Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• .github/workflows/build.yml (github-actions)
• .github/workflows/deploy-javadoc.yml (github-actions)
• .github/workflows/deploy-snapshots.yml (github-actions)
• .github/workflows/release-drafter.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/scorecard.yml (github-actions)
• .github/workflows/updatecli.yaml (github-actions)
• pom.xml (maven)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 6 Pull Requests:

Update github/codeql-action digest to 51f7732

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-digest
• Merge into: main
• Upgrade github/codeql-action to 51f77329afa6477de8c49fc9c7046c15b9a4e79d

Update dependency org.bouncycastle:bcprov-jdk18on to v1.85.2

• Schedule: ["at any time"]
• Branch name: renovate/bcprov-jdk18on.version
• Merge into: main
• Upgrade org.bouncycastle:bcprov-jdk18on to 1.85.2

Update dependency org.apache.maven.plugins:maven-failsafe-plugin to v3.6.0

• Schedule: ["at any time"]
• Branch name: renovate/maven-failsafe-plugin.version
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 3.6.0

Update dependency python to 3.14

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14

Update github/codeql-action action to v3.37.9

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-3.x
• Merge into: main
• Upgrade github/codeql-action to 6f5948dfacef28e207b48d0905cf90c03365536d

Update github/codeql-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to cdf488f595d80d6e07e03d4674febd5ab45fa938

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.57%. Comparing base (daa1ea2) to head (bcb82a8).
⚠️ Report is 4 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@             Coverage Diff              @@
##               main     #867      +/-   ##
============================================
+ Coverage     87.16%   87.57%   +0.41%     
  Complexity     1281     1281              
============================================
  Files            51       51              
  Lines          4114     4114              
  Branches        565      565              
============================================
+ Hits           3586     3603      +17     
+ Misses          310      293      -17     
  Partials        218      218              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.