Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• articles-java-jee/Dockerfile (dockerfile)
• articles-java-jee/Dockerfile.java (dockerfile)
• articles-java-jee/Dockerfile.nojava (dockerfile)
• articles-java-jee/Dockerfile.quarkus (dockerfile)
• articles-java-spring-boot/Dockerfile (dockerfile)
• articles-java-spring-boot/Dockerfile.nojava (dockerfile)
• authentication-nodejs/Dockerfile (dockerfile)
• authors-java-jee/Dockerfile (dockerfile)
• authors-java-jee/DockerfileNoBuild (dockerfile)
• authors-java-jee/DockerfileTekton (dockerfile)
• authors-java-spring-boot/Dockerfile.nojava (dockerfile)
• authors-nodejs/Dockerfile (dockerfile)
• reactive/articles-reactive/Dockerfile (dockerfile)
• reactive/articles-reactive/Dockerfile.Hotspot (dockerfile)
• reactive/articles-reactive/Dockerfile.OpenJ9-run-java (dockerfile)
• reactive/articles-synch/Dockerfile (dockerfile)
• reactive/os4-scripts/Dockerfile (dockerfile)
• reactive/web-api-reactive/Dockerfile (dockerfile)
• reactive/web-api-reactive/Dockerfile.hotspot (dockerfile)
• reactive/web-app-reactive/Dockerfile (dockerfile)
• reactive/web-app-reactive/Dockerfile.os4 (dockerfile)
• security/articles-secure/Dockerfile (dockerfile)
• security/articles-secure/src/main/docker/Dockerfile.jvm (dockerfile)
• security/articles-secure/src/main/docker/Dockerfile.native (dockerfile)
• security/web-api-secure/Dockerfile (dockerfile)
• security/web-api-secure/src/main/docker/Dockerfile.jvm (dockerfile)
• security/web-api-secure/src/main/docker/Dockerfile.native (dockerfile)
• security/web-app/Dockerfile (dockerfile)
• security/web-app/Dockerfile.os4 (dockerfile)
• web-api-java-jee/Dockerfile (dockerfile)
• web-api-java-jee/Dockerfile.java (dockerfile)
• web-api-java-jee/Dockerfile.nojava (dockerfile)
• web-app-vuejs/Dockerfile (dockerfile)
• web-app-vuejs/Dockerfile.nonroot (dockerfile)
• web-app-vuejs/Dockerfile.os4 (dockerfile)
• workshop/Tekton.Dockerfile (dockerfile)
• workshop/Tools.Buildah.Dockerfile (dockerfile)
• articles-java-jee/pom.xml (maven)
• articles-java-spring-boot/pom.xml (maven)
• authors-java-jee/pom.xml (maven)
• authors-java-spring-boot/pom.xml (maven)
• reactive/articles-reactive/pom.xml (maven)
• reactive/articles-synch/pom.xml (maven)
• reactive/web-api-reactive/pom.xml (maven)
• security/articles-secure/pom.xml (maven)
• security/web-api-secure/pom.xml (maven)
• web-api-java-jee/pom.xml (maven)
• security/articles-secure/.mvn/wrapper/maven-wrapper.properties (maven-wrapper)
• security/web-api-secure/.mvn/wrapper/maven-wrapper.properties (maven-wrapper)
• authentication-nodejs/package.json (npm)
• authors-nodejs/package.json (npm)
• reactive/web-app-reactive/package.json (npm)
• security/web-app/package.json (npm)
• web-app-vuejs/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 55 Pull Requests:

Update dependency axios [SECURITY]

• Branch name: renovate/npm-axios-vulnerability
• Merge into: master
• Upgrade axios to 0.21.2
• Upgrade axios to 0.28.0

Update dependency express to v4.20.0 [SECURITY]

• Branch name: renovate/npm-express-vulnerability
• Merge into: master
• Upgrade express to 4.20.0

Update dependency io.springfox:springfox-swagger-ui to v2.10.0 [SECURITY]

• Branch name: renovate/maven-io.springfox-springfox-swagger-ui-vulnerability
• Merge into: master
• Upgrade io.springfox:springfox-swagger-ui to 2.10.0

Update dependency log4js to v6 [SECURITY]

• Branch name: renovate/npm-log4js-vulnerability
• Merge into: master
• Upgrade log4js to ^6.0.0

Update dependency io.openliberty:openliberty-runtime to v19.0.0.12

• Schedule: ["at any time"]
• Branch name: renovate/io.openliberty-openliberty-runtime-19.x
• Merge into: master
• Upgrade io.openliberty:openliberty-runtime to 19.0.0.12

Update dependency javax:javaee-api to v8.0.1

• Schedule: ["at any time"]
• Branch name: renovate/javax-javaee-api-8.x
• Merge into: master
• Upgrade javax:javaee-api to 8.0.1

Update docker.io/ubuntu Docker tag to groovy-20210723

• Schedule: ["at any time"]
• Branch name: renovate/docker.io-ubuntu-20.x
• Merge into: master
• Upgrade docker.io/ubuntu to groovy-20210723

Update surefire-plugin.version to v2.22.2

• Schedule: ["at any time"]
• Branch name: renovate/surefire-plugin.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 2.22.2
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 2.22.2

Update dependency bootstrap-vue to v2.23.1

• Schedule: ["at any time"]
• Branch name: renovate/bootstrap-vue-2.x
• Merge into: master
• Upgrade bootstrap-vue to 2.23.1

Update dependency com.ibm.db2:jcc to v11.5.9.0

• Schedule: ["at any time"]
• Branch name: renovate/com.ibm.db2-jcc-11.x
• Merge into: master
• Upgrade com.ibm.db2:jcc to 11.5.9.0

Update dependency express-session to v1.18.1

• Schedule: ["at any time"]
• Branch name: renovate/express-session-1.x
• Merge into: master
• Upgrade express-session to 1.18.1

Update dependency io.quarkus:quarkus-maven-plugin to v1.13.7.Final

• Schedule: ["at any time"]
• Branch name: renovate/quarkus-plugin.version
• Merge into: master
• Upgrade io.quarkus:quarkus-maven-plugin to 1.13.7.Final

Update dependency io.quarkus:quarkus-universe-bom to v1.13.7.Final

• Schedule: ["at any time"]
• Branch name: renovate/quarkus.platform.version
• Merge into: master
• Upgrade io.quarkus:quarkus-universe-bom to 1.13.7.Final

Update dependency io.springfox:springfox-swagger2 to v2.10.5

• Schedule: ["at any time"]
• Branch name: renovate/springfox-monorepo
• Merge into: master
• Upgrade io.springfox:springfox-swagger2 to 2.10.5

Update dependency io.vertx:vertx-kafka-client to v3.9.16

• Schedule: ["at any time"]
• Branch name: renovate/io.vertx-vertx-kafka-client-3.x
• Merge into: master
• Upgrade io.vertx:vertx-kafka-client to 3.9.16

Update dependency maven

• Schedule: ["at any time"]
• Branch name: renovate/maven-3.x
• Merge into: master
• Upgrade maven to 3.9.9
• Upgrade maven to 3.8-jdk-8
• Upgrade maven to 3.8-jdk-11

Update dependency openid-client to v2.5.0

• Schedule: ["at any time"]
• Branch name: renovate/openid-client-2.x
• Merge into: master
• Upgrade openid-client to 2.5.0

Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.0

• Schedule: ["at any time"]
• Branch name: renovate/compiler-plugin.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.14.0

Update dependency org.assertj:assertj-core to v3.27.3

• Schedule: ["at any time"]
• Branch name: renovate/org.assertj-assertj-core-3.x
• Merge into: master
• Upgrade org.assertj:assertj-core to 3.27.3

Update dependency org.eclipse.microprofile:microprofile to v3.3

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse.microprofile-microprofile-3.x
• Merge into: master
• Upgrade org.eclipse.microprofile:microprofile to 3.3

Update dependency org.mockito:mockito-core to v3.12.4

• Schedule: ["at any time"]
• Branch name: renovate/mockito-monorepo
• Merge into: master
• Upgrade org.mockito:mockito-core to 3.12.4

Update dependency org.springframework.boot:spring-boot-starter-parent to v2.7.18

• Schedule: ["at any time"]
• Branch name: renovate/spring-boot
• Merge into: master
• Upgrade org.springframework.boot:spring-boot-starter-parent to 2.7.18

Update dependency vue-router to v3.6.5

• Schedule: ["at any time"]
• Branch name: renovate/vue-router-3.x
• Merge into: master
• Upgrade vue-router to 3.6.5

Update dependency vuex to v3.6.2

• Schedule: ["at any time"]
• Branch name: renovate/vuex-3.x
• Merge into: master
• Upgrade vuex to 3.6.2

Update junit5 monorepo to v5.12.2

• Schedule: ["at any time"]
• Branch name: renovate/junit5-monorepo
• Merge into: master
• Upgrade org.junit.jupiter:junit-jupiter-engine to 5.12.2
• Upgrade org.junit.jupiter:junit-jupiter-api to 5.12.2

Update nginx Docker tag to v1.28

• Schedule: ["at any time"]
• Branch name: renovate/nginx-1.x
• Merge into: master
• Upgrade nginx to 1.28

Update quarkus.version to v1.13.7.Final

• Schedule: ["at any time"]
• Branch name: renovate/quarkus.version
• Merge into: master
• Upgrade io.quarkus:quarkus-maven-plugin to 1.13.7.Final
• Upgrade io.quarkus:quarkus-bom to 1.13.7.Final

Update registry.access.redhat.com/ubi8/ubi-minimal Docker tag to v8.10-1255

• Schedule: ["at any time"]
• Branch name: renovate/registry.access.redhat.com-ubi8-ubi-minimal-8.x
• Merge into: master
• Upgrade registry.access.redhat.com/ubi8/ubi-minimal to 8.10-1255

Update vue monorepo to v2.7.16

• Schedule: ["at any time"]
• Branch name: renovate/vue-monorepo
• Merge into: master
• Upgrade vue to 2.7.16
• Upgrade vue-template-compiler to 2.7.16

Update vue-cli monorepo to v3.12.1

• Schedule: ["at any time"]
• Branch name: renovate/vue-cli-monorepo
• Merge into: master
• Upgrade @vue/cli-plugin-babel to 3.12.1
• Upgrade @vue/cli-service to 3.12.1

Update dependency @​cloudant/cloudant to v4

• Schedule: ["at any time"]
• Branch name: renovate/cloudant-cloudant-4.x
• Merge into: master
• Upgrade @cloudant/cloudant to ^4.0.0

Update dependency com.ibm.db2:jcc to v12

• Schedule: ["at any time"]
• Branch name: renovate/com.ibm.db2-jcc-12.x
• Merge into: master
• Upgrade com.ibm.db2:jcc to 12.1.0.0

Update dependency dotenv to v16

• Schedule: ["at any time"]
• Branch name: renovate/dotenv-16.x
• Merge into: master
• Upgrade dotenv to 16.5.0

Update dependency io.openliberty:openliberty-runtime to v25

• Schedule: ["at any time"]
• Branch name: renovate/io.openliberty-openliberty-runtime-25.x
• Merge into: master
• Upgrade io.openliberty:openliberty-runtime to 25.0.0.4

Update dependency io.quarkus:quarkus-maven-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/major-quarkus-plugin.version
• Merge into: master
• Upgrade io.quarkus:quarkus-maven-plugin to 3.22.2

Update dependency io.quarkus:quarkus-universe-bom to v3

• Schedule: ["at any time"]
• Branch name: renovate/major-quarkus.platform.version
• Merge into: master
• Upgrade io.quarkus:quarkus-universe-bom to 3.22.2

Update dependency io.springfox:springfox-swagger2 to v3

• Schedule: ["at any time"]
• Branch name: renovate/major-springfox-monorepo
• Merge into: master
• Upgrade io.springfox:springfox-swagger2 to 3.0.0

Update dependency io.vertx:vertx-kafka-client to v4

• Schedule: ["at any time"]
• Branch name: renovate/io.vertx-vertx-kafka-client-4.x
• Merge into: master
• Upgrade io.vertx:vertx-kafka-client to 4.5.14

Update dependency keycloak-js to v26

• Schedule: ["at any time"]
• Branch name: renovate/keycloak-js-26.x
• Merge into: master
• Upgrade keycloak-js to 26.2.0

Update dependency maven-wrapper to v3

• Schedule: ["at any time"]
• Branch name: renovate/maven-wrapper-3.x
• Merge into: master
• Upgrade maven-wrapper to 3.3.2

Update dependency openid-client to v6

• Schedule: ["at any time"]
• Branch name: renovate/openid-client-6.x
• Merge into: master
• Upgrade openid-client to 6.5.0

Update dependency org.apache.maven.plugins:maven-dependency-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-dependency-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-dependency-plugin to 3.8.1

Update dependency org.eclipse.microprofile:microprofile to v7

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse.microprofile-microprofile-7.x
• Merge into: master
• Upgrade org.eclipse.microprofile:microprofile to 7.0

Update dependency org.mockito:mockito-core to v5

• Schedule: ["at any time"]
• Branch name: renovate/major-mockito-monorepo
• Merge into: master
• Upgrade org.mockito:mockito-core to 5.17.0

Update dependency org.springframework.boot:spring-boot-starter-parent to v3

• Schedule: ["at any time"]
• Branch name: renovate/major-spring-boot
• Merge into: master
• Upgrade org.springframework.boot:spring-boot-starter-parent to 3.4.5

Update dependency vue to v3

• Schedule: ["at any time"]
• Branch name: renovate/major-vue-monorepo
• Merge into: master
• Upgrade vue to 3.5.13

Update dependency vue-router to v4

• Schedule: ["at any time"]
• Branch name: renovate/vue-router-4.x
• Merge into: master
• Upgrade vue-router to 4.5.1

Update dependency vuex to v4

• Schedule: ["at any time"]
• Branch name: renovate/vuex-4.x
• Merge into: master
• Upgrade vuex to 4.1.0

Update docker.io/ubuntu Docker tag to v24

• Schedule: ["at any time"]
• Branch name: renovate/docker.io-ubuntu-24.x
• Merge into: master
• Upgrade docker.io/ubuntu to 24.04

Update Node.js to v22

• Schedule: ["at any time"]
• Branch name: renovate/node-22.x
• Merge into: master
• Upgrade node to ^22.0.0

Update open-liberty Docker tag to v25

• Schedule: ["at any time"]
• Branch name: renovate/open-liberty-25.x
• Merge into: master
• Upgrade open-liberty to 25.0.0.4-full-java11-openj9

Update postgres Docker tag to v17

• Schedule: ["at any time"]
• Branch name: renovate/postgres-17.x
• Merge into: master
• Upgrade postgres to 17

Update quarkus.version to v3 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-quarkus.version
• Merge into: master
• Upgrade io.quarkus:quarkus-maven-plugin to 3.22.2
• Upgrade io.quarkus:quarkus-bom to 3.22.2

Update surefire-plugin.version to v3 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-surefire-plugin.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 3.5.3
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 3.5.3

Update vue-cli monorepo to v5 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-vue-cli-monorepo
• Merge into: master
• Upgrade @vue/cli-plugin-babel to 5.0.8
• Upgrade @vue/cli-service to 5.0.8

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.