Skip to content

Configure Renovate#979

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/configure
Open

Configure Renovate#979
renovate[bot] wants to merge 1 commit intomainfrom
renovate/configure

Conversation

@renovate
Copy link

@renovate renovate bot commented Nov 17, 2025

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • e2e/Dockerfile (dockerfile)
  • template-only-app/Dockerfile (dockerfile)
  • .github/actions/build-release-image/action.yml (github-actions)
  • .github/actions/configure-aws-credentials/action.yml (github-actions)
  • .github/actions/setup-terraform/action.yml (github-actions)
  • .github/workflows/build-and-publish.yml (github-actions)
  • .github/workflows/check-ci-cd-auth.yml (github-actions)
  • .github/workflows/check-infra-deploy-status.yml (github-actions)
  • .github/workflows/ci-docs.yml (github-actions)
  • .github/workflows/ci-e2e-static-checks.yml (github-actions)
  • .github/workflows/ci-infra.yml (github-actions)
  • .github/workflows/database-migrations.yml (github-actions)
  • .github/workflows/deploy.yml (github-actions)
  • .github/workflows/e2e-tests.yml (github-actions)
  • .github/workflows/pr-environment-checks.yml (github-actions)
  • .github/workflows/pr-environment-destroy.yml (github-actions)
  • .github/workflows/scan-orphaned-environments.yml (github-actions)
  • .github/workflows/send-system-notification.yml (github-actions)
  • .github/workflows/template-only-cd.yml (github-actions)
  • .github/workflows/template-only-ci-app.yml (github-actions)
  • .github/workflows/template-only-ci-infra.yml (github-actions)
  • .github/workflows/template-only-cleanup-orphaned-infra-test-resources.yml (github-actions)
  • .github/workflows/template-only-scan-orphaned-infra-test-resources.yml (github-actions)
  • .github/workflows/vulnerability-scans.yml (github-actions)
  • template-only-test/go.mod (gomod)
  • e2e/package.json (npm)
  • infra/modules/database/resources/role_manager/requirements.txt (pip_requirements)
  • template-only-app/requirements.txt (pip_requirements)
  • infra/accounts/main.tf (terraform)
  • infra/modules/database/data/main.tf (terraform)
  • infra/modules/database/resources/main.tf (terraform)
  • infra/modules/database/resources/networking.tf (terraform)
  • infra/modules/document-data-extraction/resources/providers.tf (terraform)
  • infra/modules/domain/resources/main.tf (terraform)
  • infra/modules/network/data/main.tf (terraform)
  • infra/modules/network/resources/main.tf (terraform)
  • infra/modules/service/networking.tf (terraform)
  • infra/modules/storage/providers.tf (terraform)
  • infra/{{app_name}}/app-config/dev.tf (terraform)
  • infra/{{app_name}}/app-config/env-config/main.tf (terraform)
  • infra/{{app_name}}/app-config/main.tf (terraform)
  • infra/{{app_name}}/app-config/prod.tf (terraform)
  • infra/{{app_name}}/app-config/staging.tf (terraform)
  • infra/{{app_name}}/build-repository/main.tf (terraform)
  • infra/{{app_name}}/database/main.tf (terraform)
  • infra/{{app_name}}/database/network.tf (terraform)
  • infra/{{app_name}}/service/database.tf (terraform)
  • infra/{{app_name}}/service/document_data_extraction.tf (terraform)
  • infra/{{app_name}}/service/domain.tf (terraform)
  • infra/{{app_name}}/service/feature_flags.tf (terraform)
  • infra/{{app_name}}/service/identity_provider.tf (terraform)
  • infra/{{app_name}}/service/main.tf (terraform)
  • infra/{{app_name}}/service/monitoring.tf (terraform)
  • infra/{{app_name}}/service/notifications.tf (terraform)
  • infra/{{app_name}}/service/secrets.tf (terraform)
  • infra/{{app_name}}/service/storage.tf (terraform)
  • .terraform-version (terraform-version)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Hopefully safe environment variables to allow users to configure.
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Show only the Age and Confidence Merge Confidence badges for pull requests.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
  • Correctly link to the source code for golang.org/x packages
  • Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 31 Pull Requests:

Update python:3-alpine Docker digest to faee120
  • Schedule: ["at any time"]
  • Branch name: renovate/python-3-alpine
  • Merge into: main
  • Upgrade python to sha256:faee120f7885a06fcc9677922331391fa690d911c020abb9e8025ff3d908e510
Update aquasecurity/tfsec-pr-commenter-action action to v1.3.1
Update bridgecrewio/checkov-action action to v12.3086.0
  • Schedule: ["at any time"]
  • Branch name: renovate/bridgecrewio-checkov-action-12.x
  • Merge into: main
  • Upgrade bridgecrewio/checkov-action to v12.3086.0
Update dependency @axe-core/playwright to v4.11.1
  • Schedule: ["at any time"]
  • Branch name: renovate/axe-core-playwright-4.x-lockfile
  • Merge into: main
  • Upgrade @axe-core/playwright to 4.11.1
Update dependency @​playwright/test to v1.58.2
  • Schedule: ["at any time"]
  • Branch name: renovate/playwright-monorepo
  • Merge into: main
  • Upgrade @playwright/test to 1.58.2
Update dependency @​types/node to v22.19.13
  • Schedule: ["at any time"]
  • Branch name: renovate/node-22.x-lockfile
  • Merge into: main
  • Upgrade @types/node to 22.19.13
Update dependency hashicorp/terraform to v1.14.6
Update dependency prettier to v3.8.1
  • Schedule: ["at any time"]
  • Branch name: renovate/prettier-3.x-lockfile
  • Merge into: main
  • Upgrade prettier to 3.8.1
Update dependency python to 3.14
  • Schedule: ["at any time"]
  • Branch name: renovate/python-3.x
  • Merge into: main
  • Upgrade python to 3.14
Update dependency typescript to v5.9.3
  • Schedule: ["at any time"]
  • Branch name: renovate/typescript-5.x-lockfile
  • Merge into: main
  • Upgrade typescript to 5.9.3
Update erzz/dockle-action action to v1.4.0
  • Schedule: ["at any time"]
  • Branch name: renovate/erzz-dockle-action-1.x
  • Merge into: main
  • Upgrade erzz/dockle-action to v1.4.0
Update hadolint/hadolint-action action to v3.3.0
  • Schedule: ["at any time"]
  • Branch name: renovate/hadolint-hadolint-action-3.x
  • Merge into: main
  • Upgrade hadolint/hadolint-action to v3.3.0
Update mcr.microsoft.com/playwright Docker tag to v1.58.2
  • Schedule: ["at any time"]
  • Branch name: renovate/mcr.microsoft.com-playwright-1.x
  • Merge into: main
  • Upgrade mcr.microsoft.com/playwright to v1.58.2-noble
Update module github.com/gruntwork-io/terratest to v0.56.0
Update module github.com/stretchr/testify to v1.11.1
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-stretchr-testify-1.x
  • Merge into: main
  • Upgrade github.com/stretchr/testify to v1.11.1
Update slackapi/slack-github-action action to v2.1.1
  • Schedule: ["at any time"]
  • Branch name: renovate/slackapi-slack-github-action-2.x
  • Merge into: main
  • Upgrade slackapi/slack-github-action to v2.1.1
Update Terraform aws to ~> 4.67.0
  • Schedule: ["at any time"]
  • Branch name: renovate/aws-4.x
  • Merge into: main
  • Upgrade aws to ~> 4.67.0
Update Terraform aws to ~> 5.100.0
  • Schedule: ["at any time"]
  • Branch name: renovate/aws-5.x
  • Merge into: main
  • Upgrade aws to ~> 5.100.0
Update Terraform terraform-aws-modules/vpc/aws to v5.21.0
  • Schedule: ["at any time"]
  • Branch name: renovate/terraform-aws-modules-vpc-aws-5.x
  • Merge into: main
  • Upgrade terraform-aws-modules/vpc/aws to 5.21.0
Update actions/cache action to v5
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-cache-5.x
  • Merge into: main
  • Upgrade actions/cache to v5
Update actions/checkout action to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-checkout-6.x
  • Merge into: main
  • Upgrade actions/checkout to v6
Update actions/setup-go action to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-setup-go-6.x
  • Merge into: main
  • Upgrade actions/setup-go to v6
Update actions/setup-node action to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-setup-node-6.x
  • Merge into: main
  • Upgrade actions/setup-node to v6
Update actions/setup-python action to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-setup-python-6.x
  • Merge into: main
  • Upgrade actions/setup-python to v6
Update anchore/scan-action action to v7
  • Schedule: ["at any time"]
  • Branch name: renovate/anchore-scan-action-7.x
  • Merge into: main
  • Upgrade anchore/scan-action to v7
Update aws-actions/configure-aws-credentials action to v6
Update dependency @​types/node to v24
  • Schedule: ["at any time"]
  • Branch name: renovate/node-24.x
  • Merge into: main
  • Upgrade @types/node to ^24.0.0
Update GitHub Artifact Actions (major)
Update hashicorp/setup-terraform action to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/hashicorp-setup-terraform-4.x
  • Merge into: main
  • Upgrade hashicorp/setup-terraform to v4
Update Terraform aws to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/aws-6.x
  • Merge into: main
  • Upgrade aws to < 7.0.0
  • Upgrade aws to ~> 6.34.0
Update Terraform terraform-aws-modules/vpc/aws to v6
  • Schedule: ["at any time"]
  • Branch name: renovate/terraform-aws-modules-vpc-aws-6.x
  • Merge into: main
  • Upgrade terraform-aws-modules/vpc/aws to 6.6.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner November 17, 2025 22:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants