Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• puppet/Puppetfile (puppet)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.

---

What to Expect

With your current configuration, Renovate will create 20 Pull Requests:

Update dependency puppet/archive to v7.1.0

• Schedule: ["at any time"]
• Branch name: renovate/puppet-archive-7.x
• Merge into: master
• Upgrade puppet/archive to 7.1.0

Update dependency puppet/augeasproviders_core to v4.1.0

• Schedule: ["at any time"]
• Branch name: renovate/puppet-augeasproviders_core-4.x
• Merge into: master
• Upgrade puppet/augeasproviders_core to 4.1.0

Update dependency puppet/letsencrypt to v10.1.0

• Schedule: ["at any time"]
• Branch name: renovate/puppet-letsencrypt-10.x
• Merge into: master
• Upgrade puppet/letsencrypt to 10.1.0

Update dependency puppet/redis to v9.2.0

• Schedule: ["at any time"]
• Branch name: renovate/puppet-redis-9.x
• Merge into: master
• Upgrade puppet/redis to 9.2.0

Update dependency puppet/unattended_upgrades to v8.1.0

• Schedule: ["at any time"]
• Branch name: renovate/puppet-unattended_upgrades-8.x
• Merge into: master
• Upgrade puppet/unattended_upgrades to 8.1.0

Update dependency puppetlabs/apt to v9.1.0

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-apt-9.x
• Merge into: master
• Upgrade puppetlabs/apt to 9.1.0

Update dependency puppetlabs/concat to v7.4.0

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-concat-7.x
• Merge into: master
• Upgrade puppetlabs/concat to 7.4.0

Update dependency puppetlabs/postgresql to v8.3.0

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-postgresql-8.x
• Merge into: master
• Upgrade puppetlabs/postgresql to 8.3.0

Update dependency theforeman/foreman to v23.2.0

• Schedule: ["at any time"]
• Branch name: renovate/theforeman-foreman-23.x
• Merge into: master
• Upgrade theforeman/foreman to 23.2.0

Update dependency puppet/extlib to v7

• Schedule: ["at any time"]
• Branch name: renovate/puppet-extlib-7.x
• Merge into: master
• Upgrade puppet/extlib to 7.0.0

Update dependency puppet/mosquitto to v2

• Schedule: ["at any time"]
• Branch name: renovate/puppet-mosquitto-2.x
• Merge into: master
• Upgrade puppet/mosquitto to 2.0.0

Update dependency puppet/selinux to v4

• Schedule: ["at any time"]
• Branch name: renovate/puppet-selinux-4.x
• Merge into: master
• Upgrade puppet/selinux to 4.1.0

Update dependency puppet/systemd to v6

• Schedule: ["at any time"]
• Branch name: renovate/puppet-systemd-6.x
• Merge into: master
• Upgrade puppet/systemd to 6.1.0

Update dependency puppetlabs/apache to v11

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-apache-11.x
• Merge into: master
• Upgrade puppetlabs/apache to 11.1.0

Update dependency puppetlabs/concat to v9

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-concat-9.x
• Merge into: master
• Upgrade puppetlabs/concat to 9.0.0

Update dependency puppetlabs/inifile to v6

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-inifile-6.x
• Merge into: master
• Upgrade puppetlabs/inifile to 6.1.0

Update dependency puppetlabs/ntp to v10

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-ntp-10.x
• Merge into: master
• Upgrade puppetlabs/ntp to 10.1.0

Update dependency puppetlabs/postgresql to v10

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-postgresql-10.x
• Merge into: master
• Upgrade puppetlabs/postgresql to 10.0.2

Update dependency puppetlabs/stdlib to v9

• Schedule: ["at any time"]
• Branch name: renovate/puppetlabs-stdlib-9.x
• Merge into: master
• Upgrade puppetlabs/stdlib to 9.4.0

Update dependency theforeman/puppet to v18

• Schedule: ["at any time"]
• Branch name: renovate/theforeman-puppet-18.x
• Merge into: master
• Upgrade theforeman/puppet to 18.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate. View repository job log here.

[evgeni]

Renovate doesn't know when it bumps a dep to an incompatible version.

This would e.g. happen when it tries to push stdlib to 9 while not all our deps support that yet.

One solution could be setting prCreation: status-success with the addition of enabling GHA for pushes to renovate/*, which I read as "Renovate will push the branch, but only open the PR if CI passes". This has the obvious downside that we don't immediately see that we have incompatible things and can work on making them compatible.

Another could be using dependencyDashboardApproval, maybe only for major versions.

(H/T @DavidS for the ideas)

[ekohl]

This would e.g. happen when it tries to push stdlib to 9 while not all our deps support that yet.

I have added CI for this: https://github.com/theforeman/foreman-infra/blob/master/puppet/check_dependencies

One solution could be setting prCreation: status-success with the addition of enabling GHA for pushes to renovate/*, which I read as "Renovate will push the branch, but only open the PR if CI passes". This has the obvious downside that we don't immediately see that we have incompatible things and can work on making them compatible.

I'm tempted to still open them so we can work on making them compatible.

[evgeni]

Yeah, totally OK with that - just wanted to point out how the behavior will be.

[evgeni]

So, shall we merge this? :)