Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• compose.yml (docker-compose)
• Dockerfile (dockerfile)
• .github/workflows/build.yml (github-actions)
• .github/workflows/lint-and-test.yml (github-actions)
• .github/workflows/rollback.yml (github-actions)
• package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Enable Renovate Dependency Dashboard creation.
• Remove hourly and concurrent rate limits.
• Run lock file maintenance (updates) early Monday mornings.
• Disable semantic prefixes for commit messages and PR titles.
• Pin dependency versions where depType=dependencies. Usually applies only to non-dev dependencies in package.json.
• Pin dependency versions for development dependencies.
• Base configuration rules with quiet automerging
• Onboarding preset for use with Ghost's repos

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 9 Pull Requests:

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Pin @fastify/cors to 11.0.1
• Pin @fastify/http-proxy to 11.1.2
• Pin dotenv to 16.4.7
• Pin fastify to 5.3.0
• Pin nodemon to 3.1.9
• Pin pino-pretty to 10.3.1
• Pin supertest to 6.3.4
• Pin ua-parser-js to 2.0.3

Update dependency dotenv to ^16.5.0

• Schedule: ["at any time"]
• Branch name: renovate/dotenv-16.x
• Merge into: main
• Upgrade dotenv to ^16.5.0

Update actions/checkout action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to v4

Update codecov/codecov-action action to v5

• Schedule: ["at any time"]
• Branch name: renovate/codecov-codecov-action-5.x
• Merge into: main
• Upgrade codecov/codecov-action to v5

Update dependency eslint to v9

• Schedule: ["at any time"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: main
• Upgrade eslint to 9.24.0

Update dependency pino-pretty to v13

• Schedule: ["at any time"]
• Branch name: renovate/pino-pretty-13.x
• Merge into: main
• Upgrade pino-pretty to ^13.0.0

Update dependency supertest to v7

• Schedule: ["at any time"]
• Branch name: renovate/supertest-7.x
• Merge into: main
• Upgrade supertest to ^7.0.0

Update docker/build-push-action action to v6

• Schedule: ["at any time"]
• Branch name: renovate/docker-build-push-action-6.x
• Merge into: main
• Upgrade docker/build-push-action to v6

Lock file maintenance

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/lock-file-maintenance
• Merge into: main
• Regenerate lock files to use latest dependency versions

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.