Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Renovate #47

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Configure Renovate #47

wants to merge 1 commit into from

Conversation

anaconda-renovate[bot]
Copy link

@anaconda-renovate anaconda-renovate bot commented Jul 31, 2023

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .github/workflows/main.yml (github-actions)
  • setup.py (pip_setup)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Pin Docker digests.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Pin github-action digests.
  • Use node versioning for @types/node.
  • Use specific versioning for Red Hat-maintained container images.
  • Update _VERSION variables in Dockerfiles.
  • Update _VERSION environment variables in GitHub Action files.
  • Use the Anaconda Best Practice configuration from anaconda/renovate-config
  • Create a Dependency Dashboard as Issue, listing all upgrades
  • Open new PRs automatically every weekday before 6am UTC. You can manually trigger PRs from the Dependency Dashboard, those will be opened once renovate runs again (once every hour)
  • Label all PRs with renovate
  • Use semantic commit messages for all upgrades
  • Open a maximum of 10 PRs concurrently
  • Automatically set reviewers from CODEOWNERS
  • Upgrade arbitrary dependencies in Dockerfiles when you mark them, see the documentation for details
  • Run Renovate on following schedule: every weekday

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 5 Pull Requests:

chore(deps): update dependency werkzeug to >=2.3,<3 [security]
  • Branch name: renovate/pypi-werkzeug-vulnerability
  • Merge into: master
  • Upgrade werkzeug to >=2.3,<3
chore(deps): pin dependencies
chore(deps): update actions/checkout action to v4
  • Schedule: ["every weekday"]
  • Branch name: renovate/actions-checkout-4.x
  • Merge into: master
  • Upgrade actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683
chore(deps): update codecov/codecov-action action to v5
  • Schedule: ["every weekday"]
  • Branch name: renovate/codecov-codecov-action-5.x
  • Merge into: master
  • Upgrade codecov/codecov-action to 968872560f81e7bdde9272853e65f2507c0eca7c
chore(deps): update conda-incubator/setup-miniconda action to v3
  • Schedule: ["every weekday"]
  • Branch name: renovate/conda-incubator-setup-miniconda-3.x
  • Merge into: master
  • Upgrade conda-incubator/setup-miniconda to d2e6a045a86077fb6cad6f5adf368e9076ddaa8d

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Renovate Bot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants