Configure Renovate

[sodot-renovate-bot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• package.json (npm)
• web-client/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Enable Renovate Dependency Dashboard creation.
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Convert pinned GitHub Action digests to SemVer.
• Enable Renovate configuration migration PRs when needed.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 15 Pull Requests:

Update dependency express to v4.20.0 [SECURITY]

• Branch name: renovate/npm-express-vulnerability
• Merge into: main
• Upgrade express to 4.20.0

Update dependency webpack to v5.104.1 [SECURITY]

• Branch name: renovate/npm-webpack-vulnerability
• Merge into: main
• Upgrade webpack to 5.104.1

Update dependency webpack-dev-server to v5 [SECURITY]

• Branch name: renovate/npm-webpack-dev-server-vulnerability
• Merge into: main
• Upgrade webpack-dev-server to ^5.0.0

Update dependency @​babel/runtime to v7.29.7

• Branch name: renovate/babel-monorepo
• Merge into: main
• Upgrade @babel/runtime to 7.29.7

Update dependency async-mutex to ^0.5.0

• Branch name: renovate/async-mutex-0.x
• Merge into: main
• Upgrade async-mutex to ^0.5.0

Update dependency jasmine-core to v5.13.0

• Branch name: renovate/jasmine-monorepo
• Merge into: main
• Upgrade jasmine-core to 5.13.0

Update Non-breaking updates

• Branch name: renovate/non-breaking-updates
• Merge into: main
• Upgrade @​sodot/sodot-node-sdk-demo to 2.3.1
• Upgrade @​sodot/sodot-web-sdk-demo to 2.3.1
• Upgrade cors to 2.8.6
• Upgrade dotenv to 16.6.1
• Upgrade jasmine-browser-runner to 2.5.0
• Upgrade karma to 6.4.4
• Upgrade karma-webpack to 5.0.1
• Upgrade supertest to 6.3.4
• Upgrade typescript to 5.9.3

Update dependency @​babel/runtime to v8

• Branch name: renovate/major-babel-monorepo
• Merge into: main
• Upgrade @babel/runtime to ^8.0.0

Update dependency dotenv to v17

• Branch name: renovate/dotenv-17.x
• Merge into: main
• Upgrade dotenv to ^17.0.0

Update dependency jasmine-browser-runner to v4

• Branch name: renovate/jasmine-browser-runner-4.x
• Merge into: main
• Upgrade jasmine-browser-runner to ^4.0.0

Update dependency jasmine-core to v6

• Branch name: renovate/major-jasmine-monorepo
• Merge into: main
• Upgrade jasmine-core to ^6.0.0

Update dependency jest to v30

• Branch name: renovate/major-jest-monorepo
• Merge into: main
• Upgrade jest to ^30.0.0

Update dependency supertest to v7

• Branch name: renovate/supertest-7.x
• Merge into: main
• Upgrade supertest to ^7.0.0

Update dependency typescript to v6

• Branch name: renovate/typescript-6.x
• Merge into: main
• Upgrade typescript to ^6.0.0

Update dependency webpack-cli to v7

• Branch name: renovate/webpack-cli-7.x
• Merge into: main
• Upgrade webpack-cli to ^7.0.0

🚸 PR creation will be limited to maximum 3 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

[ENG-3070]