slsa-framework / azure-devops-demo

SLSA Azure DevOps Pipelines Extension
https://marketplace.visualstudio.com/items?itemName=gattjoe.SLSAProvenanceGenerator
Apache License 2.0
25 stars 13 forks source link

Configure Renovate #10

Closed renovate-bot closed 2 years ago

renovate-bot commented 2 years ago

Mend Renovate

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.


Detected Package Files

Configuration Summary

Based on the default config's presets, Renovate will:

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.


What to Expect

With your current configuration, Renovate will create 8 Pull Requests:

Pin dependencies - Schedule: ["at any time"] - Branch name: `renovate/pin-dependencies` - Merge into: `main` - Pin [@microsoft/eslint-plugin-sdl](https://togithub.com/microsoft/eslint-plugin-sdl) to `0.1.7` - Pin [@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped) to `10.17.60` - Pin [@types/q](https://togithub.com/DefinitelyTyped/DefinitelyTyped) to `1.5.5` - Pin [@typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/typescript-eslint) to `4.28.5` - Pin [@typescript-eslint/parser](https://togithub.com/typescript-eslint/typescript-eslint) to `4.28.5` - Pin [eslint](https://togithub.com/eslint/eslint) to `7.32.0` - Pin [eslint-plugin-node](https://togithub.com/mysticatea/eslint-plugin-node) to `11.1.0` - Pin [eslint-plugin-security](https://togithub.com/nodesecurity/eslint-plugin-security) to `1.4.0` - Pin [typescript](https://togithub.com/Microsoft/TypeScript) to `4.3.5`
Update dependency @​microsoft/eslint-plugin-sdl to v0.2.0 - Schedule: ["at any time"] - Branch name: `renovate/microsoft-eslint-plugin-sdl-0.x` - Merge into: `main` - Upgrade [@microsoft/eslint-plugin-sdl](https://togithub.com/microsoft/eslint-plugin-sdl) to `0.2.0`
Update dependency eslint-plugin-security to v1.5.0 - Schedule: ["at any time"] - Branch name: `renovate/eslint-plugin-security-1.x` - Merge into: `main` - Upgrade [eslint-plugin-security](https://togithub.com/nodesecurity/eslint-plugin-security) to `1.5.0`
Update dependency typescript to v4.7.4 - Schedule: ["at any time"] - Branch name: `renovate/typescript-4.x` - Merge into: `main` - Upgrade [typescript](https://togithub.com/Microsoft/TypeScript) to `4.7.4`
Update typescript-eslint monorepo to v4.33.0 - Schedule: ["at any time"] - Branch name: `renovate/typescript-eslint-monorepo` - Merge into: `main` - Upgrade [@typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/typescript-eslint) to `4.33.0` - Upgrade [@typescript-eslint/parser](https://togithub.com/typescript-eslint/typescript-eslint) to `4.33.0`
Update dependency @​types/node to v16 - Schedule: ["at any time"] - Branch name: `renovate/node-16.x` - Merge into: `main` - Upgrade [@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped) to `16.11.55`
Update dependency eslint to v8 - Schedule: ["at any time"] - Branch name: `renovate/eslint-8.x` - Merge into: `main` - Upgrade [eslint](https://togithub.com/eslint/eslint) to `8.22.0`
Update typescript-eslint monorepo to v5 (major) - Schedule: ["at any time"] - Branch name: `renovate/major-typescript-eslint-monorepo` - Merge into: `main` - Upgrade [@typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/typescript-eslint) to `5.34.0` - Upgrade [@typescript-eslint/parser](https://togithub.com/typescript-eslint/typescript-eslint) to `5.34.0`


🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.


⚠ Dependency Lookup Warnings ⚠

Please correct - or verify that you can safely ignore - these lookup failures before you merge this PR.

Files affected: azure-pipelines.yml


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section. If you need any further assistance then you can also request help here.


This PR has been generated by Mend Renovate. View repository job log here.

forking-renovate[bot] commented 2 years ago

Renovate is disabled

Renovate is disabled due to lack of config. If you wish to reenable it, you can either (a) commit a config file to your base branch, or (b) rename this closed PR to trigger a replacement onboarding PR.