Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .gitpod.Dockerfile (dockerfile)
• .github/workflows/ci.yml (github-actions)
• pom.xml (maven)
• .mvn/wrapper/maven-wrapper.properties (maven-wrapper)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 19 Pull Requests:

Update dependency junit:junit to v4.13.1 [SECURITY]

• Branch name: renovate/maven-junit-junit-vulnerability
• Merge into: master
• Upgrade junit:junit to 4.13.1

Update dependency org.apache.httpcomponents:httpclient to v4.5.13 [SECURITY]

• Branch name: renovate/maven-org.apache.httpcomponents-httpclient-vulnerability
• Merge into: master
• Upgrade org.apache.httpcomponents:httpclient to 4.5.13

Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.7.1 [SECURITY]

• Branch name: renovate/maven-com.fasterxml.jackson.core-jackson-databind-vulnerability
• Merge into: master
• Upgrade com.fasterxml.jackson.core:jackson-databind to 2.12.7.1

Update dependency org.jacoco:jacoco-maven-plugin to v0.8.11

• Schedule: ["at any time"]
• Branch name: renovate/jacoco.version
• Merge into: master
• Upgrade org.jacoco:jacoco-maven-plugin to 0.8.11

Update dependency org.projectlombok:lombok to v1.18.30

• Schedule: ["at any time"]
• Branch name: renovate/lombok.version
• Merge into: master
• Upgrade org.projectlombok:lombok to 1.18.30

Update dependency com.amashchenko.maven.plugin:gitflow-maven-plugin to v1.20.0

• Schedule: ["at any time"]
• Branch name: renovate/com.amashchenko.maven.plugin-gitflow-maven-plugin-1.x
• Merge into: master
• Upgrade com.amashchenko.maven.plugin:gitflow-maven-plugin to 1.20.0

Update dependency com.fasterxml.jackson.dataformat:jackson-dataformat-xml to v2.16.0

• Schedule: ["at any time"]
• Branch name: renovate/jackson.version
• Merge into: master
• Upgrade com.fasterxml.jackson.dataformat:jackson-dataformat-xml to 2.16.0

Update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.8.2.0

• Schedule: ["at any time"]
• Branch name: renovate/spotbugs.version
• Merge into: master
• Upgrade com.github.spotbugs:spotbugs-maven-plugin to 4.8.2.0

Update dependency maven to v3.9.6

• Schedule: ["at any time"]
• Branch name: renovate/maven-3.x
• Merge into: master
• Upgrade maven to 3.9.6

Update dependency org.apache.maven.plugins:maven-clean-plugin to v3.3.2

• Schedule: ["at any time"]
• Branch name: renovate/maven-clean.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-clean-plugin to 3.3.2

Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.11.0

• Schedule: ["at any time"]
• Branch name: renovate/maven-compiler.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.11.0

Update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.6.1

• Schedule: ["at any time"]
• Branch name: renovate/maven-dependency.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-dependency-plugin to 3.6.1

Update dependency org.apache.maven.plugins:maven-source-plugin to v3.3.0

• Schedule: ["at any time"]
• Branch name: renovate/maven-source.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-source-plugin to 3.3.0

Update dependency org.assertj:assertj-core to v3.24.2

• Schedule: ["at any time"]
• Branch name: renovate/assertj.version
• Merge into: master
• Upgrade org.assertj:assertj-core to 3.24.2

Update dependency pl.project13.maven:git-commit-id-plugin to v4.9.10

• Schedule: ["at any time"]
• Branch name: renovate/git-commit-id.version
• Merge into: master
• Upgrade pl.project13.maven:git-commit-id-plugin to 4.9.10

Update actions/cache action to v3

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-3.x
• Merge into: master
• Upgrade actions/cache to v3

Update actions/checkout action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: master
• Upgrade actions/checkout to v4

Update actions/setup-java action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-4.x
• Merge into: master
• Upgrade actions/setup-java to v4

Update dependency maven-wrapper to v3

• Schedule: ["at any time"]
• Branch name: renovate/maven-wrapper-3.x
• Merge into: master
• Upgrade maven-wrapper to 3.2.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate. View repository job log here.

[sonarcloud]

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud