Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Renovate #1

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Configure Renovate #1

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Dec 2, 2019

WhiteSource Renovate

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • package.json (npm)
  • .nvmrc (nvm)
  • .travis.yml (travis)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Separate major versions of dependencies into individual branches/PRs
  • Do not separate patch and minor upgrades into separate PRs for the same dependency
  • Upgrade to unstable versions only if the existing version is unstable
  • Raise PRs immediately (after branch is created)
  • If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
  • Keep existing branches updated even when not scheduled
  • Disable automerging feature - wait for humans to merge all PRs
  • Ignore node_modules, bower_components, vendor and various test/tests directories
  • Autodetect whether to pin dependencies or maintain ranges
  • Rate limit PR creation to a maximum of two per hour
  • Limit to maximum 20 open PRs at any time
  • Group known monorepo packages together
  • Use curated list of recommended non-monorepo package groupings
  • Ignore spring cloud 1.x releases
  • Ignore http4s digest-based 1.x milestones

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.


What to Expect

With your current configuration, Renovate will create 47 Pull Requests:

Update dependency bl to 1.2.3 [SECURITY]
  • Branch name: renovate/npm-bl-vulnerability
  • Merge into: master
  • Upgrade bl to 1.2.3
Update dependency braces to 2.3.1 [SECURITY]
  • Branch name: renovate/npm-braces-vulnerability
  • Merge into: master
  • Upgrade braces to 2.3.1
Update dependency concat-stream to 1.5.2 [SECURITY]
  • Branch name: renovate/npm-concat-stream-vulnerability
  • Merge into: master
  • Upgrade concat-stream to 1.5.2
Update dependency cryptiles to 4.1.2 [SECURITY]
  • Branch name: renovate/npm-cryptiles-vulnerability
  • Merge into: master
  • Upgrade cryptiles to 4.1.2
Update dependency debug to 2.6.9 [SECURITY]
  • Branch name: renovate/npm-debug-vulnerability
  • Merge into: master
  • Upgrade debug to 2.6.9
Update dependency deep-extend to 0.5.1 [SECURITY]
  • Branch name: renovate/npm-deep-extend-vulnerability
  • Merge into: master
  • Upgrade deep-extend to 0.5.1
Update dependency diff to 3.5.0 [SECURITY]
  • Branch name: renovate/npm-diff-vulnerability
  • Merge into: master
  • Upgrade diff to 3.5.0
Update dependency elliptic to 6.5.4 [SECURITY]
  • Branch name: renovate/npm-elliptic-vulnerability
  • Merge into: master
  • Upgrade elliptic to 6.5.4
Update dependency extend to 3.0.2 [SECURITY]
  • Branch name: renovate/npm-extend-vulnerability
  • Merge into: master
  • Upgrade extend to 3.0.2
Update dependency fresh to 0.5.2 [SECURITY]
  • Branch name: renovate/npm-fresh-vulnerability
  • Merge into: master
  • Upgrade fresh to 0.5.2
Update dependency growl to 1.10.0 [SECURITY]
  • Branch name: renovate/npm-growl-vulnerability
  • Merge into: master
  • Upgrade growl to 1.10.0
Update dependency handlebars to 4.5.3 [SECURITY]
  • Branch name: renovate/npm-handlebars-vulnerability
  • Merge into: master
  • Upgrade handlebars to 4.5.3
Update dependency highcharts-export-server to 2.1.0 [SECURITY]
  • Branch name: renovate/npm-highcharts-export-server-vulnerability
  • Merge into: master
  • Upgrade highcharts-export-server to 2.1.0
Update dependency hoek to 4.2.1 [SECURITY]
  • Branch name: renovate/npm-hoek-vulnerability
  • Merge into: master
  • Upgrade hoek to 4.2.1
Update dependency js-yaml to 3.13.1 [SECURITY]
  • Branch name: renovate/npm-js-yaml-vulnerability
  • Merge into: master
  • Upgrade js-yaml to 3.13.1
Update dependency just-extend to 4.0.0 [SECURITY]
  • Branch name: renovate/npm-just-extend-vulnerability
  • Merge into: master
  • Upgrade just-extend to 4.0.0
Update dependency lodash to 4.17.19 [SECURITY]
  • Branch name: renovate/npm-lodash-vulnerability
  • Merge into: master
  • Upgrade lodash to 4.17.19
Update dependency marked to 0.3.18 [SECURITY]
  • Branch name: renovate/npm-marked-vulnerability
  • Merge into: master
  • Upgrade marked to 0.3.18
Update dependency mime to 1.4.1 [SECURITY]
  • Branch name: renovate/npm-mime-vulnerability
  • Merge into: master
  • Upgrade mime to 1.4.1
Update dependency minimist to 0.2.1 [SECURITY]
  • Branch name: renovate/npm-minimist-vulnerability
  • Merge into: master
  • Upgrade minimist to 0.2.1
Update dependency randomatic to 3.0.0 [SECURITY]
  • Branch name: renovate/npm-randomatic-vulnerability
  • Merge into: master
  • Upgrade randomatic to 3.0.0
Update dependency sshpk to 1.13.2 [SECURITY]
  • Branch name: renovate/npm-sshpk-vulnerability
  • Merge into: master
  • Upgrade sshpk to 1.13.2
Update dependency stringstream to 0.0.6 [SECURITY]
  • Branch name: renovate/npm-stringstream-vulnerability
  • Merge into: master
  • Upgrade stringstream to 0.0.6
Update dependency underscore.string to 3.3.5 [SECURITY]
  • Branch name: renovate/npm-underscore.string-vulnerability
  • Merge into: master
  • Upgrade underscore.string to 3.3.5
Pin dependencies
Update babel monorepo
  • Schedule: ["at any time"]
  • Branch name: renovate/babel-monorepo
  • Merge into: master
  • Upgrade babel-core to 6.26.3
  • Upgrade babel-preset-env to 1.7.0
Update dependency chai to v4.3.4
  • Schedule: ["at any time"]
  • Branch name: renovate/chai-4.x
  • Merge into: master
  • Upgrade chai to 4.3.4
Update dependency coveralls to v3.1.0
  • Schedule: ["at any time"]
  • Branch name: renovate/coveralls-3.x
  • Merge into: master
  • Upgrade coveralls to 3.1.0
Update dependency grunt to v1.3.0
  • Schedule: ["at any time"]
  • Branch name: renovate/grunt-1.x
  • Merge into: master
  • Upgrade grunt to 1.3.0
Update dependency grunt-jsdoc to v2.4.1
  • Schedule: ["at any time"]
  • Branch name: renovate/grunt-jsdoc-2.x
  • Merge into: master
  • Upgrade grunt-jsdoc to 2.4.1
Update dependency jsdoc to v3.6.6
  • Schedule: ["at any time"]
  • Branch name: renovate/jsdoc-3.x
  • Merge into: master
  • Upgrade jsdoc to 3.6.6
Update dependency jsdoc-to-markdown to v3.0.4
  • Schedule: ["at any time"]
  • Branch name: renovate/jsdoc-to-markdown-3.x
  • Merge into: master
  • Upgrade jsdoc-to-markdown to 3.0.4
Update dependency rollup to v0.68.2
  • Schedule: ["at any time"]
  • Branch name: renovate/rollup-0.x
  • Merge into: master
  • Upgrade rollup to 0.68.2
Update dependency rollup-plugin-commonjs to v8.4.1
  • Schedule: ["at any time"]
  • Branch name: renovate/rollup-plugin-commonjs-8.x
  • Merge into: master
  • Upgrade rollup-plugin-commonjs to 8.4.1
Update dependency rollup-plugin-node-globals to v1.4.0
  • Schedule: ["at any time"]
  • Branch name: renovate/rollup-plugin-node-globals-1.x
  • Merge into: master
  • Upgrade rollup-plugin-node-globals to 1.4.0
Update dependency rollup-plugin-node-resolve to v3.4.0
  • Schedule: ["at any time"]
  • Branch name: renovate/rollup-plugin-node-resolve-3.x
  • Merge into: master
  • Upgrade rollup-plugin-node-resolve to 3.4.0
Update dependency sinon to v4.5.0
  • Schedule: ["at any time"]
  • Branch name: renovate/sinon-4.x
  • Merge into: master
  • Upgrade sinon to 4.5.0
Update dependency fs-extra to v9
  • Schedule: ["at any time"]
  • Branch name: renovate/fs-extra-9.x
  • Merge into: master
  • Upgrade fs-extra to ^9.0.0
Update dependency grunt-coveralls to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/grunt-coveralls-2.x
  • Merge into: master
  • Upgrade grunt-coveralls to 2.0.0
Update dependency jsdoc-to-markdown to v7
  • Schedule: ["at any time"]
  • Branch name: renovate/jsdoc-to-markdown-7.x
  • Merge into: master
  • Upgrade jsdoc-to-markdown to 7.0.1
Update dependency mocha to v8
  • Schedule: ["at any time"]
  • Branch name: renovate/mocha-8.x
  • Merge into: master
  • Upgrade mocha to 8.3.2
Update dependency rollup to v2
  • Schedule: ["at any time"]
  • Branch name: renovate/rollup-2.x
  • Merge into: master
  • Upgrade rollup to 2.43.1
Update dependency rollup-plugin-babel to v4
  • Schedule: ["at any time"]
  • Branch name: renovate/rollup-plugin-babel-4.x
  • Merge into: master
  • Upgrade rollup-plugin-babel to ^4.0.0
Update dependency rollup-plugin-commonjs to v10
  • Schedule: ["at any time"]
  • Branch name: renovate/rollup-plugin-commonjs-10.x
  • Merge into: master
  • Upgrade rollup-plugin-commonjs to 10.1.0
Update dependency rollup-plugin-node-resolve to v5
  • Schedule: ["at any time"]
  • Branch name: renovate/rollup-plugin-node-resolve-5.x
  • Merge into: master
  • Upgrade rollup-plugin-node-resolve to 5.2.0
Update dependency sinon to v10
  • Schedule: ["at any time"]
  • Branch name: renovate/sinon-10.x
  • Merge into: master
  • Upgrade sinon to 10.0.0
Update dependency sinon-chai to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/sinon-chai-3.x
  • Merge into: master
  • Upgrade sinon-chai to 3.6.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by WhiteSource Renovate. View repository job log here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant