Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• deployment/ansible/ibm-cloud/requirements.yml (ansible-galaxy)
• docker-compose.yml (docker-compose)
• .devcontainer/Dockerfile (dockerfile)
• Containerfile (dockerfile)
• Containerfile.lite (dockerfile)
• mcp-servers/go/fast-time-server/Dockerfile (dockerfile)
• .github/workflows/bandit.yml (github-actions)
• .github/workflows/codeql.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/docker-image.yml (github-actions)
• .github/workflows/docker-release.yml (github-actions)
• .github/workflows/ibm-cloud-code-engine.yml (github-actions)
• .github/workflows/lint.yml (github-actions)
• .github/workflows/pytest.yml (github-actions)
• .github/workflows/python-package.yml (github-actions)
• mcp-servers/go/fast-time-server/go.mod (gomod)
• charts/mcp-stack/values.yaml (helm-values)
• mcpgateway/templates/admin.html (html)
• package.json (npm)
• pyproject.toml (pep621)
• docs/requirements.txt (pip_requirements)
• deployment/terraform/ibm-cloud/helm_release.tf (terraform)
• deployment/terraform/ibm-cloud/provider.tf (terraform)
• deployment/terraform/ibm-cloud/versions.tf (terraform)
• deployment/terraform/ibm-cloud/vpc_cluster.tf (terraform)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Schedule daily before 4 AM.
• Run Renovate on following schedule: * 0-3 * * *

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 15 Pull Requests:

Update dependency codemirror to v5.65.19

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/codemirror-5.x
• Merge into: main
• Upgrade codemirror to 5.65.19

Update registry.access.redhat.com/ubi9-minimal Docker tag to v9.6-1752587672

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/registry.access.redhat.com-ubi9-minimal-9.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9-minimal to 9.6-1752587672

Update registry.access.redhat.com/ubi9/ubi Docker tag to v9.6-1752625787

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/registry.access.redhat.com-ubi9-ubi-9.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/ubi to 9.6-1752625787

Update registry.access.redhat.com/ubi9/ubi-micro Docker tag to v9.6-1752500771

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/registry.access.redhat.com-ubi9-ubi-micro-9.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/ubi-micro to 9.6-1752500771

Update aquasecurity/trivy-action action to v0.32.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/aquasecurity-trivy-action-0.x
• Merge into: main
• Upgrade aquasecurity/trivy-action to 0.32.0

Update dependency @​stylistic/eslint-plugin to v5.2.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-stylistic-monorepo
• Merge into: main
• Upgrade @stylistic/eslint-plugin to 5.2.0

Update dependency go to v1.24.5

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.24.5

Update dependency python

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.13
• Upgrade python to 3.12-slim

Update docker/dockerfile Docker tag to v1.17

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/docker-dockerfile-1.x
• Merge into: main
• Upgrade docker/dockerfile to 1.17

Update golang Docker tag to v1.24

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to 1.24

Update dependency codemirror to v6

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/codemirror-6.x
• Merge into: main
• Upgrade codemirror to 6.65.7

Update dependency eslint to v9

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: main
• Upgrade eslint to ^9.0.0

Update dependency eslint-plugin-n to v17

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-plugin-n-17.x
• Merge into: main
• Upgrade eslint-plugin-n to ^17.0.0

Update dependency eslint-plugin-promise to v7

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-plugin-promise-7.x
• Merge into: main
• Upgrade eslint-plugin-promise to ^7.0.0

Update dependency node to v22

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/node-22.x
• Merge into: main
• Upgrade node to 22

🚸 Branch creation will be limited to maximum 1 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up galaxy-collection package ibm.cloudcollection # IBM Cloud wrapper modules
• Failed to look up galaxy-collection package kubernetes.core # k8s + helm modules
• Failed to look up git-tags package helm/k8s
• Failed to look up galaxy-collection package community.general # random-password lookup
• Failed to look up docker package ghcr.io/ibm/mcp-context-forge-chart/mcp-context-forge-chart/mcpgateway

Files affected: deployment/ansible/ibm-cloud/requirements.yml, deployment/terraform/ibm-cloud/helm_release.tf

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.