Skip to content

chore: Configure Renovate #109

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore: Configure Renovate #109

wants to merge 1 commit into from

Conversation

stackable-bot
Copy link

@stackable-bot stackable-bot commented Oct 16, 2024

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

  • demos/jupyterhub-pyspark-hdfs-anomaly-detection-taxi-data/Dockerfile (dockerfile)
  • demos/signal-processing/Dockerfile-jupyter (dockerfile)
  • demos/signal-processing/Dockerfile-nifi (dockerfile)
  • stacks/jupyterhub-keycloak/Dockerfile (dockerfile)
  • .github/workflows/dev_jupyter-pyspark-with-alibi-detect.yaml (github-actions)
  • .github/workflows/dev_nifi.yaml (github-actions)
  • .github/workflows/dev_spark-k8s-with-scikit-learn.yaml (github-actions)
  • .github/workflows/pr_pre-commit.yml (github-actions)
  • demos/jupyterhub-pyspark-hdfs-anomaly-detection-taxi-data/requirements.txt (pip_requirements)
  • demos/signal-processing/requirements.txt (pip_requirements)
  • .pre-commit-config.yaml (pre-commit)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Pin Docker digests.
  • Pin github-action digests.
  • Enable Renovate configuration migration PRs when needed.
  • Pin dependency versions for development dependencies.
  • Enable Renovate Dependency Dashboard approval workflow.
  • Remove limit for open PRs at any time.
  • Removes rate limit for PR creation per hour.
  • Convert pinned GitHub Action digests to SemVer.
  • Run Renovate on following schedule:

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


What to Expect

With your current configuration, Renovate will create 9 Pull Requests:

chore(deps): update dependency scikit-learn to v1.5.0 [security]
  • Branch name: renovate/pypi-scikit-learn-vulnerability
  • Merge into: main
  • Upgrade scikit-learn to ==1.5.0
chore(deps): pin dependencies
  • Branch name: renovate/pin-dependencies
  • Merge into: main
  • Upgrade jupyter/pyspark-notebook to sha256:9c40571da1b398808b882ddd0707dde630d1ce0c4b47015025b06907590e56e9
  • Upgrade oci.stackable.tech/sdp/nifi to sha256:9d844875a09d0aef26b14ac5766369c2b0263b0fe24617e5a75280bf09224c7c
  • Upgrade oci.stackable.tech/sdp/spark-k8s to sha256:6d381712ce85bd2c66297015b2b0d28a2d569aad588a5143d1d1cb8e665327ee
  • Upgrade spark to sha256:b421ca96ff4303870a1ab9756fb750d21c6058c1620f9b102940954662a2a56b
chore(deps): update all dependencies (patch only)
  • Branch name: renovate/all-dependencies-(patch-only)
  • Merge into: main
  • Upgrade oci.stackable.tech/sdp/spark-k8s to sha256:fa0296dcc2bed6a8ea4cf784650407feafbfb193ebe05c77512536c213b8aeba
  • Upgrade psycopg2-binary to ==2.9.10
  • Upgrade spark to sha256:b01fb520036d34e571b9acba0b6bdec8da5c53762d00ac56aca72765e2d56de4
chore(deps): update actions/checkout action to v4.2.2
  • Branch name: renovate/actions-checkout-4.x
  • Merge into: main
  • Upgrade actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683
chore(deps): update actions/setup-python action to v5.5.0
  • Branch name: renovate/actions-setup-python-5.x
  • Merge into: main
  • Upgrade actions/setup-python to 8d9ed9ac5c53483de85588cdf95a591a75ab9f55
chore(deps): update dependency alibi-detect to v0.12.0
  • Branch name: renovate/alibi-detect-0.x
  • Merge into: main
  • Upgrade alibi-detect to ==0.12.0
chore(deps): update dependency pandas to v2.2.3
  • Branch name: renovate/pandas-2.x
  • Merge into: main
  • Upgrade pandas to ==2.2.3
chore(deps): update dependency python to 3.13
  • Branch name: renovate/python-3.x
  • Merge into: main
  • Upgrade python to 3.13
chore(deps): update stackabletech/actions action to v0.7.0
  • Branch name: renovate/stackabletech-actions-0.x
  • Merge into: main
  • Upgrade stackabletech/actions to 2d3d7ddad981ae09901d45a0f6bf30c2658b1b78

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

  • Can't find version matching 2c9f875913ee60ca25ce70243dc24d5b6415598c for github-tags package pre-commit/pre-commit-hooks
  • Can't find version matching 81e9f98ffd059efe8aa9c1b1a42e5cce61b640c6 for github-tags package adrienverge/yamllint
  • Can't find version matching f295829140d25717bc79368d3f966fc1f67a824f for github-tags package igorshubovych/markdownlint-cli
  • Can't find version matching 2491238703a5d3415bb2b7ff11388bf775372f29 for github-tags package koalaman/shellcheck-precommit
  • Can't find version matching 62dc61a45fc95efe8c800af7a557ab0b9165d63b for github-tags package rhysd/actionlint

Files affected: .pre-commit-config.yaml


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Renovate Bot.

@stackable-bot stackable-bot added the dependencies Pull requests that update a dependency file label Oct 16, 2024
@stackable-bot stackable-bot requested a review from a team October 16, 2024 08:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant