chore: Configure Renovate

uis-devops-renovatebot
2026-04-29T19:35:10Z

Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding MR to help you understand and configure settings before regular Merge Requests begin.

🚦 To activate Renovate, merge this Merge Request. To disable Ren...

Welcome to Renovate! This is an onboarding MR to help you understand and configure settings before regular Merge Requests begin.

🚦 To activate Renovate, merge this Merge Request. To disable Renovate, simply close this Merge Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Merge Request description the next time it runs.

Detected Package Files

renovate.json (renovate-config-presets)

Configuration Summary

Based on the default config's presets, Renovate will:

Start dependency updates only once this onboarding MR is merged

Enable Renovate Dependency Dashboard creation.

Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.

Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.

Group known monorepo packages together.

Use curated list of recommended non-monorepo package groupings.

Show only the Age and Confidence Merge Confidence badges for pull requests.

Apply crowd-sourced package replacement rules.

Apply crowd-sourced workarounds for known problems with packages.

Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff

Correctly link to the source code for golang.org/x packages

Link to pkg.go.dev/... for golang.org/x packages' title

Pin Docker digests.

Pin github-action digests.

Enable Renovate configuration migration MRs when needed.

Pin dependency versions for development dependencies.

Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.

Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.

Run lock file maintenance (updates) early Monday mornings.

Group all minor and patch updates together.

Group all non-major stable updates together

Schedule for weekdays.

Use semantic prefixes for commit messages and MR titles.

If Renovate detects semantic commits, it will use semantic commit type fix for all commits.

Add registry aliases for CI_SERVER_{FQDN,HOST} in GitLab CI/CD configurations

Allow processing pip requirements as GitLab CI/CD input defaults

Allow processing docker images as GitLab CI/CD input defaults

Allow processing GitLab CI/CD components as GitLab CI/CD input defaults

Rebase existing MRs any time the base branch has been updated.

Run Renovate on following schedule: * * * * 1-5

What to Expect

It looks like your repository dependencies are already up-to-date and no Merge Requests will be necessary right away.

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section. If you need any further assistance then you can also request help here.

This MR has been generated by Renovate Bot.