Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• compose.yaml (docker-compose)
• backend/Dockerfile (dockerfile)
• data_quality_tool/Dockerfile (dockerfile)
• frontend/Dockerfile (dockerfile)
• .github/workflows/data_quality_tool.yml (github-actions)
• .github/workflows/ebrains.yml (github-actions)
• .github/workflows/publish-images.yml (github-actions)
• kubernetes/values.yaml (helm-values)
• backend/pom.xml (maven)
• frontend/package.json (npm)
• data_quality_tool/pyproject.toml (poetry)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 40 Pull Requests:

Update dependency @​angular/common to v21.2.17 [SECURITY]

• Branch name: renovate/npm-angular-common-vulnerability
• Merge into: master
• Upgrade @angular/common to 21.2.17

Update dependency @​angular/compiler to v21.2.17 [SECURITY]

• Branch name: renovate/npm-angular-compiler-vulnerability
• Merge into: master
• Upgrade @angular/compiler to 21.2.17

Update dependency @​angular/core to v21.2.17 [SECURITY]

• Branch name: renovate/npm-angular-core-vulnerability
• Merge into: master
• Upgrade @angular/core to 21.2.17

Update dependency uuid to v13.0.1 [SECURITY]

• Branch name: renovate/npm-uuid-vulnerability
• Merge into: master
• Upgrade uuid to 13.0.1

Update dependency flask to v3.1.3 [SECURITY]

• Branch name: renovate/pypi-flask-vulnerability
• Merge into: master
• Upgrade flask to 3.1.3

Update dependency black to v26 [SECURITY]

• Branch name: renovate/pypi-black-vulnerability
• Merge into: master
• Upgrade black to ^26.0.0

Update dependency gunicorn to v22 [SECURITY]

• Branch name: renovate/pypi-gunicorn-vulnerability
• Merge into: master
• Upgrade gunicorn to ^22.0.0

Update dependency pytest to v9 [SECURITY]

• Branch name: renovate/pypi-pytest-vulnerability
• Merge into: master
• Upgrade pytest to ^9.0.0

Update angular monorepo

• Schedule: ["at any time"]
• Branch name: renovate/angular-monorepo
• Merge into: master
• Upgrade @angular/animations to 21.2.18
• Upgrade @angular/compiler-cli to 21.2.18
• Upgrade @angular/forms to 21.2.18
• Upgrade @angular/platform-browser to 21.2.18
• Upgrade @angular/platform-browser-dynamic to 21.2.18
• Upgrade @angular/router to 21.2.18
• Upgrade zone.js to 0.16.2

Update angular-cli monorepo to v21.2.19

• Schedule: ["at any time"]
• Branch name: renovate/angular-cli-monorepo
• Merge into: master
• Upgrade @angular-devkit/build-angular to 21.2.19
• Upgrade @angular/cli to 21.2.19

Update angularmaterial monorepo to v21.2.14

• Schedule: ["at any time"]
• Branch name: renovate/angularmaterial-monorepo
• Merge into: master
• Upgrade @angular/cdk to 21.2.14
• Upgrade @angular/material to 21.2.14

Update dependency openpyxl to v3.1.5

• Schedule: ["at any time"]
• Branch name: renovate/openpyxl-3.x-lockfile
• Merge into: master
• Upgrade openpyxl to 3.1.5

Update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3.0.3

• Schedule: ["at any time"]
• Branch name: renovate/springdoc.version
• Merge into: master
• Upgrade org.springdoc:springdoc-openapi-starter-webmvc-ui to 3.0.3

Update maven Docker tag to v3.9.16

• Schedule: ["at any time"]
• Branch name: renovate/maven-3.x
• Merge into: master
• Upgrade maven to 3.9.16-eclipse-temurin-21

Update codecov/codecov-action action to v1.5.2

• Schedule: ["at any time"]
• Branch name: renovate/codecov-codecov-action-1.x
• Merge into: master
• Upgrade codecov/codecov-action to v1.5.2

Update dependency com.google.code.gson:gson to v2.14.0

• Schedule: ["at any time"]
• Branch name: renovate/gson.version
• Merge into: master
• Upgrade com.google.code.gson:gson to 2.14.0

Update dependency coverage to v7.15.2

• Schedule: ["at any time"]
• Branch name: renovate/coverage-7.x-lockfile
• Merge into: master
• Upgrade coverage to 7.15.2

Update dependency jasmine-core to v6.3.0

• Schedule: ["at any time"]
• Branch name: renovate/jasmine-monorepo
• Merge into: master
• Upgrade jasmine-core to 6.3.0

Update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.0

• Schedule: ["at any time"]
• Branch name: renovate/spring-boot
• Merge into: master
• Upgrade org.springframework.boot:spring-boot-starter-parent to 4.1.0

Update dependency pandas to v2.3.3

• Schedule: ["at any time"]
• Branch name: renovate/pandas-2.x-lockfile
• Merge into: master
• Upgrade pandas to 2.3.3

Update dependency python

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to 3.14
• Upgrade python to 3.14-slim

Update dependency xlsxwriter to v3.2.9

• Schedule: ["at any time"]
• Branch name: renovate/xlsxwriter-3.x-lockfile
• Merge into: master
• Upgrade xlsxwriter to 3.2.9

Update flyway to v12.11.0

• Schedule: ["at any time"]
• Branch name: renovate/flyway
• Merge into: master
• Upgrade org.flywaydb:flyway-database-postgresql to 12.11.0
• Upgrade org.flywaydb:flyway-core to 12.11.0

Update junit-framework monorepo to v6.1.2

• Schedule: ["at any time"]
• Branch name: renovate/junit-framework-monorepo
• Merge into: master
• Upgrade org.junit.jupiter:junit-jupiter-engine to 6.1.2
• Upgrade org.junit.jupiter:junit-jupiter-api to 6.1.2

Update postgres Docker tag to v18.4

• Schedule: ["at any time"]
• Branch name: renovate/postgres-18.x
• Merge into: master
• Upgrade postgres to 18.4

Update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: master
• Upgrade actions/checkout to v7

Update actions/setup-python action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-7.x
• Merge into: master
• Upgrade actions/setup-python to v7

Update angular monorepo to v22

• Schedule: ["at any time"]
• Branch name: renovate/major-angular-monorepo
• Merge into: master
• Upgrade @angular/animations to ^22.0.0
• Upgrade @angular/compiler-cli to ^22.0.0
• Upgrade @angular/forms to ^22.0.0
• Upgrade @angular/platform-browser to ^22.0.0
• Upgrade @angular/platform-browser-dynamic to ^22.0.0
• Upgrade @angular/router to ^22.0.0

Update angular-cli monorepo to v22

• Schedule: ["at any time"]
• Branch name: renovate/major-angular-cli-monorepo
• Merge into: master
• Upgrade @angular-devkit/build-angular to ^22.0.0
• Upgrade @angular/cli to ^22.0.0

Update angularmaterial monorepo to v22

• Schedule: ["at any time"]
• Branch name: renovate/major-angularmaterial-monorepo
• Merge into: master
• Upgrade @angular/cdk to ^22.0.0
• Upgrade @angular/material to ^22.0.0

Update codecov/codecov-action action to v7

• Schedule: ["at any time"]
• Branch name: renovate/codecov-codecov-action-7.x
• Merge into: master
• Upgrade codecov/codecov-action to v7.0.0

Update dependency @​fortawesome/fontawesome-free to v7

• Schedule: ["at any time"]
• Branch name: renovate/major-font-awesome
• Merge into: master
• Upgrade @fortawesome/fontawesome-free to ^7.0.0

Update dependency pandas to v3

• Schedule: ["at any time"]
• Branch name: renovate/pandas-3.x
• Merge into: master
• Upgrade pandas to ^3.0.0

Update dependency typescript to v7

• Schedule: ["at any time"]
• Branch name: renovate/typescript-7.x
• Merge into: master
• Upgrade typescript to ~7.0.0

Update docker/bake-action action to v7

• Schedule: ["at any time"]
• Branch name: renovate/docker-bake-action-7.x
• Merge into: master
• Upgrade docker/bake-action to v7

Update docker/login-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-login-action-4.x
• Merge into: master
• Upgrade docker/login-action to v4

Update docker/setup-buildx-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-buildx-action-4.x
• Merge into: master
• Upgrade docker/setup-buildx-action to v4

Update docker/setup-qemu-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-qemu-action-4.x
• Merge into: master
• Upgrade docker/setup-qemu-action to v4

Update flyway to v13

• Schedule: ["at any time"]
• Branch name: renovate/major-flyway
• Merge into: master
• Upgrade org.flywaydb:flyway-database-postgresql to 13.0.0
• Upgrade org.flywaydb:flyway-core to 13.0.0

Update Node.js to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: master
• Upgrade node to 24

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.