Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• lib/vscode/build/azure-pipelines/product-build.yml (azure-pipelines)
• ci/release-image/Dockerfile (dockerfile)
• lib/vscode/.devcontainer/cache/cache.Dockerfile (dockerfile)
• .github/workflows/ci.yaml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/installer.yml (github-actions)
• .github/workflows/publish.yaml (github-actions)
• .github/workflows/scripts.yml (github-actions)
• ci/helm-chart/values.yaml (helm-values)
• lib/vscode/build/builtin/package.json (npm)
• lib/vscode/build/lib/watch/package.json (npm)
• lib/vscode/build/monaco/package.json (npm)
• lib/vscode/build/package.json (npm)
• lib/vscode/extensions/bat/package.json (npm)
• lib/vscode/extensions/clojure/package.json (npm)
• lib/vscode/extensions/coffeescript/package.json (npm)
• lib/vscode/extensions/configuration-editing/package.json (npm)
• lib/vscode/extensions/cpp/package.json (npm)
• lib/vscode/extensions/csharp/package.json (npm)
• lib/vscode/extensions/css-language-features/package.json (npm)
• lib/vscode/extensions/css-language-features/server/package.json (npm)
• lib/vscode/extensions/css/package.json (npm)
• lib/vscode/extensions/dart/package.json (npm)
• lib/vscode/extensions/debug-auto-launch/package.json (npm)
• lib/vscode/extensions/debug-server-ready/package.json (npm)
• lib/vscode/extensions/docker/package.json (npm)
• lib/vscode/extensions/emmet/package.json (npm)
• lib/vscode/extensions/extension-editing/package.json (npm)
• lib/vscode/extensions/fsharp/package.json (npm)
• lib/vscode/extensions/git/package.json (npm)
• lib/vscode/extensions/github-authentication/package.json (npm)
• lib/vscode/extensions/github/package.json (npm)
• lib/vscode/extensions/go/package.json (npm)
• lib/vscode/extensions/groovy/package.json (npm)
• lib/vscode/extensions/grunt/package.json (npm)
• lib/vscode/extensions/gulp/package.json (npm)
• lib/vscode/extensions/handlebars/package.json (npm)
• lib/vscode/extensions/hlsl/package.json (npm)
• lib/vscode/extensions/html-language-features/package.json (npm)
• lib/vscode/extensions/html-language-features/server/package.json (npm)
• lib/vscode/extensions/html/package.json (npm)
• lib/vscode/extensions/image-preview/package.json (npm)
• lib/vscode/extensions/ini/package.json (npm)
• lib/vscode/extensions/jake/package.json (npm)
• lib/vscode/extensions/java/package.json (npm)
• lib/vscode/extensions/javascript/package.json (npm)
• lib/vscode/extensions/json-language-features/package.json (npm)
• lib/vscode/extensions/json-language-features/server/package.json (npm)
• lib/vscode/extensions/json/package.json (npm)
• lib/vscode/extensions/julia/package.json (npm)
• lib/vscode/extensions/less/package.json (npm)
• lib/vscode/extensions/log/package.json (npm)
• lib/vscode/extensions/lua/package.json (npm)
• lib/vscode/extensions/make/package.json (npm)
• lib/vscode/extensions/markdown-basics/package.json (npm)
• lib/vscode/extensions/markdown-language-features/package.json (npm)
• lib/vscode/extensions/merge-conflict/package.json (npm)
• lib/vscode/extensions/microsoft-authentication/package.json (npm)
• lib/vscode/extensions/notebook-markdown-extensions/package.json (npm)
• lib/vscode/extensions/npm/package.json (npm)
• lib/vscode/extensions/objective-c/package.json (npm)
• lib/vscode/extensions/package.json (npm)
• lib/vscode/extensions/perl/package.json (npm)
• lib/vscode/extensions/php-language-features/package.json (npm)
• lib/vscode/extensions/php/package.json (npm)
• lib/vscode/extensions/powershell/package.json (npm)
• lib/vscode/extensions/pug/package.json (npm)
• lib/vscode/extensions/python/package.json (npm)
• lib/vscode/extensions/r/package.json (npm)
• lib/vscode/extensions/razor/package.json (npm)
• lib/vscode/extensions/ruby/package.json (npm)
• lib/vscode/extensions/rust/package.json (npm)
• lib/vscode/extensions/scss/package.json (npm)
• lib/vscode/extensions/search-result/package.json (npm)
• lib/vscode/extensions/shaderlab/package.json (npm)
• lib/vscode/extensions/shellscript/package.json (npm)
• lib/vscode/extensions/simple-browser/package.json (npm)
• lib/vscode/extensions/sql/package.json (npm)
• lib/vscode/extensions/swift/package.json (npm)
• lib/vscode/extensions/testing-editor-contributions/package.json (npm)
• lib/vscode/extensions/theme-abyss/package.json (npm)
• lib/vscode/extensions/theme-defaults/package.json (npm)
• lib/vscode/extensions/theme-kimbie-dark/package.json (npm)
• lib/vscode/extensions/theme-monokai-dimmed/package.json (npm)
• lib/vscode/extensions/theme-monokai/package.json (npm)
• lib/vscode/extensions/theme-quietlight/package.json (npm)
• lib/vscode/extensions/theme-red/package.json (npm)
• lib/vscode/extensions/theme-seti/package.json (npm)
• lib/vscode/extensions/theme-solarized-dark/package.json (npm)
• lib/vscode/extensions/theme-solarized-light/package.json (npm)
• lib/vscode/extensions/theme-tomorrow-night-blue/package.json (npm)
• lib/vscode/extensions/typescript-basics/package.json (npm)
• lib/vscode/extensions/typescript-language-features/package.json (npm)
• lib/vscode/extensions/vb/package.json (npm)
• lib/vscode/extensions/vscode-api-tests/package.json (npm)
• lib/vscode/extensions/vscode-colorize-tests/package.json (npm)
• lib/vscode/extensions/vscode-custom-editor-tests/package.json (npm)
• lib/vscode/extensions/vscode-notebook-tests/package.json (npm)
• lib/vscode/extensions/vscode-test-resolver/package.json (npm)
• lib/vscode/extensions/xml/package.json (npm)
• lib/vscode/extensions/yaml/package.json (npm)
• lib/vscode/package.json (npm)
• lib/vscode/remote/package.json (npm)
• lib/vscode/remote/web/package.json (npm)
• package.json (npm)

Configuration

🔡 Renovate has detected a custom config for this PR. Feel free to ask for help if you have any doubts and would like it reviewed.

Important: Now that this branch is edited, Renovate can't rebase it from the base branch any more. If you make changes to the base branch that could impact this onboarding PR, please merge them manually.

What to Expect

With your current configuration, Renovate will create 5 Pull Requests:

fix(deps): update dependency qs to v6.10.1

• Schedule: ["at any time"]
• Branch name: renovate/minor-dependency-updates
• Merge into: main
• Upgrade qs to 6.10.1

chore(deps): update dependency vfile-message to v3

• Schedule: ["at any time"]
• Branch name: renovate/vfile-message-3.x
• Merge into: main
• Upgrade vfile-message to ^3.0.0

fix(deps): update dependency limiter to v2

• Schedule: ["at any time"]
• Branch name: renovate/limiter-2.x
• Merge into: main
• Upgrade limiter to ^2.0.0

fix(deps): update dependency proxy-agent to v5

• Schedule: ["at any time"]
• Branch name: renovate/proxy-agent-5.x
• Merge into: main
• Upgrade proxy-agent to ^5.0.0

fix(deps): update dependency xdg-basedir to v5

• Schedule: ["at any time"]
• Branch name: renovate/xdg-basedir-5.x
• Merge into: main
• Upgrade xdg-basedir to ^5.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.

[jawnsy]

Wow, 85 pull requests! Also interesting that Dependabot didn't catch these... 🤔

This PR seems really useful though, fantastic UX!

[oxy]

So, setup right now is:

• Group all minor/patch/digest updates into one PR
• Use individual PRs for major version bumps
• Two PRs an hour

Planning to add a schedule so that it opens PRs only between 6pm and 6am ET so that it doesn't use CI time while we're at work; any other suggestions?

[oxy]

On first look the config might look counterintuitive, but using packageRules > enabled and then vulnerabilityAlerts > enabled is the official way to have only security updates in the subfolder.

See, for example, oxy/renovate-test#1 for how it works over there.

[jsjoeio]

Planning to add a schedule so that it opens PRs only between 6pm and 6am ET so that it doesn't use CI time while we're at work; any other suggestions?

This seems like a good schedule to me!

[jsjoeio]

This looks good so far. Is it ready or still in draft?

And do we need to do something to disable Dependabot? (and remove the dependabot config?) Or should those be in a follow-up PR?

[codecov]

Codecov Report

Merging #3703 (0ad34e4) into main (bb1b129) will increase coverage by 1.88%.
The diff coverage is 100.00%.

❗ Current head 0ad34e4 differs from pull request most recent head cd07c61. Consider uploading reports for the commit cd07c61 to get more accurate results

@@            Coverage Diff             @@
##             main    #3703      +/-   ##
==========================================
+ Coverage   60.13%   62.01%   +1.88%     
==========================================
  Files          35       35              
  Lines        1811     1835      +24     
  Branches      365      370       +5     
==========================================
+ Hits         1089     1138      +49     
+ Misses        606      588      -18     
+ Partials      116      109       -7     

Impacted Files	Coverage Δ
src/browser/pages/vscode.ts	76.36% <100.00%> (+15.75%)	⬆️
src/node/http.ts	46.03% <100.00%> (+11.11%)	⬆️
src/node/routes/login.ts	70.90% <100.00%> (+30.16%)	⬆️
src/node/util.ts	72.16% <100.00%> (+1.18%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update bb1b129...cd07c61. Read the comment docs.

[jsjoeio]

Merging #3703 (0ad34e4) into main (bb1b129) will increase coverage by 1.88%

Lol I don't understand Codecov sometimes, but I won't complain — ~2% for one file change is 🔥