Configure Renovate

[dcmcand]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/actions/publish-from-template/action.yml (github-actions)
• .github/actions/setup-local/action.yml (github-actions)
• .github/workflows/generate_cli_doc.yml (github-actions)
• .github/workflows/release-notes-sync.yaml (github-actions)
• .github/workflows/release.yaml (github-actions)
• .github/workflows/run-precommit.yaml (github-actions)
• .github/workflows/test-provider.yaml (github-actions)
• .github/workflows/test.yaml (github-actions)
• .github/workflows/test_aws_integration.yaml (github-actions)
• .github/workflows/test_azure_integration.yaml (github-actions)
• .github/workflows/test_conda_build.yaml (github-actions)
• .github/workflows/test_gcp_integration.yaml (github-actions)
• .github/workflows/test_helm_charts.yaml (github-actions)
• .github/workflows/test_local_integration.yaml (github-actions)
• .github/workflows/test_local_upgrade.yaml (github-actions)
• .github/workflows/trivy.yml (github-actions)
• .github/workflows/typing.yaml (github-actions)
• pyproject.toml (pep621)
• src/_nebari/stages/infrastructure/template/aws/main.tf (terraform)
• src/_nebari/stages/infrastructure/template/aws/versions.tf (terraform)
• src/_nebari/stages/infrastructure/template/azure/main.tf (terraform)
• src/_nebari/stages/infrastructure/template/azure/providers.tf (terraform)
• src/_nebari/stages/infrastructure/template/azure/versions.tf (terraform)
• src/_nebari/stages/infrastructure/template/gcp/main.tf (terraform)
• src/_nebari/stages/infrastructure/template/gcp/versions.tf (terraform)
• src/_nebari/stages/infrastructure/template/local/main.tf (terraform)
• src/_nebari/stages/kubernetes_ingress/template/main.tf (terraform)
• src/_nebari/stages/kubernetes_ingress/template/modules/kubernetes/ingress/main.tf (terraform)
• src/_nebari/stages/kubernetes_ingress/template/versions.tf (terraform)
• src/_nebari/stages/kubernetes_initialize/template/external-container-registry.tf (terraform)
• src/_nebari/stages/kubernetes_initialize/template/main.tf (terraform)
• src/_nebari/stages/kubernetes_initialize/template/modules/cluster-autoscaler/main.tf (terraform)
• src/_nebari/stages/kubernetes_initialize/template/modules/nvidia-installer/aws-nvidia-installer.tf (terraform)
• src/_nebari/stages/kubernetes_initialize/template/modules/nvidia-installer/gcp-nvidia-installer.tf (terraform)
• src/_nebari/stages/kubernetes_initialize/template/versions.tf (terraform)
• src/_nebari/stages/kubernetes_keycloak/template/main.tf (terraform)
• src/_nebari/stages/kubernetes_keycloak/template/modules/kubernetes/keycloak-helm/main.tf (terraform)
• src/_nebari/stages/kubernetes_keycloak/template/versions.tf (terraform)
• src/_nebari/stages/kubernetes_keycloak_configuration/template/providers.tf (terraform)
• src/_nebari/stages/kubernetes_keycloak_configuration/template/versions.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/argo-workflows.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/conda-store.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/dask_gateway.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/forward-auth.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/jupyterhub.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/jupyterhub_ssh.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/forwardauth/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/nfs-server/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/argo-workflows/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/argo-workflows/versions.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/conda-store/server.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/conda-store/shared-pvc.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/conda-store/storage.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/conda-store/worker.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/dask-gateway/controller.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/dask-gateway/gateway.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/jupyterhub-ssh/sftp.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/jupyterhub-ssh/ssh.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/jupyterhub/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/keycloak-client/versions.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/minio/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/monitoring/loki/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/monitoring/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/monitoring/versions.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/postgresql/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/redis/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/rook-ceph/main.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/modules/kubernetes/services/rook-ceph/versions.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/monitoring.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/providers.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/rook-ceph.tf (terraform)
• src/_nebari/stages/kubernetes_services/template/versions.tf (terraform)
• src/_nebari/stages/nebari_tf_extensions/template/helm-extension.tf (terraform)
• src/_nebari/stages/nebari_tf_extensions/template/modules/helm-extensions/main.tf (terraform)
• src/_nebari/stages/nebari_tf_extensions/template/modules/nebariextension/main.tf (terraform)
• src/_nebari/stages/nebari_tf_extensions/template/providers.tf (terraform)
• src/_nebari/stages/nebari_tf_extensions/template/tf-extensions.tf (terraform)
• src/_nebari/stages/nebari_tf_extensions/template/versions.tf (terraform)
• src/_nebari/stages/terraform_state/template/aws/main.tf (terraform)
• src/_nebari/stages/terraform_state/template/azure/main.tf (terraform)
• src/_nebari/stages/terraform_state/template/gcp/main.tf (terraform)
• src/_nebari/stages/terraform_state/template/gcp/modules/terraform-state/main.tf (terraform)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Enable Renovate Dependency Dashboard creation.
• Enable Renovate Dependency Dashboard approval workflow.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 61 Pull Requests:

Update dependency prompt-toolkit to v3.0.51

• Schedule: ["at any time"]
• Branch name: renovate/prompt-toolkit-3.x
• Merge into: main
• Upgrade prompt-toolkit to ==3.0.51

Update dependency ruamel.yaml to v0.18.10

• Schedule: ["at any time"]
• Branch name: renovate/ruamel.yaml-0.x
• Merge into: main
• Upgrade ruamel.yaml to ==0.18.10

Update actions/upload-artifact action to v4.6.2

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-4.x
• Merge into: main
• Upgrade actions/upload-artifact to v4.6.2

Update azure-sdk-for-python monorepo

• Schedule: ["at any time"]
• Branch name: renovate/azure-sdk-for-python-monorepo
• Merge into: main
• Upgrade azure-identity to ==1.21.0
• Upgrade azure-mgmt-resource to ==23.3.0

Update dependency auth0-python to v4.9.0

• Schedule: ["at any time"]
• Branch name: renovate/auth0-python-4.x
• Merge into: main
• Upgrade auth0-python to ==4.9.0

Update dependency bcrypt to v4.3.0

• Schedule: ["at any time"]
• Branch name: renovate/bcrypt-4.x
• Merge into: main
• Upgrade bcrypt to ==4.3.0

Update dependency black to v22.12.0

• Schedule: ["at any time"]
• Branch name: renovate/black-22.x
• Merge into: main
• Upgrade black to ==22.12.0

Update dependency boto3 to v1.37.37

• Schedule: ["at any time"]
• Branch name: renovate/boto3-1.x
• Merge into: main
• Upgrade boto3 to ==1.37.37

Update dependency cloudflare to v2.20.0

• Schedule: ["at any time"]
• Branch name: renovate/cloudflare-2.x
• Merge into: main
• Upgrade cloudflare to ==2.20.0

Update dependency google-cloud-compute to v1.30.0

• Schedule: ["at any time"]
• Branch name: renovate/google-cloud-compute-1.x
• Merge into: main
• Upgrade google-cloud-compute to ==1.30.0

Update dependency google-cloud-container to v2.56.1

• Schedule: ["at any time"]
• Branch name: renovate/google-cloud-container-2.x
• Merge into: main
• Upgrade google-cloud-container to ==2.56.1

Update dependency google-cloud-iam to v2.19.0

• Schedule: ["at any time"]
• Branch name: renovate/google-cloud-iam-2.x
• Merge into: main
• Upgrade google-cloud-iam to ==2.19.0

Update dependency google-cloud-storage to v2.19.0

• Schedule: ["at any time"]
• Branch name: renovate/google-cloud-storage-2.x
• Merge into: main
• Upgrade google-cloud-storage to ==2.19.0

Update dependency grpc-google-iam-v1 to v0.14.2

• Schedule: ["at any time"]
• Branch name: renovate/grpc-google-iam-v1-0.x
• Merge into: main
• Upgrade grpc-google-iam-v1 to ==0.14.2

Update dependency mypy to v1.15.0

• Schedule: ["at any time"]
• Branch name: renovate/mypy-1.x
• Merge into: main
• Upgrade mypy to ==1.15.0

Update dependency pluggy to v1.5.0

• Schedule: ["at any time"]
• Branch name: renovate/pluggy-1.x
• Merge into: main
• Upgrade pluggy to ==1.5.0

Update dependency python to 3.13

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.13

Update dependency questionary to v2.1.0

• Schedule: ["at any time"]
• Branch name: renovate/questionary-2.x
• Merge into: main
• Upgrade questionary to ==2.1.0

Update dependency typer to v0.15.2

• Schedule: ["at any time"]
• Branch name: renovate/typer-0.x
• Merge into: main
• Upgrade typer to ==0.15.2

Update Helm release argo-workflows to v0.45.12

• Schedule: ["at any time"]
• Branch name: renovate/argo-workflows-0.x
• Merge into: main
• Upgrade argo-workflows to d120bf3d0743481d552fa1ad1d937d0f62edcae89402d966b7d6aacee5936eed

Update Helm release cluster-autoscaler to v9.46.6

• Schedule: ["at any time"]
• Branch name: renovate/cluster-autoscaler-9.x
• Merge into: main
• Upgrade cluster-autoscaler to bb8519b88085d7aaa8cdd23e3ac7a3e5dcfeaf4857e4bab4cfd2b584d8148c2d

Update Helm release jupyterhub to v4.2.0

• Schedule: ["at any time"]
• Branch name: renovate/jupyterhub-4.x
• Merge into: main
• Upgrade jupyterhub to 46d4d49e5ae051f88c0e7418cb03067ed398849ee0584099ed92b09935e9513c

Update Helm release keycloak to v15.1.0

• Schedule: ["at any time"]
• Branch name: renovate/keycloak-15.x
• Merge into: main
• Upgrade keycloak to 96dee53f2ad54fa248be7d4e13d373fdf1c6e3cb83644cf31b2acac632ad79e1

Update Helm release kube-prometheus-stack to v58.7.2

• Schedule: ["at any time"]
• Branch name: renovate/kube-prometheus-stack-58.x
• Merge into: main
• Upgrade kube-prometheus-stack to 1deb147756be125000fe3027ebc0cc1c4bc49b9f85ea0a4490d10b80e667c3ae

Update Helm release minio to v6.8.3

• Schedule: ["at any time"]
• Branch name: renovate/minio-6.x
• Merge into: main
• Upgrade minio to f468c070fa6adfd96c13e27db3ccee38606caf7097d712db3f878066589dc7a5

Update Helm release postgresql to v10.16.2

• Schedule: ["at any time"]
• Branch name: renovate/postgresql-10.x
• Merge into: main
• Upgrade postgresql to 6012be8e28cad57f87320c1b035b668c6d6d0325e384ce4732ec154e452dbca0

Update Helm release redis to v17.17.1

• Schedule: ["at any time"]
• Branch name: renovate/redis-17.x
• Merge into: main
• Upgrade redis to 44e38a81dcd9af1d4f39472e486943a6c7424f4819367911273edca1266154f6

Update Helm release rook-ceph to v1.17.0

• Schedule: ["at any time"]
• Branch name: renovate/rook-ceph-1.x
• Merge into: main
• Upgrade rook-ceph to 1636a0274cf2a73f85339e5b147516c89023bd43467fdea990497e5023835814

Update Helm release rook-ceph-cluster to v1.17.0

• Schedule: ["at any time"]
• Branch name: renovate/rook-ceph-cluster-1.x
• Merge into: main
• Upgrade rook-ceph-cluster to 7f2d4d0e4445f8a4b5779e058faa9fa191e5023d7980834b0a8051bdfac3315d

Update Terraform aws to v5.95.0

• Schedule: ["at any time"]
• Branch name: renovate/aws-5.x
• Merge into: main
• Upgrade aws to 5.95.0

Update Terraform azurerm to v4.26.0

• Schedule: ["at any time"]
• Branch name: renovate/azurerm-4.x
• Merge into: main
• Upgrade azurerm to 4.26.0

Update Terraform docker to v2.25.0

• Schedule: ["at any time"]
• Branch name: renovate/docker-2.x
• Merge into: main
• Upgrade docker to 2.25.0

Update Terraform google to v6.30.0

• Schedule: ["at any time"]
• Branch name: renovate/google-6.x
• Merge into: main
• Upgrade google to 6.30.0

Update Terraform helm to v2.17.0

• Schedule: ["at any time"]
• Branch name: renovate/helm-2.x
• Merge into: main
• Upgrade helm to 2.17.0

Update Terraform keycloak to v3.10.0

• Schedule: ["at any time"]
• Branch name: renovate/keycloak-3.x
• Merge into: main
• Upgrade keycloak to 3.10.0

Update Terraform kind to v0.8.0

• Schedule: ["at any time"]
• Branch name: renovate/kind-0.x
• Merge into: main
• Upgrade kind to 0.8.0

Update Terraform kubernetes to v2.36.0

• Schedule: ["at any time"]
• Branch name: renovate/kubernetes-2.x
• Merge into: main
• Upgrade kubernetes to 2.36.0

Update actions/checkout action

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to v4
• Upgrade actions/checkout to v4.2.2

Update actions/setup-python action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-5.x
• Merge into: main
• Upgrade actions/setup-python to v5

Update aws-actions/configure-aws-credentials action to v4

• Schedule: ["at any time"]
• Branch name: renovate/aws-actions-configure-aws-credentials-4.x
• Merge into: main
• Upgrade aws-actions/configure-aws-credentials to v4

Update azure/login action to v2

• Schedule: ["at any time"]
• Branch name: renovate/azure-login-2.x
• Merge into: main
• Upgrade azure/login to v2

Update dependency azure-mgmt-containerservice to v35

• Schedule: ["at any time"]
• Branch name: renovate/major-azure-sdk-for-python-monorepo
• Merge into: main
• Upgrade azure-mgmt-containerservice to ==35.0.0

Update dependency black to v25

• Schedule: ["at any time"]
• Branch name: renovate/black-25.x
• Merge into: main
• Upgrade black to ==25.1.0

Update dependency cloudflare to v4

• Schedule: ["at any time"]
• Branch name: renovate/cloudflare-4.x
• Merge into: main
• Upgrade cloudflare to ==4.1.0

Update dependency google-cloud-storage to v3

• Schedule: ["at any time"]
• Branch name: renovate/google-cloud-storage-3.x
• Merge into: main
• Upgrade google-cloud-storage to ==3.1.0

Update dependency kubernetes to v32

• Schedule: ["at any time"]
• Branch name: renovate/kubernetes-32.x
• Merge into: main
• Upgrade kubernetes to ==32.0.1

Update dependency packaging to v25

• Schedule: ["at any time"]
• Branch name: renovate/packaging-25.x
• Merge into: main
• Upgrade packaging to ==25.0

Update dependency python-keycloak to v5

• Schedule: ["at any time"]
• Branch name: renovate/python-keycloak-5.x
• Merge into: main
• Upgrade python-keycloak to >=5.5.0,<5.6.0

Update dependency rich to v14

• Schedule: ["at any time"]
• Branch name: renovate/rich-14.x
• Merge into: main
• Upgrade rich to >=14,<15

Update dependency setuptools to v79

• Schedule: ["at any time"]
• Branch name: renovate/setuptools-79.x
• Merge into: main
• Upgrade setuptools to ==79.0.0

Update gcr.io/google-containers/pause Docker tag to v3

• Schedule: ["at any time"]
• Branch name: renovate/gcr.io-google-containers-pause-3.x
• Merge into: main
• Upgrade gcr.io/google-containers/pause to 3.2

Update google-github-actions/auth action to v2

• Schedule: ["at any time"]
• Branch name: renovate/google-github-actions-auth-2.x
• Merge into: main
• Upgrade google-github-actions/auth to v2

Update Helm release keycloak to v18

• Schedule: ["at any time"]
• Branch name: renovate/keycloak-18.x
• Merge into: main
• Upgrade keycloak to 5b6f541629d4dda489e439c7bf9d288307c71e8050583fe1362729a012a79b67

Update Helm release kube-prometheus-stack to v70

• Schedule: ["at any time"]
• Branch name: renovate/kube-prometheus-stack-70.x
• Merge into: main
• Upgrade kube-prometheus-stack to 6ab34bbc94651548082945d3422068898ea52a091f98a85a6dd570ffb8e63c23

Update Helm release minio to v11

• Schedule: ["at any time"]
• Branch name: renovate/minio-11.x
• Merge into: main
• Upgrade minio to sha256:4be1044a725c2fd9236b8dcb2440b81f69825e535b2ef19b2d2744bad38710fe

Update Helm release postgresql to v11

• Schedule: ["at any time"]
• Branch name: renovate/postgresql-11.x
• Merge into: main
• Upgrade postgresql to sha256:bafcc76acda91374925323eab2e32d611a1d4c97f0ffa5924b2a21d85f1a717e

Update Helm release redis to v20

• Schedule: ["at any time"]
• Branch name: renovate/redis-20.x
• Merge into: main
• Upgrade redis to f9cd748afb38322a82936489d705ebe4d2f8528ad8e3f6ecb0f2f5ba951985ae

Update peter-evans/create-pull-request action to v7

• Schedule: ["at any time"]
• Branch name: renovate/peter-evans-create-pull-request-7.x
• Merge into: main
• Upgrade peter-evans/create-pull-request to v7

Update Terraform docker to v3

• Schedule: ["at any time"]
• Branch name: renovate/docker-3.x
• Merge into: main
• Upgrade docker to 3.3.0

Update Terraform keycloak to v4

• Schedule: ["at any time"]
• Branch name: renovate/keycloak-4.x
• Merge into: main
• Upgrade keycloak to 4.4.0

Update tj-actions/verify-changed-files action to v20

• Schedule: ["at any time"]
• Branch name: renovate/tj-actions-verify-changed-files-20.x
• Merge into: main
• Upgrade tj-actions/verify-changed-files to v20

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.

[viniciusdc]

@dcmcand can we close this?