Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Configure Renovate - autoclosed #2

Closed
wants to merge 41 commits into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Feb 20, 2024

Mend Renovate

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .circleci/config.yml (circleci)
  • .github/workflows/checks.apicheck.yml (github-actions)
  • .github/workflows/checks.codeql.yml (github-actions)
  • .github/workflows/checks.dependency-review.yml (github-actions)
  • .github/workflows/checks.detekt.yml (github-actions)
  • .github/workflows/checks.formatting.yml (github-actions)
  • .github/workflows/checks.gradle-wrapper.yml (github-actions)
  • .github/workflows/checks.scorecards.yml (github-actions)
  • .github/workflows/job.dependency-graph.yml (github-actions)
  • .github/workflows/on.pr.yml (github-actions)
  • gradle.properties (gradle)
  • settings.gradle.kts (gradle)
  • build.gradle.kts (gradle)
  • bench/bench.gradle.kts (gradle)
  • build-logic/settings.gradle.kts (gradle)
  • build-logic/build.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklAllProjects.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklFatJar.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklGraalVm.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklGradlePluginTest.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklHtmlValidator.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklJavaLibrary.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklJvmEntrypoint.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklJvmLibrary.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklKotlinLibrary.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklKotlinTest.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklNativeBuild.gradle.kts (gradle)
  • build-logic/src/main/kotlin/pklPublishLibrary.gradle.kts (gradle)
  • docs/docs.gradle.kts (gradle)
  • gradle/libs.versions.toml (gradle)
  • pkl-cli/pkl-cli.gradle.kts (gradle)
  • pkl-codegen-java/pkl-codegen-java.gradle.kts (gradle)
  • pkl-codegen-kotlin/pkl-codegen-kotlin.gradle.kts (gradle)
  • pkl-commons/pkl-commons.gradle.kts (gradle)
  • pkl-commons-cli/pkl-commons-cli.gradle.kts (gradle)
  • pkl-commons-test/pkl-commons-test.gradle.kts (gradle)
  • pkl-config-java/pkl-config-java.gradle.kts (gradle)
  • pkl-config-kotlin/pkl-config-kotlin.gradle.kts (gradle)
  • pkl-core/pkl-core.gradle.kts (gradle)
  • pkl-doc/pkl-doc.gradle.kts (gradle)
  • pkl-executor/pkl-executor.gradle.kts (gradle)
  • pkl-gradle/pkl-gradle.gradle.kts (gradle)
  • pkl-server/pkl-server.gradle.kts (gradle)
  • pkl-tools/pkl-tools.gradle.kts (gradle)
  • stdlib/stdlib.gradle.kts (gradle)
  • gradle/wrapper/gradle-wrapper.properties (gradle-wrapper)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 19 Pull Requests:

chore(deps): update actions/dependency-review-action action to v4.1.3
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-dependency-review-action-4.x
  • Merge into: chore/build-upgrades
  • Upgrade actions/dependency-review-action to 9129d7d40b8c12c1ed0f60400d00c92d437adcce
chore(deps): update cimg/openjdk docker tag to v11.0.22
  • Schedule: ["at any time"]
  • Branch name: renovate/cimg-openjdk-11.x
  • Merge into: chore/build-upgrades
  • Upgrade cimg/openjdk to 11.0.22
chore(deps): update cimg/openjdk docker tag to v17.0.10
  • Schedule: ["at any time"]
  • Branch name: renovate/cimg-openjdk-17.x
  • Merge into: chore/build-upgrades
  • Upgrade cimg/openjdk to 17.0.10
chore(deps): update shadowplugin to v7.1.2
  • Schedule: ["at any time"]
  • Branch name: renovate/shadowplugin
  • Merge into: chore/build-upgrades
  • Upgrade com.github.johnrengelman.shadow to 7.1.2
  • Upgrade gradle.plugin.com.github.johnrengelman:shadow to 7.1.2
fix(deps): update dependency com.github.ajalt.clikt:clikt to v3.5.4
fix(deps): update graalvm to v22.3.5
chore(deps): update maniator/gh docker tag to v2.44.1
  • Schedule: ["at any time"]
  • Branch name: renovate/maniator-gh-2.x
  • Merge into: chore/build-upgrades
  • Upgrade maniator/gh to v2.44.1
fix(deps): update dependency com.diffplug.spotless:spotless-plugin-gradle to v6.25.0
fix(deps): update dependency com.squareup:kotlinpoet to 1.16.+
  • Schedule: ["at any time"]
  • Branch name: renovate/kotlinpoet
  • Merge into: chore/build-upgrades
  • Upgrade com.squareup:kotlinpoet to 1.16.+
fix(deps): update dependency org.apache.logging.log4j:log4j-1.2-api to v2.22.1
fix(deps): update dependency org.snakeyaml:snakeyaml-engine to v2.7
chore(deps): update arm64v8/oraclelinux docker tag to v9
  • Schedule: ["at any time"]
  • Branch name: renovate/arm64v8-oraclelinux-9.x
  • Merge into: chore/build-upgrades
  • Upgrade arm64v8/oraclelinux to 9-slim
chore(deps): update cimg/openjdk docker tag to v21
  • Schedule: ["at any time"]
  • Branch name: renovate/cimg-openjdk-21.x
  • Merge into: chore/build-upgrades
  • Upgrade cimg/openjdk to 21.0.2
chore(deps): update oraclelinux docker tag to v9
  • Schedule: ["at any time"]
  • Branch name: renovate/oraclelinux-9.x
  • Merge into: chore/build-upgrades
  • Upgrade oraclelinux to 9-slim
chore(deps): update shadowplugin to v8 (major)
  • Schedule: ["at any time"]
  • Branch name: renovate/major-shadowplugin
  • Merge into: chore/build-upgrades
  • Upgrade com.github.johnrengelman.shadow to 8.1.1
  • Upgrade gradle.plugin.com.github.johnrengelman:shadow to 8.0.0
fix(deps): update dependency com.github.ajalt.clikt:clikt to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/major-clikt
  • Merge into: chore/build-upgrades
  • Upgrade com.github.ajalt.clikt:clikt to 4.2.2
fix(deps): update dependency de.undercouch:gradle-download-task to v5
fix(deps): update graalvm to v23 (major)
fix(deps): update slf4j monorepo to v2 (major)

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.


Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

  • Failed to look up orb package apple/pr-approval

Files affected: .circleci/config.yml


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Mend Renovate. View repository job log here.

- feat: support for build scans with gradle enterprise
- feat: support for caching with buildless (inert without key)
- feat: support for gradle java toolchains
- feat: support for static analysis with detekt
- feat: support for gradle toolchains
- feat: support for toolchain vs. runtime target
- feat: support for dynamic provisioning of toolchains
- feat: support for static java checking with pmd
- feat: enable typed project accessors, use them project-wide
- feat: stricter repositories, locking for build classpath
- feat: property to retarget java or kotlin bytecode versions
- feat: parameter name integration between javac and kotlinc
- feat: kotlin coverage support via `kover` plugin
- feat: dependency verification for gradle build
- feat: support for new gradle `jvm-test-suite` plugin
- feat: reasonable local and remote build caching support
- feat: project icon in intellij new ui
- feat: aggregate reporting for tests, coverage, detekt
- fix: repeatable/consistent archives from gradle
- fix: don't list ephemeral spotless configurations in lockfiles
- fix: make version catalog symbols available in `buildSrc`
- fix: specify `rootProject.name` for `buildSrc`
- fix: error when running `gradlew tasks`
- fix: various java or gradle deprecations
- fix: move all tool (linter, etc) versions into version catalog
- chore: add testlogger for clearer test outcomes
- chore: check build configuration with gradle doctor plugin
- chore: generate initial suite of dependency verification material
- chore: transition to property set syntax (`property = xyz`)
- chore: cleanup uses of `buildDir` (becomes `layout.buildDirectory`)
- chore: add Gradle Versions plugin for update checks
- chore: upgrade Gradle → `8.6` (supports Java 21)
- chore: upgrade Kotlin → `1.9.22` (build-time)
- chore: upgrade KotlinX Serialization → `1.6.3`
- chore: upgrade KotlinX HTML → `0.11.0`
- chore: general dependency upgrades, where safe

Not yet completed:
- feat: signing of artifacts with sigstore
- feat: embedding of SPDX SBOM in artifacts
- feat: dependency vulnerability checks with owasp
- test: checksum failures

Signed-off-by: Sam Gammon <[email protected]>
- feat: github actions submission of dependency graph
- feat: checks in gha: detekt, formatting, gradle wrapper
- feat: check prs for vulnerable dependencies
- feat: oss scorecards job
- feat: run codeql on pr / push

Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
Signed-off-by: Sam Gammon <[email protected]>
@sgammon sgammon force-pushed the chore/build-upgrades branch 3 times, most recently from 07138d3 to 6abd834 Compare February 22, 2024 02:03
@renovate renovate bot changed the title chore: Configure Renovate chore: Configure Renovate - autoclosed Feb 22, 2024
@renovate renovate bot closed this Feb 22, 2024
@renovate renovate bot deleted the renovate/configure branch February 22, 2024 02:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant