Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/checks.yml (github-actions)
• .github/workflows/codeql.yml (github-actions)
• .github/workflows/format_pixeebot_prs.yaml (github-actions)
• .github/workflows/release-integration-test-framework-images.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/sonar_pixee.yml (github-actions)
• gradle.properties (gradle)
• settings.gradle.kts (gradle)
• build.gradle.kts (gradle)
• community-codemods/build.gradle.kts (gradle)
• core-codemods/build.gradle.kts (gradle)
• framework/codemodder-base/build.gradle.kts (gradle)
• framework/codemodder-testutils/build.gradle.kts (gradle)
• gradle/buildlibs.versions.toml (gradle)
• gradle/libs.versions.toml (gradle)
• gradle/testlibs.versions.toml (gradle)
• gradle/build-plugins/settings.gradle.kts (gradle)
• gradle/build-plugins/build.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.base.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.core-codemods-docs.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.java-library.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.java-test-fixtures.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.java.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.maven-publish.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.openai.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.publishing-root.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.runner.gradle.kts (gradle)
• gradle/build-plugins/src/main/kotlin/io.codemodder.spotless.gradle.kts (gradle)
• gradle/build-settings/settings.gradle.kts (gradle)
• gradle/build-settings/build.gradle.kts (gradle)
• gradle/build-settings/src/main/kotlin/io.codemodder.repositories.settings.gradle.kts (gradle)
• plugins/codemodder-plugin-appscan/build.gradle.kts (gradle)
• plugins/codemodder-plugin-aws/build.gradle.kts (gradle)
• plugins/codemodder-plugin-codeql/build.gradle.kts (gradle)
• plugins/codemodder-plugin-defectdojo/build.gradle.kts (gradle)
• plugins/codemodder-plugin-llm/build.gradle.kts (gradle)
• plugins/codemodder-plugin-maven/build.gradle.kts (gradle)
• plugins/codemodder-plugin-pmd/build.gradle.kts (gradle)
• plugins/codemodder-plugin-semgrep/build.gradle.kts (gradle)
• plugins/codemodder-plugin-sonar/build.gradle.kts (gradle)
• sonar-api-model/build.gradle.kts (gradle)
• gradle/wrapper/gradle-wrapper.properties (gradle-wrapper)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 65 Pull Requests:

Update dependency com.azure:azure-ai-openai to v1.0.0-beta.16

• Schedule: ["at any time"]
• Branch name: renovate/azure-sdk-for-java-monorepo
• Merge into: main
• Upgrade com.azure:azure-ai-openai to 1.0.0-beta.16

Update dependency com.fasterxml.woodstox:woodstox-core to v7.1.1

• Schedule: ["at any time"]
• Branch name: renovate/woodstox
• Merge into: main
• Upgrade com.fasterxml.woodstox:woodstox-core to 7.1.1

Update dependency com.github.lalyos:jfiglet to v0.0.9

• Schedule: ["at any time"]
• Branch name: renovate/com.github.lalyos-jfiglet-0.x
• Merge into: main
• Upgrade com.github.lalyos:jfiglet to 0.0.9

Update dependency io.github.classgraph:classgraph to v4.8.179

• Schedule: ["at any time"]
• Branch name: renovate/io.github.classgraph-classgraph-4.x
• Merge into: main
• Upgrade io.github.classgraph:classgraph to 4.8.179

Update javaparser.core to v3.26.4

• Schedule: ["at any time"]
• Branch name: renovate/javaparser.core
• Merge into: main
• Upgrade com.github.javaparser:javaparser-symbol-solver-core to 3.26.4
• Upgrade com.github.javaparser:javaparser-core to 3.26.4

Update picocli to v4.7.7

• Schedule: ["at any time"]
• Branch name: renovate/picocli
• Merge into: main
• Upgrade info.picocli:picocli-codegen to 4.7.7
• Upgrade info.picocli:picocli to 4.7.7

Update pixee/upload-tool-results-action action to v1.1.3

• Schedule: ["at any time"]
• Branch name: renovate/pixee-upload-tool-results-action-1.x
• Merge into: main
• Upgrade pixee/upload-tool-results-action to v1.1.3

Update slf4j monorepo to v2.0.17

• Schedule: ["at any time"]
• Branch name: renovate/slf4j-monorepo
• Merge into: main
• Upgrade org.slf4j:slf4j-simple to 2.0.17
• Upgrade org.slf4j:slf4j-api to 2.0.17

Update actions/setup-java action to v3.14.1

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-3.x
• Merge into: main
• Upgrade actions/setup-java to 17f84c3641ba7b8f6deff6309fc4c864478f5d62

Update aws-java-sdk-v2 monorepo to v2.31.62

• Schedule: ["at any time"]
• Branch name: renovate/aws-java-sdk-v2-monorepo
• Merge into: main
• Upgrade software.amazon.awssdk:sso to 2.31.62
• Upgrade software.amazon.awssdk:translate to 2.31.62

Update dependency ch.qos.logback:logback-classic to v1.5.18

• Schedule: ["at any time"]
• Branch name: renovate/logback-monorepo
• Merge into: main
• Upgrade ch.qos.logback:logback-classic to 1.5.18

Update dependency com.github.albfernandez:juniversalchardet to v2.5.0

• Schedule: ["at any time"]
• Branch name: renovate/com.github.albfernandez-juniversalchardet-2.x
• Merge into: main
• Upgrade com.github.albfernandez:juniversalchardet to 2.5.0

Update dependency com.github.zafarkhaja:java-semver to v0.10.2

• Schedule: ["at any time"]
• Branch name: renovate/com.github.zafarkhaja-java-semver-0.x
• Merge into: main
• Upgrade com.github.zafarkhaja:java-semver to 0.10.2

Update dependency com.google.auto.value:auto-value-annotations to v1.11.0

• Schedule: ["at any time"]
• Branch name: renovate/auto.value
• Merge into: main
• Upgrade com.google.auto.value:auto-value-annotations to 1.11.0

Update dependency com.google.code.gson:gson to v2.13.1

• Schedule: ["at any time"]
• Branch name: renovate/com.google.code.gson-gson-2.x
• Merge into: main
• Upgrade com.google.code.gson:gson to 2.13.1

Update dependency com.theokanning.openai-gpt3-java:service to v0.18.2

• Schedule: ["at any time"]
• Branch name: renovate/openai
• Merge into: main
• Upgrade com.theokanning.openai-gpt3-java:service to 0.18.2

Update dependency gradle to v8.14.2

• Schedule: ["at any time"]
• Branch name: renovate/gradle-8.x
• Merge into: main
• Upgrade gradle to 8.14.2

Update dependency io.codemodder:codetf-java to v4.6.0

• Schedule: ["at any time"]
• Branch name: renovate/io.codemodder-codetf-java-4.x
• Merge into: main
• Upgrade io.codemodder:codetf-java to 4.6.0

Update dependency io.github.java-diff-utils:java-diff-utils to v4.15

• Schedule: ["at any time"]
• Branch name: renovate/io.github.java-diff-utils-java-diff-utils-4.x
• Merge into: main
• Upgrade io.github.java-diff-utils:java-diff-utils to 4.15

Update dependency me.tongfei:progressbar to v0.10.1

• Schedule: ["at any time"]
• Branch name: renovate/me.tongfei-progressbar-0.x
• Merge into: main
• Upgrade me.tongfei:progressbar to 0.10.1

Update dependency net.sourceforge.pmd:pmd-java to v7.14.0

• Schedule: ["at any time"]
• Branch name: renovate/net.sourceforge.pmd-pmd-java-7.x
• Merge into: main
• Upgrade net.sourceforge.pmd:pmd-java to 7.14.0

Update dependency org.apache.commons:commons-collections4 to v4.5.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.commons-commons-collections4-4.x
• Merge into: main
• Upgrade org.apache.commons:commons-collections4 to 4.5.0

Update dependency org.apache.commons:commons-jexl3 to v3.5.0

• Schedule: ["at any time"]
• Branch name: renovate/commons.jexl
• Merge into: main
• Upgrade org.apache.commons:commons-jexl3 to 3.5.0

Update dependency org.apache.commons:commons-lang3 to v3.17.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.commons-commons-lang3-3.x
• Merge into: main
• Upgrade org.apache.commons:commons-lang3 to 3.17.0

Update dependency org.apache.maven:maven-model to v3.9.10

• Schedule: ["at any time"]
• Branch name: renovate/maven
• Merge into: main
• Upgrade org.apache.maven:maven-model to 3.9.10

Update dependency org.assertj:assertj-core to v3.27.3

• Schedule: ["at any time"]
• Branch name: renovate/org.assertj-assertj-core-3.x
• Merge into: main
• Upgrade org.assertj:assertj-core to 3.27.3

Update dependency org.eclipse.jgit:org.eclipse.jgit to v3.7.1.201504261725-r

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse.jgit-org.eclipse.jgit-3.x
• Merge into: main
• Upgrade org.eclipse.jgit:org.eclipse.jgit to 3.7.1.201504261725-r

Update dependency org.immutables:value to v2.10.1

• Schedule: ["at any time"]
• Branch name: renovate/org.immutables-value-2.x
• Merge into: main
• Upgrade org.immutables:value to 2.10.1

Update dependency org.jetbrains:annotations to v23.1.0

• Schedule: ["at any time"]
• Branch name: renovate/org.jetbrains-annotations-23.x
• Merge into: main
• Upgrade org.jetbrains:annotations to 23.1.0

Update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v1.9.25

• Schedule: ["at any time"]
• Branch name: renovate/kotlin-monorepo
• Merge into: main
• Upgrade org.jetbrains.kotlin:kotlin-stdlib-jdk8 to 1.9.25

Update dependency org.mockito:mockito-core to v4.11.0

• Schedule: ["at any time"]
• Branch name: renovate/mockito-monorepo
• Merge into: main
• Upgrade org.mockito:mockito-core to 4.11.0

Update dependency org.testcontainers:testcontainers to v1.21.1

• Schedule: ["at any time"]
• Branch name: renovate/testcontainers-java-monorepo
• Merge into: main
• Upgrade org.testcontainers:testcontainers to 1.21.1

Update dependency org.xmlunit:xmlunit-assertj3 to v2.10.2

• Schedule: ["at any time"]
• Branch name: renovate/org.xmlunit-xmlunit-assertj3-2.x
• Merge into: main
• Upgrade org.xmlunit:xmlunit-assertj3 to 2.10.2

Update dependency org.xmlunit:xmlunit-core to v2.10.2

• Schedule: ["at any time"]
• Branch name: renovate/org.xmlunit-xmlunit-core-2.x
• Merge into: main
• Upgrade org.xmlunit:xmlunit-core to 2.10.2

Update dependency python to 3.13

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.13

Update docker/build-push-action action to v5.4.0

• Schedule: ["at any time"]
• Branch name: renovate/docker-build-push-action-5.x
• Merge into: main
• Upgrade docker/build-push-action to ca052bb54ab0790a636c9b5f226502c73d547a25

Update docker/login-action action to v3.4.0

• Schedule: ["at any time"]
• Branch name: renovate/docker-login-action-3.x
• Merge into: main
• Upgrade docker/login-action to 74a5d142397b4f367a81961eba4e8cd7edddf772

Update docker/setup-buildx-action action to v3.10.0

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-buildx-action-3.x
• Merge into: main
• Upgrade docker/setup-buildx-action to b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2

Update gradle/gradle-build-action action to v2.12.0

• Schedule: ["at any time"]
• Branch name: renovate/gradle-gradle-build-action-2.x
• Merge into: main
• Upgrade gradle/gradle-build-action to a8f75513eafdebd8141bd1cd4e30fcd194af8dfa

Update jackson monorepo to v2.19.0

• Schedule: ["at any time"]
• Branch name: renovate/jackson-monorepo
• Merge into: main
• Upgrade com.fasterxml.jackson.dataformat:jackson-dataformat-yaml to 2.19.0
• Upgrade com.fasterxml.jackson.core:jackson-core to 2.19.0

Update junit5 monorepo to v5.13.1

• Schedule: ["at any time"]
• Branch name: renovate/junit5-monorepo
• Merge into: main
• Upgrade org.junit.jupiter:junit-jupiter-engine to 5.13.1
• Upgrade org.junit.jupiter:junit-jupiter-params to 5.13.1
• Upgrade org.junit.jupiter:junit-jupiter-api to 5.13.1

Update plugin com.gradle.enterprise to v3.19.2

• Schedule: ["at any time"]
• Branch name: renovate/com.gradle.enterprise-3.x
• Merge into: main
• Upgrade com.gradle.enterprise to 3.19.2

Update spotless to v6.25.0

• Schedule: ["at any time"]
• Branch name: renovate/spotless
• Merge into: main
• Upgrade com.diffplug.spotless to 6.25.0
• Upgrade com.diffplug.spotless:spotless-plugin-gradle to 6.25.0

Update actions/checkout action

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to v4
• Upgrade actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683

Update actions/setup-java action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-4.x
• Merge into: main
• Upgrade actions/setup-java to v4
• Upgrade actions/setup-java to c5195efecf7bdfc987ee8bae7a71cb8b11521c00

Update actions/setup-python action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-5.x
• Merge into: main
• Upgrade actions/setup-python to v5

Update dependency com.google.inject:guice to v7

• Schedule: ["at any time"]
• Branch name: renovate/major-guice
• Merge into: main
• Upgrade com.google.inject:guice to 7.0.0

Update dependency com.google.inject:guice to v7

• Schedule: ["at any time"]
• Branch name: renovate/com.google.inject-guice-7.x
• Merge into: main
• Upgrade com.google.inject:guice to 7.0.0

Update dependency com.netflix.nebula.maven-publish:com.netflix.nebula.maven-publish.gradle.plugin to v21

• Schedule: ["at any time"]
• Branch name: renovate/com.netflix.nebula.maven-publish-com.netflix.nebula.maven-publish.gradle.plugin-21.x
• Merge into: main
• Upgrade com.netflix.nebula.maven-publish:com.netflix.nebula.maven-publish.gradle.plugin to 21.2.0

Update dependency com.netflix.nebula.maven-scm:com.netflix.nebula.maven-scm.gradle.plugin to v21

• Schedule: ["at any time"]
• Branch name: renovate/com.netflix.nebula.maven-scm-com.netflix.nebula.maven-scm.gradle.plugin-21.x
• Merge into: main
• Upgrade com.netflix.nebula.maven-scm:com.netflix.nebula.maven-scm.gradle.plugin to 21.2.0

Update dependency jaxen:jaxen to v2

• Schedule: ["at any time"]
• Branch name: renovate/jaxen-jaxen-2.x
• Merge into: main
• Upgrade jaxen:jaxen to 2.0.0

Update dependency net.logstash.logback:logstash-logback-encoder to v8

• Schedule: ["at any time"]
• Branch name: renovate/net.logstash.logback-logstash-logback-encoder-8.x
• Merge into: main
• Upgrade net.logstash.logback:logstash-logback-encoder to 8.1

Update dependency org.eclipse.jgit:org.eclipse.jgit to v7

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse.jgit-org.eclipse.jgit-7.x
• Merge into: main
• Upgrade org.eclipse.jgit:org.eclipse.jgit to 7.3.0.202506031305-r

Update dependency org.jetbrains:annotations to v26

• Schedule: ["at any time"]
• Branch name: renovate/org.jetbrains-annotations-26.x
• Merge into: main
• Upgrade org.jetbrains:annotations to 26.0.2

Update dependency org.jetbrains.kotlin:kotlin-stdlib-jdk8 to v2

• Schedule: ["at any time"]
• Branch name: renovate/major-kotlin-monorepo
• Merge into: main
• Upgrade org.jetbrains.kotlin:kotlin-stdlib-jdk8 to 2.1.21

Update dependency org.mockito:mockito-core to v5

• Schedule: ["at any time"]
• Branch name: renovate/major-mockito-monorepo
• Merge into: main
• Upgrade org.mockito:mockito-core to 5.18.0

Update docker/build-push-action action to v6

• Schedule: ["at any time"]
• Branch name: renovate/docker-build-push-action-6.x
• Merge into: main
• Upgrade docker/build-push-action to 263435318d21b8e681c14492fe198d362a7d2c83

Update github/codeql-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-3.x
• Merge into: main
• Upgrade github/codeql-action to v3

Update gradle/actions action to v4

• Schedule: ["at any time"]
• Branch name: renovate/gradle-actions-4.x
• Merge into: main
• Upgrade gradle/actions to v4

Update gradle/gradle-build-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/gradle-gradle-build-action-3.x
• Merge into: main
• Upgrade gradle/gradle-build-action to v3
• Upgrade gradle/gradle-build-action to ac2d340dc04d9e1113182899e983b5400c17cda1

Update javahamcrest monorepo to v3 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-javahamcrest-monorepo
• Merge into: main
• Upgrade org.hamcrest:hamcrest-library to 3.0
• Upgrade org.hamcrest:hamcrest-core to 3.0

Update pixee/upload-tool-results-action action to v2

• Schedule: ["at any time"]
• Branch name: renovate/pixee-upload-tool-results-action-2.x
• Merge into: main
• Upgrade pixee/upload-tool-results-action to v2.5.0

Update plugin nexus-publish to v2

• Schedule: ["at any time"]
• Branch name: renovate/io.github.gradle-nexus.publish-plugin-2.x
• Merge into: main
• Upgrade io.github.gradle-nexus.publish-plugin to 2.0.0

Update spotless to v7 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-spotless
• Merge into: main
• Upgrade com.diffplug.spotless to 7.0.4
• Upgrade com.diffplug.spotless:spotless-plugin-gradle to 7.0.4

Update stefanzweifel/git-auto-commit-action action to v6

• Schedule: ["at any time"]
• Branch name: renovate/stefanzweifel-git-auto-commit-action-6.x
• Merge into: main
• Upgrade stefanzweifel/git-auto-commit-action to v6

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[CLAassistant]

All committers have signed the CLA.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud