ci: configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/auto-approve-renovate.yml (github-actions)
• .github/workflows/build.yml (github-actions)
• .github/workflows/codeql.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/maven-publish.yml (github-actions)
• .github/workflows/pr-title-semantic-lint.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• pom.xml (maven)
• package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.

---

What to Expect

With your current configuration, Renovate will create 17 Pull Requests:

fix(deps): update dependency com.google.code.gson:gson to v2.8.9 [security]

• Branch name: renovate/maven-com.google.code.gson-gson-vulnerability
• Merge into: main
• Upgrade com.google.code.gson:gson to 2.8.9

chore(deps): update dependency junit:junit to v4.13.1 [security]

• Branch name: renovate/maven-junit-junit-vulnerability
• Merge into: main
• Upgrade junit:junit to 4.13.1

chore(deps): update actions/checkout digest to c85c95e

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-digest
• Merge into: main
• Upgrade actions/checkout to c85c95e3d7251135ab7dc9ce3241c5835cc595a9

chore(deps): update dependency @​commitlint/config-conventional to v17.6.5

• Schedule: ["at any time"]
• Branch name: renovate/commitlint-monorepo
• Merge into: main
• Upgrade @commitlint/config-conventional to 17.6.5

chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.5.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-javadoc-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-javadoc-plugin to 3.5.0

chore(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.3.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-source-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-source-plugin to 3.3.0

chore(deps): update dependency org.mockito:mockito-core to v4.11.0

• Schedule: ["at any time"]
• Branch name: renovate/mockito-monorepo
• Merge into: main
• Upgrade org.mockito:mockito-core to 4.11.0

fix(deps): update dependency commons-codec:commons-codec to v1.15

• Schedule: ["at any time"]
• Branch name: renovate/commons-codec-commons-codec-1.x
• Merge into: main
• Upgrade commons-codec:commons-codec to 1.15

fix(deps): update dependency io.github.cdimascio:dotenv-java to v2.3.2

• Schedule: ["at any time"]
• Branch name: renovate/io.github.cdimascio-dotenv-java-2.x
• Merge into: main
• Upgrade io.github.cdimascio:dotenv-java to 2.3.2

fix(deps): update dependency joda-time:joda-time to v2.12.5

• Schedule: ["at any time"]
• Branch name: renovate/joda-time-joda-time-2.x
• Merge into: main
• Upgrade joda-time:joda-time to 2.12.5

chore(deps): update actions/checkout action to v3

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-3.x
• Merge into: main
• Upgrade actions/checkout to v3

chore(deps): update actions/setup-java action to v3

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-3.x
• Merge into: main
• Upgrade actions/setup-java to v3

chore(deps): update actions/setup-node action to v3

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-3.x
• Merge into: main
• Upgrade actions/setup-node to v3

chore(deps): update dependency @​octokit/auth-app to v5

• Schedule: ["at any time"]
• Branch name: renovate/octokit-auth-app-5.x
• Merge into: main
• Upgrade @octokit/auth-app to ^5.0.0

chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-gpg-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-gpg-plugin to 3.1.0

chore(deps): update dependency org.mockito:mockito-core to v5

• Schedule: ["at any time"]
• Branch name: renovate/major-mockito-monorepo
• Merge into: main
• Upgrade org.mockito:mockito-core to 5.3.1

fix(deps): update dependency io.github.cdimascio:dotenv-java to v3

• Schedule: ["at any time"]
• Branch name: renovate/io.github.cdimascio-dotenv-java-3.x
• Merge into: main
• Upgrade io.github.cdimascio:dotenv-java to 3.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files