Configure Renovate

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• logstash-plugin/Gemfile (bundler)
• .github/workflows/release-graylog-plugin.yml (github-actions)
• .github/workflows/release-with-jec-all.yml (github-actions)
• .github/workflows/release-with-jec.yml (github-actions)
• .github/workflows/release-without-jec-all.yml (github-actions)
• .github/workflows/release-without-jec.yml (github-actions)
• release/integration-builder/build.gradle (gradle)
• release/integration-builder/oem/oem.gradle (gradle)
• release/integration-builder/opsview/opsview.gradle (gradle)
• release/integration-builder/vcenter/vcenter.gradle (gradle)
• release/integration-builder/vcsa/vcsa.gradle (gradle)
• release/integration-builder/gradle/wrapper/gradle-wrapper.properties (gradle-wrapper)
• graylog-plugin/pom.xml (maven)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 18 Pull Requests:

Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.7.1 [SECURITY]

• Branch name: renovate/maven-com.fasterxml.jackson.core-jackson-databind-vulnerability
• Merge into: master
• Upgrade com.fasterxml.jackson.core:jackson-databind to 2.12.7.1

Update dependency org.graylog2:graylog2-server to v6 [SECURITY]

• Branch name: renovate/major-graylog.version
• Merge into: master
• Upgrade org.graylog2:graylog2-server to 6.2.0

Update dependency com.fasterxml.jackson.dataformat:jackson-dataformat-cbor to v2.20.0

• Schedule: ["at any time"]
• Branch name: renovate/jackson-monorepo
• Merge into: master
• Upgrade com.fasterxml.jackson.dataformat:jackson-dataformat-cbor to 2.20.0

Update dependency com.netflix.nebula:gradle-ospackage-plugin to v2.2.6

• Schedule: ["at any time"]
• Branch name: renovate/com.netflix.nebula-gradle-ospackage-plugin-2.x
• Merge into: master
• Upgrade com.netflix.nebula:gradle-ospackage-plugin to 2.2.6

Update dependency go to v1.25.1

• Schedule: ["at any time"]
• Branch name: renovate/go-1.x
• Merge into: master
• Upgrade go to 1.25.1

Update dependency org.codehaus.mojo:rpm-maven-plugin to v2.3.0

• Schedule: ["at any time"]
• Branch name: renovate/org.codehaus.mojo-rpm-maven-plugin-2.x
• Merge into: master
• Upgrade org.codehaus.mojo:rpm-maven-plugin to 2.3.0

Update dependency org.vafer:jdeb to v1.14

• Schedule: ["at any time"]
• Branch name: renovate/org.vafer-jdeb-1.x
• Merge into: master
• Upgrade org.vafer:jdeb to 1.14

Update Gradle to v2.14.1

• Schedule: ["at any time"]
• Branch name: renovate/gradle-2.x
• Merge into: master
• Upgrade gradle to 2.14.1

Update i3h/download-release-asset action to v1.3.3

• Schedule: ["at any time"]
• Branch name: renovate/i3h-download-release-asset-1.x
• Merge into: master
• Upgrade i3h/download-release-asset to v1.3.3

Update plugin nebula.os-package-base to v2.2.6

• Schedule: ["at any time"]
• Branch name: renovate/nebula.os-package-base-2.x
• Merge into: master
• Upgrade nebula.os-package-base to 2.2.6

Update actions/checkout action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-5.x
• Merge into: master
• Upgrade actions/checkout to v5

Update actions/setup-go action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-6.x
• Merge into: master
• Upgrade actions/setup-go to v6

Update actions/setup-java action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-5.x
• Merge into: master
• Upgrade actions/setup-java to v5

Update andstor/file-existence-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/andstor-file-existence-action-3.x
• Merge into: master
• Upgrade andstor/file-existence-action to v3

Update dependency com.netflix.nebula:gradle-ospackage-plugin to v12

• Schedule: ["at any time"]
• Branch name: renovate/com.netflix.nebula-gradle-ospackage-plugin-12.x
• Merge into: master
• Upgrade com.netflix.nebula:gradle-ospackage-plugin to 12.1.0

Update dependency org.apache.maven.plugins:maven-release-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-release-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-release-plugin to 3.1.1

Update dependency org.apache.maven.plugins:maven-shade-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-shade-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-shade-plugin to 3.6.1

Update Gradle to v9

• Schedule: ["at any time"]
• Branch name: renovate/gradle-9.x
• Merge into: master
• Upgrade gradle to 9.1.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up maven package com.sybase.jdbc:sybase

Files affected: release/integration-builder/build.gradle

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.