, the changes in this pull request do not appear to introduce any obvious security concerns. However, it's important to carefully consider the decision to ignore specific dependencies or file paths, as it could potentially lead to security vulnerabilities if important updates are missed. The ignored dependencies, mysql and rabbitmq, are common software components, and it's essential to ensure that they are kept up-to-date and secure. Additionally, the Dockerfile** pattern in the ignorePaths section could potentially hide changes to Docker-related files, which could be relevant from a security perspective.

Files Changed:

• .github/renovate.json: This file contains the configuration for the Renovate bot. The changes made in this pull request include:
  1. Adding mysql and rabbitmq to the ignoreDeps section, which means that updates to these dependencies will not be automatically proposed by the Renovate bot.
  2. Expanding the ignorePaths section to include additional file paths, such as requirements.txt, various package.json and yarn.lock files, and any Dockerfile files.

Powered by DryRun Security

[mtesauro]

Approved

[cneill]

Closing to change the base branch...