Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Renovate #401

Merged
merged 3 commits into from
Jun 27, 2022
Merged

Conversation

renovate-bot
Copy link
Contributor

Mend Renovate

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • .github/actions/detect-workflow/Dockerfile (dockerfile)
  • .github/workflows/builder_go_slsa3.yml (github-actions)
  • .github/workflows/codeql-analysis.yml (github-actions)
  • .github/workflows/generator_generic_slsa3.yml (github-actions)
  • .github/workflows/pre-submit.e2e.generic.default.yml (github-actions)
  • .github/workflows/pre-submit.e2e.go.config-ldflags-main-dir.yml (github-actions)
  • .github/workflows/pre-submit.units.yml (github-actions)
  • .github/workflows/release.yml (github-actions)
  • .github/actions/detect-workflow/go.mod (gomod)
  • go.mod (gomod)
  • internal/builders/go/e2e-presubmits/go.mod (gomod)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Enable Renovate Dependency Dashboard creation
  • If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
  • Ignore node_modules, bower_components, vendor and various test/tests directories
  • Autodetect whether to pin dependencies or maintain ranges
  • Rate limit PR creation to a maximum of two per hour
  • Limit to maximum 10 open PRs at any time
  • Group known monorepo packages together
  • Use curated list of recommended non-monorepo package groupings
  • A collection of workarounds for known problems with packages

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.


What to Expect

With your current configuration, Renovate will create 11 Pull Requests:

Update actions/checkout digest to 2541b12
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-checkout-digest
  • Merge into: main
  • Upgrade actions/checkout to 2541b1294d2704b0964813337f33b291d3f8596b
Update actions/download-artifact digest to 076f0f7
  • Schedule: ["at any time"]
  • Branch name: renovate/actions-download-artifact-digest
  • Merge into: main
  • Upgrade actions/download-artifact to 076f0f7dd036d87e8e04f5f00d614e790308961b
Update gcr.io/distroless/static digest to 2ad9501
  • Schedule: ["at any time"]
  • Branch name: renovate/gcr.io-distroless-static-digest
  • Merge into: main
  • Upgrade gcr.io/distroless/static to sha256:2ad95019a0cbf07e0f917134f97dd859aaccc09258eb94edcb91674b3c1f448f
Update golang digest to a452d62
  • Schedule: ["at any time"]
  • Branch name: renovate/golang-digest
  • Merge into: main
  • Upgrade golang to sha256:a452d6273ad03a47c2f29b898d6bb57630e77baf839651ef77d03e4e049c5bf3
Update golang.org/x/oauth2 digest to fd043fe
  • Schedule: ["at any time"]
  • Branch name: renovate/golang.org-x-oauth2-digest
  • Merge into: main
  • Upgrade golang.org/x/oauth2 to fd043fe589d2d1486b6af56f44a691e819752a23
Update slsa-framework/slsa-github-generator digest to 201180e
  • Schedule: ["at any time"]
  • Branch name: renovate/slsa-framework-slsa-github-generator-digest
  • Merge into: main
  • Upgrade slsa-framework/slsa-github-generator to 201180e429eec52ccd5eb54e514296b13d0de53c
Update softprops/action-gh-release digest to 50195ba
  • Schedule: ["at any time"]
  • Branch name: renovate/softprops-action-gh-release-digest
  • Merge into: main
  • Upgrade softprops/action-gh-release to 50195ba7f6f93d1ac97ba8332a178e008ad176aa
Update module github.com/slsa-framework/slsa-github-generator to v0.0.2
Update module github.com/sigstore/sigstore to v1.3.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-sigstore-sigstore-1.x
  • Merge into: main
  • Upgrade github.com/sigstore/sigstore to v1.3.0
Update module github.com/coreos/go-oidc to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/github.com-coreos-go-oidc-3.x
  • Merge into: main
  • Upgrade github.com/coreos/go-oidc to v3.2.0
Update module github.com/slsa-framework/slsa-github-generator to v1

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Mend Renovate. View repository job log here.

@laurentsimon
Copy link
Collaborator

batched PR not yet supported renovatebot/renovate#4404

@laurentsimon
Copy link
Collaborator

Let's give renovatebot a try!

@laurentsimon laurentsimon enabled auto-merge (squash) June 27, 2022 17:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants