Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• Containerfile (dockerfile)
• Containerfile.llama-stack (dockerfile)
• .github/workflows/ci.yaml (github-actions)
• .github/workflows/image.yaml (github-actions)
• skeleton/github-action/.github/workflows/automerge.yml (github-actions)
• e2e/package.json (npm)
• pyproject.toml (pep621)
• .python-version (pyenv)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 17 Pull Requests:

Update registry.access.redhat.com/ubi9/python-312-minimal:9.7 Docker digest to 445709d

• Schedule: ["at any time"]
• Branch name: renovate/registry.access.redhat.com-ubi9-python-312-minimal-9.7
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/python-312-minimal to sha256:445709dc989a00efecaa10244f5c502ecb1604b5b1fbb8fe21e9e9ffb3e36254

Update registry.access.redhat.com/ubi9/python-312:9.7 Docker digest to ff373f4

• Schedule: ["at any time"]
• Branch name: renovate/registry.access.redhat.com-ubi9-python-312-9.7
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/python-312 to sha256:ff373f4b42b662e99954adea770ca87b4ea963186cc752174ccb94aa08fa702d

Update actions/checkout action to v5.0.1

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-5.x
• Merge into: main
• Upgrade actions/checkout to 93cb6efe18208431cddfb8368fd83d5badbf9bfd

Update actions/checkout action to v6.0.3

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to df4cb1c069e1874edd31b4311f1884172cec0e10

Update dependency @​backstage/plugin-scaffolder-common to v1.7.6

• Schedule: ["at any time"]
• Branch name: renovate/backstage-monorepo
• Merge into: main
• Upgrade @backstage/plugin-scaffolder-common to 1.7.6

Update dependency ts-jest to v29.4.11

• Schedule: ["at any time"]
• Branch name: renovate/ts-jest-29.x-lockfile
• Merge into: main
• Upgrade ts-jest to 29.4.11

Update astral-sh/setup-uv action to v7.6.0

• Schedule: ["at any time"]
• Branch name: renovate/astral-sh-setup-uv-7.x
• Merge into: main
• Upgrade astral-sh/setup-uv to 37802adc94f370d6bfd71619e3f0bf239e1f3b78

Update dependency @​types/node to v25.9.5

• Schedule: ["at any time"]
• Branch name: renovate/node-25.x-lockfile
• Merge into: main
• Upgrade @types/node to 25.9.5

Update dependency axios to v1.18.1

• Schedule: ["at any time"]
• Branch name: renovate/axios-1.x-lockfile
• Merge into: main
• Upgrade axios to 1.18.1

Update jest monorepo to v30.4.1

• Schedule: ["at any time"]
• Branch name: renovate/jest-monorepo
• Merge into: main
• Upgrade @jest/globals to 30.4.1
• Upgrade jest to 30.4.2

Update python Docker tag to v3.14

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14

Update registry.access.redhat.com/ubi9/python-312 Docker tag to v9.8-1783442686

• Schedule: ["at any time"]
• Branch name: renovate/registry.access.redhat.com-ubi9-python-312-9.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/python-312 to sha256:c40a6d1ce9403c6bc2cc36f0c65c5cb18869e3432e95b29807fea2febdc3ce11

Update registry.access.redhat.com/ubi9/python-312-minimal Docker tag to v9.8-1782830872

• Schedule: ["at any time"]
• Branch name: renovate/registry.access.redhat.com-ubi9-python-312-minimal-9.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/python-312-minimal to sha256:2eef57a47c201792a5c6188800c88660a4dcc57b2d60f8874f618e694067d4f9

Update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: main
• Upgrade actions/checkout to 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

Update astral-sh/setup-uv action to v8

• Schedule: ["at any time"]
• Branch name: renovate/astral-sh-setup-uv-8.x
• Merge into: main
• Upgrade astral-sh/setup-uv to 11f9893b081a58869d3b5fccaea48c9e9e46f990

Update dependency @​backstage/plugin-scaffolder-common to v2

• Schedule: ["at any time"]
• Branch name: renovate/major-backstage-monorepo
• Merge into: main
• Upgrade @backstage/plugin-scaffolder-common to ^2.0.0

Update dependency typescript to v7

• Schedule: ["at any time"]
• Branch name: renovate/typescript-7.x
• Merge into: main
• Upgrade typescript to ^7.0.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[gabemontero]

So

make ty
uvx ty check src streamlit_app.py

fails with this change @thepetk @maysunfaisal @michael-valdron

first blush, no idea why this would fail with adding a renovate config, but I'm not familiar with the impact of such a thing

we should probably run against main branch, fix anything there if that is where the problem is, and then rebase this

if this is somehow the cause of the failures, need to diagnose somehow ... unless one of you would know why, maybe we need to point some AI at it

[michael-valdron]

So

make ty
uvx ty check src streamlit_app.py

fails with this change @thepetk @maysunfaisal @michael-valdron

first blush, no idea why this would fail with adding a renovate config, but I'm not familiar with the impact of such a thing

we should probably run against main branch, fix anything there if that is where the problem is, and then rebase this

if this is somehow the cause of the failures, need to diagnose somehow ... unless one of you would know why, maybe we need to point some AI at it

@gabemontero Might be worth seeing if it fails on main, might be just degraded.

[gabemontero]

yep I can reproduce on main branch

attempting to craft a fix