Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• src/deploy/main.bicep (bicep)
• src/Dockerfile (dockerfile)
• .github/workflows/ci.yml (github-actions)
• src/mise.toml (mise)
• src/apps/server/package.json (npm)
• src/apps/web/package.json (npm)
• src/package.json (npm)
• src/packages/contract/package.json (npm)
• evals/agents/pyproject.toml (pep621)
• evals/eval_from_golden_questions/pyproject.toml (pep621)
• evals/golden_questions/pyproject.toml (pep621)
• evals/.python-version (pyenv)
• renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs
• Groups minor and patch updates together in a single PR, and treat NPM 0.x.x updates as major updates.
• Run Renovate on following schedule: before 07:00 on Thursday

---

What to Expect

With your current configuration, Renovate will create 13 Pull Requests:

Update dependency pytest to v9.0.3 [SECURITY]

• Branch name: renovate/pypi-pytest-vulnerability
• Merge into: main
• Upgrade pytest to 9.0.3

Update dependency python-dotenv to v1.2.2 [SECURITY]

• Branch name: renovate/pypi-python-dotenv-vulnerability
• Merge into: main
• Upgrade python-dotenv to 1.2.2

Update dependency streamlit to v1.54.0 [SECURITY]

• Branch name: renovate/pypi-streamlit-vulnerability
• Merge into: main
• Upgrade streamlit to 1.54.0

Pin dependencies

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Upgrade actions/checkout to 11d5960a326750d5838078e36cf38b85af677262
• Upgrade actions/setup-node to 49933ea5288caeca8642d1e84afbd3f7d6820020
• Upgrade node to sha256:b6f26b36c8ff49624cfdac716b8ea1138d606df02586a77d364bb5536a634f85

Update dependency prettier to v3.9.8

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/npm-minor-patch
• Merge into: main
• Upgrade prettier to 3.9.8

Update python Docker tag to v3.14

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14

Update actions/checkout action to v7

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: main
• Upgrade actions/checkout to 3d3c42e5aac5ba805825da76410c181273ba90b1

Update actions/setup-node action to v7

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/actions-setup-node-7.x
• Merge into: main
• Upgrade actions/setup-node to 820762786026740c76f36085b0efc47a31fe5020

Update dependency @​hono/node-server to v2

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/hono-node-server-2.x
• Merge into: main
• Upgrade @hono/node-server to ^2.0.0

Update dependency marked to v18

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/marked-18.x
• Merge into: main
• Upgrade marked to ^18.0.0

Update dependency typescript to v7

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/typescript-7.x
• Merge into: main
• Upgrade typescript to sha512-8FYau96o3NKOhbjKi/qNvG/W5jhzxkbdm5sj9AbZ/5T5sWqn3hJgLfGx27sRKZWTvyzCP8dLRBTf5tBTSRVUNA==

Update dependency vite to v8

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/vite-8.x
• Merge into: main
• Upgrade vite to ^8.0.0

Update Node.js to v24

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade node to 24.21.0
• Upgrade node to sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1
• Upgrade @types/node to sha512-TXyindR+lBr22aJIdMQzCFHPHR6cR4js838mRDCSz5hOKWZvZwsXSSiXDmjRj4iJmgl+sR9O+1mkoVBSMadNug==

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details. Security update Pull Requests are not subject to this limit and will be created straight away.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.