Skip to content

Configure Renovate - #1

Open
figure-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/configure
Open

Configure Renovate#1
figure-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/configure

Conversation

@figure-renovate

@figure-renovate figure-renovate Bot commented Jun 29, 2026

Copy link
Copy Markdown

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.


Detected Package Files

  • testutil/contracts/counter/Cargo.toml (cargo)
  • testutil/contracts/echo/Cargo.toml (cargo)
  • testutil/contracts/rate-limiter/Cargo.toml (cargo)
  • docker/postgres-indexer/docker-compose.yaml (docker-compose)
  • networks/dev/docker-compose.yml (docker-compose)
  • networks/ibc/docker-compose.yml (docker-compose)
  • networks/local/docker-compose.yml (docker-compose)
  • docker/blockchain/Dockerfile (dockerfile)
  • docker/postgres-indexer/Dockerfile (dockerfile)
  • networks/dev/blockchain-dev/Dockerfile (dockerfile)
  • networks/ibc/blockchain-ibc/Dockerfile (dockerfile)
  • networks/ibc/blockchain-relayer/Dockerfile (dockerfile)
  • networks/local/blockchain-local/Dockerfile (dockerfile)
  • .github/workflows/changelog.yml (github-actions)
  • .github/workflows/codeql-analysis.yml (github-actions)
  • .github/workflows/docker.yml (github-actions)
  • .github/workflows/lint.yml (github-actions)
  • .github/workflows/proto-registry.yml (github-actions)
  • .github/workflows/proto.yml (github-actions)
  • .github/workflows/release.yml (github-actions)
  • .github/workflows/sims.yml (github-actions)
  • .github/workflows/test.yml (github-actions)
  • go.mod (gomod)
  • protoBindings/buildSrc/src/main/kotlin/Dependencies.kt (gradle)
  • protoBindings/buildSrc/src/main/kotlin/Version.kt (gradle)
  • protoBindings/gradle.properties (gradle)
  • protoBindings/settings.gradle.kts (gradle)
  • protoBindings/build.gradle.kts (gradle)
  • protoBindings/bindings/java/build.gradle.kts (gradle)
  • protoBindings/bindings/kotlin/build.gradle.kts (gradle)
  • protoBindings/buildSrc/build.gradle.kts (gradle)
  • protoBindings/gradle/wrapper/gradle-wrapper.properties (gradle-wrapper)
  • renovate.json (renovate-config-presets)

Configuration Summary

Based on the default config's presets, Renovate will:

  • Start dependency updates only once this onboarding PR is merged
  • Enable Renovate Dependency Dashboard creation.
  • Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
  • Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
  • Group known monorepo packages together.
  • Use curated list of recommended non-monorepo package groupings.
  • Show only the Age and Confidence Merge Confidence badges for pull requests.
  • Apply crowd-sourced package replacement rules.
  • Apply crowd-sourced workarounds for known problems with packages.
  • Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
  • Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
  • Correctly link to the source code for golang.org/x packages
  • Link to pkg.go.dev/... for golang.org/x packages' title
  • Enable Renovate configuration migration PRs when needed.
  • Show all Merge Confidence badges for pull requests.
  • Run Renovate on following schedule: on Monday

What to Expect

With your current configuration, Renovate will create 54 Pull Requests:

Update module google.golang.org/grpc from `v1.81.1` to `v1.82.1` [SECURITY]
  • Branch name: renovate/go-google.golang.org-grpc-vulnerability
  • Merge into: main
  • Upgrade google.golang.org/grpc to v1.82.1
Pin dependencies
Update dependency javax.annotation:javax.annotation-api from `1.3.1` to `1.3.2`
Update dependency org.apache.httpcomponents:httpclient from `4.5.12` to `4.5.14`
Update Gradle from `8.14.3` to `8.14.5`
  • Schedule: ["on Monday"]
  • Branch name: renovate/gradle-8.x
  • Merge into: main
  • Upgrade gradle to 8.14.5
Update module github.com/CosmWasm/wasmvm/v3 from `v3.0.6` to `v3.0.7`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-cosmwasm-wasmvm-v3-3.x
  • Merge into: main
  • Upgrade github.com/CosmWasm/wasmvm/v3 to v3.0.7
Update protobuf monorepo from `3.25.5` to `3.25.9`
Update dependency commons-io:commons-io from `2.6` to `2.22.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/commons-io-commons-io-2.x
  • Merge into: main
  • Upgrade commons-io:commons-io to 2.22.0
Update dependency golangci/golangci-lint from `v2.4.0` to `v2.12.2`
  • Schedule: ["on Monday"]
  • Branch name: renovate/golangci-golangci-lint-2.x
  • Merge into: main
  • Upgrade golangci/golangci-lint to v2.12.2
Update dependency org.apache.commons:commons-compress from `1.20` to `1.28.0`
Update grpc-java monorepo from `1.73.0` to `1.83.0`
Update module cosmossdk.io/client/v2 from `v2.0.0-beta.8` to `v2.11.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-client-v2-2.x
  • Merge into: main
  • Upgrade cosmossdk.io/client/v2 to v2.11.0
Update module cosmossdk.io/core from `v0.11.3` to `v0.12.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-core-0.x
  • Merge into: main
  • Upgrade cosmossdk.io/core to v0.12.0
Update module cosmossdk.io/x/circuit from `v0.1.1` to `v0.2.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-x-circuit-0.x
  • Merge into: main
  • Upgrade cosmossdk.io/x/circuit to v0.2.0
Update module github.com/cometbft/cometbft from `v0.38.23` to `v0.39.3`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-cometbft-cometbft-0.x
  • Merge into: main
  • Upgrade github.com/cometbft/cometbft to v0.39.3
Update module github.com/cosmos/cosmos-sdk from `v0.53.6` to `v0.54.3`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-cosmos-cosmos-sdk-0.x
  • Merge into: main
  • Upgrade github.com/cosmos/cosmos-sdk to v0.54.3
Update module github.com/cosmos/iavl from `v1.2.6` to `v1.3.6`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-cosmos-iavl-1.x
  • Merge into: main
  • Upgrade github.com/cosmos/iavl to v1.3.6
Update module github.com/CosmWasm/wasmd from `v0.61.10` to `v0.70.3`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-cosmwasm-wasmd-0.x
  • Merge into: main
  • Upgrade github.com/CosmWasm/wasmd to v0.70.3
Update module github.com/gin-gonic/gin from `v1.9.1` to `v1.12.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-gin-gonic-gin-1.x
  • Merge into: main
  • Upgrade github.com/gin-gonic/gin to v1.12.0
Update module github.com/golang-jwt/jwt/v4 from `v4.4.2` to `v4.5.2`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-golang-jwt-jwt-v4-4.x
  • Merge into: main
  • Upgrade github.com/golang-jwt/jwt/v4 to v4.5.2
Update module github.com/hashicorp/go-metrics from `v0.5.4` to `v0.6.0`
Update module github.com/provlabs/vault from `v1.1.0` to `v1.2.1`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-provlabs-vault-1.x
  • Merge into: main
  • Upgrade github.com/provlabs/vault to v1.2.1
Update module golang.org/x/text from `v0.38.0` to `v0.40.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/golang.org-x-text-0.x
  • Merge into: main
  • Upgrade golang.org/x/text to v0.40.0
Update plugin com.diffplug.spotless from `7.1.0` to `7.2.1`
  • Schedule: ["on Monday"]
  • Branch name: renovate/pluginversions.spotless
  • Merge into: main
  • Upgrade com.diffplug.spotless to 7.2.1
Update plugin com.google.protobuf from `0.9.5` to `0.10.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/pluginversions.protobuf
  • Merge into: main
  • Upgrade com.google.protobuf to 0.10.0
Update plugin io.github.gradle-nexus.publish-plugin from `1.1.0` to `1.3.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/pluginversions.nexuspublish
  • Merge into: main
  • Upgrade io.github.gradle-nexus.publish-plugin to 1.3.0
Update Rust crate schemars from `0.8.22` to `0.9.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/schemars-0.x
  • Merge into: main
  • Upgrade schemars to 0.9.0
Update Rust crate sha2 from `0.10.6` to `0.11.0`
  • Schedule: ["on Monday"]
  • Branch name: renovate/sha2-0.x
  • Merge into: main
  • Upgrade sha2 to 0.11.0
Update Versions.KotlinGrpc from `1.4.3` to `1.5.0`
Update actions/setup-go action from `v6` to `v7`
  • Schedule: ["on Monday"]
  • Branch name: renovate/actions-setup-go-7.x
  • Merge into: main
  • Upgrade actions/setup-go to v7
Update golangci/golangci-lint-action action from `v8` to `v9`
Update Gradle from `8.14.3` to `v9`
  • Schedule: ["on Monday"]
  • Branch name: renovate/gradle-9.x
  • Merge into: main
  • Upgrade gradle to 9.6.1
Update Kotlin from `1.9.25` to `v2` (major)
Update module cosmossdk.io/api from `v0.9.2` to `v1`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-api-1.x
  • Merge into: main
  • Upgrade cosmossdk.io/api to v1.0.0
Update module cosmossdk.io/core from `v0.11.3` to `v1`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-core-1.x
  • Merge into: main
  • Upgrade cosmossdk.io/core to v1.1.0
Update module cosmossdk.io/errors from `v1.1.0` to `v2`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-errors-2.x
  • Merge into: main
  • Upgrade cosmossdk.io/errors to v2.0.0
Update module cosmossdk.io/log from `v1.6.1` to `v2`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-log-2.x
  • Merge into: main
  • Upgrade cosmossdk.io/log to v2.1.0
Update module cosmossdk.io/store from `v1.1.2` to `v2`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-store-2.x
  • Merge into: main
  • Upgrade cosmossdk.io/store to v2.0.0
Update module cosmossdk.io/x/tx from `v0.14.0` to `v1`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmossdk.io-x-tx-1.x
  • Merge into: main
  • Upgrade cosmossdk.io/x/tx to v1.1.0
Update module github.com/cometbft/cometbft from `v0.38.23` to `v1`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-cometbft-cometbft-1.x
  • Merge into: main
  • Upgrade github.com/cometbft/cometbft to v1.0.1
Update module github.com/cometbft/cometbft-db from `v0.15.0` to `v1`
Update module github.com/cosmos/ibc-go/v10 from `v10.7.0` to `v11`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-cosmos-ibc-go-v10-11.x
  • Merge into: main
  • Upgrade github.com/cosmos/ibc-go/v10 to v11.2.0
Update module github.com/golang-jwt/jwt/v4 from `v4.4.2` to `v5`
  • Schedule: ["on Monday"]
  • Branch name: renovate/github.com-golang-jwt-jwt-v4-5.x
  • Merge into: main
  • Upgrade github.com/golang-jwt/jwt/v4 to v5.3.1
Update module github.com/grpc-ecosystem/grpc-gateway from `v1.16.0` to `v2`
Update module github.com/provenance-io/wasmd from `v0.61.10-pio-2` to `v1`
Update plugin com.diffplug.spotless from `7.1.0` to `v8`
  • Schedule: ["on Monday"]
  • Branch name: renovate/major-pluginversions.spotless
  • Merge into: main
  • Upgrade com.diffplug.spotless to 8.8.0
Update plugin io.github.gradle-nexus.publish-plugin from `1.1.0` to `v2`
  • Schedule: ["on Monday"]
  • Branch name: renovate/major-pluginversions.nexuspublish
  • Merge into: main
  • Upgrade io.github.gradle-nexus.publish-plugin to 2.0.0
Update protobuf monorepo from `3.25.5` to `v4` (major)
Update Rust crate cosmwasm-schema from `2.3.0` to `v3`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmwasm-schema-3.x
  • Merge into: main
  • Upgrade cosmwasm-schema to 3.0.0
Update Rust crate cosmwasm-std to v3.0.9
  • Schedule: ["on Monday"]
  • Branch name: renovate/cosmwasm-std-3.x
  • Merge into: main
  • Upgrade cosmwasm-std to 3.0.0
Update Rust crate cw-multi-test from `2.5.1` to `v3`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cw-multi-test-3.x
  • Merge into: main
  • Upgrade cw-multi-test to 3.0.0
Update Rust crate cw-storage-plus from `2.0.0` to `v3`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cw-storage-plus-3.x
  • Merge into: main
  • Upgrade cw-storage-plus to 3.0.0
Update Rust crate cw2 from `2.0.0` to `v3`
  • Schedule: ["on Monday"]
  • Branch name: renovate/cw2-3.x
  • Merge into: main
  • Upgrade cw2 to 3.0.0
Update Rust crate schemars from `0.8.22` to `v1`
  • Schedule: ["on Monday"]
  • Branch name: renovate/schemars-1.x
  • Merge into: main
  • Upgrade schemars to 1.0.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.


❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.


This PR has been generated by Mend Renovate.

@semgrep-code-figure-technologies

Copy link
Copy Markdown

Legal Risk

The following dependencies were released under a license that
has been flagged by your organization for consideration.

Recommendation

While merging is not directly blocked, it's best to pause and consider what it means to use this license before continuing. If you are unsure, reach out to your security team or Semgrep admin to address this issue.

CC-BY-SA-4.0

GPL-3.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants