Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.
:vertical_traffic_light: To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.
Detected Package Files
package.json (npm)
Configuration Summary
Based on the default config's presets, Renovate will:
Start dependency updates only once this onboarding PR is merged
Separate major versions of dependencies into individual branches/PRs
Do not separate patch and minor upgrades into separate PRs for the same dependency
Upgrade to unstable versions only if the existing version is unstable
Raise PRs immediately (after branch is created)
If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
Keep existing branches updated even when not scheduled
Disable automerging feature - wait for humans to merge all PRs
Ignore node_modules, bower_components, vendor and various test/tests directories
Autodetect whether to pin dependencies or maintain ranges
Rate limit PR creation to a maximum of two per hour
Limit to maximum 20 open PRs at any time
Group known monorepo packages together
Use curated list of recommended non-monorepo package groupings
Ignore spring cloud 1.x releases
Ignore http4s digest-based 1.x milestones
:abcd: Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.
What to Expect
With your current configuration, Renovate will create 7 Pull Requests:
Update dependency elliptic to 6.5.4 [SECURITY]
- Branch name: `renovate/npm-elliptic-vulnerability`
- Merge into: `master`
- Upgrade elliptic to `6.5.4`
Update dependency is-svg to 4.2.2 [SECURITY]
- Branch name: `renovate/npm-is-svg-vulnerability`
- Merge into: `master`
- Upgrade is-svg to `4.2.2`
Update dependency minimist to 1.2.3 [SECURITY]
- Branch name: `renovate/npm-minimist-vulnerability`
- Merge into: `master`
- Upgrade minimist to `1.2.3`
Update dependency node-forge to 0.10.0 [SECURITY]
- Branch name: `renovate/npm-node-forge-vulnerability`
- Merge into: `master`
- Upgrade node-forge to `0.10.0`
Update dependency y18n to 4.0.1 [SECURITY]
- Branch name: `renovate/npm-y18n-vulnerability`
- Merge into: `master`
- Upgrade y18n to `4.0.1`
Pin dependency parcel-bundler to v1.12.4
- Schedule: ["at any time"]
- Branch name: `renovate/pin-dependencies`
- Merge into: `master`
- Pin [parcel-bundler](https://togithub.com/parcel-bundler/parcel) to `1.12.4`
Update dependency parcel-bundler to v1.12.5
- Schedule: ["at any time"]
- Branch name: `renovate/parcel-bundler-1.x`
- Merge into: `master`
- Upgrade [parcel-bundler](https://togithub.com/parcel-bundler/parcel) to `1.12.5`
:children_crossing: Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.
:question: Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.
Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.
:vertical_traffic_light: To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.
Detected Package Files
package.json(npm)Configuration Summary
Based on the default config's presets, Renovate will:
fixfor dependencies andchorefor all othersnode_modules,bower_components,vendorand various test/tests directories:abcd: Would you like to change the way Renovate is upgrading your dependencies? Simply edit the
renovate.jsonin this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.What to Expect
With your current configuration, Renovate will create 7 Pull Requests:
Update dependency elliptic to 6.5.4 [SECURITY]
- Branch name: `renovate/npm-elliptic-vulnerability` - Merge into: `master` - Upgrade elliptic to `6.5.4`Update dependency is-svg to 4.2.2 [SECURITY]
- Branch name: `renovate/npm-is-svg-vulnerability` - Merge into: `master` - Upgrade is-svg to `4.2.2`Update dependency minimist to 1.2.3 [SECURITY]
- Branch name: `renovate/npm-minimist-vulnerability` - Merge into: `master` - Upgrade minimist to `1.2.3`Update dependency node-forge to 0.10.0 [SECURITY]
- Branch name: `renovate/npm-node-forge-vulnerability` - Merge into: `master` - Upgrade node-forge to `0.10.0`Update dependency y18n to 4.0.1 [SECURITY]
- Branch name: `renovate/npm-y18n-vulnerability` - Merge into: `master` - Upgrade y18n to `4.0.1`Pin dependency parcel-bundler to v1.12.4
- Schedule: ["at any time"] - Branch name: `renovate/pin-dependencies` - Merge into: `master` - Pin [parcel-bundler](https://togithub.com/parcel-bundler/parcel) to `1.12.4`Update dependency parcel-bundler to v1.12.5
- Schedule: ["at any time"] - Branch name: `renovate/parcel-bundler-1.x` - Merge into: `master` - Upgrade [parcel-bundler](https://togithub.com/parcel-bundler/parcel) to `1.12.5`:children_crossing: Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for
prhourlylimitfor details.:question: Got questions? Check out Renovate's Docs, particularly the Getting Started section. If you need any further assistance then you can also request help here.
This PR has been generated by WhiteSource Renovate. View repository job log here.