Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SONARGO-60 Configure Renovate #48

Merged
merged 2 commits into from
Dec 17, 2024
Merged

SONARGO-60 Configure Renovate #48

merged 2 commits into from
Dec 17, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 17, 2024

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .gitmodules (git-submodules)
  • .github/workflows/PullRequestClosed.yml (github-actions)
  • .github/workflows/PullRequestCreated.yml (github-actions)
  • .github/workflows/RequestReview.yml (github-actions)
  • .github/workflows/SubmitReview.yml (github-actions)
  • .github/workflows/ToggleLockBranch.yml (github-actions)
  • .github/workflows/mark-prs-stale.yml (github-actions)
  • .github/workflows/releasability.yaml (github-actions)
  • .github/workflows/release.yml (github-actions)
  • .github/workflows/slack_notify.yml (github-actions)
  • sonar-go-to-slang/go.mod (gomod)
  • gradle.properties (gradle)
  • settings.gradle.kts (gradle)
  • build.gradle (gradle)
  • gradle/libs.versions.toml (gradle)
  • its/plugin/build.gradle.kts (gradle)
  • its/ruling/build.gradle.kts (gradle)
  • sonar-go-plugin/build.gradle.kts (gradle)
  • sonar-go-to-slang/build.gradle.kts (gradle)
  • gradle/wrapper/gradle-wrapper.properties (gradle-wrapper)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Evaluate schedules according to timezone CET.
  • Schedule during typical non-office hours on weekdays (i.e., 10 PM - 5 AM) and anytime on weekends.
  • Remove hourly and concurrent rate limits.
  • Disable Renovate Dependency Dashboard creation.
  • Rebase existing PRs any time the base branch has been updated.
  • Run Renovate on following schedule: before 4am on Monday

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 5 Pull Requests:

Update build-logic digest to 46a3607
  • Schedule: ["before 4am on Monday"]
  • Branch name: renovate/build-logic-digest
  • Merge into: master
  • Upgrade build-logic to 46a36072551574ab7aa1381081c031f58b3235da
Update all non-major dependencies
Update dependency org.slf4j:slf4j-api to v2
  • Schedule: ["before 4am on Monday"]
  • Branch name: renovate/major-slf4j-monorepo
  • Merge into: master
  • Upgrade org.slf4j:slf4j-api to 2.0.16
Update plugin com.github.johnrengelman.shadow to v8
  • Schedule: ["before 4am on Monday"]
  • Branch name: renovate/com.github.johnrengelman.shadow-8.x
  • Merge into: master
  • Upgrade com.github.johnrengelman.shadow to 8.1.1
Update plugin com.jfrog.artifactory to v5
  • Schedule: ["before 4am on Monday"]
  • Branch name: renovate/com.jfrog.artifactory-5.x
  • Merge into: master
  • Upgrade com.jfrog.artifactory to 5.2.5

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR was generated by Mend Renovate. View the repository job log.

@hashicorp-vault-sonar-prod hashicorp-vault-sonar-prod bot changed the title Configure Renovate SONARGO-85 Configure Renovate Dec 17, 2024
@petertrr petertrr changed the title SONARGO-85 Configure Renovate SONARGO-60 Configure Renovate Dec 17, 2024
@petertrr petertrr force-pushed the renovate/configure branch 3 times, most recently from 3f3c3fc to f778190 Compare December 17, 2024 11:25
Comment on lines +66 to +77
{
"managers": [
"git-submodules"
],
"matchDepNames": [
"its/sources/traefik",
"its/sources/minio",
"its/sources/prometheus",
"its/sources/kubernetes-client-go"
],
"enabled": false
}
Copy link
Contributor

@petertrr petertrr Dec 17, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I want to be able to update Gradle modules automatically, however, it is not possible to enable git-submodules only for a single dependency, and exclusion doesn't support patterns.

Example on what Renovate shows when there are new commits:

Update build-logic digest to 46a3607
Schedule: ["before 4am on Monday"]
Branch name: renovate/build-logic-digest
Merge into: master
Upgrade build-logic to 46a36072551574ab7aa1381081c031f58b3235da

Copy link

Quality Gate passed Quality Gate passed for 'Go'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

Copy link
Contributor

@mstachniuk mstachniuk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@petertrr petertrr merged commit 2ab0138 into master Dec 17, 2024
9 checks passed
@petertrr petertrr deleted the renovate/configure branch December 17, 2024 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants