Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• docs/examples/opencensus-exporter-tracer/docker/docker-compose.yaml (docker-compose)
• tests/opentelemetry-docker-tests/tests/docker-compose.yml (docker-compose)
• docs/examples/sqlcommenter/books_database/Dockerfile (dockerfile)
• .github/workflows/add-to-project.yml (github-actions)
• .github/workflows/backport.yml (github-actions)
• .github/workflows/benchmarks.yml (github-actions)
• .github/workflows/changelog.yml (github-actions)
• .github/workflows/check-links.yml (github-actions)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/fossa.yml (github-actions)
• .github/workflows/lint.yml (github-actions)
• .github/workflows/misc.yml (github-actions)
• .github/workflows/ossf-scorecard.yml (github-actions)
• .github/workflows/prepare-patch-release.yml (github-actions)
• .github/workflows/prepare-release-branch.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/stale.yml (github-actions)
• .github/workflows/templates/ci.yml.j2 (github-actions)
• .github/workflows/templates/lint.yml.j2 (github-actions)
• .github/workflows/templates/misc.yml.j2 (github-actions)
• .github/workflows/templates/test.yml.j2 (github-actions)
• .github/workflows/test.yml (github-actions)
• docs/examples/fork-process-model/flask-gunicorn/requirements.txt (pip_requirements)
• docs/examples/fork-process-model/flask-uwsgi/requirements.txt (pip_requirements)
• docs/examples/metrics/instruments/requirements.txt (pip_requirements)
• docs/examples/metrics/prometheus-grafana/requirements.txt (pip_requirements)
• docs/examples/metrics/reader/requirements.txt (pip_requirements)
• docs/examples/metrics/views/requirements.txt (pip_requirements)
• docs/examples/opencensus-shim/requirements.txt (pip_requirements)
• docs/examples/opentracing/requirements.txt (pip_requirements)
• docs/getting_started/tests/requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-proto-grpc/test-requirements.latest.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-proto-grpc/test-requirements.oldest.txt (pip_requirements)
• opentelemetry-proto-json/test-requirements.latest.txt (pip_requirements)
• opentelemetry-proto-json/test-requirements.oldest.txt (pip_requirements)
• opentelemetry-proto/test-requirements.latest.txt (pip_requirements)
• opentelemetry-proto/test-requirements.oldest.txt (pip_requirements)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Convert pinned GitHub Action digests to SemVer.
• Use semantic prefixes for commit messages and PR titles.

---

What to Expect

With your current configuration, Renovate will create 29 Pull Requests:

chore(infra): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/infra
• Merge into: main
• Upgrade actions/add-to-project to 244f685bbc3b7adfa8466e08b698b5577571133e
• Upgrade actions/checkout to 34e114876b0b11c390a56381ad16ebd13914f8d5
• Upgrade actions/checkout to de0fac2e4500dabe0009e67214ff5f5447ce83dd
• Upgrade actions/create-github-app-token to fee1f7d63c2ff003460e3d139729b119787bc349
• Upgrade actions/setup-python to a26af69be951a213d495a4c3e4e4022e16d87065
• Upgrade benchmark-action/github-action-benchmark to 52576c92bccf6ac60c8223ec7eb2565637cae9ba
• Upgrade fossas/fossa-action to ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3
• Upgrade github/codeql-action to 7fd177fa680c9881b53cdab4d346d32574c9f7f4
• Upgrade mysql to 8.4
• Upgrade open-telemetry/opentelemetry-python-contrib to a80c7da21b3b904030e614518b2e1b117929c2bd
• Upgrade ossf/scorecard-action to 4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• Upgrade otel/opentelemetry-collector to 0.152.0
• Upgrade python to 3.14
• Upgrade python to 3.14-slim
• Upgrade re-actors/alls-green to 05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe
• Upgrade tj-actions/changed-files to ed68ef82c095e0d48ec87eccea555d944a631a4c

chore(deps): update all patch versions

• Schedule: ["before 8am every weekday"]
• Branch name: renovate/all-patch-versions
• Merge into: main
• Upgrade protobuf to ==5.29.6
• Upgrade zipp to ==3.23.1

chore(docs): update docs deps

• Schedule: ["before 8am every weekday"]
• Branch name: renovate/docs-deps
• Merge into: main
• Upgrade Jinja2 to ==3.1.6
• Upgrade MarkupSafe to ==2.1.5
• Upgrade Werkzeug to ==3.1.8
• Upgrade asgiref to ==3.11.1
• Upgrade attrs to ==23.2.0
• Upgrade certifi to ==2024.12.14
• Upgrade charset-normalizer to ==2.1.1
• Upgrade click to ==8.3.3
• Upgrade googleapis-common-protos to ==1.75.0
• Upgrade grpcio to ==1.80.0
• Upgrade idna to ==3.15
• Upgrade importlib-metadata to ==6.11.0
• Upgrade iniconfig to ==2.3.0
• Upgrade itsdangerous to ==2.2.0
• Upgrade opentelemetry-api to ==1.41.1
• Upgrade opentelemetry-exporter-otlp to ==1.41.1
• Upgrade opentelemetry-sdk to ==1.41.1
• Upgrade packaging to ==24.2
• Upgrade protobuf to ~=3.20.3
• Upgrade requests to ==2.34.1
• Upgrade six to ==1.17.0
• Upgrade thrift to ==0.23.0
• Upgrade tomli to ==2.4.1
• Upgrade typing_extensions to ==4.15.0
• Upgrade uWSGI to ==2.0.31
• Upgrade urllib3 to ==1.26.20
• Upgrade wrapt to ==1.17.3
• Upgrade zipp to ==3.23.1

chore(deps): update dependency asgiref to v3.11.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/asgiref-3.x
• Merge into: main
• Upgrade asgiref to ==3.11.1

chore(deps): update dependency exceptiongroup to v1.3.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/exceptiongroup-1.x
• Merge into: main
• Upgrade exceptiongroup to ==1.3.1

chore(deps): update dependency googleapis-common-protos to v1.75.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/googleapis-common-protos-1.x
• Merge into: main
• Upgrade googleapis-common-protos to ==1.75.0

chore(deps): update dependency grpcio to v1.80.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/grpcio-1.x
• Merge into: main
• Upgrade grpcio to ==1.80.0

chore(deps): update dependency importlib-metadata to v6.11.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/importlib-metadata-6.x
• Merge into: main
• Upgrade importlib-metadata to ==6.11.0

chore(deps): update dependency importlib-metadata to v8.9.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/importlib-metadata-8.x
• Merge into: main
• Upgrade importlib-metadata to ==8.9.0

chore(deps): update dependency iniconfig to v2.3.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/iniconfig-2.x
• Merge into: main
• Upgrade iniconfig to ==2.3.0

chore(deps): update dependency packaging to v24.2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/packaging-24.x
• Merge into: main
• Upgrade packaging to ==24.2

chore(deps): update dependency pluggy to v1.6.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pluggy-1.x
• Merge into: main
• Upgrade pluggy to ==1.6.0

chore(deps): update dependency tomli to v1.2.3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/tomli-1.x
• Merge into: main
• Upgrade tomli to ==1.2.3

chore(deps): update dependency typing-extensions to v4.15.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/typing-extensions-4.x
• Merge into: main
• Upgrade typing-extensions to ==4.15.0

chore(deps): update dependency zipp to v0.6.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/zipp-0.x
• Merge into: main
• Upgrade zipp to ==0.6.0

chore(deps): update actions/add-to-project action to v2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/actions-add-to-project-2.x
• Merge into: main
• Upgrade actions/add-to-project to 5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd

chore(deps): update actions/checkout action to v6

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to de0fac2e4500dabe0009e67214ff5f5447ce83dd

chore(deps): update actions/create-github-app-token action to v3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/actions-create-github-app-token-3.x
• Merge into: main
• Upgrade actions/create-github-app-token to bcd2ba49218906704ab6c1aa796996da409d3eb1

chore(deps): update actions/setup-python action to v6

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: main
• Upgrade actions/setup-python to a309ff8b426b58ec0e2a45f0f869d46889d02405

chore(deps): update actions/upload-artifact action to v7

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

chore(deps): update dependency importlib-metadata to v9

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/importlib-metadata-9.x
• Merge into: main
• Upgrade importlib-metadata to ==9.0.0

chore(deps): update dependency packaging to v26.2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/packaging-26.x
• Merge into: main
• Upgrade packaging to ==26.2

chore(deps): update dependency protobuf to v7

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/protobuf-7.x
• Merge into: main
• Upgrade protobuf to ==7.34.1

chore(deps): update dependency pytest to v9

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pytest-9.x
• Merge into: main
• Upgrade pytest to ==9.0.3

chore(deps): update dependency tomli to v2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/tomli-2.x
• Merge into: main
• Upgrade tomli to ==2.4.1

chore(deps): update dependency zipp to v3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/zipp-3.x
• Merge into: main
• Upgrade zipp to ==3.23.1

chore(deps): update github/codeql-action action to v4

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to 68bde559dea0fdcac2102bfdf6230c5f70eb485e

chore(deps): update tj-actions/changed-files action to v47

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/tj-actions-changed-files-47.x
• Merge into: main
• Upgrade tj-actions/changed-files to 9426d40962ed5378910ee2e21d5f8c6fcbf2dd96

chore(docs): update docs deps (major)

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/major-docs-deps
• Merge into: main
• Upgrade Flask to ==3.1.3
• Upgrade MarkupSafe to ==3.0.3
• Upgrade attrs to ==26.1.0
• Upgrade certifi to ==2026.4.22
• Upgrade charset-normalizer to ==3.4.7
• Upgrade gunicorn to ==26.0.0
• Upgrade importlib-metadata to ==9.0.0
• Upgrade mysql to 9.7
• Upgrade packaging to ==26.2
• Upgrade protobuf to ~=7.34.1
• Upgrade protobuf to ==7.34.1
• Upgrade pytest to ==9.0.3
• Upgrade urllib3 to ==2.7.0
• Upgrade wrapt to ==2.1.2

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.