Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .tool-versions (asdf)
• arc-runner/Dockerfile (dockerfile)
• .github/workflows/deploy-crisiscleanup-site.yml (github-actions)
• package.json (npm)
• packages/charts/crisiscleanup/package.json (npm)
• packages/config/package.json (npm)
• packages/construct/awscdk/cloudfront-url-rewrite/package.json (npm)
• packages/construct/awscdk/github-pipeline/package.json (npm)
• packages/construct/awscdk/pdf-renderer/package.json (npm)
• packages/k8s/construct/api/package.json (npm)
• packages/k8s/construct/component/package.json (npm)
• packages/stacks/api/package.json (npm)
• packages/stacks/maintenance-site/package.json (npm)
• packages/stacks/web/package.json (npm)
• pnpm-workspace.yaml (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 71 Pull Requests:

chore(deps): replace dependency standard-version with commit-and-tag-version ^9

• Schedule: ["at any time"]
• Branch name: renovate/standard-version-replacement
• Merge into: main
• Upgrade standard-version to ^9

chore(deps): update dependency @aws-quickstart/eks-blueprints to v1.17.2

• Schedule: ["at any time"]
• Branch name: renovate/aws-quickstart-eks-blueprints-1.x-lockfile
• Merge into: main
• Upgrade @aws-quickstart/eks-blueprints to 1.17.2

chore(deps): update dependency @​aws/pdk to v0.26.14

• Schedule: ["at any time"]
• Branch name: renovate/aws-pdk-0.x-lockfile
• Merge into: main
• Upgrade @aws/pdk to 0.26.14

chore(deps): update dependency @​types/aws-lambda to v8.10.156

• Schedule: ["at any time"]
• Branch name: renovate/aws-lambda-8.x-lockfile
• Merge into: main
• Upgrade @types/aws-lambda to 8.10.156

chore(deps): update dependency cdk-pipelines-github to v0.4.132

• Schedule: ["at any time"]
• Branch name: renovate/cdk-pipelines-github-0.x-lockfile
• Merge into: main
• Upgrade cdk-pipelines-github to 0.4.132

chore(deps): update dependency debug to v4.4.3

• Schedule: ["at any time"]
• Branch name: renovate/debug-4.x-lockfile
• Merge into: main
• Upgrade debug to 4.4.3

chore(deps): update dependency decamelize to v6.0.1

• Schedule: ["at any time"]
• Branch name: renovate/decamelize-6.x-lockfile
• Merge into: main
• Upgrade decamelize to 6.0.1

chore(deps): update dependency direnv to v2.37.1

• Schedule: ["at any time"]
• Branch name: renovate/direnv-2.x
• Merge into: main
• Upgrade direnv to 2.37.1

chore(deps): update dependency esbuild to v0.25.11

• Schedule: ["at any time"]
• Branch name: renovate/esbuild-0.x-lockfile
• Merge into: main
• Upgrade esbuild to 0.25.11

chore(deps): update dependency eslint-config-prettier to v9.1.2

• Schedule: ["at any time"]
• Branch name: renovate/eslint-config-prettier-9.x-lockfile
• Merge into: main
• Upgrade eslint-config-prettier to 9.1.2

chore(deps): update dependency eslint-plugin-prettier to v5.5.4

• Schedule: ["at any time"]
• Branch name: renovate/eslint-plugin-prettier-5.x-lockfile
• Merge into: main
• Upgrade eslint-plugin-prettier to 5.5.4

chore(deps): update dependency simple-git-hooks to v2.13.1

• Schedule: ["at any time"]
• Branch name: renovate/simple-git-hooks-2.x-lockfile
• Merge into: main
• Upgrade simple-git-hooks to 2.13.1

chore(deps): update dependency typedoc to v0.28.14

• Schedule: ["at any time"]
• Branch name: renovate/typedoc-0.x-lockfile
• Merge into: main
• Upgrade typedoc to 0.28.14

chore(deps): update aws-actions/aws-cloudformation-github-deploy action to v1.3.0

• Schedule: ["at any time"]
• Branch name: renovate/aws-actions-aws-cloudformation-github-deploy-1.x
• Merge into: main
• Upgrade aws-actions/aws-cloudformation-github-deploy to v1.3.0

chore(deps): update dependency @​types/babel__traverse to v7.28.0

• Schedule: ["at any time"]
• Branch name: renovate/babel__traverse-7.x
• Merge into: main
• Upgrade @types/babel__traverse to 7.28.0

chore(deps): update dependency @​types/node to v22.18.10

• Schedule: ["at any time"]
• Branch name: renovate/node-22.x-lockfile
• Merge into: main
• Upgrade @types/node to 22.18.10

chore(deps): update dependency aws-cdk to v2.1030.0

• Schedule: ["at any time"]
• Branch name: renovate/aws-cdk-2.x-lockfile
• Merge into: main
• Upgrade aws-cdk to 2.1030.0

chore(deps): update dependency awscli to v2.31.16

• Schedule: ["at any time"]
• Branch name: renovate/awscli-2.x
• Merge into: main
• Upgrade awscli to 2.31.16

chore(deps): update dependency cdk-nag to v2.37.54

• Schedule: ["at any time"]
• Branch name: renovate/cdk-nag-2.x-lockfile
• Merge into: main
• Upgrade cdk-nag to 2.37.54

chore(deps): update dependency cdk8s to v2.70.21

• Schedule: ["at any time"]
• Branch name: renovate/cdk8s-2.x-lockfile
• Merge into: main
• Upgrade cdk8s to 2.70.21

chore(deps): update dependency cdk8s-cli to v2.202.2

• Schedule: ["at any time"]
• Branch name: renovate/cdk8s-cli-2.x-lockfile
• Merge into: main
• Upgrade cdk8s-cli to 2.202.2

chore(deps): update dependency cdk8s-plus-32 to v2.4.13

• Schedule: ["at any time"]
• Branch name: renovate/cdk8s-plus-32-2.x-lockfile
• Merge into: main
• Upgrade cdk8s-plus-32 to 2.4.13

chore(deps): update dependency eslint to v8.57.1

• Schedule: ["at any time"]
• Branch name: renovate/eslint-monorepo
• Merge into: main
• Upgrade eslint to 8.57.1

chore(deps): update dependency helm to v3.19.0

• Schedule: ["at any time"]
• Branch name: renovate/helm-3.x
• Merge into: main
• Upgrade helm to 3.19.0

chore(deps): update dependency jsii to v5.9.8

• Schedule: ["at any time"]
• Branch name: renovate/jsii-5.x-lockfile
• Merge into: main
• Upgrade jsii to 5.9.8

chore(deps): update dependency jsii-diff to v1.116.0

• Schedule: ["at any time"]
• Branch name: renovate/jsii-diff-1.x-lockfile
• Merge into: main
• Upgrade jsii-diff to 1.116.0

chore(deps): update dependency jsii-pacmak to v1.116.0

• Schedule: ["at any time"]
• Branch name: renovate/jsii-pacmak-1.x-lockfile
• Merge into: main
• Upgrade jsii-pacmak to 1.116.0

chore(deps): update dependency jsii-rosetta to v5.9.9

• Schedule: ["at any time"]
• Branch name: renovate/jsii-rosetta-5.x-lockfile
• Merge into: main
• Upgrade jsii-rosetta to 5.9.9

chore(deps): update dependency kind to v0.30.0

• Schedule: ["at any time"]
• Branch name: renovate/kind-0.x
• Merge into: main
• Upgrade kind to 0.30.0

chore(deps): update dependency kubectl to v1.34.1

• Schedule: ["at any time"]
• Branch name: renovate/kubectl-1.x
• Merge into: main
• Upgrade kubectl to 1.34.1

chore(deps): update dependency lint-staged to v16.2.4

• Schedule: ["at any time"]
• Branch name: renovate/lint-staged-16.x-lockfile
• Merge into: main
• Upgrade lint-staged to 16.2.4

chore(deps): update dependency node to v22.20.0

• Schedule: ["at any time"]
• Branch name: renovate/node-22.x
• Merge into: main
• Upgrade node to 22.20.0
• Upgrade node to 22.20.0

chore(deps): update dependency nx to v16.10.0

• Schedule: ["at any time"]
• Branch name: renovate/nx-monorepo
• Merge into: main
• Upgrade nx to 16.10.0

chore(deps): update dependency projen to v0.98.1

• Schedule: ["at any time"]
• Branch name: renovate/projen-0.x
• Merge into: main
• Upgrade projen to 0.98.1

chore(deps): update dependency sops to v3.11.0

• Schedule: ["at any time"]
• Branch name: renovate/sops-3.x
• Merge into: main
• Upgrade sops to 3.11.0

chore(deps): update dependency typescript to ~5.9.0

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x
• Merge into: main
• Upgrade typescript to ~5.9.0

chore(deps): update dependency unbuild to v3.6.1

• Schedule: ["at any time"]
• Branch name: renovate/unbuild-3.x-lockfile
• Merge into: main
• Upgrade unbuild to 3.6.1

chore(deps): update pnpm to v10.18.3

• Schedule: ["at any time"]
• Branch name: renovate/pnpm-10.x
• Merge into: main
• Upgrade pnpm to 10.18.3

fix(deps): update dependency aws-cdk-lib to v2.220.0

• Schedule: ["at any time"]
• Branch name: renovate/aws-cdk-monorepo
• Merge into: main
• Upgrade aws-cdk-lib to ^2.192.0
• Upgrade aws-cdk-lib to 2.220.0

fix(deps): update dependency cdk8s to v2.70.21

• Schedule: ["at any time"]
• Branch name: renovate/cdk8s-2.x
• Merge into: main
• Upgrade cdk8s to 2.70.21

fix(deps): update dependency cdk8s-plus-32 to v2.4.13

• Schedule: ["at any time"]
• Branch name: renovate/cdk8s-plus-32-2.x
• Merge into: main
• Upgrade cdk8s-plus-32 to 2.4.13

fix(deps): update dependency puppeteer-core to v19.11.1

• Schedule: ["at any time"]
• Branch name: renovate/puppeteer
• Merge into: main
• Upgrade puppeteer-core to 19.11.1

chore(deps): update actions/checkout action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-5.x
• Merge into: main
• Upgrade actions/checkout to v5

chore(deps): update actions/setup-node action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-6.x
• Merge into: main
• Upgrade actions/setup-node to v6

chore(deps): update azure/setup-helm action to v4

• Schedule: ["at any time"]
• Branch name: renovate/azure-setup-helm-4.x
• Merge into: main
• Upgrade azure/setup-helm to v4

chore(deps): update dependency @​sparticuz/chromium-min to v141

• Schedule: ["at any time"]
• Branch name: renovate/sparticuz-chromium-min-141.x
• Merge into: main
• Upgrade @sparticuz/chromium-min to 141.0.0

chore(deps): update dependency bcrypt to v3

• Schedule: ["at any time"]
• Branch name: renovate/bcrypt-3.x
• Merge into: main
• Upgrade bcrypt to ^3.0.0

chore(deps): update dependency eslint to v9

• Schedule: ["at any time"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: main
• Upgrade eslint to ^9.0.0

chore(deps): update dependency eslint-config-prettier to v10

• Schedule: ["at any time"]
• Branch name: renovate/eslint-config-prettier-10.x
• Merge into: main
• Upgrade eslint-config-prettier to ^10.0.0

chore(deps): update dependency eslint-import-resolver-typescript to v4

• Schedule: ["at any time"]
• Branch name: renovate/eslint-import-resolver-typescript-4.x
• Merge into: main
• Upgrade eslint-import-resolver-typescript to ^4.0.0

chore(deps): update dependency jsii-docgen to v10

• Schedule: ["at any time"]
• Branch name: renovate/jsii-docgen-10.x
• Merge into: main
• Upgrade jsii-docgen to ^10.0.0

chore(deps): update dependency npm-check-updates to v19

• Schedule: ["at any time"]
• Branch name: renovate/npm-check-updates-19.x
• Merge into: main
• Upgrade npm-check-updates to ^19.0.0

chore(deps): update dependency nx to v21

• Schedule: ["at any time"]
• Branch name: renovate/major-nx-monorepo
• Merge into: main
• Upgrade nx to ^16 || ^21.0.0
• Upgrade nx to 21.6.5

chore(deps): update dependency nx-cloud to v19

• Schedule: ["at any time"]
• Branch name: renovate/nx-cloud-19.x
• Merge into: main
• Upgrade nx-cloud to ^19.0.0

