chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/actions/create-venv-for-tests/action.yml (github-actions)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/copilot-setup-steps.yml (github-actions)
• .github/workflows/deps.yml (github-actions)
• api/package.json (npm)
• build/eslint-rules/package.json (npm)
• package.json (npm)
• src/test/vscode-notebook-perf/package.json (npm)
• .nvmrc (nvm)
• src/test/vscode-notebook-perf/.nvmrc (nvm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 55 Pull Requests:

chore(deps): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/github-actions
• Merge into: main
• Upgrade actions/cache to 0057852bfaa89a56745cba8c7296529d2fc39830
• Upgrade actions/checkout to 08c6903cd8c0fde910a37f88322edcfb5dd907a8
• Upgrade actions/checkout to ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
• Upgrade actions/setup-node to a0853c24544627f65ddf259abe73b1d18a591444
• Upgrade actions/upload-artifact to ea165f8d65b6e75b540449e92b4886f43607fa02
• Upgrade astral-sh/setup-uv to 3259c6206f993105e3a61b142c2d97bf4b9ef83d
• Upgrade astral-sh/setup-uv to d0cc045d04ccac9d8b7881df0226f9e82c39688e
• Upgrade codecov/codecov-action to 5a1091511ad55cbe89839c7260b706298ca349f7
• Upgrade codecov/test-results-action to 47f89e9acb64b76debcd5ea40642d25a4adced9f
• Upgrade qltysh/qlty-action to a19242102d17e497f437d7466aa01b528537e899

chore(deps): update definitelytyped

• Schedule: ["every weekend"]
• Branch name: renovate/definitelytyped
• Merge into: main
• Upgrade @types/chai to 4.3.20
• Upgrade @types/chai-arrays to 2.0.3
• Upgrade @types/chai-as-promised to 7.1.8
• Upgrade @types/cors to 2.8.19
• Upgrade @types/debug to 4.1.12
• Upgrade @types/dedent to 0.7.2
• Upgrade @​types/del to 4.0.3
• Upgrade @types/format-util to 1.0.4
• Upgrade @​types/glob to 5.0.38
• Upgrade @types/json2csv to 5.0.7
• Upgrade @types/loadable__component to 5.13.10
• Upgrade @types/lodash to 4.17.20
• Upgrade @types/node to 18.19.130
• Upgrade @types/node to 22.18.10
• Upgrade @types/node-fetch to 2.6.13
• Upgrade @types/pdfkit to ^0.17.0
• Upgrade @types/promisify-node to 0.4.3
• Upgrade @types/react-dom to 16.9.25
• Upgrade @​types/react-json-tree to ^0.13.0
• Upgrade @types/react-redux to 7.1.34
• Upgrade @types/react-virtualized to 9.22.3
• Upgrade @types/redux-logger to 3.0.13
• Upgrade @types/sinon to 10.0.20
• Upgrade @types/stack-trace to 0.0.33
• Upgrade @types/strip-comments to 2.0.4
• Upgrade @types/svg-to-pdfkit to 0.1.3
• Upgrade @types/tcp-port-used to 1.0.4
• Upgrade @types/temp to ^0.9.0
• Upgrade @types/tmp to 0.2.6
• Upgrade @types/url-parse to 1.4.11
• Upgrade @​types/uuid to 3.4.13
• Upgrade @types/vscode to 1.105.0
• Upgrade @types/vscode-notebook-renderer to 1.72.4

chore(deps): update dependency @jupyter-widgets/base to v6.0.11

• Schedule: ["at any time"]
• Branch name: renovate/jupyter-widgets-base-6.x-lockfile
• Merge into: main
• Upgrade @jupyter-widgets/base to 6.0.11

chore(deps): update dependency @jupyter-widgets/controls to v5.0.12

• Schedule: ["at any time"]
• Branch name: renovate/jupyter-widgets-controls-5.x-lockfile
• Merge into: main
• Upgrade @jupyter-widgets/controls to 5.0.12

chore(deps): update dependency @jupyter-widgets/schema to v0.5.6

• Schedule: ["at any time"]
• Branch name: renovate/jupyter-widgets-schema-0.x-lockfile
• Merge into: main
• Upgrade @jupyter-widgets/schema to 0.5.6

chore(deps): update dependency @​vscode/python-extension to v1.0.6

• Schedule: ["at any time"]
• Branch name: renovate/vscode-python-extension-1.x-lockfile
• Merge into: main
• Upgrade @vscode/python-extension to 1.0.6

chore(deps): update dependency bootstrap to v5.3.8

• Schedule: ["at any time"]
• Branch name: renovate/bootstrap-5.x-lockfile
• Merge into: main
• Upgrade bootstrap to 5.3.8

chore(deps): update dependency glob to v7.2.3

• Schedule: ["at any time"]
• Branch name: renovate/glob-7.x-lockfile
• Merge into: main
• Upgrade glob to 7.2.3

chore(deps): update dependency json5 to v2.2.3

• Schedule: ["at any time"]
• Branch name: renovate/json5-2.x
• Merge into: main
• Upgrade json5 to 2.2.3

chore(deps): update dependency portfinder to v1.0.38

• Schedule: ["at any time"]
• Branch name: renovate/portfinder-1.x-lockfile
• Merge into: main
• Upgrade portfinder to 1.0.38

chore(deps): update dependency react-redux to v7.2.9

• Schedule: ["at any time"]
• Branch name: renovate/react-redux-7.x-lockfile
• Merge into: main
• Upgrade react-redux to 7.2.9

chore(deps): update dependency react-virtualized to v9.22.6

• Schedule: ["at any time"]
• Branch name: renovate/react-virtualized-9.x-lockfile
• Merge into: main
• Upgrade react-virtualized to 9.22.6

chore(deps): update dependency slickgrid to v2.4.45

• Schedule: ["at any time"]
• Branch name: renovate/slickgrid-2.x-lockfile
• Merge into: main
• Upgrade slickgrid to 2.4.45

chore(deps): update dependency styled-components to v5.3.11

• Schedule: ["at any time"]
• Branch name: renovate/styled-components-5.x-lockfile
• Merge into: main
• Upgrade styled-components to 5.3.11

chore(deps): update dependency tmp to v0.2.5

• Schedule: ["at any time"]
• Branch name: renovate/tmp-0.x-lockfile
• Merge into: main
• Upgrade tmp to 0.2.5

chore(deps): update dependency @​deepnote/blocks to v1.2.0

• Schedule: ["at any time"]
• Branch name: renovate/deepnote-blocks-1.x-lockfile
• Merge into: main
• Upgrade @deepnote/blocks to 1.2.0

chore(deps): update dependency @​lumino/widgets to v2.7.1

• Schedule: ["at any time"]
• Branch name: renovate/lumino-widgets-2.x-lockfile
• Merge into: main
• Upgrade @lumino/widgets to 2.7.1

chore(deps): update dependency cross-fetch to v3.2.0

• Schedule: ["at any time"]
• Branch name: renovate/cross-fetch-3.x-lockfile
• Merge into: main
• Upgrade cross-fetch to 3.2.0

chore(deps): update dependency inversify to v6.2.2

• Schedule: ["at any time"]
• Branch name: renovate/inversify-6.x-lockfile
• Merge into: main
• Upgrade inversify to 6.2.2

chore(deps): update dependency jquery to v3.7.1

• Schedule: ["at any time"]
• Branch name: renovate/jquery-3.x-lockfile
• Merge into: main
• Upgrade jquery to 3.7.1

chore(deps): update dependency marked to v4.3.0

• Schedule: ["at any time"]
• Branch name: renovate/marked-4.x-lockfile
• Merge into: main
• Upgrade marked to 4.3.0

chore(deps): update dependency node-gyp-build to v4.8.4

• Schedule: ["at any time"]
• Branch name: renovate/node-gyp-build-4.x-lockfile
• Merge into: main
• Upgrade node-gyp-build to 4.8.4

chore(deps): update dependency redux to v4.2.1

• Schedule: ["at any time"]
• Branch name: renovate/redux-4.x-lockfile
• Merge into: main
• Upgrade redux to 4.2.1

chore(deps): update devdependencies

• Schedule: ["every weekend"]
• Branch name: renovate/dev-dependencies
• Merge into: main
• Upgrade @typescript-eslint/eslint-plugin to 6.21.0
• Upgrade @typescript-eslint/eslint-plugin-tslint to 6.21.0
• Upgrade @typescript-eslint/parser to 6.21.0
• Upgrade @vscode/dts to 0.4.1
• Upgrade @vscode/test-cli to ^0.0.12
• Upgrade @vscode/test-electron to 2.5.2
• Upgrade @vscode/test-web to ^0.0.74
• Upgrade acorn to 8.15.0
• Upgrade bufferutil to 4.0.9
• Upgrade chai to 4.5.0
• Upgrade chai-as-promised to 7.1.2
• Upgrade chai-exclude to 2.1.1
• Upgrade es-abstract to 1.24.0
• Upgrade es5-ext to 0.10.64
• Upgrade esbuild to 0.25.10
• Upgrade esbuild-plugin-less to 1.3.27
• Upgrade eslint to 8.57.1
• Upgrade eslint-config-prettier to 9.1.2
• Upgrade eslint-plugin-import to 2.32.0
• Upgrade eslint-plugin-jsdoc to 46.10.1
• Upgrade eslint-plugin-jsx-a11y to 6.10.2
• Upgrade eslint-plugin-no-only-tests to 3.3.0
• Upgrade eslint-plugin-prettier to 5.5.4
• Upgrade eslint-plugin-react to 7.37.5
• Upgrade eslint-plugin-react-hooks to 4.6.2
• Upgrade gulp to 5.0.1
• Upgrade gulp-rename to 2.1.0
• Upgrade jsonschema to 1.5.0
• Upgrade less to 4.4.2
• Upgrade lru-cache to 10.4.3
• Upgrade mocha to 11.7.4
• Upgrade mocha-junit-reporter to 2.2.1
• Upgrade prettier to 3.6.2
• Upgrade rimraf to 5.0.10
• Upgrade source-map to 0.7.6
• Upgrade ts-mock-imports to 1.3.17
• Upgrade tsx to 4.20.6
• Upgrade typescript to 5.9.3
• Upgrade unicode-properties to 1.4.1
• Upgrade utf-8-validate to 5.0.10

chore(deps): update node.js to v20.19.5

• Schedule: ["at any time"]
• Branch name: renovate/node-20.x
• Merge into: main
• Upgrade node to 20.19.5

fix(deps): update dependency @​vscode/extension-telemetry to ^0.9.0

• Schedule: ["at any time"]
• Branch name: renovate/vscode-extension-telemetry-0.x
• Merge into: main
• Upgrade @vscode/extension-telemetry to ^0.9.0

fix(deps): update dependency ansi-to-html to ^0.7.0

• Schedule: ["at any time"]
• Branch name: renovate/ansi-to-html-0.x
• Merge into: main
• Upgrade ansi-to-html to ^0.7.0

fix(deps): update dependency iconv-lite to ^0.7.0

• Schedule: ["at any time"]
• Branch name: renovate/iconv-lite-0.x
• Merge into: main
• Upgrade iconv-lite to ^0.7.0

fix(deps): update dependency pdfkit to ^0.17.0

• Schedule: ["at any time"]
• Branch name: renovate/pdfkit-0.x
• Merge into: main
• Upgrade pdfkit to ^0.17.0

fix(deps): update dependency react-svg-pan-zoom to v3.13.1

• Schedule: ["at any time"]
• Branch name: renovate/react-svg-pan-zoom-3.x
• Merge into: main
• Upgrade react-svg-pan-zoom to 3.13.1

fix(deps): update dependency react-svgmt to v1.2.0

• Schedule: ["at any time"]
• Branch name: renovate/react-svgmt-1.x
• Merge into: main
• Upgrade react-svgmt to 1.2.0

fix(deps): update dependency reflect-metadata to ^0.2.0

• Schedule: ["at any time"]
• Branch name: renovate/reflect-metadata-0.x
• Merge into: main
• Upgrade reflect-metadata to ^0.2.0

fix(deps): update dependency vscode-languageclient to v8.1.0

• Schedule: ["at any time"]
• Branch name: renovate/vscode-languageclient-8.x
• Merge into: main
• Upgrade vscode-languageclient to 8.1.0

chore(deps): update definitelytyped (major)

• Schedule: ["every weekend"]
• Branch name: renovate/major-definitelytyped
• Merge into: main
• Upgrade @​types/ansi-regex to ^5.0.0
• Upgrade @types/chai to ^5.0.0
• Upgrade @types/chai-as-promised to ^8.0.0
• Upgrade @types/event-stream to ^4.0.0
• Upgrade @types/fs-extra to ^11.0.0
• Upgrade @types/get-port to ^4.0.0
• Upgrade @​types/glob to ^9.0.0
• Upgrade @types/memoize-one to ^5.0.0
• Upgrade @types/mocha to ^10.0.0
• Upgrade @types/nock to ^11.0.0
• Upgrade @types/node to ^22.0.0
• Upgrade @types/react-dom to ^19.0.0
• Upgrade @types/semver to ^7.0.0
• Upgrade @types/sinon to ^17.0.0
• Upgrade @types/sinonjs__fake-timers to ^8.0.0
• Upgrade @​types/uuid to ^11.0.0
• Upgrade @types/ws to ^8.0.0

chore(deps): update devdependencies (major)

• Schedule: ["every weekend"]
• Branch name: renovate/major-dev-dependencies
• Merge into: main
• Upgrade @sinonjs/fake-timers to ^15.0.0
• Upgrade @typescript-eslint/eslint-plugin to ^8.0.0
• Upgrade @typescript-eslint/eslint-plugin-tslint to ^7.0.0
• Upgrade @typescript-eslint/parser to ^8.0.0
• Upgrade chai to ^6.0.0
• Upgrade chai-as-promised to ^8.0.0
• Upgrade chai-exclude to ^3.0.0
• Upgrade concurrently to ^9.0.0
• Upgrade cross-env to ^10.0.0
• Upgrade dedent to ^1.0.0
• Upgrade del to ^8.0.0
• Upgrade eslint to ^9.0.0
• Upgrade eslint-config-prettier to ^10.0.0
• Upgrade eslint-plugin-jsdoc to ^61.0.0
• Upgrade eslint-plugin-react-hooks to ^7.0.0
• Upgrade flat to ^6.0.0
• Upgrade get-port to ^7.0.0
• Upgrade glob to ^11.0.0
• Upgrade gulp-filter to ^9.0.0
• Upgrade husky to ^9.0.0
• Upgrade keyv to ^5.0.0
• Upgrade lru-cache to ^11.0.0
• Upgrade mocha to ^11.0.0
• Upgrade nock to ^14.0.0
• Upgrade node-html-parser to ^7.0.0
• Upgrade nyc to ^17.0.0
• Upgrade rimraf to ^6.0.0
• Upgrade sinon to ^21.0.0
• Upgrade utf-8-validate to ^6.0.0

chore(deps): update github actions (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-github-actions
• Merge into: main
• Upgrade actions/setup-node to 2028fbc5c25fe9cf00d9f06a71cc4710d4507903
• Upgrade astral-sh/setup-uv to 3259c6206f993105e3a61b142c2d97bf4b9ef83d

chore(deps): update node.js to v22.20.0

• Schedule: ["at any time"]
• Branch name: renovate/node-22.x
• Merge into: main
• Upgrade node to 22.20.0

fix(deps): update dependency @​vscode/extension-telemetry to v1

• Schedule: ["at any time"]
• Branch name: renovate/vscode-extension-telemetry-1.x
• Merge into: main
• Upgrade @vscode/extension-telemetry to ^1.0.0

fix(deps): update dependency cross-fetch to v4

• Schedule: ["at any time"]
• Branch name: renovate/cross-fetch-4.x
• Merge into: main
• Upgrade cross-fetch to ^4.0.0

fix(deps): update dependency fast-deep-equal to v3

• Schedule: ["at any time"]
• Branch name: renovate/fast-deep-equal-3.x
• Merge into: main
• Upgrade fast-deep-equal to ^3.0.0

fix(deps): update dependency fs-extra to v11

• Schedule: ["at any time"]
• Branch name: renovate/fs-extra-11.x
• Merge into: main
• Upgrade fs-extra to ^11.0.0

fix(deps): update dependency glob to v11

• Schedule: ["at any time"]
• Branch name: renovate/glob-11.x
• Merge into: main
• Upgrade glob to ^11.0.0

fix(deps): update dependency inversify to v7

• Schedule: ["at any time"]
• Branch name: renovate/inversify-7.x
• Merge into: main
• Upgrade inversify to ^7.0.0

fix(deps): update dependency isomorphic-ws to v5

• Schedule: ["at any time"]
• Branch name: renovate/isomorphic-ws-5.x
• Merge into: main
• Upgrade isomorphic-ws to ^5.0.0

fix(deps): update dependency jsonc-parser to v3

• Schedule: ["at any time"]
• Branch name: renovate/jsonc-parser-3.x
• Merge into: main
• Upgrade jsonc-parser to ^3.0.0

fix(deps): update dependency marked to v16

• Schedule: ["at any time"]
• Branch name: renovate/marked-16.x
• Merge into: main
• Upgrade marked to ^16.0.0

fix(deps): update dependency react-redux to v9

• Schedule: ["at any time"]
• Branch name: renovate/react-redux-9.x
• Merge into: main
• Upgrade react-redux to ^9.0.0

fix(deps): update dependency react-svgmt to v3

• Schedule: ["at any time"]
• Branch name: renovate/react-svgmt-3.x
• Merge into: main
• Upgrade react-svgmt to 3.0.0

fix(deps): update dependency redux to v5

• Schedule: ["at any time"]
• Branch name: renovate/redux-5.x
• Merge into: main
• Upgrade redux to ^5.0.0

fix(deps): update dependency semver to v7

• Schedule: ["at any time"]
• Branch name: renovate/semver-7.x
• Merge into: main
• Upgrade semver to ^7.0.0

fix(deps): update dependency slickgrid to v5

• Schedule: ["at any time"]
• Branch name: renovate/slickgrid-5.x
• Merge into: main
• Upgrade slickgrid to ^5.0.0

fix(deps): update dependency styled-components to v6

• Schedule: ["at any time"]
• Branch name: renovate/styled-components-6.x
• Merge into: main
• Upgrade styled-components to ^6.0.0

fix(deps): update dependency vscode-languageclient to v9

• Schedule: ["at any time"]
• Branch name: renovate/vscode-languageclient-9.x
• Merge into: main
• Upgrade vscode-languageclient to 9.0.1

fix(deps): update dependency ws to v8

• Schedule: ["at any time"]
• Branch name: renovate/ws-8.x
• Merge into: main
• Upgrade ws to 8.18.3
• Upgrade ws to ^8.0.0

fix(deps): update react monorepo to v19 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-react-monorepo
• Merge into: main
• Upgrade react to ^19.0.0
• Upgrade react-dom to ^19.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

📝 Walkthrough

Walkthrough

Adds a top-level Renovate configuration file renovate.json declaring the Renovate schema and extending config:recommended. Enables managers for npm, nvm, and GitHub Actions (with pinDigests), disables docker-compose/dockerfile/meteor managers, sets npm options (including minReleaseAge: 3d and an npmrc), ignores common build/output paths and specified dependencies, applies a renovate label, and defines packageRules for grouping GitHub Actions, weekend devDependency updates, and DefinitelyTyped patterns. No runtime or exported-code changes.

Possibly related PRs

• chore(deps): migrate renovate config deepnote#32: Edits top-level Renovate configuration, renaming package grouping fields (e.g., matchPackagePatterns → matchPackageNames), directly relevant to renovate.json.
• chore: configure Renovate jupyterlab-deepnote#9: Adds/modifies a top-level renovate.json with overlapping managers, ignorePaths, npm settings, and packageRules.

Pre-merge checks

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title Check	✅ Passed	The title succinctly and accurately describes the primary change of introducing and configuring Renovate for the repository, using clear conventional commit syntax and reflecting the chore nature of the update.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 8f22894 and d283ea2.

📒 Files selected for processing (1)

• renovate.json (1 hunks)

🧰 Additional context used

🪛 GitHub Actions: CI

renovate.json

[error] 1-1: Code style issues found in renovate.json by Prettier. Run 'prettier --write renovate.json' to fix.

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between d283ea2 and 280371e.

📒 Files selected for processing (1)

• renovate.json (1 hunks)

🧰 Additional context used

🪛 GitHub Actions: CI

renovate.json

[warning] 1-1: Code style issues found in renovate.json. Run 'prettier --write' to fix.

---

[error] 1-1: Prettier formatting check failed during 'npm run format'. Run 'prettier --write' to fix code style issues.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70%. Comparing base (4546946) to head (29d7e5b).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@          Coverage Diff          @@
##            main     #32   +/-   ##
=====================================
  Coverage     70%     70%           
=====================================
  Files        512     512           
  Lines      37506   37506           
  Branches    4811    4811           
=====================================
  Hits       26473   26473           
  Misses      9441    9441           
  Partials    1592    1592           

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[jamesbhobbs]

@andyjakubowski need to run prettier

[andyjakubowski]

We should merge this onboarding PR from Renovate so that Renovate considers this repo onboarded. Then, we’ll be able to re-run Renovate and verify that @deepnote/blocks can be correctly looked up. Re-running Renovate in the Web UI doesn’t do that scan now, because the repo is still marked as onboarded:

[saltenasl]

cc @jamesbhobbs