Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/action.yml (github-actions)
• .github/workflows/codacy.yml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/flawfinder.yml (github-actions)
• .github/workflows/includeguard.yml (github-actions)
• .github/workflows/msvc.yml (github-actions)
• .github/workflows/snyk-infrastructure.yml (github-actions)
• .github/workflows/sonarcloud.yml (github-actions)
• .github/workflows/veracode.yml (github-actions)
• .github/workflows/windows.yml (github-actions)
• .github/workflows/workflow.yml (github-actions)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 16 Pull Requests:

Update SonarSource/sonarcloud-github-action digest to 49e6cd3

• Schedule: ["at any time"]
• Branch name: renovate/sonarsource-sonarcloud-github-action-digest
• Merge into: master
• Upgrade SonarSource/sonarcloud-github-action to 49e6cd3b187936a73b8280d59ffd9da69df63ec9

Update actions/checkout digest to f43a0e5

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-digest
• Merge into: master
• Upgrade actions/checkout to f43a0e5ff2bd294095638e18286ca9a3d1956744

Update actions/dependency-review-action digest to a9c83d3

• Schedule: ["at any time"]
• Branch name: renovate/actions-dependency-review-action-digest
• Merge into: master
• Upgrade actions/dependency-review-action to a9c83d3af6b9031e20feba03b904645bb23d1dab

Update codacy/codacy-analysis-cli-action digest to 240c610

• Schedule: ["at any time"]
• Branch name: renovate/codacy-codacy-analysis-cli-action-digest
• Merge into: master
• Upgrade codacy/codacy-analysis-cli-action to 240c610b1b65402cda39c6355968ef50aa2c07ba

Update david-a-wheeler/flawfinder digest to 56ffb9f

• Schedule: ["at any time"]
• Branch name: renovate/david-a-wheeler-flawfinder-digest
• Merge into: master
• Upgrade david-a-wheeler/flawfinder to 56ffb9faa255f0f0d242191fa576356f47d38285

Update microsoft/msvc-code-analysis-action digest to 9631532

• Schedule: ["at any time"]
• Branch name: renovate/microsoft-msvc-code-analysis-action-digest
• Merge into: master
• Upgrade microsoft/msvc-code-analysis-action to 96315324a485db21449515180214ecb78c16a1c5

Update snyk/actions digest to 3e2680e

• Schedule: ["at any time"]
• Branch name: renovate/snyk-actions-digest
• Merge into: master
• Upgrade snyk/actions to 3e2680e8df93a24b52d119b1305fb7cedc60ceae

Update veracode/veracode-pipeline-scan-results-to-sarif digest to 86b894a

• Schedule: ["at any time"]
• Branch name: renovate/veracode-veracode-pipeline-scan-results-to-sarif-digest
• Merge into: master
• Upgrade veracode/veracode-pipeline-scan-results-to-sarif to 86b894a822ee14ec24401f75c5c510fe6ed172b6

Update codecov/codecov-action action to v3.1.4

• Schedule: ["at any time"]
• Branch name: renovate/codecov-codecov-action-3.x
• Merge into: master
• Upgrade codecov/codecov-action to v3.1.4

Update actions/checkout action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: master
• Upgrade actions/checkout to v4
• Upgrade actions/checkout to b4ffde65f46336ab88eb53be808477a3936bae11

Update actions/dependency-review-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/actions-dependency-review-action-3.x
• Merge into: master
• Upgrade actions/dependency-review-action to 01bc87099ba56df1e897b6874784491ea6309bc4

Update actions/setup-java action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-4.x
• Merge into: master
• Upgrade actions/setup-java to v4

Update actions/upload-artifact action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-4.x
• Merge into: master
• Upgrade actions/upload-artifact to v4

Update dependency windows to v2022

• Schedule: ["at any time"]
• Branch name: renovate/windows-2022.x
• Merge into: master
• Upgrade windows to 2022

Update github/codeql-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-3.x
• Merge into: master
• Upgrade github/codeql-action to v3

Update parasoft/run-cpptest-action action to v2

• Schedule: ["at any time"]
• Branch name: renovate/parasoft-run-cpptest-action-2.x
• Merge into: master
• Upgrade parasoft/run-cpptest-action to 2.0.1

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate. View repository job log here.