Configure Renovate

[renovate-bot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• base-services/registration/server/Cargo.toml (cargo)
• base-services/data-api/docker-compose.yml (docker-compose)
• base-services/data-converter/docker-compose.yml (docker-compose)
• sample-clients/iot-client/docker-compose.yml (docker-compose)
• base-services/auth-callout/Dockerfile (dockerfile)
• base-services/data-api/Dockerfile (dockerfile)
• base-services/data-converter/Dockerfile (dockerfile)
• base-services/registration/server/Dockerfile (dockerfile)
• sample-clients/data-web-client/Dockerfile (dockerfile)
• sample-clients/iot-client/dev/nats-subscriber/Dockerfile (dockerfile)
• sample-services/data-api-sampler/Dockerfile (dockerfile)
• sample-services/trip_analyzer/Dockerfile (dockerfile)
• .github/workflows/build-push-ai-assistant.yml (github-actions)
• .github/workflows/build-push-deploy-data-api-sampler.yml (github-actions)
• .github/workflows/build-push-deploy-data-api.yml (github-actions)
• .github/workflows/build-push-deploy-data-web-client.yml (github-actions)
• .github/workflows/build-push-deploy-registration.yml (github-actions)
• .github/workflows/build-push-deploy-trip_analyzer.yml (github-actions)
• .github/workflows/build-push-nats-auth-callout.yml (github-actions)
• .github/workflows/deploy-external-dns.yml (github-actions)
• .github/workflows/deploy-keycloak.yml (github-actions)
• .github/workflows/deploy-nats-auth-callout.yml (github-actions)
• .github/workflows/deploy-nats-bigtable-connector.yml (github-actions)
• .github/workflows/deploy-nats.yml (github-actions)
• .github/workflows/deploy-sample-services.yml (github-actions)
• .github/workflows/terraform-test.yml (github-actions)
• .github/workflows/test-base-services.yml (github-actions)
• .github/workflows/trivy-license-scan.yml (github-actions)
• .github/workflows/trivy-vulnerability.yml (github-actions)
• base-services/auth-callout/go.mod (gomod)
• base-services/data-api/go.mod (gomod)
• base-services/data-converter/go.mod (gomod)
• sample-clients/telemetry-subscriber/go.mod (gomod)
• sample-clients/vehicle-client/go.mod (gomod)
• iac/helm/data-api-sampler/values.yaml (helm-values)
• iac/helm/data-api/values.yaml (helm-values)
• iac/helm/data-converter/values.yaml (helm-values)
• iac/helm/data-web-client/values.yaml (helm-values)
• iac/helm/nats-bigtable-connector/values.yaml (helm-values)
• iac/helm/trip-analyzer/values.yaml (helm-values)
• iac/helm/helmfile.d/data-api-sampler.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/data-api.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/data-web-client.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/external-secrets.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/keycloak.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/nats-auth-callout.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/nats-connector.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/nats.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/registration.yaml.gotmpl (helmfile)
• iac/helm/helmfile.d/trip-analyzer.yaml.gotmpl (helmfile)
• sample-services/data-api-sampler/pom.xml (maven)
• sample-services/data-api-sampler/.mvn/wrapper/maven-wrapper.properties (maven-wrapper)
• sample-services/data-api-sampler/mvnw (maven-wrapper)
• sample-services/data-api-sampler/mvnw.cmd (maven-wrapper)
• sample-clients/data-web-client/package.json (npm)
• sample-clients/devices/pyproject.toml (pep621)
• sample-clients/python/pyproject.toml (pep621)
• sample-services/trip_analyzer/pyproject.toml (pep621)
• sample-clients/devices/.python-version (pyenv)
• sample-clients/python/.python-version (pyenv)
• iac/terraform/main.tf (terraform)
• iac/terraform/.tflint.hcl (tflint-plugin)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 66 Pull Requests:

Update dependency pydantic-settings to v2.14.2 [SECURITY]

• Branch name: renovate/pypi-pydantic-settings-vulnerability
• Merge into: main
• Upgrade pydantic-settings to 2.14.2

Update dependency requests to v2.33.0 [SECURITY]

• Branch name: renovate/pypi-requests-vulnerability
• Merge into: main
• Upgrade requests to 2.33.0

Update dependency cryptography to v48 [SECURITY]

• Branch name: renovate/pypi-cryptography-vulnerability
• Merge into: main
• Upgrade cryptography to 48.0.1

Update dependency maven to v3.9.16

• Schedule: ["at any time"]
• Branch name: renovate/maven-3.x
• Merge into: main
• Upgrade maven to 3.9.16

Update dependency org.projectlombok:lombok to v1.18.46

• Schedule: ["at any time"]
• Branch name: renovate/lombok.version
• Merge into: main
• Upgrade org.projectlombok:lombok to 1.18.46

Update module github.com/nats-io/nkeys to v0.4.16

• Schedule: ["at any time"]
• Branch name: renovate/github.com-nats-io-nkeys-0.x
• Merge into: main
• Upgrade github.com/nats-io/nkeys to v0.4.16

Update module google.golang.org/protobuf to v1.36.11

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-protobuf-1.x
• Merge into: main
• Upgrade google.golang.org/protobuf to v1.36.11

Update nextjs monorepo to v16.2.9

• Schedule: ["at any time"]
• Branch name: renovate/nextjs-monorepo
• Merge into: main
• Upgrade eslint-config-next to 16.2.9
• Upgrade next to 16.2.9

Update react monorepo to v19.2.7

• Schedule: ["at any time"]
• Branch name: renovate/react-monorepo
• Merge into: main
• Upgrade react to 19.2.7
• Upgrade react-dom to 19.2.7

Update Rust crate anyhow to v1.0.102

• Schedule: ["at any time"]
• Branch name: renovate/anyhow-1.x-lockfile
• Merge into: main
• Upgrade anyhow to 1.0.102

Update Rust crate axum to v0.8.9

• Schedule: ["at any time"]
• Branch name: renovate/axum-0.x-lockfile
• Merge into: main
• Upgrade axum to 0.8.9

Update Rust crate rcgen to v0.14.8

• Schedule: ["at any time"]
• Branch name: renovate/rcgen-0.x-lockfile
• Merge into: main
• Upgrade rcgen to 0.14.8

Update Rust crate rustls to v0.23.41

• Schedule: ["at any time"]
• Branch name: renovate/rustls-0.x-lockfile
• Merge into: main
• Upgrade rustls to 0.23.41

Update Rust crate serde_json to v1.0.150

• Schedule: ["at any time"]
• Branch name: renovate/serde_json-1.x-lockfile
• Merge into: main
• Upgrade serde_json to 1.0.150

Update Rust crate time to v0.3.51

• Schedule: ["at any time"]
• Branch name: renovate/time-0.x-lockfile
• Merge into: main
• Upgrade time to 0.3.51

Update Rust crate tracing to v0.1.44

• Schedule: ["at any time"]
• Branch name: renovate/tracing-0.x-lockfile
• Merge into: main
• Upgrade tracing to 0.1.44

Update Rust crate tracing-subscriber to v0.3.23

• Schedule: ["at any time"]
• Branch name: renovate/tracing-subscriber-0.x-lockfile
• Merge into: main
• Upgrade tracing-subscriber to 0.3.23

Update dependency io.github.ascopes:protobuf-maven-plugin to v4.1.3

• Schedule: ["at any time"]
• Branch name: renovate/io.github.ascopes-protobuf-maven-plugin-4.x
• Merge into: main
• Upgrade io.github.ascopes:protobuf-maven-plugin to 4.1.3

Update dependency io.grpc:protoc-gen-grpc-java to v1.82.1

• Schedule: ["at any time"]
• Branch name: renovate/grpc-java-monorepo
• Merge into: main
• Upgrade io.grpc:protoc-gen-grpc-java to 1.82.1

Update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.0

• Schedule: ["at any time"]
• Branch name: renovate/spring-boot
• Merge into: main
• Upgrade org.springframework.boot:spring-boot-starter-parent to 4.1.0

Update dependency org.springframework.grpc:spring-grpc-dependencies to v1.1.0

• Schedule: ["at any time"]
• Branch name: renovate/spring-grpc.version
• Merge into: main
• Upgrade org.springframework.grpc:spring-grpc-dependencies to 1.1.0

Update go toolchain directive to v1.26.4

• Schedule: ["at any time"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.26.4
• Upgrade go to 1.26
• Upgrade go to 1.26.4

Update Helm release external-secrets to v0.20.4

• Schedule: ["at any time"]
• Branch name: renovate/external-secrets-0.x
• Merge into: main
• Upgrade external-secrets to 2d2f5bb4eb8d9cbe1f6d5d9673984c334cb363029498fe328d6c0e60fc47e7ea

Update helmfile/helmfile-action action to v2.4.6

• Schedule: ["at any time"]
• Branch name: renovate/helmfile-helmfile-action-2.x
• Merge into: main
• Upgrade helmfile/helmfile-action to v2.4.6

Update module cloud.google.com/go/bigtable to v1.50.0

• Schedule: ["at any time"]
• Branch name: renovate/cloud.google.com-go-bigtable-1.x
• Merge into: main
• Upgrade cloud.google.com/go/bigtable to v1.50.0

Update module github.com/golang-jwt/jwt/v5 to v5.3.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-golang-jwt-jwt-v5-5.x
• Merge into: main
• Upgrade github.com/golang-jwt/jwt/v5 to v5.3.1

Update module github.com/labstack/gommon to v0.5.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-labstack-gommon-0.x
• Merge into: main
• Upgrade github.com/labstack/gommon to v0.5.0

Update module github.com/nats-io/jwt/v2 to v2.8.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-nats-io-jwt-v2-2.x
• Merge into: main
• Upgrade github.com/nats-io/jwt/v2 to v2.8.2

Update module github.com/nats-io/nats.go to v1.52.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-nats-io-nats.go-1.x
• Merge into: main
• Upgrade github.com/nats-io/nats.go to v1.52.0

Update module go.uber.org/zap to v1.28.0

• Schedule: ["at any time"]
• Branch name: renovate/go.uber.org-zap-1.x
• Merge into: main
• Upgrade go.uber.org/zap to v1.28.0

Update module google.golang.org/api to v0.286.0

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-api-0.x
• Merge into: main
• Upgrade google.golang.org/api to v0.286.0

Update module google.golang.org/grpc to v1.81.1

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-grpc-1.x
• Merge into: main
• Upgrade google.golang.org/grpc to v1.81.1

Update python Docker tag

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14
• Upgrade python to 3.14
• Upgrade python to 3.14-slim

Update Rust crate arc-swap to v1.9.1

• Schedule: ["at any time"]
• Branch name: renovate/arc-swap-1.x-lockfile
• Merge into: main
• Upgrade arc-swap to 1.9.1

Update Rust crate hyper to v1.10.1

• Schedule: ["at any time"]
• Branch name: renovate/hyper-1.x-lockfile
• Merge into: main
• Upgrade hyper to 1.10.1

Update Rust crate rustls-pki-types to v1.14.1

• Schedule: ["at any time"]
• Branch name: renovate/rustls-pki-types-1.x-lockfile
• Merge into: main
• Upgrade rustls-pki-types to 1.14.1

Update Rust crate tempfile to v3.27.0

• Schedule: ["at any time"]
• Branch name: renovate/tempfile-3.x-lockfile
• Merge into: main
• Upgrade tempfile to 3.27.0

Update Rust crate tokio to v1.52.3

• Schedule: ["at any time"]
• Branch name: renovate/tokio-1.x-lockfile
• Merge into: main
• Upgrade tokio to 1.52.3

Update Rust crate tower-http to 0.7

• Schedule: ["at any time"]
• Branch name: renovate/tower-http-0.x
• Merge into: main
• Upgrade tower-http to 0.7

Update Rust crate x509-parser to 0.18

• Schedule: ["at any time"]
• Branch name: renovate/x509-parser-0.x
• Merge into: main
• Upgrade x509-parser to 0.18

Update Terraform google to v6.50.0

• Schedule: ["at any time"]
• Branch name: renovate/google-6.x
• Merge into: main
• Upgrade google to 6.50.0

Update Terraform random to v3.9.0

• Schedule: ["at any time"]
• Branch name: renovate/random-3.x
• Merge into: main
• Upgrade random to 3.9.0

Update Terraform time to v0.14.0

• Schedule: ["at any time"]
• Branch name: renovate/time-0.x
• Merge into: main
• Upgrade time to 0.14.0

Update TFLint plugin terraform-linters/tflint-ruleset-google to v0.39.0

• Schedule: ["at any time"]
• Branch name: renovate/terraform-linters-tflint-ruleset-google-0.x
• Merge into: main
• Upgrade terraform-linters/tflint-ruleset-google to 0.39.0

Update actions/cache action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-6.x
• Merge into: main
• Upgrade actions/cache to v6

Update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: main
• Upgrade actions/checkout to v7

Update actions/setup-go action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-6.x
• Merge into: main
• Upgrade actions/setup-go to v6

Update actions/setup-python action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: main
• Upgrade actions/setup-python to v6

Update dependency @​types/node to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade @types/node to ^24.0.0

Update dependency eslint to v10

• Schedule: ["at any time"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: main
• Upgrade eslint to ^10.0.0

Update dependency io.github.ascopes:protobuf-maven-plugin to v5

• Schedule: ["at any time"]
• Branch name: renovate/io.github.ascopes-protobuf-maven-plugin-5.x
• Merge into: main
• Upgrade io.github.ascopes:protobuf-maven-plugin to 5.1.6

Update dependency typescript to v6

• Schedule: ["at any time"]
• Branch name: renovate/typescript-6.x
• Merge into: main
• Upgrade typescript to ^6.0.0

Update docker/build-push-action action to v7

• Schedule: ["at any time"]
• Branch name: renovate/docker-build-push-action-7.x
• Merge into: main
• Upgrade docker/build-push-action to v7

Update docker/setup-buildx-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-buildx-action-4.x
• Merge into: main
• Upgrade docker/setup-buildx-action to v4

Update docker/setup-qemu-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/docker-setup-qemu-action-4.x
• Merge into: main
• Upgrade docker/setup-qemu-action to v4

Update google-github-actions/auth action to v3

• Schedule: ["at any time"]
• Branch name: renovate/google-github-actions-auth-3.x
• Merge into: main
• Upgrade google-github-actions/auth to v3

Update google-github-actions/deploy-cloudrun action to v3

• Schedule: ["at any time"]
• Branch name: renovate/google-github-actions-deploy-cloudrun-3.x
• Merge into: main
• Upgrade google-github-actions/deploy-cloudrun to v3

Update google-github-actions/get-gke-credentials action to v3

• Schedule: ["at any time"]
• Branch name: renovate/google-github-actions-get-gke-credentials-3.x
• Merge into: main
• Upgrade google-github-actions/get-gke-credentials to v3

Update google-github-actions/setup-gcloud action to v3

• Schedule: ["at any time"]
• Branch name: renovate/google-github-actions-setup-gcloud-3.x
• Merge into: main
• Upgrade google-github-actions/setup-gcloud to v3

Update hashicorp/setup-terraform action to v4

• Schedule: ["at any time"]
• Branch name: renovate/hashicorp-setup-terraform-4.x
• Merge into: main
• Upgrade hashicorp/setup-terraform to v4

Update Helm release external-secrets to v2

• Schedule: ["at any time"]
• Branch name: renovate/external-secrets-2.x
• Merge into: main
• Upgrade external-secrets to f3659c0085a41e1be5c016cf186b80aac262ef249a91b1b770b941f18296ef3f

Update jest monorepo to v30

• Schedule: ["at any time"]
• Branch name: renovate/major-jest-monorepo
• Merge into: main
• Upgrade @types/jest to ^30.0.0
• Upgrade jest to ^30.0.0
• Upgrade jest-environment-jsdom to ^30.0.0

Update module github.com/lestrrat-go/jwx to v4

• Schedule: ["at any time"]
• Branch name: renovate/github.com-lestrrat-go-jwx-4.x
• Merge into: main
• Upgrade github.com/lestrrat-go/jwx to v4.0.2

Update Rust crate notify to v8

• Schedule: ["at any time"]
• Branch name: renovate/notify-8.x
• Merge into: main
• Upgrade notify to 8.0

Update Terraform google to v7

• Schedule: ["at any time"]
• Branch name: renovate/google-7.x
• Merge into: main
• Upgrade google to 7.38.0

Update terraform-linters/setup-tflint action to v6

• Schedule: ["at any time"]
• Branch name: renovate/terraform-linters-setup-tflint-6.x
• Merge into: main
• Upgrade terraform-linters/setup-tflint to v6

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up docker package europe-west4-docker.pkg.dev/horizon-sdv-lal/docker-hub/golang: no-result
• Failed to look up docker package europe-west4-docker.pkg.dev/horizon-sdv-lal/docker-hub/node: no-result
• Failed to look up docker package europe-west4-docker.pkg.dev/horizon-sdv-lal/docker-hub/maven: no-result
• Failed to look up docker package europe-west4-docker.pkg.dev/horizon-sdv-lal/docker-hub/eclipse-temurin: no-result
• Failed to look up docker package europe-west4-docker.pkg.dev/horizon-sdv-lal/docker-hub/python: no-result

Files affected: base-services/auth-callout/Dockerfile, sample-clients/data-web-client/Dockerfile, sample-services/data-api-sampler/Dockerfile, sample-services/trip_analyzer/Dockerfile

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.