Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Renovate #6

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Configure Renovate #6

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented May 14, 2022

WhiteSource Renovate

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .docker/docker-compose.override.default.yml (docker-compose)
  • .docker/docker-compose.yml (docker-compose)
  • reactjs/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Enable Renovate Dependency Dashboard creation
  • If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
  • Ignore node_modules, bower_components, vendor and various test/tests directories
  • Autodetect whether to pin dependencies or maintain ranges
  • Rate limit PR creation to a maximum of two per hour
  • Limit to maximum 10 open PRs at any time
  • Group known monorepo packages together
  • Use curated list of recommended non-monorepo package groupings
  • Fix some problems with very old Maven commons versions
  • Ignore spring cloud 1.x releases
  • Ignore web3j 5.0.0 release
  • Ignore http4s digest-based 1.x milestones
  • Use node versioning for @types/node
  • Limit concurrent requests to reduce load on Repology servers until we can fix this properly, see issue 10133
  • Do not upgrade from Alpine stable to edge

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.


What to Expect

With your current configuration, Renovate will create 58 Pull Requests:

Update dependency acorn to 5.7.4 [SECURITY]
  • Branch name: renovate/npm-acorn-vulnerability
  • Merge into: master
  • Upgrade acorn to 5.7.4
Update dependency ajv to 6.12.3 [SECURITY]
  • Branch name: renovate/npm-ajv-vulnerability
  • Merge into: master
  • Upgrade ajv to 6.12.3
Update dependency browserslist to 4.16.5 [SECURITY]
  • Branch name: renovate/npm-browserslist-vulnerability
  • Merge into: master
  • Upgrade browserslist to 4.16.5
Update dependency elliptic to 6.5.4 [SECURITY]
  • Branch name: renovate/npm-elliptic-vulnerability
  • Merge into: master
  • Upgrade elliptic to 6.5.4
Update dependency eslint-utils to 1.4.1 [SECURITY]
  • Branch name: renovate/npm-eslint-utils-vulnerability
  • Merge into: master
  • Upgrade eslint-utils to 1.4.1
Update dependency fstream to 1.0.12 [SECURITY]
  • Branch name: renovate/npm-fstream-vulnerability
  • Merge into: master
  • Upgrade fstream to 1.0.12
Update dependency glob-parent to 5.1.2 [SECURITY]
  • Branch name: renovate/npm-glob-parent-vulnerability
  • Merge into: master
  • Upgrade glob-parent to 5.1.2
Update dependency hosted-git-info to 2.8.9 [SECURITY]
  • Branch name: renovate/npm-hosted-git-info-vulnerability
  • Merge into: master
  • Upgrade hosted-git-info to 2.8.9
Update dependency ini to 1.3.6 [SECURITY]
  • Branch name: renovate/npm-ini-vulnerability
  • Merge into: master
  • Upgrade ini to 1.3.6
Update dependency js-yaml to 3.13.1 [SECURITY]
  • Branch name: renovate/npm-js-yaml-vulnerability
  • Merge into: master
  • Upgrade js-yaml to 3.13.1
Update dependency kind-of to 6.0.3 [SECURITY]
  • Branch name: renovate/npm-kind-of-vulnerability
  • Merge into: master
  • Upgrade kind-of to 6.0.3
Update dependency lodash to 4.17.21 [SECURITY]
  • Branch name: renovate/npm-lodash-vulnerability
  • Merge into: master
  • Upgrade lodash to 4.17.21
Update dependency lodash-es to 4.17.20 [SECURITY]
  • Branch name: renovate/npm-lodash-es-vulnerability
  • Merge into: master
  • Upgrade lodash-es to 4.17.20
Update dependency lodash.mergewith to 4.6.2 [SECURITY]
  • Branch name: renovate/npm-lodash.mergewith-vulnerability
  • Merge into: master
  • Upgrade lodash.mergewith to 4.6.2
Update dependency minimist to 1.2.6 [SECURITY]
  • Branch name: renovate/npm-minimist-vulnerability
  • Merge into: master
  • Upgrade minimist to 1.2.6
Update dependency mixin-deep to 1.3.2 [SECURITY]
  • Branch name: renovate/npm-mixin-deep-vulnerability
  • Merge into: master
  • Upgrade mixin-deep to 1.3.2
Update dependency moment to 2.29.2 [SECURITY]
  • Branch name: renovate/npm-moment-vulnerability
  • Merge into: master
  • Upgrade moment to 2.29.2
Update dependency next to 9.3.2 [SECURITY]
  • Branch name: renovate/npm-next-vulnerability
  • Merge into: master
  • Upgrade next to 9.3.2
Update dependency node-sass to 7.0.0 [SECURITY]
  • Branch name: renovate/npm-node-sass-vulnerability
  • Merge into: master
  • Upgrade node-sass to 7.0.0
Update dependency path-parse to 1.0.7 [SECURITY]
  • Branch name: renovate/npm-path-parse-vulnerability
  • Merge into: master
  • Upgrade path-parse to 1.0.7
Update dependency serialize-javascript to 3.1.0 [SECURITY]
  • Branch name: renovate/npm-serialize-javascript-vulnerability
  • Merge into: master
  • Upgrade serialize-javascript to 3.1.0
Update dependency set-value to 2.0.1 [SECURITY]
  • Branch name: renovate/npm-set-value-vulnerability
  • Merge into: master
  • Upgrade set-value to 2.0.1
Update dependency ssri to 6.0.2 [SECURITY]
  • Branch name: renovate/npm-ssri-vulnerability
  • Merge into: master
  • Upgrade ssri to 6.0.2
Update dependency tar to 4.4.18 [SECURITY]
  • Branch name: renovate/npm-tar-vulnerability
  • Merge into: master
  • Upgrade tar to 4.4.18
Update dependency trim-newlines to 3.0.1 [SECURITY]
  • Branch name: renovate/npm-trim-newlines-vulnerability
  • Merge into: master
  • Upgrade trim-newlines to 3.0.1
Update dependency y18n to 4.0.1 [SECURITY]
  • Branch name: renovate/npm-y18n-vulnerability
  • Merge into: master
  • Upgrade y18n to 4.0.1
Update dependency yargs-parser to 5.0.1 [SECURITY]
  • Branch name: renovate/npm-yargs-parser-vulnerability
  • Merge into: master
  • Upgrade yargs-parser to 5.0.1
Pin dependencies
Update dependency compression to v1.7.4
  • Schedule: ["at any time"]
  • Branch name: renovate/compression-1.x
  • Merge into: master
  • Upgrade compression to 1.7.4
Update dependency eslint-config-airbnb to v17.1.1
  • Schedule: ["at any time"]
  • Branch name: renovate/eslint-config-airbnb-17.x
  • Merge into: master
  • Upgrade eslint-config-airbnb to 17.1.1
Update dependency next to v7.0.3
  • Schedule: ["at any time"]
  • Branch name: renovate/nextjs-monorepo
  • Merge into: master
  • Upgrade next to 7.0.3
Update dependency redux-devtools-extension to v2.13.9
  • Schedule: ["at any time"]
  • Branch name: renovate/redux-devtools-extension-2.x
  • Merge into: master
  • Upgrade redux-devtools-extension to 2.13.9
Update dependency babel-eslint to v10.1.0
  • Schedule: ["at any time"]
  • Branch name: renovate/babel-monorepo
  • Merge into: master
  • Upgrade babel-eslint to 10.1.0
Update dependency eslint to v5.16.0
  • Schedule: ["at any time"]
  • Branch name: renovate/eslint-5.x
  • Merge into: master
  • Upgrade eslint to 5.16.0
Update dependency eslint-plugin-import to v2.26.0
  • Schedule: ["at any time"]
  • Branch name: renovate/eslint-plugin-import-2.x
  • Merge into: master
  • Upgrade eslint-plugin-import to 2.26.0
Update dependency eslint-plugin-jsx-a11y to v6.5.1
  • Schedule: ["at any time"]
  • Branch name: renovate/eslint-plugin-jsx-a11y-6.x
  • Merge into: master
  • Upgrade eslint-plugin-jsx-a11y to 6.5.1
Update dependency eslint-plugin-react to v7.29.4
  • Schedule: ["at any time"]
  • Branch name: renovate/eslint-plugin-react-7.x
  • Merge into: master
  • Upgrade eslint-plugin-react to 7.29.4
Update dependency express to v4.18.1
  • Schedule: ["at any time"]
  • Branch name: renovate/express-4.x
  • Merge into: master
  • Upgrade express to 4.18.1
Update dependency node-sass to v4.14.1
  • Schedule: ["at any time"]
  • Branch name: renovate/node-sass-4.x
  • Merge into: master
  • Upgrade node-sass to 4.14.1
Update dependency node-sass-glob-importer to v5.3.2
  • Schedule: ["at any time"]
  • Branch name: renovate/node-sass-glob-importer-5.x
  • Merge into: master
  • Upgrade node-sass-glob-importer to 5.3.2
Update dependency prop-types to v15.8.1
  • Schedule: ["at any time"]
  • Branch name: renovate/prop-types-15.x
  • Merge into: master
  • Upgrade prop-types to 15.8.1
Update dependency react-redux to v5.1.2
  • Schedule: ["at any time"]
  • Branch name: renovate/react-redux-5.x
  • Merge into: master
  • Upgrade react-redux to 5.1.2
Update dependency redux to v4.2.0
  • Schedule: ["at any time"]
  • Branch name: renovate/redux-4.x
  • Merge into: master
  • Upgrade redux to 4.2.0
Update dependency sass-loader to v7.3.1
  • Schedule: ["at any time"]
  • Branch name: renovate/sass-loader-7.x
  • Merge into: master
  • Upgrade sass-loader to 7.3.1
Update dependency webpack to v4.46.0
  • Schedule: ["at any time"]
  • Branch name: renovate/webpack-4.x
  • Merge into: master
  • Upgrade webpack to 4.46.0
Update react monorepo to v16.14.0
  • Schedule: ["at any time"]
  • Branch name: renovate/react-monorepo
  • Merge into: master
  • Upgrade react to 16.14.0
  • Upgrade react-dom to 16.14.0
Update dependency eslint to v8
  • Schedule: ["at any time"]
  • Branch name: renovate/eslint-8.x
  • Merge into: master
  • Upgrade eslint to 8.15.0
Update dependency eslint-config-airbnb to v19
  • Schedule: ["at any time"]
  • Branch name: renovate/eslint-config-airbnb-19.x
  • Merge into: master
  • Upgrade eslint-config-airbnb to 19.0.4
Update dependency next to v12
  • Schedule: ["at any time"]
  • Branch name: renovate/major-nextjs-monorepo
  • Merge into: master
  • Upgrade next to 12.1.6
Update dependency next-redux-saga to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/next-redux-saga-4.x
  • Merge into: master
  • Upgrade next-redux-saga to 4.1.2
Update dependency next-redux-wrapper to v7
  • Schedule: ["at any time"]
  • Branch name: renovate/next-redux-wrapper-7.x
  • Merge into: master
  • Upgrade next-redux-wrapper to 7.0.5
Update dependency node-sass to v7
  • Schedule: ["at any time"]
  • Branch name: renovate/node-sass-7.x
  • Merge into: master
  • Upgrade node-sass to 7.0.1
Update dependency raw-loader to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/raw-loader-4.x
  • Merge into: master
  • Upgrade raw-loader to 4.0.2
Update dependency react-redux to v8
  • Schedule: ["at any time"]
  • Branch name: renovate/react-redux-8.x
  • Merge into: master
  • Upgrade react-redux to 8.0.1
Update dependency redux-saga to v1
  • Schedule: ["at any time"]
  • Branch name: renovate/redux-saga-1.x
  • Merge into: master
  • Upgrade redux-saga to 1.1.3
Update dependency sass-loader to v12
  • Schedule: ["at any time"]
  • Branch name: renovate/sass-loader-12.x
  • Merge into: master
  • Upgrade sass-loader to 12.6.0
Update dependency webpack to v5
  • Schedule: ["at any time"]
  • Branch name: renovate/webpack-5.x
  • Merge into: master
  • Upgrade webpack to 5.72.1
Update react monorepo to v18 (major)
  • Schedule: ["at any time"]
  • Branch name: renovate/major-react-monorepo
  • Merge into: master
  • Upgrade react to 18.1.0
  • Upgrade react-dom to 18.1.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by WhiteSource Renovate. View repository job log here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant