Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• services/clusters-keeper/src/simcore_service_clusters_keeper/data/docker-compose.yml (docker-compose)
• services/director-v2/docker-compose-extra.yml (docker-compose)
• services/docker-compose-build.yml (docker-compose)
• services/docker-compose-deploy.yml (docker-compose)
• services/docker-compose-dev-vendors.yml (docker-compose)
• services/docker-compose-ops-ci.yml (docker-compose)
• services/docker-compose-ops-registry.yml (docker-compose)
• services/docker-compose-ops.yml (docker-compose)
• services/docker-compose.devel-frontend.yml (docker-compose)
• services/docker-compose.devel.yml (docker-compose)
• services/docker-compose.local.yml (docker-compose)
• services/docker-compose.yml (docker-compose)
• services/static-webserver/client/tools/docker-compose.yml (docker-compose)
• packages/postgres-database/docker/Dockerfile (dockerfile)
• packages/postgres-database/scripts/erd/Dockerfile (dockerfile)
• packages/service-integration/Dockerfile (dockerfile)
• requirements/tools/Dockerfile (dockerfile)
• scripts/apt-packages-versions/Dockerfile (dockerfile)
• scripts/erd/Dockerfile (dockerfile)
• scripts/json-schema-to-openapi-schema/Dockerfile (dockerfile)
• scripts/maintenance/migrate_project/Dockerfile (dockerfile)
• scripts/openapi/oas_resolver/Dockerfile (dockerfile)
• scripts/pydeps-docker/Dockerfile (dockerfile)
• services/agent/Dockerfile (dockerfile)
• services/api-server/Dockerfile (dockerfile)
• services/autoscaling/Dockerfile (dockerfile)
• services/catalog/Dockerfile (dockerfile)
• services/clusters-keeper/Dockerfile (dockerfile)
• services/dask-sidecar/Dockerfile (dockerfile)
• services/datcore-adapter/Dockerfile (dockerfile)
• services/director-v2/Dockerfile (dockerfile)
• services/director/Dockerfile (dockerfile)
• services/docker-api-proxy/Dockerfile (dockerfile)
• services/dynamic-scheduler/Dockerfile (dockerfile)
• services/dynamic-sidecar/Dockerfile (dockerfile)
• services/efs-guardian/Dockerfile (dockerfile)
• services/invitations/Dockerfile (dockerfile)
• services/migration/Dockerfile (dockerfile)
• services/notifications/Dockerfile (dockerfile)
• services/payments/Dockerfile (dockerfile)
• services/resource-usage-tracker/Dockerfile (dockerfile)
• services/static-webserver/client/tools/qooxdoo-kit/builder/Dockerfile (dockerfile)
• services/storage/Dockerfile (dockerfile)
• services/web/Dockerfile (dockerfile)
• .github/actions/download-load-docker-images/action.yml (github-actions)
• .github/actions/setup-simcore-env/action.yml (github-actions)
• .github/workflows/_reusable-build-images.yml (github-actions)
• .github/workflows/ci-arm-build.yml (github-actions)
• .github/workflows/ci-multi-architecture-fusing.yml (github-actions)
• .github/workflows/ci-pact-master.yml (github-actions)
• .github/workflows/ci-release.yml (github-actions)
• .github/workflows/ci-staging.yml (github-actions)
• .github/workflows/ci-testing-deploy.yml (github-actions)
• .github/workflows/ci-testing-pull-request.yml (github-actions)
• .github/workflows/cleanup-caches-by-branches.yml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• docs/webdocroot/index.html (html)
• package.json (npm)
• scripts/maintenance/computational-clusters/pyproject.toml (pep621)
• api/specs/web-server/requirements.txt (pip_requirements)
• ci/helpers/requirements/requirements.txt (pip_requirements)
• packages/postgres-database/scripts/erd/requirements.txt (pip_requirements)
• scripts/demo-meta/requirements.txt (pip_requirements)
• scripts/erd/requirements.txt (pip_requirements)
• scripts/maintenance/migrate_project/requirements.txt (pip_requirements)
• scripts/maintenance/requirements.txt (pip_requirements)
• packages/pytest-simcore/setup.py (pip_setup)
• services/api-server/setup.py (pip_setup)
• services/director-v2/setup.py (pip_setup)
• services/dynamic-sidecar/setup.py (pip_setup)
• services/storage/setup.py (pip_setup)
• services/web/server/setup.py (pip_setup)
• scripts/release/pyproject.toml (poetry)
• .python-version (pyenv)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 44 Pull Requests:

Update dependency aiohttp to v3.12.14 [SECURITY]

• Branch name: renovate/pypi-aiohttp-vulnerability
• Merge into: master
• Upgrade aiohttp to ==3.12.14

Replace dependency babel-eslint with @​babel/eslint-parser ^7.11.0

• Schedule: ["at any time"]
• Branch name: renovate/babel-eslint-replacement
• Merge into: master
• Upgrade babel-eslint to ^7.11.0

Update postgres:14.8-alpine Docker digest to fa48198

• Schedule: ["at any time"]
• Branch name: renovate/postgres-14.8-alpine
• Merge into: master
• Upgrade postgres to sha256:fa48198f8c88d5563e7ff3f6d5d269be58a7571e4464d70e4cb6c0987d903ba3

Update redis:6.2.6 Docker digest to b7fd1a2

• Schedule: ["at any time"]
• Branch name: renovate/redis-6.2.6
• Merge into: master
• Upgrade redis to sha256:b7fd1a2c89d09a836f659d72c52d27b9f71202c97014a47639f87c992e8c0f1b

Update traefik:v3.5.2 Docker digest to f0abbbd

• Schedule: ["at any time"]
• Branch name: renovate/traefik-v3.5.2
• Merge into: master
• Upgrade traefik to sha256:f0abbbd11ced29754d4d188c29e9320b613481ec162b6ea5d3a8b6bdd8e5fa54

Update caddy Docker tag to v2.10.2

• Schedule: ["at any time"]
• Branch name: renovate/caddy-2.x
• Merge into: master
• Upgrade caddy to 2.10.2-alpine

Update dependency charset-normalizer to v3.4.3

• Schedule: ["at any time"]
• Branch name: renovate/charset-normalizer-3.x
• Merge into: master
• Upgrade charset-normalizer to ==3.4.3

Update dependency propcache to v0.3.2

• Schedule: ["at any time"]
• Branch name: renovate/propcache-0.x
• Merge into: master
• Upgrade propcache to ==0.3.2

Update dependency requests to v2.32.5

• Schedule: ["at any time"]
• Branch name: renovate/requests-2.x
• Merge into: master
• Upgrade requests to ==2.32.5

Update dependency starlette to v0.47.3

• Schedule: ["at any time"]
• Branch name: renovate/starlette-0.x
• Merge into: master
• Upgrade starlette to ==0.47.3

Update dependency yarl to v1.20.1

• Schedule: ["at any time"]
• Branch name: renovate/yarl-1.x
• Merge into: master
• Upgrade yarl to ==1.20.1

Update redis Docker tag to v6.2.19

• Schedule: ["at any time"]
• Branch name: renovate/redis-6.x
• Merge into: master
• Upgrade redis to sha256:26675183e3dca77396cb5a798bec829f77e0b342a4d020fd6d03b3729cda5e6a

Update adminer Docker tag to v4.17.1

• Schedule: ["at any time"]
• Branch name: renovate/adminer-4.x
• Merge into: master
• Upgrade adminer to 4.17.1

Update busybox Docker tag to v1.37.0

• Schedule: ["at any time"]
• Branch name: renovate/busybox-1.x
• Merge into: master
• Upgrade busybox to 1.37.0

Update dependency aiosignal to v1.4.0

• Schedule: ["at any time"]
• Branch name: renovate/aiosignal-1.x
• Merge into: master
• Upgrade aiosignal to ==1.4.0

Update dependency anyio to v4.10.0

• Schedule: ["at any time"]
• Branch name: renovate/anyio-4.x
• Merge into: master
• Upgrade anyio to ==4.10.0

Update dependency astral-sh/uv to 0.8.x

• Schedule: ["at any time"]
• Branch name: renovate/astral-sh-uv-0.x
• Merge into: master
• Upgrade astral-sh/uv to 0.8.x

Update dependency eslint-config-qx to ^0.2.0

• Schedule: ["at any time"]
• Branch name: renovate/eslint-config-qx-0.x
• Merge into: master
• Upgrade eslint-config-qx to ^0.2.0

Update dependency frozenlist to v1.7.0

• Schedule: ["at any time"]
• Branch name: renovate/frozenlist-1.x
• Merge into: master
• Upgrade frozenlist to ==1.7.0

Update dependency idna to v3.10

• Schedule: ["at any time"]
• Branch name: renovate/idna-3.x
• Merge into: master
• Upgrade idna to ==3.10

Update dependency multidict to v6.6.4

• Schedule: ["at any time"]
• Branch name: renovate/multidict-6.x
• Merge into: master
• Upgrade multidict to ==6.6.4

Update dependency pydantic-core to v2.39.0

• Schedule: ["at any time"]
• Branch name: renovate/pydantic-core-2.x
• Merge into: master
• Upgrade pydantic-core to ==2.39.0

Update dependency typing-extensions to v4.15.0

• Schedule: ["at any time"]
• Branch name: renovate/typing-extensions-4.x
• Merge into: master
• Upgrade typing-extensions to ==4.15.0

Update ghcr.io/astral-sh/uv Docker tag to v0.8

• Schedule: ["at any time"]
• Branch name: renovate/ghcr.io-astral-sh-uv-0.x
• Merge into: master
• Upgrade ghcr.io/astral-sh/uv to 0.8

Update jaegertracing/all-in-one Docker tag to v1.60

• Schedule: ["at any time"]
• Branch name: renovate/jaegertracing-all-in-one-1.x
• Merge into: master
• Upgrade jaegertracing/all-in-one to 1.60

Update joseluisq/static-web-server Docker tag to v2.38.1

• Schedule: ["at any time"]
• Branch name: renovate/joseluisq-static-web-server-2.x
• Merge into: master
• Upgrade joseluisq/static-web-server to 2.38.1-alpine

Update otel/opentelemetry-collector-contrib Docker tag to v0.135.0

• Schedule: ["at any time"]
• Branch name: renovate/otel-opentelemetry-collector-contrib-0.x
• Merge into: master
• Upgrade otel/opentelemetry-collector-contrib to 0.135.0

Update postgres Docker tag to v14.19

• Schedule: ["at any time"]
• Branch name: renovate/postgres-14.x
• Merge into: master
• Upgrade postgres to sha256:95dae26f72fcd8ade5c2f9c6ce491e2e24de768a34e73b971edf3b9e8e08a5e5

Update prom/prometheus Docker tag to v2.55.1

• Schedule: ["at any time"]
• Branch name: renovate/prom-prometheus-2.x
• Merge into: master
• Upgrade prom/prometheus to sha256:2659f4c2ebb718e7695cb9b25ffa7d6be64db013daba13e05c875451cf51b0d3

Update python Docker tag

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to 3.13
• Upgrade python to 3.13
• Upgrade python to 3.13.7-slim-bookworm
• Upgrade python to 3.13-alpine

Update actions/setup-python action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: master
• Upgrade actions/setup-python to v6

Update adminer Docker tag to v5

• Schedule: ["at any time"]
• Branch name: renovate/adminer-5.x
• Merge into: master
• Upgrade adminer to 5.4.0

Update dependency attrs to v25

• Schedule: ["at any time"]
• Branch name: renovate/attrs-25.x
• Merge into: master
• Upgrade attrs to ==25.3.0

Update dependency certifi to v2025

• Schedule: ["at any time"]
• Branch name: renovate/certifi-2025.x
• Merge into: master
• Upgrade certifi to ==2025.8.3

Update dependency eslint to v9

• Schedule: ["at any time"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: master
• Upgrade eslint to ^9.0.0

Update dependency puppeteer to v24

• Schedule: ["at any time"]
• Branch name: renovate/major-puppeteer
• Merge into: master
• Upgrade puppeteer to ^24.0.0

Update dependency pydantic to v2

• Schedule: ["at any time"]
• Branch name: renovate/pydantic-2.x
• Merge into: master
• Upgrade pydantic to <3

Update dependency SQLAlchemy to v2

• Schedule: ["at any time"]
• Branch name: renovate/sqlalchemy-2.x
• Merge into: master
• Upgrade SQLAlchemy to <2.1

Update dependency yargs to v18

• Schedule: ["at any time"]
• Branch name: renovate/yargs-18.x
• Merge into: master
• Upgrade yargs to ^18.0.0

Update dependency yargs-parser to v22

• Schedule: ["at any time"]
• Branch name: renovate/yargs-parser-22.x-lockfile
• Merge into: master
• Upgrade yargs-parser to 22.0.0

Update Node.js to v20

• Schedule: ["at any time"]
• Branch name: renovate/node-20.x
• Merge into: master
• Upgrade node to 20.15.0-buster-slim

Update postgres Docker tag to v17

• Schedule: ["at any time"]
• Branch name: renovate/postgres-17.x
• Merge into: master
• Upgrade postgres to sha256:d5f196a551b5cef1c70853c6dd588f456d16ca4ea733e3f31c75bc1ae2f65f3f

Update prom/prometheus Docker tag to v3

• Schedule: ["at any time"]
• Branch name: renovate/prom-prometheus-3.x
• Merge into: master
• Upgrade prom/prometheus to sha256:63805ebb8d2b3920190daf1cb14a60871b16fd38bed42b857a3182bc621f4996

Update redis Docker tag to v8

• Schedule: ["at any time"]
• Branch name: renovate/redis-8.x
• Merge into: master
• Upgrade redis to sha256:acb90ced0bd769b7c04cb4c32c4494ba7b3e0ee068bdbfff0eeb0d31c2a21078

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up pypi package simcore-sdk
• Failed to look up pypi package simcore-service-library

Files affected: services/api-server/setup.py, services/director-v2/setup.py, services/dynamic-sidecar/setup.py, services/storage/setup.py, services/web/server/setup.py

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud