Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/dogfood.yml (github-actions)
• .github/workflows/releasability.yaml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/slack_notify.yml (github-actions)
• buildSrc/src/main/kotlin/org/sonarsource/kotlin/buildsrc/tasks/CreateKotlinGradleRuleStubsTask.kt (gradle)
• buildSrc/src/main/kotlin/org/sonarsource/kotlin/buildsrc/tasks/CreateKotlinRuleStubsTask.kt (gradle)
• buildSrc/src/main/kotlin/org/sonarsource/kotlin/buildsrc/tasks/CreateRuleStubsTask.kt (gradle)
• buildSrc/src/main/kotlin/org/sonarsource/kotlin/buildsrc/tasks/FetchRuleMetadata.kt (gradle)
• buildSrc/src/main/kotlin/org/sonarsource/kotlin/buildsrc/tasks/GitHubApi.kt (gradle)
• buildSrc/src/main/kotlin/org/sonarsource/kotlin/buildsrc/tasks/RuleStubTemplates.kt (gradle)
• buildSrc/src/main/kotlin/org/sonarsource/kotlin/buildsrc/tasks/license.kt (gradle)
• gradle.properties (gradle)
• settings.gradle.kts (gradle)
• build.gradle.kts (gradle)
• buildSrc/build.gradle.kts (gradle)
• sonar-kotlin-api/build.gradle.kts (gradle)
• sonar-kotlin-checks/build.gradle.kts (gradle)
• sonar-kotlin-external-linters/build.gradle.kts (gradle)
• sonar-kotlin-external-linters/src/test/resources/org/sonarsource/kotlin/externalreport/androidlint/build.gradle (gradle)
• sonar-kotlin-gradle/build.gradle.kts (gradle)
• sonar-kotlin-gradle/src/test/samples/non-compiling/S6625/compliant/settings.gradle.kts (gradle)
• sonar-kotlin-gradle/src/test/samples/non-compiling/S6625/compliant/build.gradle.kts (gradle)
• sonar-kotlin-gradle/src/test/samples/non-compiling/S6625/compliant-setter/settings.gradle.kts (gradle)
• sonar-kotlin-gradle/src/test/samples/non-compiling/S6625/noncompliant/settings.gradle.kts (gradle)
• sonar-kotlin-metrics/build.gradle.kts (gradle)
• sonar-kotlin-plugin/build.gradle.kts (gradle)
• sonar-kotlin-surefire/build.gradle.kts (gradle)
• sonar-kotlin-test-api/build.gradle.kts (gradle)
• utils-kotlin/build.gradle.kts (gradle)
• gradle/wrapper/gradle-wrapper.properties (gradle-wrapper)
• sonar-kotlin-surefire/src/test/resources/org/sonarsource/kotlin/surefire/api/SurefireUtilsTest/shouldGetReportsPathFromDeprecatedProperty/pom.xml (maven)
• sonar-kotlin-surefire/src/test/resources/org/sonarsource/kotlin/surefire/api/SurefireUtilsTest/shouldGetReportsPathFromProperty/pom.xml (maven)
• sonar-kotlin-surefire/src/test/resources/org/sonarsource/kotlin/surefire/api/SurefireUtilsTest/shouldGetReportsPathFromProperty/submodule/pom.xml (maven)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Evaluate schedules according to timezone CET.
• Remove hourly and concurrent rate limits.
• Disable Renovate Dependency Dashboard creation.
• Rebase existing PRs any time the base branch has been updated.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

You have configured Renovate to use branch test-renovate as base branch.

What to Expect

With your current configuration, Renovate will create 23 Pull Requests:

Roll back SonarSource/gh-action_build-notify action to 1.3.1

• Schedule: ["at any time"]
• Branch name: renovate/sonarsource-gh-action_build-notify-rollback
• Merge into: test-renovate
• Upgrade SonarSource/gh-action_build-notify to 1.3.1

Roll back SonarSource/gh-action_release action to 5.19.0

• Schedule: ["at any time"]
• Branch name: renovate/sonarsource-gh-action_release-rollback
• Merge into: test-renovate
• Upgrade SonarSource/gh-action_release to 5.19.0

Roll back SonarSource/vault-action-wrapper action to 2.7.4-1

• Schedule: ["at any time"]
• Branch name: renovate/sonarsource-vault-action-wrapper-rollback
• Merge into: test-renovate
• Upgrade SonarSource/vault-action-wrapper to 2.7.4-1

Update dependency jacoco to v0.8.14

• Schedule: ["at any time"]
• Branch name: renovate/jacoco-0.x
• Merge into: test-renovate
• Upgrade jacoco to 0.8.14

Update dependency org.slf4j:slf4j-api to v1.7.36

• Schedule: ["at any time"]
• Branch name: renovate/slf4j-monorepo
• Merge into: test-renovate
• Upgrade org.slf4j:slf4j-api to 1.7.36

Update plugin com.gradleup.shadow to v8.3.9

• Schedule: ["at any time"]
• Branch name: renovate/com.gradleup.shadow-8.x
• Merge into: test-renovate
• Upgrade com.gradleup.shadow to 8.3.9

Update SonarSource/gh-action_releasability action to v1.2.3

• Schedule: ["at any time"]
• Branch name: renovate/sonarsource-gh-action_releasability-1.x
• Merge into: test-renovate
• Upgrade SonarSource/gh-action_releasability to 0295eda42f8c7d4ca68648e510189255b36ed7d9

Update dependency com.google.code.gson:gson to v2.13.2

• Schedule: ["at any time"]
• Branch name: renovate/com.google.code.gson-gson-2.x
• Merge into: test-renovate
• Upgrade com.google.code.gson:gson to 2.13.2

Update dependency org.jetbrains.kotlin:kotlin-compiler to v2.2.21

• Schedule: ["at any time"]
• Branch name: renovate/kotlin-monorepo
• Merge into: test-renovate
• Upgrade org.jetbrains.kotlin:kotlin-compiler to 2.2.21

Update Gradle to v8.14.3

• Schedule: ["at any time"]
• Branch name: renovate/gradle-8.x
• Merge into: test-renovate
• Upgrade gradle to 8.14.3

Update plugin com.diffplug.spotless to v6.25.0

• Schedule: ["at any time"]
• Branch name: renovate/com.diffplug.spotless-6.x
• Merge into: test-renovate
• Upgrade com.diffplug.spotless to 6.25.0

Update plugin org.jetbrains.kotlin.jvm to v2.2.21

• Schedule: ["at any time"]
• Branch name: renovate/kotlinversion
• Merge into: test-renovate
• Upgrade org.jetbrains.kotlin.jvm to 2.2.21

Update slackapi/slack-github-action action to v1.27.1

• Schedule: ["at any time"]
• Branch name: renovate/slackapi-slack-github-action-1.x
• Merge into: test-renovate
• Upgrade slackapi/slack-github-action to fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3

Update sonarPluginApi to v10.14.0.2599

• Schedule: ["at any time"]
• Branch name: renovate/sonarpluginapi
• Merge into: test-renovate
• Upgrade org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures to 10.14.0.2599
• Upgrade org.sonarsource.api.plugin:sonar-plugin-api to 10.14.0.2599

Update dependency org.slf4j:slf4j-api to v2

• Schedule: ["at any time"]
• Branch name: renovate/major-slf4j-monorepo
• Merge into: test-renovate
• Upgrade org.slf4j:slf4j-api to 2.0.17

Update Gradle to v9

• Schedule: ["at any time"]
• Branch name: renovate/gradle-9.x
• Merge into: test-renovate
• Upgrade gradle to 9.2.0

Update plugin com.diffplug.spotless to v8

• Schedule: ["at any time"]
• Branch name: renovate/com.diffplug.spotless-8.x
• Merge into: test-renovate
• Upgrade com.diffplug.spotless to 8.0.0

Update plugin com.gradleup.shadow to v9

• Schedule: ["at any time"]
• Branch name: renovate/com.gradleup.shadow-9.x
• Merge into: test-renovate
• Upgrade com.gradleup.shadow to 9.2.2

Update plugin com.jfrog.artifactory to v6

• Schedule: ["at any time"]
• Branch name: renovate/com.jfrog.artifactory-6.x
• Merge into: test-renovate
• Upgrade com.jfrog.artifactory to 6.0.3

Update plugin org.sonarqube to v7

• Schedule: ["at any time"]
• Branch name: renovate/org.sonarqube-7.x
• Merge into: test-renovate
• Upgrade org.sonarqube to 7.0.1.6134

Update slackapi/slack-github-action action to v2

• Schedule: ["at any time"]
• Branch name: renovate/slackapi-slack-github-action-2.x
• Merge into: test-renovate
• Upgrade slackapi/slack-github-action to 91efab103c0de0a537f72a35f6b8cda0ee76bf0a

Update sonarPluginApi to v13 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-sonarpluginapi
• Merge into: test-renovate
• Upgrade org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures to 13.4.0.3221
• Upgrade org.sonarsource.api.plugin:sonar-plugin-api to 13.4.0.3221

Update SonarSource/gh-action_releasability action to v3

• Schedule: ["at any time"]
• Branch name: renovate/sonarsource-gh-action_releasability-3.x
• Merge into: test-renovate
• Upgrade SonarSource/gh-action_releasability to 66c21c6a7fc93337b457f44d1590f8a9e1433cf2

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[sonarqubecloud]

🤖 Pull Request summary

Adds Renovate configuration for automated dependency management.

• Extends SonarSource's shared Renovate configuration
• Excludes test directories (kotlin-checks-test-sources, its) from updates
• Targets test-renovate branch instead of main/master

Review focus: Verify the test branch target is intentional and not meant for production.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud