chore: Configure Renovate#85
Conversation
There was a problem hiding this comment.
Pull request overview
This PR adds Renovate configuration to enable automated dependency updates for the Synapse project. The configuration uses the recommended preset and will create 49 pull requests to update various dependencies across multiple package managers including Python, Rust, Docker, and GitHub Actions.
Changes:
- Adds
renovate.jsonwith basic Renovate configuration using theconfig:recommendedpreset
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| { | ||
| "$schema": "https://docs.renovatebot.com/renovate-schema.json", | ||
| "extends": [ | ||
| "config:recommended" |
There was a problem hiding this comment.
The repository already has Dependabot configured in .github/dependabot.yml for pip, docker, github-actions, and cargo ecosystems. Running both Renovate and Dependabot simultaneously can lead to duplicate dependency update PRs and conflicts. Consider either disabling Dependabot or configuring Renovate to ignore the ecosystems already managed by Dependabot. If you intend to migrate from Dependabot to Renovate, the .github/dependabot.yml file should be removed or disabled.
| "config:recommended" | |
| "config:recommended" | |
| ], | |
| "packageRules": [ | |
| { | |
| "matchManagers": [ | |
| "pip_requirements", | |
| "pip_setup", | |
| "pipenv", | |
| "poetry", | |
| "pip-compile", | |
| "dockerfile", | |
| "github-actions", | |
| "cargo" | |
| ], | |
| "enabled": false | |
| } |
Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.
🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.
📚 See our Reading List for relevant documentation you may be interested in reading.
🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to
renovate.jsonin this branch. Renovate will update the Pull Request description the next time it runs.Detected Package Files
rust/Cargo.toml(cargo)contrib/vertobot/cpanfile(cpanfile)contrib/docker/docker-compose.yml(docker-compose)contrib/docker_compose_workers/docker-compose.yaml(docker-compose)otlp-test/docker-compose.yaml(docker-compose)docker/Dockerfile(dockerfile)docker/Dockerfile-dhvirtualenv(dockerfile)docker/Dockerfile-famedly(dockerfile)docker/Dockerfile-workers(dockerfile)docker/complement/Dockerfile(dockerfile)docker/editable.Dockerfile(dockerfile).github/workflows/complement_tests.yml(github-actions).github/workflows/docker-famedly.yml(github-actions).github/workflows/docker-pr-dev.yml(github-actions).github/workflows/docker.yml(github-actions).github/workflows/docs-pr.yaml(github-actions).github/workflows/docs.yaml(github-actions).github/workflows/famedly-tests.yml(github-actions).github/workflows/fix_lint.yaml(github-actions).github/workflows/latest_deps.yml(github-actions).github/workflows/poetry_lockfile.yaml(github-actions).github/workflows/push_complement_image.yml(github-actions).github/workflows/release-artifacts.yml(github-actions).github/workflows/schema.yaml(github-actions).github/workflows/tests.yml(github-actions).github/workflows/triage-incoming.yml(github-actions).github/workflows/triage_labelled.yml(github-actions).github/workflows/twisted_trunk.yml(github-actions).gitlab-ci.yml(gitlabci)complement/go.mod(gomod)pyproject.toml(poetry)Configuration Summary
Based on the default config's presets, Renovate will:
fixfor dependencies andchorefor all others if semantic commits are in use.node_modules,bower_components,vendorand various test/tests (except for nuget) directories.What to Expect
With your current configuration, Renovate will create 102 Pull Requests:
Update dependency Pillow to v12.3.0 [SECURITY]
renovate/pypi-pillow-vulnerabilitymaster12.3.0Update Rust crate pyo3 to 0.29.0 [SECURITY]
renovate/crate-pyo3-vulnerabilitymaster0.29.0Update dependency cryptography to v48 [SECURITY]
renovate/pypi-cryptography-vulnerabilitymaster48.0.1Update dependency Twisted to v26 [SECURITY]
renovate/pypi-twisted-vulnerabilitymaster26.4.0Update dtolnay/rust-toolchain digest to 2c7215f
renovate/dtolnay-rust-toolchain-digestmaster2c7215f132e9ebf062739d9130488b56d53c060cUpdate github.com/matrix-org/complement digest to e7e93b4
renovate/github.com-matrix-org-complement-digestmastere7e93b4cbdeaUpdate github.com/matrix-org/gomatrixserverlib digest to 4fe595d
renovate/github.com-matrix-org-gomatrixserverlib-digestmaster4fe595dc7f58Update dependency gitpython to v3.1.54
renovate/gitpython-3.x-lockfilemaster3.1.54Update dependency ijson to v3.5.1
renovate/ijson-3.x-lockfilemaster3.5.1Update dependency lxml to v6.1.1
renovate/lxml-6.x-lockfilemaster6.1.1Update dependency phonenumbers to v9.0.34
renovate/phonenumbers-9.x-lockfilemaster9.0.34Update dependency psycopg2 to v2.9.12
renovate/psycopg2-2.x-lockfilemaster2.9.12Update dependency pyasn1 to v0.6.4
renovate/pyasn1-0.x-lockfilemaster0.6.4Update dependency pygithub to v2.9.1
renovate/pygithub-2.x-lockfilemaster2.9.1Update dependency pysaml2 to v7.5.4
renovate/pysaml2-7.x-lockfilemaster7.5.4Update dependency python-multipart to v0.0.32
renovate/python-multipart-0.x-lockfilemaster0.0.32Update dependency txredisapi to v1.4.12
renovate/txredisapi-1.x-lockfilemaster1.4.12Update dependency types-jsonschema to v4.26.0.20260518
renovate/types-jsonschema-4.x-lockfilemaster4.26.0.20260518Update dependency types-netaddr to v1.3.0.20260518
renovate/types-netaddr-1.x-lockfilemaster1.3.0.20260518Update dependency types-opentracing to v2.4.10.20260408
renovate/types-opentracing-2.x-lockfilemaster2.4.10.20260408Update dependency types-psycopg2 to v2.9.21.20260712
renovate/types-psycopg2-2.x-lockfilemaster2.9.21.20260712Update dependency types-pyyaml to v6.0.12.20260518
renovate/types-pyyaml-6.x-lockfilemaster6.0.12.20260518Update dependency types-requests to v2.33.0.20260712
renovate/types-requests-2.x-lockfilemaster2.33.0.20260712Update dependency types-setuptools to v82.0.0.20260518
renovate/types-setuptools-82.x-lockfilemaster82.0.0.20260518Update dorny/paths-filter action to v4.0.2
renovate/dorny-paths-filter-4.xmaster7b450fff21473bca461d4b92ce414b9d0420d706Update Rust crate anyhow to v1.0.104
renovate/anyhow-1.x-lockfilemaster1.0.104Update Rust crate futures to v0.3.33
renovate/rust-futures-monorepomaster0.3.33Update Rust crate http-body-util to v0.1.4
renovate/http-body-util-0.x-lockfilemaster0.1.4Update Rust crate log to v0.4.33
renovate/log-0.x-lockfilemaster0.4.33Update Rust crate pyo3-log to v0.13.4
renovate/pyo3-log-0.x-lockfilemaster0.13.4Update Rust crate serde to v1.0.229
renovate/serde-monorepomaster1.0.229Update Rust crate serde_json to v1.0.151
renovate/serde_json-1.x-lockfilemaster1.0.151Update tailscale/github-action action to v4.1.3
renovate/tailscale-github-action-4.xmaster780049a30b6ff5c378a9e7b389d15ece7a204888Update actions/cache action to v5.1.0
renovate/actions-cache-5.xmastercaa296126883cff596d87d8935842f9db880ef25Update actions/checkout action to v6.1.0
renovate/actions-checkout-6.xmasterd23441a48e516b6c34aea4fa41551a30e30af803Update actions/setup-go action to v6.5.0
renovate/actions-setup-go-6.xmaster924ae3a1cded613372ab5595356fb5720e22ba16Update actions/setup-python action to v6.3.0
renovate/actions-setup-python-6.xmasterece7cb06caefa5fff74198d8649806c4678c61a1Update dependency authlib to v1.7.2
renovate/authlib-1.x-lockfilemaster1.7.2Update dependency cffi to v2.1.0
renovate/cffi-2.x-lockfilemaster2.1.0Update dependency click to v8.4.2
renovate/click-8.x-lockfilemaster8.4.2Update dependency Future to v0.52
renovate/future-0.xmaster0.52Update dependency hiredis to v3.4.0
renovate/hiredis-3.x-lockfilemaster3.4.0Update dependency idna to v3.18
renovate/idna-3.x-lockfilemaster3.18Update dependency IO::Async to v0.805
renovate/io-async-0.xmaster0.805Update dependency IO::Async::SSL to v0.25
renovate/io-async-ssl-0.xmaster0.25Update dependency markdown-it-py to v4.2.0
renovate/markdown-it-py-4.x-lockfilemaster4.2.0Update dependency Net::Async::Matrix to v0.19
renovate/net-async-matrix-0.xmaster0.19Update dependency Net::Async::WebSocket::Protocol to v0.14
renovate/net-async-websocket-protocol-0.xmaster0.14Update dependency packaging to v26.2
renovate/packaging-26.x-lockfilemaster26.2Update dependency parent to v0.244
renovate/parent-0.xmaster0.244Update dependency prometheus-client to v0.25.0
renovate/prometheus-client-0.x-lockfilemaster0.25.0Update dependency pydantic to v2.13.4
renovate/pydantic-2.x-lockfilemaster2.13.4Update dependency pympler to v1.1
renovate/pympler-1.x-lockfilemaster1.1Update dependency pyOpenSSL to v26.3.0
renovate/pyopenssl-26.x-lockfilemaster26.3.0Update dependency python to 3.14
renovate/python-3.xmaster3.14Update dependency pytz to v2026.2
renovate/pytz-2026.x-lockfilemaster2026.2Update dependency requests to v2.34.2
renovate/requests-2.x-lockfilemaster2.34.2Update dependency ruff to v0.15.22
renovate/ruff-0.xmaster==0.15.22Update dependency sentry-sdk to v2.66.1
renovate/sentry-sdk-2.x-lockfilemaster2.66.1Update dependency setuptools_rust to v1.13.0
renovate/setuptools_rust-1.x-lockfilemaster1.13.0Update dependency sqlglot to v30.13.0
renovate/sqlglot-30.x-lockfilemaster30.13.0Update dependency thrift to v0.24.0
renovate/thrift-0.x-lockfilemaster0.24.0Update dependency types-bleach to v6.4.0.20260607
renovate/types-bleach-6.x-lockfilemaster6.4.0.20260607Update dependency typing-extensions to v4.16.0
renovate/typing-extensions-4.x-lockfilemaster4.16.0Update dependency zope-interface to v8.5
renovate/zope-interface-8.x-lockfilemaster8.5Update docker.io/library/python Docker tag to v3.14
renovate/docker.io-library-python-3.xmaster3.14-slim-trixieUpdate docker.io/python Docker tag to v3.14
renovate/docker.io-python-3.xmaster3.14-slimUpdate module github.com/tidwall/gjson to v1.19.0
renovate/github.com-tidwall-gjson-1.xmasterv1.19.0Update opentelemetry-python monorepo to v1.44.0
renovate/opentelemetry-python-monorepomaster==1.44.0==1.44.0==1.44.0Update otel/opentelemetry-collector Docker tag to v0.157.0
renovate/otel-opentelemetry-collector-0.xmaster0.157.0Update Rust crate bytes to v1.12.1
renovate/bytes-1.x-lockfilemaster1.12.1Update Rust crate icu_segmenter to v2.2.0
renovate/icu_segmenter-2.x-lockfilemaster2.2.0Update Rust crate itertools to 0.15.0
renovate/itertools-0.xmaster0.15.0Update Rust crate pythonize to 0.29.0
renovate/pythonize-0.xmaster0.29.0Update Rust crate regex to v1.13.1
renovate/regex-1.x-lockfilemaster1.13.1Update Rust crate reqwest to 0.13.0
renovate/reqwest-0.xmaster0.13.0Update Rust crate sha2 to 0.11.0
renovate/sha2-0.xmaster0.11.0Update Rust crate tokio to v1.53.1
renovate/tokio-1.x-lockfilemaster1.53.1Update stefanzweifel/git-auto-commit-action action to v7.2.0
renovate/stefanzweifel-git-auto-commit-action-7.xmaster4a55954c782fc1ea30b9056cd3e7a2b40ca8887dUpdate Swatinem/rust-cache action to v2.9.1
renovate/swatinem-rust-cache-2.xmasterc19371144df3bb44fab255c43d04cbc2ab54d1c4Update actions/cache action to v6
renovate/actions-cache-6.xmaster55cc8345863c7cc4c66a329aec7e433d2d1c52a9v6Update actions/checkout action to v7
renovate/actions-checkout-7.xmaster3d3c42e5aac5ba805825da76410c181273ba90b1v7Update actions/setup-go action to v7
renovate/actions-setup-go-7.xmasterv7b7ad1dad31e06c5925ef5d2fc7ad053ef454303eUpdate actions/setup-python action to v7
renovate/actions-setup-python-7.xmaster5fda3b95a4ea91299a34e894583c3862153e4b97Update actions/upload-artifact action to v7
renovate/major-github-artifact-actionsmasterv7Update codecov/codecov-action action to v7
renovate/codecov-codecov-action-7.xmasterv7Update dependency Data::UUID to v1
renovate/data-uuid-1.xmaster1.227Update dependency Getopt::Long to v2
renovate/getopt-long-2.xmaster2.58Update dependency IO::Socket::SSL to v2
renovate/io-socket-ssl-2.xmaster2.099Update dependency JSON to v4
renovate/json-4.xmaster4.11Update dependency service-identity to v26
renovate/service-identity-26.x-lockfilemaster26.1.0Update dependency treq to v26
renovate/treq-26.x-lockfilemaster26.7.0Update dependency types-setuptools to v83
renovate/types-setuptools-83.x-lockfilemaster83.0.0.20260716Update dependency ubuntu to v24
renovate/ubuntu-24.xmaster24.04Update dependency YAML to v1
renovate/yaml-1.xmasterv1.320.0Update docker.io/library/postgres Docker tag to v18
renovate/docker.io-library-postgres-18.xmaster18-trixieUpdate docker.io/postgres Docker tag to v18
renovate/docker.io-postgres-18.xmaster18-alpineUpdate docker/build-push-action action to v7.3.0
renovate/docker-build-push-action-7.xmaster53b7df96c91f9c12dcc8a07bcb9ccacbed38856av7Update docker/login-action action to v4.4.0
renovate/docker-login-action-4.xmasteraf1e73f918a031802d376d3c8bbc3fe56130a9b0v4Update docker/metadata-action action to v6.2.0
renovate/docker-metadata-action-6.xmasterdc802804100637a589fabce1cb79ff13a1411302v6Update docker/setup-buildx-action action to v4.2.0
renovate/docker-setup-buildx-action-4.xmasterbb05f3f5519dd87d3ba754cc423b652a5edd6d2cv4Update Rust crate ulid to v3
renovate/ulid-3.xmaster3.0.0🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for
prHourlyLimitfor details.❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.
This PR was generated by Mend Renovate. View the repository job log.