chore: Configure Renovate #7

Open
renovate wants to merge 2 commits from renovate/configure into v5
Collaborator

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


Detected Package Files

  • package.json (npm)
  • plugins/footer/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Show only the Age and Confidence Merge Confidence badges for pull requests.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
  • Correctly link to the source code for golang.org/x packages
  • Link to pkg.go.dev/... for golang.org/x packages' title
  • Provide a link to octochangelog's improved breakdown for Renovate's changelogs
  • kvartsi is a fork of Quartz. Upstream owns the build tooling, so only npm dependencies get updates here, and no major updates: a major bump of upstream tooling makes each upstream merge harder.
  • The deploy uses the node:22-alpine image of the runner's docker label, not the Dockerfile or .node-version, so the dockerfile and nodenv managers are off.
  • github-actions is off so that the bot never edits .forgejo/workflows/deploy.yaml.
  • @jackyzha0/quartz is a peer dependency of plugins/footer that is not on npm.

What to Expect

With your current configuration, Renovate will create 3 Pull Requests, up to a maximum of 25 over time (see docs for prConcurrentLimit):

chore(deps): update dependency @​types/hast to v3.0.5
  • Schedule: ["at any time"]
  • Branch name: renovate/hast-3.x-lockfile
  • Merge into: v5
  • Upgrade @types/hast to 3.0.5
chore(deps): update dependency hast-util-to-jsx-runtime to v2.3.7
  • Schedule: ["at any time"]
  • Branch name: renovate/hast-util-to-jsx-runtime-2.x-lockfile
  • Merge into: v5
  • Upgrade hast-util-to-jsx-runtime to 2.3.7
chore(deps): update dependency minimatch to v10.2.6
  • Schedule: ["at any time"]
  • Branch name: renovate/minimatch-10.x-lockfile
  • Merge into: v5
  • Upgrade minimatch to 10.2.6
chore(deps): update dependency preact to v10.29.8
  • Schedule: ["at any time"]
  • Branch name: renovate/preact-10.x-lockfile
  • Merge into: v5
  • Upgrade preact to 10.29.8
chore(deps): update dependency serve-handler to v6.1.7
  • Schedule: ["at any time"]
  • Branch name: renovate/serve-handler-6.x-lockfile
  • Merge into: v5
  • Upgrade serve-handler to 6.1.7
chore(deps): update dependency workerpool to v10.0.3
  • Schedule: ["at any time"]
  • Branch name: renovate/workerpool-10.x-lockfile
  • Merge into: v5
  • Upgrade workerpool to 10.0.3
chore(deps): update dependency @floating-ui/dom to v1.8.0
  • Schedule: ["at any time"]
  • Branch name: renovate/floating-ui-dom-1.x-lockfile
  • Merge into: v5
  • Upgrade @floating-ui/dom to 1.8.0
chore(deps): update dependency @​types/node to v24.19.2
  • Schedule: ["at any time"]
  • Branch name: renovate/node-24.x-lockfile
  • Merge into: v5
  • Upgrade @types/node to 24.19.2
chore(deps): update dependency @​types/node to v25.9.9
  • Schedule: ["at any time"]
  • Branch name: renovate/node-25.x-lockfile
  • Merge into: v5
  • Upgrade @types/node to 25.9.9
chore(deps): update dependency esbuild to ^0.28.0
  • Schedule: ["at any time"]
  • Branch name: renovate/esbuild-0.x
  • Merge into: v5
  • Upgrade esbuild to ^0.28.0
chore(deps): update dependency esbuild-sass-plugin to v3.7.0
  • Schedule: ["at any time"]
  • Branch name: renovate/esbuild-sass-plugin-3.x-lockfile
  • Merge into: v5
  • Upgrade esbuild-sass-plugin to 3.7.0
chore(deps): update dependency globby to v16.2.4
  • Schedule: ["at any time"]
  • Branch name: renovate/globby-16.x-lockfile
  • Merge into: v5
  • Upgrade globby to 16.2.4
chore(deps): update dependency isomorphic-git to v1.44.10
  • Schedule: ["at any time"]
  • Branch name: renovate/isomorphic-git-1.x-lockfile
  • Merge into: v5
  • Upgrade isomorphic-git to 1.44.10
chore(deps): update dependency lightningcss to v1.33.0
  • Schedule: ["at any time"]
  • Branch name: renovate/lightningcss-1.x-lockfile
  • Merge into: v5
  • Upgrade lightningcss to 1.33.0
chore(deps): update dependency preact-render-to-string to v6.8.2
  • Schedule: ["at any time"]
  • Branch name: renovate/preact-render-to-string-6.x-lockfile
  • Merge into: v5
  • Upgrade preact-render-to-string to 6.8.2
chore(deps): update dependency prettier to v3.9.10
  • Schedule: ["at any time"]
  • Branch name: renovate/prettier-3.x-lockfile
  • Merge into: v5
  • Upgrade prettier to 3.9.10
chore(deps): update dependency pretty-bytes to v7.2.0
  • Schedule: ["at any time"]
  • Branch name: renovate/pretty-bytes-7.x-lockfile
  • Merge into: v5
  • Upgrade pretty-bytes to 7.2.0
chore(deps): update dependency sass to v1.107.1
  • Schedule: ["at any time"]
  • Branch name: renovate/sass-1.x-lockfile
  • Merge into: v5
  • Upgrade sass to 1.107.1
chore(deps): update dependency tsx to v4.23.15
  • Schedule: ["at any time"]
  • Branch name: renovate/tsx-4.x-lockfile
  • Merge into: v5
  • Upgrade tsx to 4.23.15
chore(deps): update dependency unist-util-visit to v5.2.0
  • Schedule: ["at any time"]
  • Branch name: renovate/unist-util-visit-5.x-lockfile
  • Merge into: v5
  • Upgrade unist-util-visit to 5.2.0
chore(deps): update dependency ws to v8.22.1
  • Schedule: ["at any time"]
  • Branch name: renovate/ws-8.x-lockfile
  • Merge into: v5
  • Upgrade ws to 8.22.1
  • Upgrade @types/ws to 8.18.2
chore(deps): update dependency yaml to v2.9.1
  • Schedule: ["at any time"]
  • Branch name: renovate/yaml-2.x-lockfile
  • Merge into: v5
  • Upgrade yaml to 2.9.1
chore(deps): update dependency yargs to v18.2.0
  • Schedule: ["at any time"]
  • Branch name: renovate/yargs-18.x-lockfile
  • Merge into: v5
  • Upgrade yargs to 18.2.0
fix(deps): update dependency @​myriaddreamin/rehype-typst to ^0.7.0
  • Schedule: ["at any time"]
  • Branch name: renovate/myriaddreamin-rehype-typst-0.x
  • Merge into: v5
  • Upgrade @myriaddreamin/rehype-typst to ^0.7.0
fix(deps): update dependency sharp to ^0.35.0
  • Schedule: ["at any time"]
  • Branch name: renovate/sharp-0.x
  • Merge into: v5
  • Upgrade sharp to ^0.35.0

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Mend Renovate CLI.

Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin. 🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged. 📚 See our [Reading List](https://docs.renovatebot.com/reading-list/) for relevant documentation you may be interested in reading. 🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to `renovate.json` in this branch. Renovate will update the Pull Request description the next time it runs. --- ### Detected Package Files * `package.json` (npm) * `plugins/footer/package.json` (npm) ### Configuration Summary Based on the default config's presets, Renovate will: - Start dependency updates only once this onboarding PR is merged - Enable Renovate Dependency Dashboard creation. - Use semantic commit type `fix` for dependencies and `chore` for all others if semantic commits are in use. - Ignore `node_modules`, `bower_components`, `vendor` and various test/tests (except for nuget) directories. - Group known monorepo packages together. - Use curated list of recommended non-monorepo package groupings. - Show only the Age and Confidence Merge Confidence badges for pull requests. - Apply crowd-sourced package replacement rules. - Apply crowd-sourced workarounds for known problems with packages. - Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff - Correctly link to the source code for golang.org/x packages - Link to pkg.go.dev/... for golang.org/x packages' title - Provide a link to octochangelog's improved breakdown for Renovate's changelogs - kvartsi is a fork of Quartz. Upstream owns the build tooling, so only npm dependencies get updates here, and no major updates: a major bump of upstream tooling makes each upstream merge harder. - The deploy uses the node:22-alpine image of the runner's docker label, not the Dockerfile or .node-version, so the dockerfile and nodenv managers are off. - github-actions is off so that the bot never edits .forgejo/workflows/deploy.yaml. - @jackyzha0/quartz is a peer dependency of plugins/footer that is not on npm. --- ### What to Expect With your current configuration, Renovate will create 3 Pull Requests, up to a maximum of 25 over time (see [docs for `prConcurrentLimit`](https://docs.renovatebot.com/configuration-options/#prconcurrentlimit)): <details> <summary>chore(deps): update dependency @&#8203;types/hast to v3.0.5</summary> - Schedule: ["at any time"] - Branch name: `renovate/hast-3.x-lockfile` - Merge into: `v5` - Upgrade [@types/hast](https://github.com/DefinitelyTyped/DefinitelyTyped) to `3.0.5` </details> <details> <summary>chore(deps): update dependency hast-util-to-jsx-runtime to v2.3.7</summary> - Schedule: ["at any time"] - Branch name: `renovate/hast-util-to-jsx-runtime-2.x-lockfile` - Merge into: `v5` - Upgrade [hast-util-to-jsx-runtime](https://github.com/syntax-tree/hast-util-to-jsx-runtime) to `2.3.7` </details> <details> <summary>chore(deps): update dependency minimatch to v10.2.6</summary> - Schedule: ["at any time"] - Branch name: `renovate/minimatch-10.x-lockfile` - Merge into: `v5` - Upgrade [minimatch](https://github.com/isaacs/minimatch) to `10.2.6` </details> <details> <summary>chore(deps): update dependency preact to v10.29.8</summary> - Schedule: ["at any time"] - Branch name: `renovate/preact-10.x-lockfile` - Merge into: `v5` - Upgrade [preact](https://github.com/preactjs/preact) to `10.29.8` </details> <details> <summary>chore(deps): update dependency serve-handler to v6.1.7</summary> - Schedule: ["at any time"] - Branch name: `renovate/serve-handler-6.x-lockfile` - Merge into: `v5` - Upgrade [serve-handler](https://github.com/vercel/serve-handler) to `6.1.7` </details> <details> <summary>chore(deps): update dependency workerpool to v10.0.3</summary> - Schedule: ["at any time"] - Branch name: `renovate/workerpool-10.x-lockfile` - Merge into: `v5` - Upgrade [workerpool](https://github.com/josdejong/workerpool) to `10.0.3` </details> <details> <summary>chore(deps): update dependency @floating-ui/dom to v1.8.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/floating-ui-dom-1.x-lockfile` - Merge into: `v5` - Upgrade [@floating-ui/dom](https://github.com/floating-ui/floating-ui) to `1.8.0` </details> <details> <summary>chore(deps): update dependency @&#8203;types/node to v24.19.2</summary> - Schedule: ["at any time"] - Branch name: `renovate/node-24.x-lockfile` - Merge into: `v5` - Upgrade [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped) to `24.19.2` </details> <details> <summary>chore(deps): update dependency @&#8203;types/node to v25.9.9</summary> - Schedule: ["at any time"] - Branch name: `renovate/node-25.x-lockfile` - Merge into: `v5` - Upgrade [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped) to `25.9.9` </details> <details> <summary>chore(deps): update dependency esbuild to ^0.28.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/esbuild-0.x` - Merge into: `v5` - Upgrade [esbuild](https://github.com/evanw/esbuild) to `^0.28.0` </details> <details> <summary>chore(deps): update dependency esbuild-sass-plugin to v3.7.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/esbuild-sass-plugin-3.x-lockfile` - Merge into: `v5` - Upgrade [esbuild-sass-plugin](https://github.com/glromeo/esbuild-sass-plugin) to `3.7.0` </details> <details> <summary>chore(deps): update dependency globby to v16.2.4</summary> - Schedule: ["at any time"] - Branch name: `renovate/globby-16.x-lockfile` - Merge into: `v5` - Upgrade [globby](https://github.com/sindresorhus/globby) to `16.2.4` </details> <details> <summary>chore(deps): update dependency isomorphic-git to v1.44.10</summary> - Schedule: ["at any time"] - Branch name: `renovate/isomorphic-git-1.x-lockfile` - Merge into: `v5` - Upgrade [isomorphic-git](https://github.com/isomorphic-git/isomorphic-git) to `1.44.10` </details> <details> <summary>chore(deps): update dependency lightningcss to v1.33.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/lightningcss-1.x-lockfile` - Merge into: `v5` - Upgrade [lightningcss](https://github.com/parcel-bundler/lightningcss) to `1.33.0` </details> <details> <summary>chore(deps): update dependency preact-render-to-string to v6.8.2</summary> - Schedule: ["at any time"] - Branch name: `renovate/preact-render-to-string-6.x-lockfile` - Merge into: `v5` - Upgrade [preact-render-to-string](https://github.com/preactjs/preact-render-to-string) to `6.8.2` </details> <details> <summary>chore(deps): update dependency prettier to v3.9.10</summary> - Schedule: ["at any time"] - Branch name: `renovate/prettier-3.x-lockfile` - Merge into: `v5` - Upgrade [prettier](https://github.com/prettier/prettier) to `3.9.10` </details> <details> <summary>chore(deps): update dependency pretty-bytes to v7.2.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/pretty-bytes-7.x-lockfile` - Merge into: `v5` - Upgrade [pretty-bytes](https://github.com/sindresorhus/pretty-bytes) to `7.2.0` </details> <details> <summary>chore(deps): update dependency sass to v1.107.1</summary> - Schedule: ["at any time"] - Branch name: `renovate/sass-1.x-lockfile` - Merge into: `v5` - Upgrade [sass](https://github.com/sass/dart-sass) to `1.107.1` </details> <details> <summary>chore(deps): update dependency tsx to v4.23.15</summary> - Schedule: ["at any time"] - Branch name: `renovate/tsx-4.x-lockfile` - Merge into: `v5` - Upgrade [tsx](https://github.com/privatenumber/tsx) to `4.23.15` </details> <details> <summary>chore(deps): update dependency unist-util-visit to v5.2.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/unist-util-visit-5.x-lockfile` - Merge into: `v5` - Upgrade [unist-util-visit](https://github.com/syntax-tree/unist-util-visit) to `5.2.0` </details> <details> <summary>chore(deps): update dependency ws to v8.22.1</summary> - Schedule: ["at any time"] - Branch name: `renovate/ws-8.x-lockfile` - Merge into: `v5` - Upgrade [ws](https://github.com/websockets/ws) to `8.22.1` - Upgrade [@types/ws](https://github.com/DefinitelyTyped/DefinitelyTyped) to `8.18.2` </details> <details> <summary>chore(deps): update dependency yaml to v2.9.1</summary> - Schedule: ["at any time"] - Branch name: `renovate/yaml-2.x-lockfile` - Merge into: `v5` - Upgrade [yaml](https://github.com/eemeli/yaml) to `2.9.1` </details> <details> <summary>chore(deps): update dependency yargs to v18.2.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/yargs-18.x-lockfile` - Merge into: `v5` - Upgrade [yargs](https://github.com/yargs/yargs) to `18.2.0` </details> <details> <summary>fix(deps): update dependency @&#8203;myriaddreamin/rehype-typst to ^0.7.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/myriaddreamin-rehype-typst-0.x` - Merge into: `v5` - Upgrade [@myriaddreamin/rehype-typst](https://github.com/Myriad-Dreamin/typst.ts) to `^0.7.0` </details> <details> <summary>fix(deps): update dependency sharp to ^0.35.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/sharp-0.x` - Merge into: `v5` - Upgrade [sharp](https://github.com/lovell/sharp) to `^0.35.0` </details> --- ❓ Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section. If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-config-hash:6564913ce210ae2ce9c18ebd543105bc66cad2bec4625b374ac1cc9e84b689bc-->
kvartsi is a Quartz fork. Only npm updates, and no major updates, so
that upstream merges stay easy. The dockerfile and nodenv managers are
off because the deploy does not use them. github-actions is off so the
bot never edits .forgejo/workflows/deploy.yaml. @jackyzha0/quartz is
not on npm, so it is ignored.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Owner

I pushed 2313f47 to this branch. It changes renovate.json as follows:

  • "extends": ["config:recommended"]. The onboarding file had only $schema. Without the preset, @typescript-eslint/parser and @typescript-eslint/eslint-plugin came as two separate PRs.
  • "enabledManagers": ["npm"]. This turns these managers off:
    • github-actions, so the bot never edits .forgejo/workflows/deploy.yaml.
    • dockerfile and nodenv, because the deploy uses the runner's node:22-alpine image, not the Dockerfile or .node-version.
  • "ignoreDeps": ["@jackyzha0/quartz"]. This peer dependency of plugins/footer is not on npm. It caused the lookup failure in this PR's description.
  • A package rule that turns off major updates. This repo is a Quartz fork. Major bumps of upstream tooling (TypeScript 7, ESLint 10, Preact 11, Vitest 5) make each upstream merge harder.

renovate-config-validator --strict accepts the new file. Renovate updates the PR description on its next run (Monday 05:00), and the PR list should then be much shorter than 35.

Review: OK to merge after the next run, when you have read the new list. deploy.yaml runs only on a push to v5 and on workflow_dispatch, so a renovate/* push or a bot PR gets no secrets. Note: a merged Renovate PR deploys to ოუენი.გე at once. npm ci runs in the no-secret docker job, so this is safe, but nobody tests the change before it goes live.

🤖 Generated with Claude Code

I pushed 2313f47 to this branch. It changes `renovate.json` as follows: - `"extends": ["config:recommended"]`. The onboarding file had only `$schema`. Without the preset, `@typescript-eslint/parser` and `@typescript-eslint/eslint-plugin` came as two separate PRs. - `"enabledManagers": ["npm"]`. This turns these managers off: - `github-actions`, so the bot never edits `.forgejo/workflows/deploy.yaml`. - `dockerfile` and `nodenv`, because the deploy uses the runner's `node:22-alpine` image, not the `Dockerfile` or `.node-version`. - `"ignoreDeps": ["@jackyzha0/quartz"]`. This peer dependency of `plugins/footer` is not on npm. It caused the lookup failure in this PR's description. - A package rule that turns off major updates. This repo is a Quartz fork. Major bumps of upstream tooling (TypeScript 7, ESLint 10, Preact 11, Vitest 5) make each upstream merge harder. `renovate-config-validator --strict` accepts the new file. Renovate updates the PR description on its next run (Monday 05:00), and the PR list should then be much shorter than 35. **Review:** OK to merge after the next run, when you have read the new list. `deploy.yaml` runs only on a push to `v5` and on `workflow_dispatch`, so a `renovate/*` push or a bot PR gets no secrets. Note: a merged Renovate PR deploys to ოუენი.გე at once. `npm ci` runs in the no-secret docker job, so this is safe, but nobody tests the change before it goes live. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/configure:renovate/configure
git switch renovate/configure
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
oap/kvartsi!7
No description provided.