Configure Renovate

[renovate-bot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this Configure Renovate PR is merged
• Separate major versions of dependencies into individual branches/PRs
• Do not separate patch and minor upgrades into separate PRs for the same dependency
• Upgrade to unstable versions only if the existing version is unstable
• Raise PRs immediately (after branch is created)
• Use renovate/ as prefix for all branch names
• If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
• Keep existing branches updated even when not scheduled
• Disable automerging feature - wait for humans to merge all PRs
• Ignore node_modules, bower_components, vendor and various test/tests directories
• Update existing lock files only when package.json is modified
• Autodetect whether to pin dependencies or maintain ranges
• Rate limit PR creation to a maximum of two per hour
• Limit to maximum 20 open PRs at any time
• Group known monorepo packages together
• Use curated list of recommended non-monorepo package groupings

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.

---

You have configured Renovate to use branch master as base branch.

What to Expect

With your current configuration, Renovate will create 8 Pull Requests:

chore(deps): pin dependencies

• Schedule: "at any time"
• Branch name: renovate/pin-dependencies
• Merge into: master
• Pin @types/body-parser to 1.17.0
• Pin @types/express to 4.17.0
• Pin @types/minimist to 1.2.0
• Pin @types/mocha to 5.2.7
• Pin @types/node to 11.13.13
• Pin @types/on-finished to 2.3.1
• Pin @types/supertest to 2.0.8
• Pin gts to 1.0.0
• Pin mocha to 6.1.4
• Pin power-assert to 1.6.1
• Pin supertest to 3.4.2
• Pin typescript to 3.5.1

chore(deps): update dependency @​types/body-parser to v1.17.1

• Schedule: "at any time"
• Branch name: renovate/body-parser-1.x
• Merge into: master
• Upgrade @types/body-parser to 1.17.1

chore(deps): update dependency @​types/express to v4.17.1

• Schedule: "at any time"
• Branch name: renovate/express-4.x
• Merge into: master
• Upgrade @types/express to 4.17.1

chore(deps): update dependency @​types/node to v11.13.19

• Schedule: "at any time"
• Branch name: renovate/node-11.x
• Merge into: master
• Upgrade @types/node to 11.13.19

chore(deps): update dependency gts to v1.1.0

• Schedule: "at any time"
• Branch name: renovate/gts-1.x
• Merge into: master
• Upgrade gts to 1.1.0

chore(deps): update dependency mocha to v6.2.0

• Schedule: "at any time"
• Branch name: renovate/mocha-6.x
• Merge into: master
• Upgrade mocha to 6.2.0

chore(deps): update dependency typescript to v3.5.3

• Schedule: "at any time"
• Branch name: renovate/typescript-3.x
• Merge into: master
• Upgrade typescript to 3.5.3

chore(deps): update dependency supertest to v4

• Schedule: "at any time"
• Branch name: renovate/supertest-4.x
• Merge into: master
• Upgrade supertest to 4.0.2

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot. View repository job log here.

[grant]

After 1 month without any comments or modification to this PR, I'm going to close it.
I think it would be painful to have 8 new PRs that change dependency versions. We can use GitHub vulnerable dependency detection feature to bump dependencies if they're needed, and we can update deps ad-hoc.

[forking-renovate]

Renovate is disabled

Renovate is disabled due to lack of config. If you wish to reenable it, you can either (a) commit a config file to your base branch, or (b) rename this closed PR to trigger a replacement onboarding PR.