chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• .github/workflows/ci.yaml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/scorecards.yml (github-actions)
• package.json (npm)
• .nvmrc (nvm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

---

What to Expect

With your current configuration, Renovate will create 26 Pull Requests:

chore(deps): update dependency fastify to v5.8.5 [security]

• Branch name: renovate/npm-fastify-vulnerability
• Merge into: master
• Upgrade fastify to 5.8.5

chore(deps): replace dependency npm-run-all with npm-run-all2 ^5.0.0

• Schedule: ["at any time"]
• Branch name: renovate/npm-run-all-replacement
• Merge into: master
• Upgrade npm-run-all to ^5.0.0

chore(deps): update actions/attest-build-provenance digest to 7668571

• Schedule: ["at any time"]
• Branch name: renovate/actions-attest-build-provenance-digest
• Merge into: master
• Upgrade actions/attest-build-provenance to 7668571508540a607bdfd90a87a560489fe372eb

chore(deps): update actions/checkout action to v5.0.1

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-5.x
• Merge into: master
• Upgrade actions/checkout to 93cb6efe18208431cddfb8368fd83d5badbf9bfd

chore(deps): update semantic-release monorepo

• Schedule: ["at any time"]
• Branch name: renovate/semantic-release-monorepo
• Merge into: master
• Upgrade @semantic-release/github to 11.0.6
• Upgrade @semantic-release/npm to 12.0.2
• Upgrade @semantic-release/release-notes-generator to 14.1.0
• Upgrade semantic-release to 24.2.9

chore(deps): update actions/attest-build-provenance action to v2.4.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-attest-build-provenance-2.x
• Merge into: master
• Upgrade actions/attest-build-provenance to e8998f949152b193b063cb0ec769d69d929409be

chore(deps): update actions/dependency-review-action action to v4.9.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-dependency-review-action-4.x
• Merge into: master
• Upgrade actions/dependency-review-action to 2031cfc080254a8a887f58cffee85186f0e49e48

chore(deps): update actions/setup-node action to v6.4.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-6.x
• Merge into: master
• Upgrade actions/setup-node to 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e

chore(deps): update commitlint monorepo to v19.8.1

• Schedule: ["at any time"]
• Branch name: renovate/commitlint-monorepo
• Merge into: master
• Upgrade @commitlint/cli to 19.8.1
• Upgrade @commitlint/config-conventional to 19.8.1
• Upgrade @commitlint/lint to 19.8.1
• Upgrade @commitlint/prompt to 19.8.1

chore(deps): update dependency @​types/node to v22.19.17

• Schedule: ["at any time"]
• Branch name: renovate/node-22.x-lockfile
• Merge into: master
• Upgrade @types/node to 22.19.17

chore(deps): update dependency commitlint-plugin-function-rules to v4.3.2

• Schedule: ["at any time"]
• Branch name: renovate/commitlint-plugin-function-rules-4.x-lockfile
• Merge into: master
• Upgrade commitlint-plugin-function-rules to 4.3.2

chore(deps): update dependency fastify-plugin to v5.1.0

• Schedule: ["at any time"]
• Branch name: renovate/fastify-plugin-5.x-lockfile
• Merge into: master
• Upgrade fastify-plugin to 5.1.0

chore(deps): update dependency rimraf to v6.1.3

• Schedule: ["at any time"]
• Branch name: renovate/rimraf-6.x-lockfile
• Merge into: master
• Upgrade rimraf to 6.1.3

chore(deps): update dependency typescript to v5.9.3

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x-lockfile
• Merge into: master
• Upgrade typescript to 5.9.3

chore(deps): update github/codeql-action action to v4.35.2

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: master
• Upgrade github/codeql-action to 95e58e9a2cdfd71adc6e0353d5c52f41a045d225

chore(deps): update pnpm/action-setup action to v4.4.0

• Schedule: ["at any time"]
• Branch name: renovate/pnpm-action-setup-4.x
• Merge into: master
• Upgrade pnpm/action-setup to fc06bc1257f339d1d5d8b3a19a8cae5388b55320

chore(deps): update step-security/harden-runner action to v2.19.0

• Schedule: ["at any time"]
• Branch name: renovate/step-security-harden-runner-2.x
• Merge into: master
• Upgrade step-security/harden-runner to 8d3c67de8e2fe68ef647c8db1e6a09f647780f40

chore(deps): update actions/attest-build-provenance action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-attest-build-provenance-4.x
• Merge into: master
• Upgrade actions/attest-build-provenance to a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32

chore(deps): update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: master
• Upgrade actions/checkout to de0fac2e4500dabe0009e67214ff5f5447ce83dd

chore(deps): update actions/upload-artifact action to v7

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: master
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

chore(deps): update commitlint monorepo to v20 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-commitlint-monorepo
• Merge into: master
• Upgrade @commitlint/cli to ^20.0.0
• Upgrade @commitlint/config-conventional to ^20.0.0
• Upgrade @commitlint/lint to ^20.0.0
• Upgrade @commitlint/prompt to ^20.0.0

chore(deps): update dependency @​biomejs/biome to v2

• Schedule: ["at any time"]
• Branch name: renovate/biomejs-biome-2.x
• Merge into: master
• Upgrade @biomejs/biome to ^2.0.0

chore(deps): update dependency typescript to v6

• Schedule: ["at any time"]
• Branch name: renovate/typescript-6.x
• Merge into: master
• Upgrade typescript to ^6.0.0

chore(deps): update node.js to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: master
• Upgrade node to 24
• Upgrade @types/node to ^24.0.0

chore(deps): update pnpm/action-setup action to v6

• Schedule: ["at any time"]
• Branch name: renovate/pnpm-action-setup-6.x
• Merge into: master
• Upgrade pnpm/action-setup to 903f9c1a6ebcba6cf41d87230be49611ac97822e

chore(deps): update semantic-release monorepo (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-semantic-release-monorepo
• Merge into: master
• Upgrade @semantic-release/github to ^12.0.0
• Upgrade @semantic-release/npm to ^13.0.0
• Upgrade semantic-release to ^25.0.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.