chore: Configure Renovate

feibisi commented

2026-02-19 07:55:53 +08:00

Owner

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

Detected Package Files

.forgejo/workflows/gitleaks.yml (github-actions)
.forgejo/workflows/trivy.yml (github-actions)
npm-package/package.json (npm)
package.json (npm)
requirements.txt (pip_requirements)
renovate.json (renovate-config-presets)

Configuration Summary

Based on the default config's presets, Renovate will:

Start dependency updates only once this onboarding PR is merged
Enable Renovate Dependency Dashboard creation.
Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
Group known monorepo packages together.
Use curated list of recommended non-monorepo package groupings.
Show only the Age and Confidence Merge Confidence badges for pull requests.
Apply crowd-sourced package replacement rules.
Apply crowd-sourced workarounds for known problems with packages.
Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
Correctly link to the source code for golang.org/x packages
Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

What to Expect

With your current configuration, Renovate will create 12 Pull Requests:

chore(deps): update dependency fs-extra to v11.3.3

Schedule: ["at any time"]
Branch name: renovate/fs-extra-11.x-lockfile
Merge into: main
Upgrade fs-extra to 11.3.3

chore(deps): update dependency semver to v7.7.4

Schedule: ["at any time"]
Branch name: renovate/semver-7.x-lockfile
Merge into: main
Upgrade semver to 7.7.4

chore(deps): update dependency cn-font-split to v7.4.1

Schedule: ["at any time"]
Branch name: renovate/cn-font-split-7.x-lockfile
Merge into: main
Upgrade cn-font-split to 7.4.1

chore(deps): update dependency fonttools to v4.61.1

Schedule: ["at any time"]
Branch name: renovate/fonttools-4.x
Merge into: main
Upgrade fonttools to ==4.61.1

chore(deps): update dependency glob to v10.5.0

Schedule: ["at any time"]
Branch name: renovate/glob-10.x-lockfile
Merge into: main
Upgrade glob to 10.5.0

chore(deps): update dependency python-dotenv to v1.2.1

Schedule: ["at any time"]
Branch name: renovate/python-dotenv-1.x
Merge into: main
Upgrade python-dotenv to ==1.2.1

chore(deps): update dependency requests to v2.32.5

Schedule: ["at any time"]
Branch name: renovate/requests-2.x
Merge into: main
Upgrade requests to ==2.32.5

chore(deps): update https://code.forgejo.org/actions/checkout action to v6

Schedule: ["at any time"]
Branch name: renovate/https-code.forgejo.org-actions-checkout-6.x
Merge into: main
Upgrade https://code.forgejo.org/actions/checkout to v6

fix(deps): update dependency dotenv to v17

Schedule: ["at any time"]
Branch name: renovate/dotenv-17.x
Merge into: main
Upgrade dotenv to ^17.0.0

fix(deps): update dependency glob to v13

Schedule: ["at any time"]
Branch name: renovate/glob-13.x
Merge into: main
Upgrade glob to ^13.0.0

fix(deps): update dependency p-limit to v7

Schedule: ["at any time"]
Branch name: renovate/p-limit-7.x
Merge into: main
Upgrade p-limit to ^7.0.0

fix(deps): update dependency yargs to v18

Schedule: ["at any time"]
Branch name: renovate/yargs-18.x
Merge into: main
Upgrade yargs to ^18.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

This PR has been generated by Renovate Bot.

Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin. 🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged. --- ### Detected Package Files * `.forgejo/workflows/gitleaks.yml` (github-actions) * `.forgejo/workflows/trivy.yml` (github-actions) * `npm-package/package.json` (npm) * `package.json` (npm) * `requirements.txt` (pip_requirements) * `renovate.json` (renovate-config-presets) ### Configuration Summary Based on the default config's presets, Renovate will: - Start dependency updates only once this onboarding PR is merged - Enable Renovate Dependency Dashboard creation. - Use semantic commit type `fix` for dependencies and `chore` for all others if semantic commits are in use. - Ignore `node_modules`, `bower_components`, `vendor` and various test/tests (except for nuget) directories. - Group known monorepo packages together. - Use curated list of recommended non-monorepo package groupings. - Show only the Age and Confidence Merge Confidence badges for pull requests. - Apply crowd-sourced package replacement rules. - Apply crowd-sourced workarounds for known problems with packages. - Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff - Correctly link to the source code for golang.org/x packages - Link to pkg.go.dev/... for golang.org/x packages' title 🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to `renovate.json` in this branch. Renovate will update the Pull Request description the next time it runs. --- ### What to Expect With your current configuration, Renovate will create 12 Pull Requests: <details> <summary>chore(deps): update dependency fs-extra to v11.3.3</summary> - Schedule: ["at any time"] - Branch name: `renovate/fs-extra-11.x-lockfile` - Merge into: `main` - Upgrade [fs-extra](https://github.com/jprichardson/node-fs-extra) to `11.3.3` </details> <details> <summary>chore(deps): update dependency semver to v7.7.4</summary> - Schedule: ["at any time"] - Branch name: `renovate/semver-7.x-lockfile` - Merge into: `main` - Upgrade [semver](https://github.com/npm/node-semver) to `7.7.4` </details> <details> <summary>chore(deps): update dependency cn-font-split to v7.4.1</summary> - Schedule: ["at any time"] - Branch name: `renovate/cn-font-split-7.x-lockfile` - Merge into: `main` - Upgrade [cn-font-split](https://github.com/KonghaYao/cn-font-split) to `7.4.1` </details> <details> <summary>chore(deps): update dependency fonttools to v4.61.1</summary> - Schedule: ["at any time"] - Branch name: `renovate/fonttools-4.x` - Merge into: `main` - Upgrade [fonttools](https://github.com/fonttools/fonttools) to `==4.61.1` </details> <details> <summary>chore(deps): update dependency glob to v10.5.0</summary> - Schedule: ["at any time"] - Branch name: `renovate/glob-10.x-lockfile` - Merge into: `main` - Upgrade [glob](https://github.com/isaacs/node-glob) to `10.5.0` </details> <details> <summary>chore(deps): update dependency python-dotenv to v1.2.1</summary> - Schedule: ["at any time"] - Branch name: `renovate/python-dotenv-1.x` - Merge into: `main` - Upgrade [python-dotenv](https://github.com/theskumar/python-dotenv) to `==1.2.1` </details> <details> <summary>chore(deps): update dependency requests to v2.32.5</summary> - Schedule: ["at any time"] - Branch name: `renovate/requests-2.x` - Merge into: `main` - Upgrade [requests](https://github.com/psf/requests) to `==2.32.5` </details> <details> <summary>chore(deps): update https://code.forgejo.org/actions/checkout action to v6</summary> - Schedule: ["at any time"] - Branch name: `renovate/https-code.forgejo.org-actions-checkout-6.x` - Merge into: `main` - Upgrade [https://code.forgejo.org/actions/checkout](https://code.forgejo.org/actions/checkout) to `v6` </details> <details> <summary>fix(deps): update dependency dotenv to v17</summary> - Schedule: ["at any time"] - Branch name: `renovate/dotenv-17.x` - Merge into: `main` - Upgrade [dotenv](https://github.com/motdotla/dotenv) to `^17.0.0` </details> <details> <summary>fix(deps): update dependency glob to v13</summary> - Schedule: ["at any time"] - Branch name: `renovate/glob-13.x` - Merge into: `main` - Upgrade [glob](https://github.com/isaacs/node-glob) to `^13.0.0` </details> <details> <summary>fix(deps): update dependency p-limit to v7</summary> - Schedule: ["at any time"] - Branch name: `renovate/p-limit-7.x` - Merge into: `main` - Upgrade [p-limit](https://github.com/sindresorhus/p-limit) to `^7.0.0` </details> <details> <summary>fix(deps): update dependency yargs to v18</summary> - Schedule: ["at any time"] - Branch name: `renovate/yargs-18.x` - Merge into: `main` - Upgrade [yargs](https://github.com/yargs/yargs) to `^18.0.0` </details> 🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for `prhourlylimit` for details. --- ❓ Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section. If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

feibisi added 1 commit 2026-02-19 07:55:54 +08:00

Add renovate.json

gitleaks 密钥泄露扫描 / gitleaks (pull_request) Has been cancelled

Details

Trivy 依赖漏洞扫描 / trivy-scan (pull_request) Has been cancelled

Details

eadd4a8dd2

renovate-bot force-pushed renovate/configure from eadd4a8dd2 to 5fde8d0cb1

2026-02-19 09:20:55 +08:00

Compare

renovate-bot force-pushed renovate/configure from 5fde8d0cb1 to 5fe2364a0f

2026-02-19 09:22:42 +08:00

Compare

renovate-bot force-pushed renovate/configure from 5fe2364a0f to 653d70294b

2026-02-19 09:24:23 +08:00

Compare

renovate-bot force-pushed renovate/configure from 653d70294b to 48dca9432d

2026-02-19 14:01:02 +08:00

Compare

renovate-bot force-pushed renovate/configure from 48dca9432d to 1d9752da88

2026-02-19 20:01:06 +08:00

Compare

renovate-bot force-pushed renovate/configure from 1d9752da88 to 772fb36566

2026-02-20 02:01:16 +08:00

Compare

renovate-bot force-pushed renovate/configure from 772fb36566 to 7eab21b3ea

2026-02-20 08:01:14 +08:00

Compare

renovate-bot force-pushed renovate/configure from 7eab21b3ea to 9cee82f8ad

2026-02-20 14:01:06 +08:00

Compare

renovate-bot force-pushed renovate/configure from 9cee82f8ad to 480a790e57

2026-02-20 20:01:10 +08:00

Compare

renovate-bot force-pushed renovate/configure from 480a790e57 to 927009ddf5

2026-02-21 02:00:53 +08:00

Compare

renovate-bot force-pushed renovate/configure from 927009ddf5 to 4af9fedb57

2026-02-21 08:01:06 +08:00

Compare

renovate-bot force-pushed renovate/configure from 4af9fedb57 to 036551f786

2026-02-21 14:01:20 +08:00

Compare

renovate-bot force-pushed renovate/configure from 036551f786 to 3eb8b04165

2026-02-21 20:01:30 +08:00

Compare

gitleaks 密钥泄露扫描 / gitleaks (pull_request) Waiting to run

Details

Trivy 依赖漏洞扫描 / trivy-scan (pull_request) Waiting to run

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/configure:renovate/configure

git checkout renovate/configure

chore: Configure Renovate #1

Detected Package Files

Configuration Summary

What to Expect

Checkout

菲码源库

快速导航

产品服务

生态伙伴

Rows
Columns