chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/ci.yml (github-actions)
• .github/workflows/coana-analysis.yml (github-actions)
• .github/workflows/coana-guardrail.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/version-bump.yml (github-actions)
• pyproject.toml (pep621)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 15 Pull Requests:

chore(deps): update dependency mypy to v1.19.1

• Schedule: ["at any time"]
• Branch name: renovate/mypy-1.x
• Merge into: main
• Upgrade mypy to ==1.19.1

chore(deps): update dependency pytest to v8.4.2

• Schedule: ["at any time"]
• Branch name: renovate/pytest-8.x
• Merge into: main
• Upgrade pytest to ==8.4.2

chore(deps): update dependency pytest-asyncio to v0.26.0

• Schedule: ["at any time"]
• Branch name: renovate/pytest-asyncio-0.x
• Merge into: main
• Upgrade pytest-asyncio to ==0.26.0

chore(deps): update dependency ruff to v0.15.0

• Schedule: ["at any time"]
• Branch name: renovate/ruff-0.x
• Merge into: main
• Upgrade ruff to ==0.15.0

chore(deps): update dependency uv_build to >=0.9.30,<0.10.0

• Schedule: ["at any time"]
• Branch name: renovate/uv_build-0.x
• Merge into: main
• Upgrade uv_build to >=0.9.30,<0.10.0

fix(deps): update dependency pyjwt to >=2.11,<2.12

• Schedule: ["at any time"]
• Branch name: renovate/pyjwt-2.x
• Merge into: main
• Upgrade pyjwt to >=2.11,<2.12

chore(deps): update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to v6

chore(deps): update actions/create-github-app-token action to v2

• Schedule: ["at any time"]
• Branch name: renovate/actions-create-github-app-token-2.x
• Merge into: main
• Upgrade actions/create-github-app-token to v2

chore(deps): update actions/setup-node action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-6.x
• Merge into: main
• Upgrade actions/setup-node to v6

chore(deps): update astral-sh/setup-uv action to v7

• Schedule: ["at any time"]
• Branch name: renovate/astral-sh-setup-uv-7.x
• Merge into: main
• Upgrade astral-sh/setup-uv to v7

chore(deps): update dependency node to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade node to 24.x

chore(deps): update dependency pytest to v9

• Schedule: ["at any time"]
• Branch name: renovate/pytest-9.x
• Merge into: main
• Upgrade pytest to ==9.0.2

chore(deps): update dependency pytest-asyncio to v1

• Schedule: ["at any time"]
• Branch name: renovate/pytest-asyncio-1.x
• Merge into: main
• Upgrade pytest-asyncio to ==1.3.0

chore(deps): update dependency pytest-cov to v7

• Schedule: ["at any time"]
• Branch name: renovate/pytest-cov-7.x
• Merge into: main
• Upgrade pytest-cov to ==7.0.0

chore(deps): update peter-evans/create-pull-request action to v8

• Schedule: ["at any time"]
• Branch name: renovate/peter-evans-create-pull-request-8.x
• Merge into: main
• Upgrade peter-evans/create-pull-request to v8

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

Greptile Overview

Greptile Summary

Adds standard Renovate configuration to enable automated dependency updates. The configuration uses minimal, recommended presets that will monitor Python dependencies in pyproject.toml and GitHub Actions in workflow files. Renovate will create PRs for 15 identified updates including dev tools (pytest, mypy, ruff) and GitHub Actions. Rate-limited to 2 PRs per hour to avoid overwhelming CI.

Confidence Score: 5/5

• This PR is safe to merge with no risk
• Standard Renovate onboarding configuration using recommended presets with no custom logic or security concerns
• No files require special attention

Important Files Changed

Filename	Overview
renovate.json	Added minimal Renovate configuration extending recommended presets for automated dependency updates

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant GH as GitHub Repository
    participant Renovate as Renovate Bot
    participant CI as CI/CD Pipeline
    
    Dev->>GH: Merge onboarding PR
    activate Renovate
    Renovate->>GH: Read renovate.json config
    Renovate->>GH: Scan package files (pyproject.toml, workflows)
    Renovate->>Renovate: Detect outdated dependencies
    loop For each dependency update
        Renovate->>GH: Create PR with update
        GH->>CI: Trigger tests & checks
        CI-->>GH: Report status
        Dev->>GH: Review & merge if passing
    end
    deactivate Renovate

Loading

[greptile-apps]

_{1 file reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}