Welcome to Renovate! This is an onboarding MR to help you understand and configure settings before regular Merge Requests begin.
To activate Renovate, merge this Merge Request. To disable Renovate, simply close this Merge Request unmerged.
Detected Package Files
composer.json (composer)
.gitlab-ci.yml (gitlabci-include)
package.json (npm)
Configuration Summary
Based on the default config's presets, Renovate will:
Start dependency updates only once this onboarding MR is merged
Enable Renovate Dependency Dashboard creation.
Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
Ignore node_modules, bower_components, vendor and various test/tests directories.
Group known monorepo packages together.
Use curated list of recommended non-monorepo package groupings.
Apply crowd-sourced package replacement rules.
Apply crowd-sourced workarounds for known problems with packages.
Require Dependency Dashboard approval for major updates.
Raise MR when vulnerability alerts are detected with label security.
Apply label dependencies to MRs.
Pin dependency versions for devDependencies.
Disable pinning of Docker dependency digests.
Use semantic prefixes for commit messages and MR titles.
Wait until the npm package is three days old before raising the update, this prevents npm unpublishing a package you already upgraded to.
Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Merge Request description the next time it runs.
What to Expect
With your current configuration, Renovate will create 5 Merge Requests:
Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.
Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.
