Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• agents/proxy-agent/docker-compose.yml (docker-compose)
• apps/llm-gateway/docker-compose.yml (docker-compose)
• apps/nvt-bridge/docker-compose.yml (docker-compose)
• integrations/docker-compose.yml (docker-compose)
• agents/local-cc-coding-agent/docker/Dockerfile (dockerfile)
• agents/local-cc-jr-developer/docker/Dockerfile (dockerfile)
• agents/proxy-agent/docker/Dockerfile (dockerfile)
• apps/llm-gateway/Dockerfile (dockerfile)
• apps/nvt-bridge/Dockerfile (dockerfile)
• integrations/Dockerfile (dockerfile)
• .github/workflows/auto-merge.yml (github-actions)
• .github/workflows/ci.yml (github-actions)
• apps/llm-gateway/package.json (npm)
• apps/nvt-bridge/package.json (npm)
• integrations/package.json (npm)
• renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs
• Groups minor and patch updates together in a single PR, and treat NPM 0.x.x updates as major updates.
• Run Renovate on following schedule: before 07:00 on Thursday

---

What to Expect

With your current configuration, Renovate will create 9 Pull Requests:

Pin dependencies

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Upgrade actions/checkout to 11d5960a326750d5838078e36cf38b85af677262
• Upgrade actions/setup-node to 49933ea5288caeca8642d1e84afbd3f7d6820020
• Upgrade node to sha256:0e0ff40c39bc087845bfb27465a0df4ea419520094bc35842ff83dd8cbe6f9b6
• Upgrade node to sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1

Update npm non-major dependencies

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/npm-minor-patch
• Merge into: main
• Upgrade @slack/web-api to 7.19.0
• Upgrade @types/node to 22.20.4

Update actions/checkout action to v7

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: main
• Upgrade actions/checkout to 3d3c42e5aac5ba805825da76410c181273ba90b1

Update actions/setup-node action to v7

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/actions-setup-node-7.x
• Merge into: main
• Upgrade actions/setup-node to 820762786026740c76f36085b0efc47a31fe5020

Update dependency @​slack/socket-mode to v3

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/slack-socket-mode-3.x
• Merge into: main
• Upgrade @slack/socket-mode to ^3.0.0

Update dependency @​slack/web-api to v8

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/slack-web-api-8.x
• Merge into: main
• Upgrade @slack/web-api to sha512-am/z/LLbEC7gNQp6FpaGT0l4XnWqcXetpwdgZHzS7Nbb96q9R9QwWA3lo0ZXGuAHDkct0MvFnouzuc2Y4XNmow==

Update dependency @​types/node to v24

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade @types/node to sha512-SGrw/h3KPFshy3OE6ZL53LMBG5vGQQ8/gIpiqz/kRZhPJ7HgwCEs8LBuNtWLa8dvGZVpSF7+Bf+c11HUrCb/yg==

Update dependency dotenv to v18

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/dotenv-18.x
• Merge into: main
• Upgrade dotenv to sha512-/8CJTyL817qPnfbQrJgOEcrU3fDrJkRIoXBE566wHuvIXKOCHUZhPqGPbCPi9SogjdGnreF0TlvnTgK6J/8zpA==

Update dependency typescript to v7

• Schedule: ["before 07:00 on Thursday"]
• Branch name: renovate/typescript-7.x
• Merge into: main
• Upgrade typescript to sha512-8FYau96o3NKOhbjKi/qNvG/W5jhzxkbdm5sj9AbZ/5T5sWqn3hJgLfGx27sRKZWTvyzCP8dLRBTf5tBTSRVUNA==

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 64d1191a-6ca1-408f-ba57-3ad7b6a394e2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}