Visitar URL original
Configure Renovate by renovate[bot] · Pull Request #267 · SonarSource/sonarqube-scan-action · GitHub
Skip to content

Configure Renovate - #267

Merged
Seppli11 merged 1 commit into
masterfrom
renovate/configure
Sep 29, 2026
Merged

Seppli11 merged 1 commit into
masterfrom
renovate/configure

Conversation

@renovate

@renovate renovate Bot commented Sep 28, 2026

Copy link
Copy Markdown
Contributor

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


Detected Package Files

  • .github/qa-nginx-redirecting/compose.yml (docker-compose)
  • .github/qa-sq-behind-ngix/compose.yml (docker-compose)
  • .github/workflows/PullRequestClosed.yml (github-actions)
  • .github/workflows/PullRequestCreated.yml (github-actions)
  • .github/workflows/RequestReview.yml (github-actions)
  • .github/workflows/SubmitReview.yml (github-actions)
  • .github/workflows/qa-deprecated-c-cpp.yml (github-actions)
  • .github/workflows/qa-install-build-wrapper.yml (github-actions)
  • .github/workflows/qa-main.yml (github-actions)
  • .github/workflows/qa-scripts.yml (github-actions)
  • .github/workflows/unit-tests.yml (github-actions)
  • .github/workflows/update-tags.yml (github-actions)
  • .github/workflows/version_update.yml (github-actions)
  • deprecated-c-cpp/action.yml (github-actions)
  • mise.toml (mise)
  • package.json (npm)
  • renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Hopefully safe environment variables to allow users to configure.
  • Show all Merge Confidence badges for pull requests.
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Show only the Age and Confidence Merge Confidence badges for pull requests.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
  • Correctly link to the source code for golang.org/x packages
  • Link to pkg.go.dev/... for golang.org/x packages' title
  • Provide a link to octochangelog's improved breakdown for Renovate's changelogs
  • Evaluate schedules according to timezone CET.
  • Remove hourly and concurrent rate limits.

What to Expect

With your current configuration, Renovate will create 4 Pull Requests:

Update npm dependencies
  • Schedule: ["at any time"]
  • Branch name: renovate/npm-dependencies
  • Merge into: master
  • Upgrade @actions/core to sha512-a6d/Nwahm9fliVGRhdhofo40HjHQasUPusmc7vBfyky+7Z+P2A1J68zyFVaNcEclc/Se+eO595oAr5nwEIoIUA==
  • Upgrade @actions/github to sha512-tL5JbYOBZHc0ngEnCsaDcryUizIUIlQyIMwy1Wkx93H5HzbBJ7TbiPx2PnFjBwZW0Vh05JmfFZhecE6gglYegA==
  • Upgrade @rollup/plugin-commonjs to sha512-ZaOxZceP7SOUW7Lqw5IRVweSQYWaeIPnXIGLiB690EBA3FGJTO40EEr2L5yZplJWsgTCogILRSpcAe7+U0Otdg==
  • Upgrade rollup to sha512-4U0liVayNIoLp3GFl1FcI8561WepLnZ1rqfraGh7S9B3Ur5F9S283y8Futii7RUU2C/97tOBmBy7nYvhoiOpbQ==
Update actions/cache action to v5.1.0
  • Schedule: ["at any time"]
  • Branch name: renovate/github-actions-dependencies
  • Merge into: master
  • Upgrade actions/cache to caa296126883cff596d87d8935842f9db880ef25
Update dependency @​actions/exec to v3
  • Schedule: ["at any time"]
  • Branch name: renovate/major-npm-dependencies
  • Merge into: master
  • Upgrade @actions/exec to sha512-6xH/puSoNBXb72VPlZVm7vQ+svQpFyA96qdDBvhB8eNZOE8LtPf9L4oAsfzK/crCL8YZ+19fKYVnM63Sl+Xzlw==
Update GitHub Actions dependencies (major)
  • Schedule: ["at any time"]
  • Branch name: renovate/major-github-actions-dependencies
  • Merge into: master
  • Upgrade SonarSource/ci-github-actions to v2
  • Upgrade actions/cache to 55cc8345863c7cc4c66a329aec7e433d2d1c52a9

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner September 28, 2026 14:51
@hashicorp-vault-sonar-prod

hashicorp-vault-sonar-prod Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

Renovate Jira issue ID: SQSCANGHA-167

@sonarqubecloud

Copy link
Copy Markdown

@Seppli11
Seppli11 merged commit 001613f into master Sep 29, 2026
76 of 77 checks passed
@Seppli11
Seppli11 deleted the renovate/configure branch September 29, 2026 07:20
luketainton pushed a commit to luketainton/actions_gha-workflows that referenced this pull request Sep 30, 2026
…0 (#125)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action) | action | minor | `v8.2.2` → `v8.3.0` |

---

### Release Notes

<details>
<summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary>

### [`v8.3.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v8.3.0)

[Compare Source](SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0)

#### What's Changed

- Fix GPG key retrieval through HTTPS proxies by [@&#8203;Torbjorn-Svensson](https://github.com/Torbjorn-Svensson) in [#&#8203;265](SonarSource/sonarqube-scan-action#265)
- Configure Renovate by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;267](SonarSource/sonarqube-scan-action#267)
- SQSCANGHA-168 Update actions/cache action to v5.1.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;269](SonarSource/sonarqube-scan-action#269)
- Update npm dependencies by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;268](SonarSource/sonarqube-scan-action#268)
- Update dependency [@&#8203;actions/exec](https://github.com/actions/exec) to v3 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;270](SonarSource/sonarqube-scan-action#270)
- Update GitHub Actions dependencies (major) by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;271](SonarSource/sonarqube-scan-action#271)

#### New Contributors

- [@&#8203;Torbjorn-Svensson](https://github.com/Torbjorn-Svensson) made their first contribution in [#&#8203;265](SonarSource/sonarqube-scan-action#265)
- [@&#8203;renovate](https://github.com/renovate)\[bot] made their first contribution in [#&#8203;267](SonarSource/sonarqube-scan-action#267)

**Full Changelog**: <SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEyNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: https://git.tainton.uk/actions/gha-workflows/pulls/125
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton pushed a commit to luketainton/repos_epage-go that referenced this pull request Sep 30, 2026
…(#19)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action) | action | minor | `v8.2` → `v8.3` |

---

### Release Notes

<details>
<summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary>

### [`v8.3.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v8.3.0)

[Compare Source](SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0)

#### What's Changed

- Fix GPG key retrieval through HTTPS proxies by [@&#8203;Torbjorn-Svensson](https://github.com/Torbjorn-Svensson) in [#&#8203;265](SonarSource/sonarqube-scan-action#265)
- Configure Renovate by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;267](SonarSource/sonarqube-scan-action#267)
- SQSCANGHA-168 Update actions/cache action to v5.1.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;269](SonarSource/sonarqube-scan-action#269)
- Update npm dependencies by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;268](SonarSource/sonarqube-scan-action#268)
- Update dependency [@&#8203;actions/exec](https://github.com/actions/exec) to v3 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;270](SonarSource/sonarqube-scan-action#270)
- Update GitHub Actions dependencies (major) by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;271](SonarSource/sonarqube-scan-action#271)

#### New Contributors

- [@&#8203;Torbjorn-Svensson](https://github.com/Torbjorn-Svensson) made their first contribution in [#&#8203;265](SonarSource/sonarqube-scan-action#265)
- [@&#8203;renovate](https://github.com/renovate)\[bot] made their first contribution in [#&#8203;267](SonarSource/sonarqube-scan-action#267)

**Full Changelog**: <SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEyNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: https://git.tainton.uk/repos/epage-go/pulls/19
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
centosinfra-prod-github-app Bot pushed a commit to ansible-collections/amazon.aws that referenced this pull request Oct 8, 2026
…ates (#3148)

Bumps the github-actions group with 2 updates in the / directory: dawidd6/action-download-artifact and SonarSource/sonarqube-scan-action.
Updates dawidd6/action-download-artifact from 25 to 27

Release notes
Sourced from dawidd6/action-download-artifact's releases.

v27
What's Changed

fix: merge unfiltered runs into filtered run search by @​dawidd6 in dawidd6/action-download-artifact#432

Full Changelog: dawidd6/action-download-artifact@v26...v27
v26
Full Changelog: dawidd6/action-download-artifact@v25...v26



Commits

eab87c9 fix: merge unfiltered runs into filtered run search (#432)
27e4ae6 feat: log skipped workflow runs in debug mode
See full diff in compare view



Updates SonarSource/sonarqube-scan-action from 8.2.2 to 8.3.0

Release notes
Sourced from SonarSource/sonarqube-scan-action's releases.

v8.3.0
What's Changed

Fix GPG key retrieval through HTTPS proxies by @​Torbjorn-Svensson in SonarSource/sonarqube-scan-action#265
Configure Renovate by @​renovate[bot] in SonarSource/sonarqube-scan-action#267
SQSCANGHA-168 Update actions/cache action to v5.1.0 by @​renovate[bot] in SonarSource/sonarqube-scan-action#269
Update npm dependencies by @​renovate[bot] in SonarSource/sonarqube-scan-action#268
Update dependency @​actions/exec to v3 by @​renovate[bot] in SonarSource/sonarqube-scan-action#270
Update GitHub Actions dependencies (major) by @​renovate[bot] in SonarSource/sonarqube-scan-action#271

New Contributors

@​Torbjorn-Svensson made their first contribution in SonarSource/sonarqube-scan-action#265
@​renovate[bot] made their first contribution in SonarSource/sonarqube-scan-action#267

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0



Commits

d209202 Update GitHub Actions dependencies (major) (#271)
0333cb3 Update dependency @​actions/exec to v3 (#270)
da4450e Update npm dependencies (#268)
c5094d1 SQSCANGHA-168 Update actions/cache action to v5.1.0 (#269)
001613f SQSCANGHA-162 Configure Renovate (#267)
6abe0a7 SQSCANGHA-165 Fix GPG key retrieval through HTTPS proxies (#265)
See full diff in compare view



Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Reviewed-by: Don Naro <dnaro@redhat.com>
Reviewed-by: Bikouo Aubin
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant