Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• deployment/ansible/ibm-cloud/requirements.yml (ansible-galaxy)
• plugins_rust/Cargo.toml (cargo)
• compose.upgrade.yml (docker-compose)
• docker-compose.mariadb.yml (docker-compose)
• docker-compose.phoenix-simple.yml (docker-compose)
• docker-compose.with-phoenix.yml (docker-compose)
• docker-compose.yml (docker-compose)
• mcp-servers/python/mcp_eval_server/docker-compose.yml (docker-compose)
• plugins/external/llmguard/docker-compose.yaml (docker-compose)
• .devcontainer/Dockerfile (dockerfile)
• Containerfile (dockerfile)
• Containerfile.lite (dockerfile)
• agent_runtimes/langchain_agent/Dockerfile (dockerfile)
• mcp-servers/go/benchmark-server/Dockerfile (dockerfile)
• mcp-servers/go/fast-time-server/Dockerfile (dockerfile)
• mcp-servers/go/pandoc-server/Dockerfile (dockerfile)
• mcp-servers/go/system-monitor-server/Dockerfile (dockerfile)
• mcp-servers/python/csv_pandas_chat_server/Containerfile (dockerfile)
• mcp-servers/python/data_analysis_server/Containerfile (dockerfile)
• mcp-servers/python/docx_server/Containerfile (dockerfile)
• mcp-servers/python/graphviz_server/Containerfile (dockerfile)
• mcp-servers/python/latex_server/Containerfile (dockerfile)
• mcp-servers/python/libreoffice_server/Containerfile (dockerfile)
• mcp-servers/python/mcp-rss-search/Containerfile (dockerfile)
• mcp-servers/python/mcp_eval_server/Containerfile (dockerfile)
• mcp-servers/python/pm_mcp_server/Containerfile (dockerfile)
• mcp-servers/python/pptx_server/Containerfile (dockerfile)
• mcp-servers/python/python_sandbox_server/Containerfile (dockerfile)
• mcp-servers/python/python_sandbox_server/docker/Dockerfile.sandbox (dockerfile)
• mcp-servers/python/synthetic_data_server/Containerfile (dockerfile)
• mcp-servers/python/url_to_markdown_server/Containerfile (dockerfile)
• mcp-servers/python/xlsx_server/Containerfile (dockerfile)
• mcp-servers/templates/go/Dockerfile.jinja (dockerfile)
• mcp-servers/templates/python/Containerfile.jinja (dockerfile)
• nginx/Dockerfile (dockerfile)
• plugin_templates/external/Containerfile (dockerfile)
• plugins/external/llmguard/Containerfile (dockerfile)
• plugins/external/opa/Containerfile (dockerfile)
• .github/workflows/bandit.yml (github-actions)
• .github/workflows/codeql.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• .github/workflows/docker-image.yml (github-actions)
• .github/workflows/docker-release.yml (github-actions)
• .github/workflows/full-build-pipeline.yml (github-actions)
• .github/workflows/ibm-cloud-code-engine.yml (github-actions)
• .github/workflows/lint-plugins.yml (github-actions)
• .github/workflows/lint-web.yml (github-actions)
• .github/workflows/lint.yml (github-actions)
• .github/workflows/pytest.yml (github-actions)
• .github/workflows/python-package.yml (github-actions)
• .github/workflows/rust-plugins.yml (github-actions)
• mcp-servers/go/benchmark-server/go.mod (gomod)
• mcp-servers/go/calculator-server/go.mod (gomod)
• mcp-servers/go/fast-time-server/go.mod (gomod)
• mcp-servers/go/pandoc-server/go.mod (gomod)
• mcp-servers/go/system-monitor-server/go.mod (gomod)
• charts/mcp-stack/values.yaml (helm-values)
• mcpgateway/templates/admin.html (html)
• mcpgateway/templates/change-password-required.html (html)
• mcpgateway/templates/login.html (html)
• package.json (npm)
• agent_runtimes/langchain_agent/pyproject.toml (pep621)
• mcp-servers/python/chunker_server/pyproject.toml (pep621)
• mcp-servers/python/code_splitter_server/pyproject.toml (pep621)
• mcp-servers/python/csv_pandas_chat_server/pyproject.toml (pep621)
• mcp-servers/python/data_analysis_server/pyproject.toml (pep621)
• mcp-servers/python/docx_server/pyproject.toml (pep621)
• mcp-servers/python/graphviz_server/pyproject.toml (pep621)
• mcp-servers/python/latex_server/pyproject.toml (pep621)
• mcp-servers/python/libreoffice_server/pyproject.toml (pep621)
• mcp-servers/python/mcp-rss-search/pyproject.toml (pep621)
• mcp-servers/python/mcp_eval_server/pyproject.toml (pep621)
• mcp-servers/python/mermaid_server/pyproject.toml (pep621)
• mcp-servers/python/output_schema_test_server/pyproject.toml (pep621)
• mcp-servers/python/plotly_server/pyproject.toml (pep621)
• mcp-servers/python/pm_mcp_server/pyproject.toml (pep621)
• mcp-servers/python/pptx_server/pyproject.toml (pep621)
• mcp-servers/python/python_sandbox_server/pyproject.toml (pep621)
• mcp-servers/python/synthetic_data_server/pyproject.toml (pep621)
• mcp-servers/python/url_to_markdown_server/pyproject.toml (pep621)
• mcp-servers/python/xlsx_server/pyproject.toml (pep621)
• plugins/external/llmguard/pyproject.toml (pep621)
• plugins/external/opa/pyproject.toml (pep621)
• plugins_rust/pyproject.toml (pep621)
• pyproject.toml (pep621)
• agent_runtimes/langchain_agent/requirements.txt (pip_requirements)
• docs/requirements.txt (pip_requirements)
• mcp-servers/python/data_analysis_server/requirements.txt (pip_requirements)
• deployment/terraform/ibm-cloud/helm_release.tf (terraform)
• deployment/terraform/ibm-cloud/provider.tf (terraform)
• deployment/terraform/ibm-cloud/versions.tf (terraform)
• deployment/terraform/ibm-cloud/vpc_cluster.tf (terraform)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Schedule daily before 4 AM.
• Run Renovate on following schedule: * 0-3 * * *

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 52 Pull Requests:

Update dependency fastmcp to v2.13.0 [SECURITY]

• Branch name: renovate/pypi-fastmcp-vulnerability
• Merge into: main
• Upgrade fastmcp to ==2.13.0

Update github.com/Knetic/govaluate digest to 7625b7f

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-knetic-govaluate-digest
• Merge into: main
• Upgrade github.com/Knetic/govaluate to 7625b7f8c03df11d0ec9b5617b0ea21e8b8af61b

Update mcp-contextforge-gateway digest to f66e4a3

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/mcp-contextforge-gateway-digest
• Merge into: main
• Upgrade mcp-contextforge-gateway to f66e4a33f39aefc108daebf303fcaf210d659dd2

Update anchore/sbom-action action to v0.20.10

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/anchore-sbom-action-0.x
• Merge into: main
• Upgrade anchore/sbom-action to v0.20.10

Update dependency astral-sh/uv to v0.9.13

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/astral-sh-uv-0.x
• Merge into: main
• Upgrade astral-sh/uv to 0.9.13

Update dependency codemirror to v5.65.20

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/codemirror-5.x
• Merge into: main
• Upgrade codemirror to 5.65.20

Update dependency eslint-config-prettier to v10.1.8

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-config-prettier-10.x-lockfile
• Merge into: main
• Upgrade eslint-config-prettier to 10.1.8

Update dependency eslint-plugin-prettier to v5.5.4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-plugin-prettier-5.x-lockfile
• Merge into: main
• Upgrade eslint-plugin-prettier to 5.5.4

Update dependency @​biomejs/biome to v2.3.8

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/biomejs-biome-2.x-lockfile
• Merge into: main
• Upgrade @biomejs/biome to 2.3.8

Update dependency @​stylistic/eslint-plugin to v5.6.1

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-stylistic-monorepo
• Merge into: main
• Upgrade @stylistic/eslint-plugin to 5.6.1

Update dependency agent-lifecycle-toolkit to v0.9.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/agent-lifecycle-toolkit-0.x
• Merge into: main
• Upgrade agent-lifecycle-toolkit to ==0.9.0

Update dependency font-awesome to v6.7.2

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/font-awesome-6.x
• Merge into: main
• Upgrade font-awesome to 6.7.2

Update dependency go to v1.25.4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.25.4

Update dependency prettier to v3.7.3

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/prettier-3.x-lockfile
• Merge into: main
• Upgrade prettier to 3.7.3

Update dependency python

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14
• Upgrade python to 3.12-slim
• Upgrade python to 3.12-alpine

Update dependency stylelint to v16.26.1

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/stylelint-16.x-lockfile
• Merge into: main
• Upgrade stylelint to 16.26.1

Update docker/dockerfile Docker tag to v1.20

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/docker-dockerfile-1.x
• Merge into: main
• Upgrade docker/dockerfile to 1.20

Update docker/login-action action to v3.6.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/docker-login-action-3.x
• Merge into: main
• Upgrade docker/login-action to v3.6.0

Update golang Docker tag to v1.25

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to 1.25-alpine
• Upgrade golang to 1.25

Update mariadb Docker tag to v10.11

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/mariadb-10.x
• Merge into: main
• Upgrade mariadb to 10.11

Update module github.com/mark3labs/mcp-go to v0.43.1

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-mark3labs-mcp-go-0.x
• Merge into: main
• Upgrade github.com/mark3labs/mcp-go to v0.43.1

Update module github.com/shirou/gopsutil/v3 to v3.24.5

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-shirou-gopsutil-v3-3.x
• Merge into: main
• Upgrade github.com/shirou/gopsutil/v3 to v3.24.5

Update module github.com/shopspring/decimal to v1.4.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-shopspring-decimal-1.x
• Merge into: main
• Upgrade github.com/shopspring/decimal to v1.4.0

Update module gonum.org/v1/gonum to v0.16.0

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/gonum.org-v1-gonum-0.x
• Merge into: main
• Upgrade gonum.org/v1/gonum to v0.16.0

Update nginx Docker tag to v1.29

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/nginx-1.x
• Merge into: main
• Upgrade nginx to 1.29-alpine

Update quay.io/pypa/manylinux2014 Docker tag to v2025.11.10

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/quay.io-pypa-manylinux2014-2025.x
• Merge into: main
• Upgrade quay.io/pypa/manylinux2014 to 2025.11.10-2

Update registry.access.redhat.com/ubi9/ubi Docker tag to v9.7-1764578509

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/registry.access.redhat.com-ubi9-ubi-9.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/ubi to 9.7-1764578509

Update registry.access.redhat.com/ubi10-minimal Docker tag to v10.1-1763362715

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/registry.access.redhat.com-ubi10-minimal-10.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi10-minimal to 10.1-1763362715

Update registry.access.redhat.com/ubi10/ubi Docker tag to v10.1-1763341459

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/registry.access.redhat.com-ubi10-ubi-10.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi10/ubi to 10.1-1763341459

Update Rust crate criterion to 0.8

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/criterion-0.x
• Merge into: main
• Upgrade criterion to 0.8

Update sigstore/cosign-installer action to v3.10.1

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/sigstore-cosign-installer-3.x
• Merge into: main
• Upgrade sigstore/cosign-installer to v3.10.1

Update actions/checkout action to v6

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to v6

Update actions/setup-node action to v6

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/actions-setup-node-6.x
• Merge into: main
• Upgrade actions/setup-node to v6

Update actions/setup-python action to v6

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: main
• Upgrade actions/setup-python to v6

Update astral-sh/setup-uv action to v7

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/astral-sh-setup-uv-7.x
• Merge into: main
• Upgrade astral-sh/setup-uv to v7

Update codecov/codecov-action action to v5

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/codecov-codecov-action-5.x
• Merge into: main
• Upgrade codecov/codecov-action to v5

Update dependency @​stylistic/stylelint-config to v3

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/stylistic-stylelint-config-3.x
• Merge into: main
• Upgrade @stylistic/stylelint-config to ^3.0.0

Update dependency codemirror to v6

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/codemirror-6.x
• Merge into: main
• Upgrade codemirror to 6.65.7

Update dependency eslint to v9

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: main
• Upgrade eslint to ^9.0.0

Update dependency eslint-plugin-n to v17

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-plugin-n-17.x
• Merge into: main
• Upgrade eslint-plugin-n to ^17.0.0

Update dependency eslint-plugin-promise to v7

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/eslint-plugin-promise-7.x
• Merge into: main
• Upgrade eslint-plugin-promise to ^7.0.0

Update dependency font-awesome to v7

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/font-awesome-7.x
• Merge into: main
• Upgrade font-awesome to 7.0.1

Update dependency keyv to v5

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/keyv-5.x
• Merge into: main
• Upgrade keyv to 5.5.4

Update dependency node to v24

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade node to 24

Update dependency stylelint-config-standard to v39

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/stylelint-config-standard-39.x
• Merge into: main
• Upgrade stylelint-config-standard to ^39.0.0

Update GitHub Artifact Actions to v5 (major)

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/upload-artifact to v5
• Upgrade actions/upload-artifact to v5.0.0

Update github/codeql-action action to v4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to v4

Update mariadb Docker tag to v12

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/mariadb-12.x
• Merge into: main
• Upgrade mariadb to 12.1

Update module github.com/shirou/gopsutil/v3 to v4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/github.com-shirou-gopsutil-v3-4.x
• Merge into: main
• Upgrade github.com/shirou/gopsutil/v3 to v4.25.11

Update postgres Docker tag to v18

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/postgres-18.x
• Merge into: main
• Upgrade postgres to 18

Update redis Docker tag to v8

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/redis-8.x
• Merge into: main
• Upgrade redis to 8-alpine

Update sigstore/cosign-installer action to v4

• Schedule: ["* 0-3 * * *"]
• Branch name: renovate/sigstore-cosign-installer-4.x
• Merge into: main
• Upgrade sigstore/cosign-installer to v4.0.0

🚸 Branch creation will be limited to maximum 1 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up galaxy-collection package ibm.cloudcollection # IBM Cloud wrapper modules
• Failed to look up galaxy-collection package kubernetes.core # k8s + helm modules
• Failed to look up git-tags package helm/k8s
• Failed to look up galaxy-collection package community.general # random-password lookup
• Failed to look up docker package ghcr.io/ibm/mcp-context-forge-chart/mcp-context-forge-chart/mcpgateway

Files affected: deployment/ansible/ibm-cloud/requirements.yml, deployment/terraform/ibm-cloud/helm_release.tf

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.