Configure Renovate

[knostic-renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• libs/openant-core/utilities/dynamic_tester/docker_templates/go.Dockerfile (dockerfile)
• libs/openant-core/utilities/dynamic_tester/docker_templates/node.Dockerfile (dockerfile)
• libs/openant-core/utilities/dynamic_tester/docker_templates/python.Dockerfile (dockerfile)
• .github/workflows/gitleaks.yaml (github-actions)
• .github/workflows/test.yaml (github-actions)
• apps/openant-cli/go.mod (gomod)
• libs/openant-core/parsers/go/go_parser/go.mod (gomod)
• libs/openant-core/parsers/javascript/package.json (npm)
• libs/openant-core/pyproject.toml (pep621)
• libs/openant-core/requirements.txt (pip_requirements)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 32 Pull Requests:

chore(deps): update actions/checkout digest to 11bd719

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-digest
• Merge into: master
• Upgrade actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683

chore(deps): update dependency python-dotenv to v1.2.3

• Schedule: ["at any time"]
• Branch name: renovate/python-dotenv-1.x
• Merge into: master
• Upgrade python-dotenv to ==1.2.3

chore(deps): update dependency typing-inspection to v0.4.4

• Schedule: ["at any time"]
• Branch name: renovate/typing-inspection-0.x
• Merge into: master
• Upgrade typing-inspection to ==0.4.4

fix(deps): update dependency @​typescript/vfs to v1.6.4

• Schedule: ["at any time"]
• Branch name: renovate/typescript-vfs-1.x-lockfile
• Merge into: master
• Upgrade @typescript/vfs to 1.6.4

fix(deps): update module github.com/charmbracelet/x/term to v0.2.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-charmbracelet-x-term-0.x
• Merge into: master
• Upgrade github.com/charmbracelet/x/term to v0.2.2

fix(deps): update module github.com/mattn/go-isatty to v0.0.24

• Schedule: ["at any time"]
• Branch name: renovate/github.com-mattn-go-isatty-0.x
• Merge into: master
• Upgrade github.com/mattn/go-isatty to v0.0.24

chore(deps): update actions/checkout action to v4.4.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: master
• Upgrade actions/checkout to 11d5960a326750d5838078e36cf38b85af677262

chore(deps): update dependency annotated-types to v0.8.0

• Schedule: ["at any time"]
• Branch name: renovate/annotated-types-0.x
• Merge into: master
• Upgrade annotated-types to ==0.8.0

chore(deps): update dependency anthropic to v0.122.0

• Schedule: ["at any time"]
• Branch name: renovate/anthropic-0.x
• Merge into: master
• Upgrade anthropic to ==0.122.0

chore(deps): update dependency anyio to v4.14.2

• Schedule: ["at any time"]
• Branch name: renovate/anyio-4.x
• Merge into: master
• Upgrade anyio to ==4.14.2

chore(deps): update dependency docstring_parser to v0.18.0

• Schedule: ["at any time"]
• Branch name: renovate/docstring_parser-0.x
• Merge into: master
• Upgrade docstring_parser to ==0.18.0

chore(deps): update dependency google-genai to v2.18.1

• Schedule: ["at any time"]
• Branch name: renovate/google-genai-2.x
• Merge into: master
• Upgrade google-genai to ==2.18.1

chore(deps): update dependency idna to v3.19

• Schedule: ["at any time"]
• Branch name: renovate/idna-3.x
• Merge into: master
• Upgrade idna to ==3.19

chore(deps): update dependency jiter to v0.16.0

• Schedule: ["at any time"]
• Branch name: renovate/jiter-0.x
• Merge into: master
• Upgrade jiter to ==0.16.0

chore(deps): update dependency openai to v2.54.0

• Schedule: ["at any time"]
• Branch name: renovate/openai-2.x
• Merge into: master
• Upgrade openai to ==2.54.0

chore(deps): update dependency pydantic to v2.13.4

• Schedule: ["at any time"]
• Branch name: renovate/pydantic-2.x
• Merge into: master
• Upgrade pydantic to ==2.13.4

chore(deps): update dependency pydantic_core to v2.48.0

• Schedule: ["at any time"]
• Branch name: renovate/pydantic_core-2.x
• Merge into: master
• Upgrade pydantic_core to ==2.48.0

chore(deps): update dependency python

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to 3.14
• Upgrade python to 3.14-slim

chore(deps): update dependency typing_extensions to v4.16.0

• Schedule: ["at any time"]
• Branch name: renovate/typing_extensions-4.x
• Merge into: master
• Upgrade typing_extensions to ==4.16.0

chore(deps): update golang docker tag to v1.26

• Schedule: ["at any time"]
• Branch name: renovate/golang-1.x
• Merge into: master
• Upgrade golang to 1.26-alpine

fix(deps): update module github.com/fatih/color to v1.19.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-fatih-color-1.x
• Merge into: master
• Upgrade github.com/fatih/color to v1.19.0

chore(deps): update actions/cache action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-6.x
• Merge into: master
• Upgrade actions/cache to v6

chore(deps): update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: master
• Upgrade actions/checkout to v7
• Upgrade actions/checkout to 3d3c42e5aac5ba805825da76410c181273ba90b1

chore(deps): update actions/setup-go action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-7.x
• Merge into: master
• Upgrade actions/setup-go to v7

chore(deps): update actions/setup-node action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-7.x
• Merge into: master
• Upgrade actions/setup-node to v7

chore(deps): update actions/setup-python action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-7.x
• Merge into: master
• Upgrade actions/setup-python to v7

chore(deps): update dependency certifi to v2026

• Schedule: ["at any time"]
• Branch name: renovate/certifi-2026.x
• Merge into: master
• Upgrade certifi to ==2026.7.22

chore(deps): update dependency node to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: master
• Upgrade node to 24
• Upgrade node to 24-slim

chore(deps): update dependency openai to v3

• Schedule: ["at any time"]
• Branch name: renovate/openai-3.x
• Merge into: master
• Upgrade openai to ==3.2.0

fix(deps): update dependency ts-morph to v28

• Schedule: ["at any time"]
• Branch name: renovate/ts-morph-28.x
• Merge into: master
• Upgrade ts-morph to ^28.0.0

fix(deps): update dependency typescript to v7

• Schedule: ["at any time"]
• Branch name: renovate/typescript-7.x
• Merge into: master
• Upgrade typescript to ^7.0.0

fix(deps): update module github.com/charmbracelet/huh to v2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-charmbracelet-huh-2.x
• Merge into: master
• Upgrade github.com/charmbracelet/huh to v2.0.3

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.

[gadievron]

Hardened this onboarding config so it actually works.

Fix: extends pointed at local>knostic/renovate-config, which does not exist (gh api repos/knostic/renovate-config → 404; absent from the org repo list) — a fatal Renovate config-validation error on every run once the (already-installed) app activates. Switched to the built-in config:recommended preset.

Decision for a maintainer:

• Option A (this commit): self-contained config:recommended — works out of the box.
• Option B: if a centralized org preset is intended, create knostic/renovate-config first, then revert to local>knostic/renovate-config.

Optional hardenings (not included — your call): for a vuln-discovery tool, a silent LLM-SDK (anthropic/openai/google-genai) or tree-sitter grammar bump can shift parser output / analysis soundness — consider dependencyDashboardApproval: true on their major updates; and helpers:pinGitHubActionDigests to match the org SHA-pin discipline.

Note: renovate-config-validator is schema-only and passed the broken config too; the defect was the runtime preset 404. Merging activates Renovate (~29 dependency PRs will open). Leaving the merge decision to a maintainer.