chore: Configure Renovate #11

Merged

charles merged 1 commit from renovate/configure into main

2026-07-29 16:18:27 +00:00

renovate-bot commented

2026-07-25 14:44:51 +00:00

Collaborator

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

Detected Package Files

components/n8n/Containerfile (dockerfile)
mise.toml (mise)
components/common/postgres.image (quadlet)
components/common/redis.image (quadlet)
components/genealogy/gramps-celery.container (quadlet)
components/genealogy/gramps.container (quadlet)
components/immich/immich-machine-learning.container (quadlet)
components/ipinfo/ipinfo.container (quadlet)
components/mailu/mailu-certdumper.container (quadlet)
components/mat2-web/mat2-web.container (quadlet)
components/monitoring/node-exporter.container (quadlet)
components/monitoring/podman-exporter.container (quadlet)
components/nextcloud/collabora.container (quadlet)
components/nextcloud/nextcloud-imaginary.container (quadlet)
components/paperless-ngx/paperless-ngx-gotenberg.container (quadlet)
components/paperless-ngx/paperless-ngx-tika.container (quadlet)
components/pastebin/microbin.container (quadlet)
components/pdf/stirling.container (quadlet)
components/reverse-proxy/traefik.container (quadlet)
components/xmpp/ejabberd-certs-dumper.container (quadlet)

Configuration Summary

Based on the default config's presets, Renovate will:

Start dependency updates only once this onboarding PR is merged
Enable Renovate Dependency Dashboard creation.
Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
Group known monorepo packages together.
Use curated list of recommended non-monorepo package groupings.
Show only the Age and Confidence Merge Confidence badges for pull requests.
Apply crowd-sourced package replacement rules.
Apply crowd-sourced workarounds for known problems with packages.
Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
Correctly link to the source code for golang.org/x packages
Link to pkg.go.dev/... for golang.org/x packages' title
Provide a link to octochangelog's improved breakdown for Renovate's changelogs
Pin Docker digests.
Pin github-action digests.
Enable Renovate configuration migration PRs when needed.
Pin dependency versions for development dependencies.
Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
Run lock file maintenance (updates) early Monday mornings.

What to Expect

With your current configuration, Renovate will create 5 Pull Requests:

chore(deps): pin dependencies

Schedule: ["at any time"]
Branch name: renovate/pin-dependencies
Merge into: main
Upgrade docker.io/apache/tika to sha256:90b7fa1dc018434075fce9e1d9b88b1e3d0ea6979d0cf86e116c79a8073ae973
Upgrade docker.io/collabora/code to sha256:1f864ce3f0c49e867787b6dd303bd6ba989542d3023f6809df558eafd04c1b97
Upgrade docker.io/danielszabo99/microbin to sha256:6660e5ccad0d764fa3c0032464ffb8f4b4f28c92a2eb9e39202b94cdc5b68909
Upgrade docker.io/gotenberg/gotenberg to sha256:d03b8a04c6e6c5e568b38f57352266dee4674849b71818774025f8f48d869a9a
Upgrade docker.io/library/postgres to sha256:57c72fd2a128e416c7fcc499958864df5301e940bca0a56f58fddf30ffc07777
Upgrade docker.io/library/traefik to sha256:652929a140a32d7cafafb13c6cdfab5376cfeff800f51397b87b524501ed02a8
Upgrade docker.io/n8nio/n8n to sha256:5f7856f4fc7cd935230f7596e39fdb3d5eda0e379c5b40b699b9c0eb35ebd0bf
Upgrade docker.io/nextcloud/aio-imaginary to sha256:15d3b439849a675d7b646db6796654ae238dd9c84ea089258d19c2fa69999cdf
Upgrade docker.io/peterdavehello/ipinfo.tw to sha256:f21996882ffb89b948a7c9e9d5632072d18ef0bc86e36a528e53d042e4856c0a
Upgrade docker.io/prom/node-exporter to sha256:1b4e4438faca4dd7e001dd445d161a4a2091b0fededa84093b3a8dfeae1f1be0
Upgrade docker.io/valkey/valkey to sha256:ee91f7a174ac4d6a6b0685b3a60e321f0a9dbbb691f9b0e285be2ba1d1be8328
Upgrade docker.stirlingpdf.com/stirlingtools/stirling-pdf to sha256:1f73a8f898fe269cbbccea3be577064dd87fc4334de349fcc5b1afa1bcebf240
Upgrade ghcr.io/gramps-project/grampsweb to sha256:6f81fa942f1d447a953e24eeddf17b28db9f5d55e5ba10ce2a76cfcf8896bb59
Upgrade ghcr.io/mailu/traefik-certdumper to sha256:870f149e25c557fb3904be24cfc117fd041c8823d080b3cc740648661fdbce01
Upgrade quay.io/navidys/prometheus-podman-exporter to sha256:b32899364b6761e2f4f496f110f2bc91a6cbab064f737c19efff200f7f3a25bf
Upgrade registry.0xacab.org/jvoisin/mat2-web to sha256:ed136afbc679d108ffc837a151c36b7bde69c50ed01dc56240381e59388c663a

chore(deps): update docker.io/gotenberg/gotenberg docker tag to v8

Schedule: ["at any time"]
Branch name: renovate/docker.io-gotenberg-gotenberg-8.x
Merge into: main
Upgrade docker.io/gotenberg/gotenberg to sha256:67097317623a503ba2a6a7e9ae8db6929a1f7e1bbd88077bacf2d325fbdab923

chore(deps): update docker.io/library/postgres docker tag to v18

Schedule: ["at any time"]
Branch name: renovate/docker.io-library-postgres-18.x
Merge into: main
Upgrade docker.io/library/postgres to sha256:9a8afca54e7861fd90fab5fdf4c42477a6b1cb7d293595148e674e0a3181de15

chore(deps): update docker.stirlingpdf.com/stirlingtools/stirling-pdf docker tag to v2

Schedule: ["at any time"]
Branch name: renovate/docker.stirlingpdf.com-stirlingtools-stirling-pdf-2.x
Merge into: main
Upgrade docker.stirlingpdf.com/stirlingtools/stirling-pdf to sha256:7ed4d9681d18e4fbc3aa6a63647c4b5c2bcc4b75841df7c05d7e3d2320f5c9a1

chore(deps): lock file maintenance

Schedule: ["* 0-3 * * 1"]
Branch name: renovate/lock-file-maintenance
Merge into: main
Regenerate lock files to use latest dependency versions

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

⚠️ Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

Failed to look up docker package ghcr.io/immich-app/immich-machine-learning: no-result

Files affected: components/immich/immich-machine-learning.container

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

This PR has been generated by Mend Renovate.

Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin. 🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged. 📚 See our [Reading List](https://docs.renovatebot.com/reading-list/) for relevant documentation you may be interested in reading. 🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to `renovate.json` in this branch. Renovate will update the Pull Request description the next time it runs. --- ### Detected Package Files * `components/n8n/Containerfile` (dockerfile) * `mise.toml` (mise) * `components/common/postgres.image` (quadlet) * `components/common/redis.image` (quadlet) * `components/genealogy/gramps-celery.container` (quadlet) * `components/genealogy/gramps.container` (quadlet) * `components/immich/immich-machine-learning.container` (quadlet) * `components/ipinfo/ipinfo.container` (quadlet) * `components/mailu/mailu-certdumper.container` (quadlet) * `components/mat2-web/mat2-web.container` (quadlet) * `components/monitoring/node-exporter.container` (quadlet) * `components/monitoring/podman-exporter.container` (quadlet) * `components/nextcloud/collabora.container` (quadlet) * `components/nextcloud/nextcloud-imaginary.container` (quadlet) * `components/paperless-ngx/paperless-ngx-gotenberg.container` (quadlet) * `components/paperless-ngx/paperless-ngx-tika.container` (quadlet) * `components/pastebin/microbin.container` (quadlet) * `components/pdf/stirling.container` (quadlet) * `components/reverse-proxy/traefik.container` (quadlet) * `components/xmpp/ejabberd-certs-dumper.container` (quadlet) ### Configuration Summary Based on the default config's presets, Renovate will: - Start dependency updates only once this onboarding PR is merged - Enable Renovate Dependency Dashboard creation. - Use semantic commit type `fix` for dependencies and `chore` for all others if semantic commits are in use. - Ignore `node_modules`, `bower_components`, `vendor` and various test/tests (except for nuget) directories. - Group known monorepo packages together. - Use curated list of recommended non-monorepo package groupings. - Show only the Age and Confidence Merge Confidence badges for pull requests. - Apply crowd-sourced package replacement rules. - Apply crowd-sourced workarounds for known problems with packages. - Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff - Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff - Correctly link to the source code for golang.org/x packages - Link to pkg.go.dev/... for golang.org/x packages' title - Provide a link to octochangelog's improved breakdown for Renovate's changelogs - Pin Docker digests. - Pin `github-action` digests. - Enable Renovate configuration migration PRs when needed. - Pin dependency versions for development dependencies. - Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides. - Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds. - Run lock file maintenance (updates) early Monday mornings. --- ### What to Expect With your current configuration, Renovate will create 5 Pull Requests: <details> <summary>chore(deps): pin dependencies</summary> - Schedule: ["at any time"] - Branch name: `renovate/pin-dependencies` - Merge into: `main` - Upgrade docker.io/apache/tika to `sha256:90b7fa1dc018434075fce9e1d9b88b1e3d0ea6979d0cf86e116c79a8073ae973` - Upgrade docker.io/collabora/code to `sha256:1f864ce3f0c49e867787b6dd303bd6ba989542d3023f6809df558eafd04c1b97` - Upgrade docker.io/danielszabo99/microbin to `sha256:6660e5ccad0d764fa3c0032464ffb8f4b4f28c92a2eb9e39202b94cdc5b68909` - Upgrade [docker.io/gotenberg/gotenberg](https://github.com/gotenberg/gotenberg) to `sha256:d03b8a04c6e6c5e568b38f57352266dee4674849b71818774025f8f48d869a9a` - Upgrade docker.io/library/postgres to `sha256:57c72fd2a128e416c7fcc499958864df5301e940bca0a56f58fddf30ffc07777` - Upgrade docker.io/library/traefik to `sha256:652929a140a32d7cafafb13c6cdfab5376cfeff800f51397b87b524501ed02a8` - Upgrade docker.io/n8nio/n8n to `sha256:5f7856f4fc7cd935230f7596e39fdb3d5eda0e379c5b40b699b9c0eb35ebd0bf` - Upgrade docker.io/nextcloud/aio-imaginary to `sha256:15d3b439849a675d7b646db6796654ae238dd9c84ea089258d19c2fa69999cdf` - Upgrade docker.io/peterdavehello/ipinfo.tw to `sha256:f21996882ffb89b948a7c9e9d5632072d18ef0bc86e36a528e53d042e4856c0a` - Upgrade docker.io/prom/node-exporter to `sha256:1b4e4438faca4dd7e001dd445d161a4a2091b0fededa84093b3a8dfeae1f1be0` - Upgrade docker.io/valkey/valkey to `sha256:ee91f7a174ac4d6a6b0685b3a60e321f0a9dbbb691f9b0e285be2ba1d1be8328` - Upgrade [docker.stirlingpdf.com/stirlingtools/stirling-pdf](https://github.com/Stirling-Tools/Stirling-PDF) to `sha256:1f73a8f898fe269cbbccea3be577064dd87fc4334de349fcc5b1afa1bcebf240` - Upgrade ghcr.io/gramps-project/grampsweb to `sha256:6f81fa942f1d447a953e24eeddf17b28db9f5d55e5ba10ce2a76cfcf8896bb59` - Upgrade [ghcr.io/mailu/traefik-certdumper](https://github.com/ldez/traefik-certs-dumper) to `sha256:870f149e25c557fb3904be24cfc117fd041c8823d080b3cc740648661fdbce01` - Upgrade quay.io/navidys/prometheus-podman-exporter to `sha256:b32899364b6761e2f4f496f110f2bc91a6cbab064f737c19efff200f7f3a25bf` - Upgrade registry.0xacab.org/jvoisin/mat2-web to `sha256:ed136afbc679d108ffc837a151c36b7bde69c50ed01dc56240381e59388c663a` </details> <details> <summary>chore(deps): update docker.io/gotenberg/gotenberg docker tag to v8</summary> - Schedule: ["at any time"] - Branch name: `renovate/docker.io-gotenberg-gotenberg-8.x` - Merge into: `main` - Upgrade [docker.io/gotenberg/gotenberg](https://github.com/gotenberg/gotenberg) to `sha256:67097317623a503ba2a6a7e9ae8db6929a1f7e1bbd88077bacf2d325fbdab923` </details> <details> <summary>chore(deps): update docker.io/library/postgres docker tag to v18</summary> - Schedule: ["at any time"] - Branch name: `renovate/docker.io-library-postgres-18.x` - Merge into: `main` - Upgrade docker.io/library/postgres to `sha256:9a8afca54e7861fd90fab5fdf4c42477a6b1cb7d293595148e674e0a3181de15` </details> <details> <summary>chore(deps): update docker.stirlingpdf.com/stirlingtools/stirling-pdf docker tag to v2</summary> - Schedule: ["at any time"] - Branch name: `renovate/docker.stirlingpdf.com-stirlingtools-stirling-pdf-2.x` - Merge into: `main` - Upgrade [docker.stirlingpdf.com/stirlingtools/stirling-pdf](https://github.com/Stirling-Tools/Stirling-PDF) to `sha256:7ed4d9681d18e4fbc3aa6a63647c4b5c2bcc4b75841df7c05d7e3d2320f5c9a1` </details> <details> <summary>chore(deps): lock file maintenance</summary> - Schedule: ["* 0-3 * * 1"] - Branch name: `renovate/lock-file-maintenance` - Merge into: `main` - Regenerate lock files to use latest dependency versions </details> 🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See [docs for `prHourlyLimit`](https://docs.renovatebot.com/configuration-options/#prhourlylimit) for details. --- > > ⚠️ **Warning** > > Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR. > > - `Failed to look up docker package ghcr.io/immich-app/immich-machine-learning: no-result` > > Files affected: `components/immich/immich-machine-learning.container` --- ❓ Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section. If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-07-25 14:44:52 +00:00