Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/ci.yml (github-actions)
• dc-commons-file/pom.xml (maven)
• dc-commons-jdbi/pom.xml (maven)
• dc-commons-server/pom.xml (maven)
• dc-commons-springaop/pom.xml (maven)
• dc-commons-springboot/pom.xml (maven)
• dc-commons-springdata/pom.xml (maven)
• dc-commons-springmvc/pom.xml (maven)
• dc-commons-springsecurity/pom.xml (maven)
• dc-commons-validation/pom.xml (maven)
• dc-commons-web/pom.xml (maven)
• dc-commons-xml/pom.xml (maven)
• dc-commons-yaml/pom.xml (maven)
• pom.xml (maven)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Preserve (but continue to upgrade) any existing SemVer ranges.
• Enable Renovate Dependency Dashboard creation.
• Rebase existing PRs any time the base branch has been updated.
• Raise PR when vulnerability alerts are detected with label 'security'.
• Use curated list of recommended non-monorepo package groupings.
• Run Renovate on following schedule: every weekend

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 9 Pull Requests:

fix(deps): update dependency org.springframework.boot:spring-boot-actuator to v2.7.18 [security]

• Branch name: renovate/maven-org.springframework.boot-spring-boot-actuator-vulnerability
• Merge into: main
• Upgrade org.springframework.boot:spring-boot-actuator to 2.7.18

fix(deps): update dependency org.springframework.security:spring-security-core to v5.7.12 [security]

• Branch name: renovate/maven-org.springframework.security-spring-security-core-vulnerability
• Merge into: main
• Upgrade org.springframework.security:spring-security-core to 5.7.12

fix(deps): update dependency org.springframework.security:spring-security-web to v5.7.13 [security]

• Branch name: renovate/maven-org.springframework.security-spring-security-web-vulnerability
• Merge into: main
• Upgrade org.springframework.security:spring-security-web to 5.7.13

chore(deps): update dependency org.springframework:spring-webmvc to v6 [security]

• Branch name: renovate/maven-org.springframework-spring-webmvc-vulnerability
• Merge into: main
• Upgrade org.springframework:spring-webmvc to 6.1.13

chore(deps): update dependency org.yaml:snakeyaml to v2 [security]

• Branch name: renovate/maven-org.yaml-snakeyaml-vulnerability
• Merge into: main
• Upgrade org.yaml:snakeyaml to 2.0

fix(deps): update dependency org.springframework:spring-context to v6 [security]

• Branch name: renovate/maven-org.springframework-spring-context-vulnerability
• Merge into: main
• Upgrade org.springframework:spring-context to 6.1.14

fix(deps): update dependency org.springframework:spring-web to v6 [security]

• Branch name: renovate/maven-org.springframework-spring-web-vulnerability
• Merge into: main
• Upgrade org.springframework:spring-web to 6.0.0

chore(deps): update all dependencies

• Schedule: ["every weekend"]
• Branch name: renovate/all
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-gpg-plugin to 3.2.7
• Upgrade org.jacoco:jacoco-maven-plugin to 0.8.12
• Upgrade org.sonatype.plugins:nexus-staging-maven-plugin to 1.7.0
• Upgrade org.codehaus.mojo:versions-maven-plugin to 2.18.0
• Upgrade org.springframework.security:spring-security-config to 5.8.15
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 3.5.2
• Upgrade org.springframework.boot:spring-boot-test-autoconfigure to 2.7.18
• Upgrade org.springframework.boot:spring-boot-test to 2.7.18
• Upgrade org.apache.maven.plugins:maven-source-plugin to 3.3.1
• Upgrade org.springframework.boot:spring-boot to 2.7.18
• Upgrade org.springframework:spring-test to 5.3.39
• Upgrade org.apache.maven.plugins:maven-javadoc-plugin to 3.11.1
• Upgrade org.thymeleaf:thymeleaf to 3.1.2.RELEASE
• Upgrade org.springframework:spring-beans to 5.3.39
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 3.5.2
• Upgrade org.springframework.boot:spring-boot-configuration-processor to 2.7.18
• Upgrade org.mockito:mockito-core to 5.14.2
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.13.0
• Upgrade org.junit.jupiter:junit-jupiter to 5.11.3
• Upgrade com.spotify.fmt:fmt-maven-plugin to 2.25
• Upgrade org.assertj:assertj-core to 3.26.3
• Upgrade io.micrometer:micrometer-registry-prometheus to 1.14.0
• Upgrade io.micrometer:micrometer-core to 1.14.0
• Upgrade org.jdbi:jdbi3-core to 3.47.0
• Upgrade org.springframework:spring-aop to 5.3.39
• Upgrade com.fasterxml.jackson.core:jackson-databind to 2.18.1
• Upgrade io.jsonwebtoken:jjwt to 0.12.6
• Upgrade org.springframework.data:spring-data-commons to 2.7.18
• Upgrade com.maxmind.geoip2:geoip2 to 2.17.0
• Upgrade net.sf.saxon:Saxon-HE to 10.9
• Upgrade com.fasterxml.jackson.core:jackson-annotations to 2.18.1
• Upgrade org.apache.commons:commons-lang3 to 3.17.0
• Upgrade org.aspectj:aspectjweaver to 1.9.22.1
• Upgrade joda-time:joda-time to 2.13.0
• Upgrade com.google.guava:guava to 32.1.3-jre

chore(deps): update all dependencies (major)

• Schedule: ["every weekend"]
• Branch name: renovate/major-all
• Merge into: main
• Upgrade actions/cache to v4
• Upgrade actions/checkout to v4
• Upgrade actions/setup-java to v4
• Upgrade org.springframework.security:spring-security-config to 6.3.4
• Upgrade org.springframework.boot:spring-boot-test-autoconfigure to 3.3.5
• Upgrade org.springframework.boot:spring-boot-test to 3.3.5
• Upgrade org.springframework.boot:spring-boot to 3.3.5
• Upgrade org.springframework:spring-test to 6.2.0
• Upgrade org.springframework:spring-beans to 6.2.0
• Upgrade org.springframework.boot:spring-boot-configuration-processor to 3.3.5
• Upgrade org.slf4j:slf4j-api to 2.0.16
• Upgrade org.slf4j:slf4j-simple to 2.0.16
• Upgrade org.springframework:spring-aop to 6.2.0
• Upgrade org.springframework.data:spring-data-commons to 3.3.5
• Upgrade com.maxmind.geoip2:geoip2 to 4.2.1
• Upgrade net.sf.saxon:Saxon-HE to 12.5
• Upgrade com.google.guava:guava to 33.3.1-jre
• Upgrade com.ibm.icu:icu4j to 76.1

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.