Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/ci.yml (github-actions)
• Pipfile (pipenv)
• .python-version (pyenv)
• renovate.json (renovate-config-presets)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for development dependencies.
• Schedule during typical non-office hours on weekdays (i.e., 10 PM - 5 AM) and anytime on weekends.
• Run Renovate on following schedule: * 0-4,22-23 * * 1-5,* * * * 0,6

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

It looks like your repository dependencies are already up-to-date and no Pull Requests will be necessary right away.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

Pull Request Test Coverage Report for Build 15879290254

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 50.485%

---

Totals
Change from base Build 15712668272:	0.0%
Covered Lines:	156
Relevant Lines:	309

---

💛 - Coveralls

[ghukill]

Excellent - assuming this works, feels like the right configuration.

[ehanson8]

Looks good but I would run make update to resolve that urllib3 2.4.0 vulnerability, we don't usually let those slide in CI

[cabutlermit]

Looks good but I would run make update to resolve that urllib3 2.4.0 vulnerability, we don't usually let those slide in CI

Looks good but I would run make update to resolve that urllib3 2.4.0 vulnerability, we don't usually let those slide in CI

I'm going to leave that in place for now since I'm curious how Renovate will pick it up. I'm also likely to change this config again in the next day or two as I continue to read the docs... 😁

[ehanson8]

I'm going to leave that in place for now since I'm curious how Renovate will pick it up. I'm also likely to change this config again in the next day or two as I continue to read the docs... 😁

Fair point!