Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• dockerfiles/dockerfile.simplatform (dockerfile)
• dockerfiles/dockerfile.simplatform-amd64 (dockerfile)
• galasa-simplatform-application/galasa-simplatform-3270/Dockerfile (dockerfile)
• galasa-simplatform-application/galasa-simplatform-webapp/Dockerfile (dockerfile)
• .github/workflows/build.yaml (github-actions)
• .github/workflows/pr-build.yaml (github-actions)
• .github/workflows/test.yaml (github-actions)
• galasa-simbank-tests/dev.galasa.simbank.manager/build-example.gradle (gradle)
• galasa-simbank-tests/dev.galasa.simbank.manager/settings-example.gradle (gradle)
• galasa-simbank-tests/dev.galasa.simbank.tests/build-example.gradle (gradle)
• galasa-simbank-tests/dev.galasa.simbank.tests/settings-example.gradle (gradle)
• galasa-simbank-tests/dev.galasa.simbank.gherkin.tests/pom.xml (maven)
• galasa-simbank-tests/dev.galasa.simbank.manager/pom.xml (maven)
• galasa-simbank-tests/dev.galasa.simbank.obr/pom.xml (maven)
• galasa-simbank-tests/dev.galasa.simbank.tests/pom.xml (maven)
• galasa-simbank-tests/pom.xml (maven)
• galasa-simplatform-application/galasa-simplatform-3270/pom.xml (maven)
• galasa-simplatform-application/galasa-simplatform-webapp/pom.xml (maven)
• galasa-simplatform-application/pom.xml (maven)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

---

What to Expect

With your current configuration, Renovate will create 30 Pull Requests:

Update dependency org.apache.commons:commons-lang3 to v3.18.0 [SECURITY]

• Branch name: renovate/maven-org.apache.commons-commons-lang3-vulnerability
• Merge into: main
• Upgrade org.apache.commons:commons-lang3 to 3.18.0

Update dependency org.apache.derby:derby to v10.15.1.3 [SECURITY]

• Branch name: renovate/maven-org.apache.derby-derby-vulnerability
• Merge into: main
• Upgrade org.apache.derby:derby to 10.15.1.3

Update dependency commons-logging:commons-logging to v1.3.6

• Schedule: ["at any time"]
• Branch name: renovate/commons-logging-commons-logging-1.x
• Merge into: main
• Upgrade commons-logging:commons-logging to 1.3.6

Update dependency junit:junit to v4.13.2

• Schedule: ["at any time"]
• Branch name: renovate/junit-junit-4.x
• Merge into: main
• Upgrade junit:junit to 4.13.2

Update dependency org.apache.felix:maven-bundle-plugin to v5.1.9

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.felix-maven-bundle-plugin-5.x
• Merge into: main
• Upgrade org.apache.felix:maven-bundle-plugin to 5.1.9

Update dependency org.apache.httpcomponents:fluent-hc to v4.5.14

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.httpcomponents-fluent-hc-4.x
• Merge into: main
• Upgrade org.apache.httpcomponents:fluent-hc to 4.5.14

Update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-shade-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-shade-plugin to 3.6.2

Update dependency com.google.code.gson:gson to v2.14.0

• Schedule: ["at any time"]
• Branch name: renovate/com.google.code.gson-gson-2.x
• Merge into: main
• Upgrade com.google.code.gson:gson to 2.14.0

Update dependency org.apache.derby:derbyclient to v10.17.1.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.derby-derbyclient-10.x
• Merge into: main
• Upgrade org.apache.derby:derbyclient to 10.17.1.0
• Upgrade org.apache.derby:derbyclient to 10.17.+

Update dependency org.apache.derby:derbynet to v10.17.1.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.derby-derbynet-10.x
• Merge into: main
• Upgrade org.apache.derby:derbynet to 10.17.1.0

Update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.8.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-assembly-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-assembly-plugin to 3.8.0

Update dependency org.apache.maven.plugins:maven-gpg-plugin to v1.6

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-gpg-plugin-1.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-gpg-plugin to 1.6

Update dependency org.apache.maven.plugins:maven-jar-plugin to v2.6

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-jar-plugin-2.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-jar-plugin to 2.6

Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-javadoc-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-javadoc-plugin to 3.12.0

Update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.15.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-plugin-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-plugin-plugin to 3.15.2

Update dependency org.apache.maven.plugins:maven-source-plugin to v3.4.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-source-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-source-plugin to 3.4.0

Update dependency org.apache.maven.plugins:maven-war-plugin to v3.5.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-war-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-war-plugin to 3.5.1

Update dependency org.osgi:org.osgi.service.component.annotations to v1.5.1

• Schedule: ["at any time"]
• Branch name: renovate/org.osgi-org.osgi.service.component.annotations-1.x
• Merge into: main
• Upgrade org.osgi:org.osgi.service.component.annotations to 1.5.1

Update plugin biz.aQute.bnd.builder to v7.2.3

• Schedule: ["at any time"]
• Branch name: renovate/biz.aqute.bnd.builder-7.x
• Merge into: main
• Upgrade biz.aQute.bnd.builder to 7.2.3

Update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to v6

Update actions/setup-java action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-5.x
• Merge into: main
• Upgrade actions/setup-java to v5

Update dependency javax.servlet:javax.servlet-api to v4

• Schedule: ["at any time"]
• Branch name: renovate/javax.servlet-javax.servlet-api-4.x
• Merge into: main
• Upgrade javax.servlet:javax.servlet-api to 4.0.1

Update dependency org.apache.felix:maven-bundle-plugin to v6

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.felix-maven-bundle-plugin-6.x
• Merge into: main
• Upgrade org.apache.felix:maven-bundle-plugin to 6.0.2

Update dependency org.apache.maven.plugins:maven-gpg-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-gpg-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-gpg-plugin to 3.2.8

Update dependency org.apache.maven.plugins:maven-jar-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-jar-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-jar-plugin to 3.5.0

Update docker/build-push-action action to v7

• Schedule: ["at any time"]
• Branch name: renovate/docker-build-push-action-7.x
• Merge into: main
• Upgrade docker/build-push-action to v7

Update docker/login-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-login-action-4.x
• Merge into: main
• Upgrade docker/login-action to v4

Update GitHub Artifact Actions (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/download-artifact to v8
• Upgrade actions/upload-artifact to v7

Update gradle/actions action to v6

• Schedule: ["at any time"]
• Branch name: renovate/gradle-actions-6.x
• Merge into: main
• Upgrade gradle/actions to v6

Update tomcat Docker tag to v11

• Schedule: ["at any time"]
• Branch name: renovate/tomcat-11.x
• Merge into: main
• Upgrade tomcat to 11-jre17-temurin

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.