Skip to content

Comments

Configure Renovate#76

Open
lucca-renovate[bot] wants to merge 1 commit intomasterfrom
renovate/configure
Open

Configure Renovate#76
lucca-renovate[bot] wants to merge 1 commit intomasterfrom
renovate/configure

Conversation

@lucca-renovate
Copy link

@lucca-renovate lucca-renovate bot commented Nov 28, 2023

Description

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • NExtends.Tests/NExtends.Tests.csproj (nuget)
  • NExtends/NExtends.csproj (nuget)
  • global.json (nuget)
  • renovate.json (renovate-config-presets)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Show only the Age and Confidence Merge Confidence badges for pull requests.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
  • Correctly link to the source code for golang.org/x packages
  • Link to pkg.go.dev/... for golang.org/x packages' title
  • Pin Docker digests.
  • Pin github-action digests.
  • Enable Renovate configuration migration PRs when needed.
  • Pin dependency versions for development dependencies.
  • Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
  • Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
  • Run Renovate on following schedule: before 9am every weekday,after 7pm every weekday,every weekend

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch and select the Retry/Rebase checkbox below. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 11 Pull Requests:

[SECURITY] Update dependency Newtonsoft.Json to v13
  • Branch name: renovate/nuget-newtonsoft-json-vulnerability
  • Merge into: master
  • Upgrade Newtonsoft.Json to 13.0.1
Update dependency dotnet-sdk to v3.1.426
  • Schedule: ["before 9am every weekday","after 7pm every weekday","every weekend"]
  • Branch name: renovate/dotnet-sdk
  • Merge into: master
  • Upgrade dotnet-sdk to 3.1.426
Update dependency Microsoft.NET.Test.Sdk to 16.11.0
  • Schedule: ["before 9am every weekday","after 7pm every weekday","every weekend"]
  • Branch name: renovate/vstest-monorepo
  • Merge into: master
  • Upgrade Microsoft.NET.Test.Sdk to 16.11.0
Update dotnet monorepo
Update xunit monorepo
  • Schedule: ["before 9am every weekday","after 7pm every weekday","every weekend"]
  • Branch name: renovate/xunit-monorepo
  • Merge into: master
  • Upgrade xunit to 2.9.2
  • Upgrade xunit.runner.visualstudio to 2.8.2
Update dependency coverlet.collector to v8
  • Schedule: ["before 9am every weekday","after 7pm every weekday","every weekend"]
  • Branch name: renovate/coverlet-collector-8-x
  • Merge into: master
  • Upgrade coverlet.collector to 8.0.0
Update dependency dotnet-sdk to v10
  • Schedule: ["before 9am every weekday","after 7pm every weekday","every weekend"]
  • Branch name: renovate/major-dotnet-sdk
  • Merge into: master
  • Upgrade dotnet-sdk to 10.0.103
Update dependency Microsoft.NET.Test.Sdk to v18
  • Schedule: ["before 9am every weekday","after 7pm every weekday","every weekend"]
  • Branch name: renovate/major-vstest-monorepo
  • Merge into: master
  • Upgrade Microsoft.NET.Test.Sdk to 18.0.1
Update dependency System.Runtime.CompilerServices.Unsafe to v6
  • Schedule: ["before 9am every weekday","after 7pm every weekday","every weekend"]
  • Branch name: renovate/system-runtime-compilerservices-unsafe-6-x
  • Merge into: master
  • Upgrade System.Runtime.CompilerServices.Unsafe to 6.1.2
Update dependency xunit.runner.visualstudio to v3
  • Schedule: ["before 9am every weekday","after 7pm every weekday","every weekend"]
  • Branch name: renovate/major-xunit-monorepo
  • Merge into: master
  • Upgrade xunit.runner.visualstudio to 3.1.5
Update dotnet monorepo (major)

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Renovate Bot.

@lucca-renovate lucca-renovate bot added 🔨 Technical dependencies Pull requests that update a dependency file 📦 labels Nov 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file 🔨 Technical 📦

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants