Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/maven.yml (github-actions)
• pom.xml (maven)
• .mvn/wrapper/maven-wrapper.properties (maven-wrapper)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 20 Pull Requests:

Update dependency mysql:mysql-connector-java to v8.0.28 [SECURITY]

• Branch name: renovate/maven-mysql-mysql-connector-java-vulnerability
• Merge into: master
• Upgrade mysql:mysql-connector-java to 8.0.28

Update dependency com.google.code.gson:gson to v2 [SECURITY]

• Branch name: renovate/maven-com.google.code.gson-gson-vulnerability
• Merge into: master
• Upgrade com.google.code.gson:gson to 2.8.9

Update dependency org.apache.poi:poi to v4 [SECURITY]

• Branch name: renovate/maven-org.apache.poi-poi-vulnerability
• Merge into: master
• Upgrade org.apache.poi:poi to 4.1.1

Update dependency org.eclipse.jetty:jetty-maven-plugin to v9.4.55.v20240627

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse.jetty-jetty-maven-plugin-9.x
• Merge into: master
• Upgrade org.eclipse.jetty:jetty-maven-plugin to 9.4.55.v20240627

Update slf4j monorepo to v1.7.36

• Schedule: ["at any time"]
• Branch name: renovate/slf4j-monorepo
• Merge into: master
• Upgrade org.slf4j:jcl-over-slf4j to 1.7.36
• Upgrade org.slf4j:slf4j-log4j12 to 1.7.36
• Upgrade org.slf4j:slf4j-api to 1.7.36

Update dependency com.google.cloud.tools:jib-maven-plugin to v3.4.3

• Schedule: ["at any time"]
• Branch name: renovate/com.google.cloud.tools-jib-maven-plugin-3.x
• Merge into: master
• Upgrade com.google.cloud.tools:jib-maven-plugin to 3.4.3

Update dependency commons-dbcp:commons-dbcp to v1.4

• Schedule: ["at any time"]
• Branch name: renovate/commons-dbcp-commons-dbcp-1.x
• Merge into: master
• Upgrade commons-dbcp:commons-dbcp to 1.4

Update dependency commons-logging:commons-logging to v1.3.3

• Schedule: ["at any time"]
• Branch name: renovate/commons-logging-commons-logging-1.x
• Merge into: master
• Upgrade commons-logging:commons-logging to 1.3.3

Update dependency maven to v3.9.8

• Schedule: ["at any time"]
• Branch name: renovate/maven-3.x
• Merge into: master
• Upgrade maven to 3.9.8

Update dependency org.apache.cxf:cxf-bundle-jaxrs to v2.7.18

• Schedule: ["at any time"]
• Branch name: renovate/cxf.version
• Merge into: master
• Upgrade org.apache.cxf:cxf-bundle-jaxrs to 2.7.18

Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.13.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-compiler-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.13.0

Update dependency org.apache.maven.plugins:maven-resources-plugin to v3.3.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-resources-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-resources-plugin to 3.3.1

Update dependency org.springframework:spring-jdbc to v2.5.6.SEC03

• Schedule: ["at any time"]
• Branch name: renovate/spring-core
• Merge into: master
• Upgrade org.springframework:spring-jdbc to 2.5.6.SEC03

Update actions/checkout action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: master
• Upgrade actions/checkout to v4

Update actions/setup-java action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-4.x
• Merge into: master
• Upgrade actions/setup-java to v4

Update dependency maven-wrapper to v3

• Schedule: ["at any time"]
• Branch name: renovate/maven-wrapper-3.x
• Merge into: master
• Upgrade maven-wrapper to 3.3.2

Update dependency org.eclipse.jetty:jetty-maven-plugin to v11

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse.jetty-jetty-maven-plugin-11.x
• Merge into: master
• Upgrade org.eclipse.jetty:jetty-maven-plugin to 11.0.22

Update dependency org.springframework:spring-jdbc to v6

• Schedule: ["at any time"]
• Branch name: renovate/major-spring-core
• Merge into: master
• Upgrade org.springframework:spring-jdbc to 6.1.12

Update slf4j monorepo to v2 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-slf4j-monorepo
• Merge into: master
• Upgrade org.slf4j:jcl-over-slf4j to 2.0.16
• Upgrade org.slf4j:slf4j-log4j12 to 2.0.16
• Upgrade org.slf4j:slf4j-api to 2.0.16

Update whelk-io/maven-settings-xml-action action to v22

• Schedule: ["at any time"]
• Branch name: renovate/whelk-io-maven-settings-xml-action-22.x
• Merge into: master
• Upgrade whelk-io/maven-settings-xml-action to v22

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up maven package uk.ac.ebi.lipidhome:fast-lipid

Files affected: pom.xml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.