Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• pipelines/tasks/mvn-task.yaml (ansible)
• pipelines/tasks/oc-task.yaml (ansible)
• pipelines/tasks/task-s2i-java.yaml (ansible)
• pipelines/tasks/task-s2i-nodejs.yaml (ansible)
• Dockerfile (dockerfile)
• bank-app-backend/transaction-service/Dockerfile (dockerfile)
• bank-app-backend/user-service/Dockerfile (dockerfile)
• bank-knative-service/Dockerfile (dockerfile)
• bank-user-cleanup-utility/Dockerfile (dockerfile)
• data_model/Dockerfile (dockerfile)
• data_model/drop-schema/Dockerfile (dockerfile)
• public/index.html (html)
• bank-app-backend/common/pom.xml (maven)
• bank-app-backend/integration-tests/pom.xml (maven)
• bank-app-backend/pom.xml (maven)
• bank-app-backend/transaction-service/pom.xml (maven)
• bank-app-backend/user-service/pom.xml (maven)
• bank-user-cleanup-utility/pom.xml (maven)
• bank-knative-service/package.json (npm)
• package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 47 Pull Requests:

Update dependency axios to ^0.30.0 [SECURITY]

• Branch name: renovate/npm-axios-vulnerability
• Merge into: main
• Upgrade axios to ^0.30.0

Update dependency body-parser to v1.20.3 [SECURITY]

• Branch name: renovate/npm-body-parser-vulnerability
• Merge into: main
• Upgrade body-parser to 1.20.3

Update dependency express to v4.20.0 [SECURITY]

• Branch name: renovate/npm-express-vulnerability
• Merge into: main
• Upgrade express to 4.20.0

Update dependency log4js to v6.4.0 [SECURITY]

• Branch name: renovate/npm-log4js-vulnerability
• Merge into: main
• Upgrade log4js to 6.4.0

Update dependency org.jboss.resteasy:resteasy-client-microprofile to v4.5.7.Final [SECURITY]

• Branch name: renovate/maven-org.jboss.resteasy-resteasy-client-microprofile-vulnerability
• Merge into: main
• Upgrade org.jboss.resteasy:resteasy-client-microprofile to 4.5.7.Final

Update dependency org.postgresql:postgresql to v42.3.3 [SECURITY]

• Branch name: renovate/maven-org.postgresql-postgresql-vulnerability
• Merge into: main
• Upgrade org.postgresql:postgresql to 42.3.3

Update dependency cfenv to v1.2.4

• Schedule: ["at any time"]
• Branch name: renovate/cfenv-1.x-lockfile
• Merge into: main
• Upgrade cfenv to 1.2.4

Update dependency Chart.js to v2.9.4

• Schedule: ["at any time"]
• Branch name: renovate/chart.js-2.x
• Merge into: main
• Upgrade Chart.js to 2.9.4

Update dependency com.sun.xml.bind:jaxb-impl to v2.3.9

• Schedule: ["at any time"]
• Branch name: renovate/com.sun.xml.bind-jaxb-impl-2.x
• Merge into: main
• Upgrade com.sun.xml.bind:jaxb-impl to 2.3.9

Update dependency express-http-proxy to v1.6.3

• Schedule: ["at any time"]
• Branch name: renovate/express-http-proxy-1.x-lockfile
• Merge into: main
• Upgrade express-http-proxy to 1.6.3

Update dependency junit:junit to v4.13.2

• Schedule: ["at any time"]
• Branch name: renovate/junit-junit-4.x
• Merge into: main
• Upgrade junit:junit to 4.13.2

Update dependency org.eclipse:yasson to v1.0.11

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse-yasson-1.x
• Merge into: main
• Upgrade org.eclipse:yasson to 1.0.11

Update dependency org.projectlombok:lombok to v1.18.38

• Schedule: ["at any time"]
• Branch name: renovate/org.projectlombok-lombok-1.x
• Merge into: main
• Upgrade org.projectlombok:lombok to 1.18.38

Update dependency dotenv to v8.6.0

• Schedule: ["at any time"]
• Branch name: renovate/dotenv-8.x-lockfile
• Merge into: main
• Upgrade dotenv to 8.6.0

Update dependency ibmcloud-appid to v6.3.1

• Schedule: ["at any time"]
• Branch name: renovate/ibmcloud-appid-6.x-lockfile
• Merge into: main
• Upgrade ibmcloud-appid to 6.3.1

Update dependency org.apache.commons:commons-lang3 to v3.17.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.commons-commons-lang3-3.x
• Merge into: main
• Upgrade org.apache.commons:commons-lang3 to 3.17.0

Update dependency org.apache.cxf:cxf-rt-rs-client to v3.6.6

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.cxf-cxf-rt-rs-client-3.x
• Merge into: main
• Upgrade org.apache.cxf:cxf-rt-rs-client to 3.6.6

Update dependency org.apache.cxf:cxf-rt-rs-extension-providers to v3.6.6

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.cxf-cxf-rt-rs-extension-providers-3.x
• Merge into: main
• Upgrade org.apache.cxf:cxf-rt-rs-extension-providers to 3.6.6

Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-compiler-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.14.0

Update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.8.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-dependency-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-dependency-plugin to 3.8.1

Update dependency org.apache.maven.plugins:maven-failsafe-plugin to v3.5.3

• Schedule: ["at any time"]
• Branch name: renovate/version.maven-failsafe-plugin
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 3.5.3

Update dependency org.apache.maven.plugins:maven-jar-plugin to v3.4.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-jar-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-jar-plugin to 3.4.2

Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.3

• Schedule: ["at any time"]
• Branch name: renovate/version.maven-surefire-plugin
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 3.5.3

Update dependency org.apache.maven.plugins:maven-war-plugin to v3.4.0

• Schedule: ["at any time"]
• Branch name: renovate/version.maven-war-plugin
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-war-plugin to 3.4.0

Update dependency org.eclipse.microprofile.rest.client:microprofile-rest-client-api to v1.4.1

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse.microprofile.rest.client-microprofile-rest-client-api-1.x
• Merge into: main
• Upgrade org.eclipse.microprofile.rest.client:microprofile-rest-client-api to 1.4.1

Update dependency org.jboss.resteasy:resteasy-json-binding-provider to v4.7.10.Final

• Schedule: ["at any time"]
• Branch name: renovate/org.jboss.resteasy-resteasy-json-binding-provider-4.x
• Merge into: main
• Upgrade org.jboss.resteasy:resteasy-json-binding-provider to 4.7.10.Final

Update dependency org.postgresql:postgresql to v42.7.5

• Schedule: ["at any time"]
• Branch name: renovate/org.postgresql-postgresql-42.x
• Merge into: main
• Upgrade org.postgresql:postgresql to 42.7.5

Update quay.io/buildah/stable Docker tag to v1.39.3

• Schedule: ["at any time"]
• Branch name: renovate/quay.io-buildah-stable-1.x
• Merge into: main
• Upgrade quay.io/buildah/stable to v1.39.3

Update adoptopenjdk Docker tag to v11

• Schedule: ["at any time"]
• Branch name: renovate/adoptopenjdk-11.x
• Merge into: main
• Upgrade adoptopenjdk to 11-jre-openj9

Update dependency Chart.js to v4

• Schedule: ["at any time"]
• Branch name: renovate/chart.js-4.x
• Merge into: main
• Upgrade Chart.js to 4.4.1

Update dependency com.sun.xml.bind:jaxb-core to v4

• Schedule: ["at any time"]
• Branch name: renovate/com.sun.xml.bind-jaxb-core-4.x
• Merge into: main
• Upgrade com.sun.xml.bind:jaxb-core to 4.0.5

Update dependency com.sun.xml.bind:jaxb-impl to v4

• Schedule: ["at any time"]
• Branch name: renovate/com.sun.xml.bind-jaxb-impl-4.x
• Merge into: main
• Upgrade com.sun.xml.bind:jaxb-impl to 4.0.5

Update dependency dotenv to v16

• Schedule: ["at any time"]
• Branch name: renovate/dotenv-16.x
• Merge into: main
• Upgrade dotenv to ^16.0.0

Update dependency express to v5

• Schedule: ["at any time"]
• Branch name: renovate/express-5.x
• Merge into: main
• Upgrade express to ^5.0.0

Update dependency express-http-proxy to v2

• Schedule: ["at any time"]
• Branch name: renovate/express-http-proxy-2.x
• Merge into: main
• Upgrade express-http-proxy to ^2.0.0

Update dependency ibmcloud-appid to v7

• Schedule: ["at any time"]
• Branch name: renovate/ibmcloud-appid-7.x
• Merge into: main
• Upgrade ibmcloud-appid to ^7.0.0

Update dependency io.openliberty.features:features-bom to v25

• Schedule: ["at any time"]
• Branch name: renovate/io.openliberty.features-features-bom-25.x
• Merge into: main
• Upgrade io.openliberty.features:features-bom to 25.0.0.4

Update dependency jakarta.json.bind:jakarta.json.bind-api to v3

• Schedule: ["at any time"]
• Branch name: renovate/jakarta.json.bind-jakarta.json.bind-api-3.x
• Merge into: main
• Upgrade jakarta.json.bind:jakarta.json.bind-api to 3.0.1

Update dependency jwt-decode to v4

• Schedule: ["at any time"]
• Branch name: renovate/jwt-decode-4.x
• Merge into: main
• Upgrade jwt-decode to ^4.0.0

Update dependency org.apache.cxf:cxf-rt-rs-client to v4

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.cxf-cxf-rt-rs-client-4.x
• Merge into: main
• Upgrade org.apache.cxf:cxf-rt-rs-client to 4.1.1

Update dependency org.apache.cxf:cxf-rt-rs-extension-providers to v4

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.cxf-cxf-rt-rs-extension-providers-4.x
• Merge into: main
• Upgrade org.apache.cxf:cxf-rt-rs-extension-providers to 4.1.1

Update dependency org.eclipse:yasson to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse-yasson-3.x
• Merge into: main
• Upgrade org.eclipse:yasson to 3.0.4

Update dependency org.eclipse.microprofile.rest.client:microprofile-rest-client-api to v4

• Schedule: ["at any time"]
• Branch name: renovate/org.eclipse.microprofile.rest.client-microprofile-rest-client-api-4.x
• Merge into: main
• Upgrade org.eclipse.microprofile.rest.client:microprofile-rest-client-api to 4.0

Update dependency org.jboss.resteasy:resteasy-json-binding-provider to v6

• Schedule: ["at any time"]
• Branch name: renovate/org.jboss.resteasy-resteasy-json-binding-provider-6.x
• Merge into: main
• Upgrade org.jboss.resteasy:resteasy-json-binding-provider to 6.2.12.Final

Update Node.js to v22

• Schedule: ["at any time"]
• Branch name: renovate/docker.io-library-node-22.x
• Merge into: main
• Upgrade docker.io/library/node to 22.15.0-alpine

Update Node.js to v22

• Schedule: ["at any time"]
• Branch name: renovate/node-22.x
• Merge into: main
• Upgrade node to 22.x

Update open-liberty Docker tag to v20

• Schedule: ["at any time"]
• Branch name: renovate/open-liberty-20.x
• Merge into: main
• Upgrade open-liberty to 20.0.0.10-kernel-java8-openj9

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up maven package com.ibm.codey.bank:common

Files affected: bank-app-backend/integration-tests/pom.xml, bank-app-backend/transaction-service/pom.xml, bank-app-backend/user-service/pom.xml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.