chore(deps): update dependency rimraf to v6

• Schedule: ["at any time"]
• Branch name: renovate/rimraf-6.x
• Merge into: main
• Upgrade rimraf to ^6.0.0

chore(deps): update dependency supports-color to v10

• Schedule: ["at any time"]
• Branch name: renovate/supports-color-10.x
• Merge into: main
• Upgrade supports-color to ^10.0.0

chore(deps): update dependency syncpack to v13

• Schedule: ["at any time"]
• Branch name: renovate/syncpack-13.x
• Merge into: main
• Upgrade syncpack to ^13.0.0

chore(deps): update dependency tsx to v4

• Schedule: ["at any time"]
• Branch name: renovate/tsx-4.x
• Merge into: main
• Upgrade tsx to ^4.0.0

chore(deps): update dependency vitest to v3

• Schedule: ["at any time"]
• Branch name: renovate/major-vitest-monorepo
• Merge into: main
• Upgrade vitest to ^3.0.0

chore(deps): update dependency wrap-ansi to v9

• Schedule: ["at any time"]
• Branch name: renovate/wrap-ansi-9.x
• Merge into: main
• Upgrade wrap-ansi to ^9.0.0

chore(deps): update dependency zx to v8

• Schedule: ["at any time"]
• Branch name: renovate/zx-8.x
• Merge into: main
• Upgrade zx to ^8.0.0

chore(deps): update mcr.microsoft.com/dotnet/runtime-deps docker tag to v8

• Schedule: ["at any time"]
• Branch name: renovate/major-dotnet-monorepo
• Merge into: main
• Upgrade mcr.microsoft.com/dotnet/runtime-deps to 8.0-jammy

chore(deps): update typescript-eslint monorepo to v8 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-typescript-eslint-monorepo
• Merge into: main
• Upgrade @typescript-eslint/eslint-plugin to ^8.0.0
• Upgrade @typescript-eslint/parser to ^8.0.0

fix(deps): update dependency @​antfu/utils to v9

• Schedule: ["at any time"]
• Branch name: renovate/antfu-utils-9.x
• Merge into: main
• Upgrade @antfu/utils to ^9.0.0

fix(deps): update dependency c12 to v3

• Schedule: ["at any time"]
• Branch name: renovate/c12-3.x
• Merge into: main
• Upgrade c12 to ^3.0.0

fix(deps): update dependency cdk-ec2-key-pair to v4

• Schedule: ["at any time"]
• Branch name: renovate/cdk-ec2-key-pair-4.x
• Merge into: main
• Upgrade cdk-ec2-key-pair to ^4.0.0

fix(deps): update dependency cdk-sops-secrets to v2

• Schedule: ["at any time"]
• Branch name: renovate/cdk-sops-secrets-2.x
• Merge into: main
• Upgrade cdk-sops-secrets to ^2.0.0

fix(deps): update dependency flat to v6

• Schedule: ["at any time"]
• Branch name: renovate/flat-6.x
• Merge into: main
• Upgrade flat to ^6.0.0

fix(deps): update dependency puppeteer-core to v24

• Schedule: ["at any time"]
• Branch name: renovate/major-puppeteer
• Merge into: main
• Upgrade puppeteer-core to 24.25.0

fix(deps): update dependency type-fest to v5

• Schedule: ["at any time"]
• Branch name: renovate/type-fest-5.x
• Merge into: main
• Upgrade type-fest to ^5.0.0

fix(deps): update dependency zod to v4

• Schedule: ["at any time"]
• Branch name: renovate/zod-4.x
• Merge into: main
• Upgrade zod to ^4.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[nx-cloud]

☁️ Nx Cloud Report

CI is running/has finished running commands for commit e537e80. As they complete they will appear below. Click to see the status, the terminal output, and the build insights.

📂 See all runs for this branch

---

✅ Successfully ran 1 target

• nx run-many --target=build --output-style=stream --nx-bail

---

Sent with 💌 from NxCloud.

[nx-cloud]

☁️ Nx Cloud Report

CI is running/has finished running commands for commit cee0a97. As they complete they will appear below. Click to see the status, the terminal output, and the build insights.

📂 See all runs for this CI Pipeline Execution

---

✅ Successfully ran 1 target

• nx run-many --target=build --output-style=stream --nx-bail

---

Sent with 💌 from NxCloud.