Skip to content

Configure Renovate #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Configure Renovate #10

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented May 8, 2025

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • Dockerfile (dockerfile)
  • .github/workflows/python-app.yml (github-actions)
  • requirements.txt (pip_requirements)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Hopefully safe environment variables to allow users to configure.
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 22 Pull Requests:

Update dependency Jinja2 to v3.1.6 [SECURITY]
  • Branch name: renovate/pypi-jinja2-vulnerability
  • Merge into: master
  • Upgrade Jinja2 to ==3.1.6
Update dependency cryptography to v43 [SECURITY]
  • Branch name: renovate/pypi-cryptography-vulnerability
  • Merge into: master
  • Upgrade cryptography to ==43.0.1
Update dependency Werkzeug to v3 [SECURITY]
  • Branch name: renovate/pypi-werkzeug-vulnerability
  • Merge into: master
  • Upgrade Werkzeug to ==3.0.6
Update dependency click to v8.1.8
  • Schedule: ["at any time"]
  • Branch name: renovate/click-8.x
  • Merge into: master
  • Upgrade click to ==8.1.8
Update dependency Flask-RESTful to v0.3.10
  • Schedule: ["at any time"]
  • Branch name: renovate/flask-restful-0.x
  • Merge into: master
  • Upgrade Flask-RESTful to ==0.3.10
Update dependency MarkupSafe to v2.1.5
  • Schedule: ["at any time"]
  • Branch name: renovate/markupsafe-2.x
  • Merge into: master
  • Upgrade MarkupSafe to ==2.1.5
Update dependency psycopg2-binary to v2.9.10
  • Schedule: ["at any time"]
  • Branch name: renovate/psycopg2-binary-2.x
  • Merge into: master
  • Upgrade psycopg2-binary to ==2.9.10
Update dependency asgiref to v3.8.1
  • Schedule: ["at any time"]
  • Branch name: renovate/asgiref-3.x
  • Merge into: master
  • Upgrade asgiref to ==3.8.1
Update dependency cffi to v1.17.1
  • Schedule: ["at any time"]
  • Branch name: renovate/cffi-1.x
  • Merge into: master
  • Upgrade cffi to ==1.17.1
Update dependency Flask to v2.3.3
  • Schedule: ["at any time"]
  • Branch name: renovate/flask-2.x
  • Merge into: master
  • Upgrade Flask to ==2.3.3
Update dependency itsdangerous to v2.2.0
  • Schedule: ["at any time"]
  • Branch name: renovate/itsdangerous-2.x
  • Merge into: master
  • Upgrade itsdangerous to ==2.2.0
Update dependency pycparser to v2.22
  • Schedule: ["at any time"]
  • Branch name: renovate/pycparser-2.x
  • Merge into: master
  • Upgrade pycparser to ==2.22
Update dependency pytest-mock to v3.14.0
  • Schedule: ["at any time"]
  • Branch name: renovate/pytest-mock-3.x
  • Merge into: master
  • Upgrade pytest-mock to ==3.14.0
Update dependency python to 3.13
  • Schedule: ["at any time"]
  • Branch name: renovate/python-3.x
  • Merge into: master
  • Upgrade python to 3.13
  • Upgrade python to 3.13
Update dependency python-dateutil to v2.9.0.post0
  • Schedule: ["at any time"]
  • Branch name: renovate/python-dateutil-2.x
  • Merge into: master
  • Upgrade python-dateutil to ==2.9.0.post0
Update dependency six to v1.17.0
  • Schedule: ["at any time"]
  • Branch name: renovate/six-1.x
  • Merge into: master
  • Upgrade six to ==1.17.0
Update actions/checkout action to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-checkout-4.x
  • Merge into: master
  • Upgrade actions/checkout to v4
Update actions/setup-python action to v5
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-setup-python-5.x
  • Merge into: master
  • Upgrade actions/setup-python to v5
Update dependency aniso8601 to v10
  • Schedule: ["at any time"]
  • Branch name: renovate/aniso8601-10.x
  • Merge into: master
  • Upgrade aniso8601 to ==10.0.1
Update dependency Flask to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/flask-3.x
  • Merge into: master
  • Upgrade Flask to ==3.1.0
Update dependency MarkupSafe to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/markupsafe-3.x
  • Merge into: master
  • Upgrade MarkupSafe to ==3.0.2
Update dependency pytz to v2025
  • Schedule: ["at any time"]
  • Branch name: renovate/pytz-2025.x
  • Merge into: master
  • Upgrade pytz to ==2025.2

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants