Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• artifactbroker/packages/docker/Dockerfile (dockerfile)
• multivimbroker/docker/Dockerfile (dockerfile)
• multivimbroker/docker/pecan/Dockerfile (dockerfile)
• artifactbroker/forwarding/pom.xml (maven)
• artifactbroker/main/pom.xml (maven)
• artifactbroker/model/pom.xml (maven)
• artifactbroker/packages/pom.xml (maven)
• artifactbroker/plugins/forwarding-plugins/pom.xml (maven)
• artifactbroker/plugins/pom.xml (maven)
• artifactbroker/plugins/reception-plugins/pom.xml (maven)
• artifactbroker/pom.xml (maven)
• artifactbroker/reception/pom.xml (maven)
• multivimbroker/pom.xml (maven)
• pom.xml (maven)
• multivimbroker/pecan-requirements.txt (pip_requirements)
• multivimbroker/requirements.txt (pip_requirements)
• multivimbroker/test-requirements.txt (pip_requirements)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Separate major versions of dependencies into individual branches/PRs
• Do not separate patch and minor upgrades into separate PRs for the same dependency
• Upgrade to unstable versions only if the existing version is unstable
• Raise PRs immediately (after branch is created)
• If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
• Keep existing branches updated even when not scheduled
• Disable automerging feature - wait for humans to merge all PRs
• Ignore node_modules, bower_components, vendor and various test/tests directories
• Autodetect whether to pin dependencies or maintain ranges
• Rate limit PR creation to a maximum of two per hour
• Limit to maximum 20 open PRs at any time
• Group known monorepo packages together
• Use curated list of recommended non-monorepo package groupings
• Ignore spring cloud 1.x releases
• Ignore http4s digest-based 1.x milestones
• Use node versioning for @types/node
• Limit concurrent requests to reduce load on Repology servers until we can fix this properly, see issue 10133

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.

---

What to Expect

With your current configuration, Renovate will create 22 Pull Requests:

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: master
• Pin django-nose to ==1.4.7
• Pin eventlet to ==0.31.0
• Pin onappylog to ==1.0.9
• Pin oslo.concurrency to ==4.4.0
• Pin oslo.config to ==8.7.0
• Pin oslo.service to ==2.6.0
• Pin pecan to ==1.4.0

Update dependency Django to v2.2.24

• Schedule: ["at any time"]
• Branch name: renovate/django-2.x
• Merge into: master
• Upgrade Django to ==2.2.24

Update dependency com.google.code.gson:gson to v2.8.7

• Schedule: ["at any time"]
• Branch name: renovate/com.google.code.gson-gson-2.x
• Merge into: master
• Upgrade com.google.code.gson:gson to 2.8.7

Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.8.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-compiler-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.8.1

Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.3

• Schedule: ["at any time"]
• Branch name: renovate/com.fasterxml.jackson.core-jackson-databind-2.x
• Merge into: master
• Upgrade com.fasterxml.jackson.core:jackson-databind to 2.12.3

Update dependency coverage to v4.5.4

• Schedule: ["at any time"]
• Branch name: renovate/coverage-4.x
• Merge into: master
• Upgrade coverage to ==4.5.4

Update dependency djangorestframework to v3.12.4

• Schedule: ["at any time"]
• Branch name: renovate/djangorestframework-3.x
• Merge into: master
• Upgrade djangorestframework to ==3.12.4

Update dependency httplib2 to v0.19.1

• Schedule: ["at any time"]
• Branch name: renovate/httplib2-0.x
• Merge into: master
• Upgrade httplib2 to ==0.19.1

Update dependency junit:junit to v4.13.2

• Schedule: ["at any time"]
• Branch name: renovate/junit-junit-4.x
• Merge into: master
• Upgrade junit:junit to 4.13.2

Update dependency org.apache.logging.log4j:log4j-api to v2.14.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.logging.log4j-log4j-api-2.x
• Merge into: master
• Upgrade org.apache.logging.log4j:log4j-api to 2.14.1

Update dependency org.apache.maven.plugins:maven-antrun-plugin to v1.8

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-antrun-plugin-1.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-antrun-plugin to 1.8

Update dependency org.apache.maven.plugins:maven-resources-plugin to v3.2.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-resources-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-resources-plugin to 3.2.0

Update dependency org.codehaus.mojo:exec-maven-plugin to v1.6.0

• Schedule: ["at any time"]
• Branch name: renovate/org.codehaus.mojo-exec-maven-plugin-1.x
• Merge into: master
• Upgrade org.codehaus.mojo:exec-maven-plugin to 1.6.0

Update dependency unittest_xml_reporting to v1.14.0

• Schedule: ["at any time"]
• Branch name: renovate/unittest_xml_reporting-1.x
• Merge into: master
• Upgrade unittest_xml_reporting to ==1.14.0

Update dependency Django to v3

• Schedule: ["at any time"]
• Branch name: renovate/django-3.x
• Merge into: master
• Upgrade Django to ==3.2.4

Update dependency coverage to v5

• Schedule: ["at any time"]
• Branch name: renovate/coverage-5.x
• Merge into: master
• Upgrade coverage to ==5.5

Update dependency mock to v4

• Schedule: ["at any time"]
• Branch name: renovate/mock-4.x
• Merge into: master
• Upgrade mock to ==4.0.3

Update dependency org.apache.maven.plugins:maven-antrun-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-antrun-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-antrun-plugin to 3.0.0

Update dependency org.codehaus.mojo:exec-maven-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.codehaus.mojo-exec-maven-plugin-3.x
• Merge into: master
• Upgrade org.codehaus.mojo:exec-maven-plugin to 3.0.0

Update dependency org.json:json to v20210307

• Schedule: ["at any time"]
• Branch name: renovate/org.json-json-20210307.x
• Merge into: master
• Upgrade org.json:json to 20210307

Update dependency unittest_xml_reporting to v3

• Schedule: ["at any time"]
• Branch name: renovate/unittest_xml_reporting-3.x
• Merge into: master
• Upgrade unittest_xml_reporting to ==3.0.4

Update python Docker tag

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to 3-slim
• Upgrade python to 3.9-alpine

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.

---

⚠ Dependency Lookup Warnings ⚠

Please correct - or verify that you can safely ignore - these lookup failures before you merge this PR.

• Failed to look up dependency org.onap.multicloud.framework:multicloud-framework-artifactbroker
• Failed to look up dependency org.onap.sdc.sdc-distribution-client:sdc-distribution-client
• Failed to look up dependency org.onap.multicloud.framework:multicloud-framework-artifactbroker-plugins
• Failed to look up dependency org.onap.multicloud.framework:multicloud-framework
• Failed to look up dependency org.onap.policy.common:common-parameters
• Failed to look up dependency org.onap.policy.common:ONAP-Logging
• Failed to look up dependency org.onap.policy.common:capabilities
• Failed to look up dependency org.onap.policy.common:policy-endpoints
• Failed to look up dependency org.onap.policy.common:utils
• Failed to look up dependency org.onap.oparent:checkstyle
• Failed to look up dependency org.onap.oparent:oparent

Files affected: artifactbroker/forwarding/pom.xml, artifactbroker/main/pom.xml, artifactbroker/model/pom.xml, artifactbroker/packages/pom.xml, artifactbroker/plugins/forwarding-plugins/pom.xml, artifactbroker/plugins/pom.xml, artifactbroker/plugins/reception-plugins/pom.xml, artifactbroker/pom.xml, artifactbroker/reception/pom.xml, multivimbroker/pom.xml, pom.xml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.