Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• Dockerfile (dockerfile)
• app2job/Dockerfile.app (dockerfile)
• app2job/Dockerfile.job (dockerfile)
• auth-oidc-proxy/auth/Dockerfile (dockerfile)
• auth-oidc-proxy/nginx/Dockerfile (dockerfile)
• auth-oidc/node/Dockerfile (dockerfile)
• auth/Dockerfile.app (dockerfile)
• auth/Dockerfile.nginx (dockerfile)
• bind-app/Dockerfile (dockerfile)
• bind-job/Dockerfile (dockerfile)
• cecli/Dockerfile (dockerfile)
• cloudant-change-listener/Dockerfile (dockerfile)
• configmaps-env/Dockerfile (dockerfile)
• configmaps-vol/Dockerfile (dockerfile)
• cos-event/Dockerfile (dockerfile)
• cos-to-sql/Dockerfile (dockerfile)
• cron/Dockerfile (dockerfile)
• cronjob/Dockerfile (dockerfile)
• daemonjob/Dockerfile (dockerfile)
• fotobox/download-app/Dockerfile (dockerfile)
• fotobox/frontend-app/Dockerfile (dockerfile)
• fruit-counter/Dockerfile (dockerfile)
• function2job/Dockerfile (dockerfile)
• gallery/app/Dockerfile (dockerfile)
• gallery/job/Dockerfile (dockerfile)
• github-action-workflows/my-docker-app/Dockerfile (dockerfile)
• github-webhook/Dockerfile.adapter (dockerfile)
• github-webhook/Dockerfile.builder (dockerfile)
• github/Dockerfile (dockerfile)
• grpc/Dockerfile.client (dockerfile)
• grpc/Dockerfile.server (dockerfile)
• hello/Dockerfile (dockerfile)
• helloworld-samples/app-python/Dockerfile (dockerfile)
• helloworld/Dockerfile (dockerfile)
• job2app/Dockerfile (dockerfile)
• job2app/Dockerfile.app (dockerfile)
• kafka-observer/Dockerfile.consumer (dockerfile)
• kafka-observer/Dockerfile.observer (dockerfile)
• kafka/Dockerfile.receiver (dockerfile)
• kafka/Dockerfile.sender (dockerfile)
• llm-translator-app/Dockerfile (dockerfile)
• logging/go-structured/Dockerfile (dockerfile)
• logging/go-unstructured/Dockerfile (dockerfile)
• logging/java-structured/Dockerfile (dockerfile)
• logging/java-unstructured/Dockerfile (dockerfile)
• logging/node-structured/Dockerfile (dockerfile)
• logging/node-unstructured/Dockerfile (dockerfile)
• logging/python-structured/Dockerfile (dockerfile)
• logging/python-unstructured/Dockerfile (dockerfile)
• metrics-collector/Dockerfile (dockerfile)
• network-test-app/Dockerfile (dockerfile)
• private-path-to-vpc-vsi/ce-app/Dockerfile (dockerfile)
• private-path-to-vpc-vsi/ce-job/Dockerfile (dockerfile)
• satellite-connector-to-vpc-vsi/ce-app/Dockerfile (dockerfile)
• satellite-connector-to-vpc-vsi/ce-job/Dockerfile (dockerfile)
• secrets-env/Dockerfile (dockerfile)
• secrets-vol/Dockerfile (dockerfile)
• serverless-fleets/tutorials/inferencing/src/Dockerfile (dockerfile)
• serverless-fleets/tutorials/simulation/Dockerfile (dockerfile)
• sessions/Dockerfile (dockerfile)
• thumbnail/eventer/Dockerfile (dockerfile)
• thumbnail/v1/Dockerfile (dockerfile)
• thumbnail/v2/Dockerfile.app (dockerfile)
• thumbnail/v2/Dockerfile.job (dockerfile)
• trusted-profiles/go/Dockerfile (dockerfile)
• trusted-profiles/java/Dockerfile (dockerfile)
• trusted-profiles/node/Dockerfile (dockerfile)
• trusted-profiles/python/Dockerfile (dockerfile)
• websocket/Dockerfile.client (dockerfile)
• websocket/Dockerfile.server (dockerfile)
• .github/workflows/dependabot-build-verify.yml (github-actions)
• .github/workflows/dependency-review.yml (github-actions)
• app-n-event-notification/go.mod (gomod)
• fotobox/download-app/go.mod (gomod)
• github-webhook/go.mod (gomod)
• grpc/go.mod (gomod)
• kafka-observer/go.mod (gomod)
• kafka/go.mod (gomod)
• logging/go-structured/go.mod (gomod)
• logging/go-unstructured/go.mod (gomod)
• metrics-collector/go.mod (gomod)
• private-path-to-vpc-vsi/ce-app/go.mod (gomod)
• satellite-connector-to-vpc-vsi/ce-app/go.mod (gomod)
• sessions/go.mod (gomod)
• thumbnail/eventer/go.mod (gomod)
• thumbnail/v1/go.mod (gomod)
• thumbnail/v2/go.mod (gomod)
• trusted-profiles/go/go.mod (gomod)
• logging/java-structured/pom.xml (maven)
• logging/java-unstructured/pom.xml (maven)
• trusted-profiles/java/pom.xml (maven)
• auth-oidc-proxy/auth/package.json (npm)
• auth-oidc/node/package.json (npm)
• cloudant-change-listener/job/package.json (npm)
• cos-to-sql/package.json (npm)
• fotobox/frontend-app/package.json (npm)
• fruit-counter/package.json (npm)
• gallery/app/package.json (npm)
• gallery/function/package.json (npm)
• gallery/job/package.json (npm)
• github-action-workflows/my-ce-app/package.json (npm)
• helloworld-samples/app-nodejs/package.json (npm)
• helloworld-samples/function-codebundle-nodejs/package.json (npm)
• helloworld-samples/function-typescript-codebundle-nodejs/package.json (npm)
• llm-translator-app/package.json (npm)
• logging/node-structured/package.json (npm)
• logging/node-unstructured/package.json (npm)
• network-test-app/package.json (npm)
• private-path-to-vpc-vsi/ce-job/package.json (npm)
• satellite-connector-to-vpc-vsi/ce-job/package.json (npm)
• trusted-profiles/node/package.json (npm)
• fruit-counter/.nvmrc (nvm)
• ai/langchain-skills-agent/src/pyproject.toml (pep621)
• ai/fastmcp-server/client/requirements.txt (pip_requirements)
• ai/fastmcp-server/server/requirements.txt (pip_requirements)
• fotobox/upload-function/requirements.txt (pip_requirements)
• github-action-workflows/my-ce-py-func/requirements.txt (pip_requirements)
• helloworld-samples/app-python/requirements.txt (pip_requirements)
• helloworld-samples/function-codebundle-python/requirements.txt (pip_requirements)
• llm-translator-app/requirements.txt (pip_requirements)
• logging/python-structured/requirements.txt (pip_requirements)
• serverless-fleets/tutorials/inferencing/src/requirements.txt (pip_requirements)
• serverless-fleets/tutorials/simulation/requirements.txt (pip_requirements)
• trusted-profiles/python/requirements.txt (pip_requirements)
• fotobox/cos-setup/provider.tf (terraform)
• fotobox/cos-setup/versions.tf (terraform)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

---

What to Expect

With your current configuration, Renovate will create 108 Pull Requests:

Update dependency langchain-core to v1.2.28 [SECURITY]

• Branch name: renovate/pypi-langchain-core-vulnerability
• Merge into: main
• Upgrade langchain-core to 1.2.28

Update dependency next to v15.5.15 [SECURITY]

• Branch name: renovate/npm-next-vulnerability
• Merge into: main
• Upgrade next to 15.5.15

Update dependency @​sveltejs/kit to v2.57.1 [SECURITY]

• Branch name: renovate/npm-sveltejs-kit-vulnerability
• Merge into: main
• Upgrade @sveltejs/kit to 2.57.1

Update dependency fast-xml-parser to v5.7.0 [SECURITY]

• Branch name: renovate/npm-fast-xml-parser-vulnerability
• Merge into: main
• Upgrade fast-xml-parser to 5.7.0

Update dependency filelock to v3.20.3 [SECURITY]

• Branch name: renovate/pypi-filelock-vulnerability
• Merge into: main
• Upgrade filelock to ==3.20.3

Update dependency requests to v2.33.0 [SECURITY]

• Branch name: renovate/pypi-requests-vulnerability
• Merge into: main
• Upgrade requests to ==2.33.0

Update dependency urllib3 to v2.6.3 [SECURITY]

• Branch name: renovate/pypi-urllib3-vulnerability
• Merge into: main
• Upgrade urllib3 to ==2.6.3

Update dependency vite to v7.3.2 [SECURITY]

• Branch name: renovate/npm-vite-vulnerability
• Merge into: main
• Upgrade vite to 7.3.2

Update dependency svelte to v5 [SECURITY]

• Branch name: renovate/npm-svelte-vulnerability
• Merge into: main
• Upgrade svelte to ^5.0.0

Update github.com/IBM/code-engine-go-sdk digest to 6348f96

• Schedule: ["at any time"]
• Branch name: renovate/github.com-ibm-code-engine-go-sdk-digest
• Merge into: main
• Upgrade github.com/IBM/code-engine-go-sdk to 6348f9644d13

Update dependency @ibm-cloud/cloudant to v0.12.19

• Schedule: ["at any time"]
• Branch name: renovate/ibm-cloud-cloudant-0.x-lockfile
• Merge into: main
• Upgrade @ibm-cloud/cloudant to 0.12.19

Update dependency @​sveltejs/vite-plugin-svelte to v6.2.4

• Schedule: ["at any time"]
• Branch name: renovate/sveltejs-vite-plugin-svelte-6.x-lockfile
• Merge into: main
• Upgrade @sveltejs/vite-plugin-svelte to 6.2.4

Update dependency body-parser to v1.20.5

• Schedule: ["at any time"]
• Branch name: renovate/body-parser-1.x-lockfile
• Merge into: main
• Upgrade body-parser to 1.20.5

Update dependency carbon-preprocess-svelte to v0.11.30

• Schedule: ["at any time"]
• Branch name: renovate/carbon-preprocess-svelte-0.x-lockfile
• Merge into: main
• Upgrade carbon-preprocess-svelte to 0.11.30

Update dependency charset-normalizer to v3.4.7

• Schedule: ["at any time"]
• Branch name: renovate/charset-normalizer-3.x
• Merge into: main
• Upgrade charset-normalizer to ==3.4.7

Update dependency csv-parser to v3.2.1

• Schedule: ["at any time"]
• Branch name: renovate/csv-parser-3.x-lockfile
• Merge into: main
• Upgrade csv-parser to 3.2.1

Update dependency ibm-cloud-sdk-core to v5.4.14

• Schedule: ["at any time"]
• Branch name: renovate/ibm-cloud-sdk-core-5.x-lockfile
• Merge into: main
• Upgrade ibm-cloud-sdk-core to 5.4.14

Update dependency lorem-ipsum to v2.0.10

• Schedule: ["at any time"]
• Branch name: renovate/lorem-ipsum-2.x
• Merge into: main
• Upgrade lorem-ipsum to 2.0.10

Update dependency lorem-ipsum to v2.0.10

• Schedule: ["at any time"]
• Branch name: renovate/lorem-ipsum-2.x-lockfile
• Merge into: main
• Upgrade lorem-ipsum to 2.0.10

Update dependency MarkupSafe to v3.0.3

• Schedule: ["at any time"]
• Branch name: renovate/markupsafe-3.x
• Merge into: main
• Upgrade MarkupSafe to ==3.0.3

Update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-shade-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-shade-plugin to 3.6.2

Update dependency PyYAML to v6.0.3

• Schedule: ["at any time"]
• Branch name: renovate/pyyaml-6.x
• Merge into: main
• Upgrade PyYAML to ==6.0.3

Update dependency serve-favicon to v2.5.1

• Schedule: ["at any time"]
• Branch name: renovate/serve-favicon-2.x-lockfile
• Merge into: main
• Upgrade serve-favicon to 2.5.1

Update dependency tqdm to v4.67.3

• Schedule: ["at any time"]
• Branch name: renovate/tqdm-4.x
• Merge into: main
• Upgrade tqdm to ==4.67.3

Update module github.com/gin-contrib/cors to v1.7.7

• Schedule: ["at any time"]
• Branch name: renovate/github.com-gin-contrib-cors-1.x
• Merge into: main
• Upgrade github.com/gin-contrib/cors to v1.7.7

Update module github.com/go-logr/logr to v1.4.3

• Schedule: ["at any time"]
• Branch name: renovate/github.com-go-logr-logr-1.x
• Merge into: main
• Upgrade github.com/go-logr/logr to v1.4.3

Update module github.com/gorilla/mux to v1.8.1

• Schedule: ["at any time"]
• Branch name: renovate/github.com-gorilla-mux-1.x
• Merge into: main
• Upgrade github.com/gorilla/mux to v1.8.1

Update module google.golang.org/protobuf to v1.36.11

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-protobuf-1.x
• Merge into: main
• Upgrade google.golang.org/protobuf to v1.36.11

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.25.9-1778054913

• Schedule: ["at any time"]
• Branch name: renovate/registry.access.redhat.com-ubi9-go-toolset-1.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/go-toolset to 1.25.9-1778054913

Update dependency @​carbon/react to v1.107.0

• Schedule: ["at any time"]
• Branch name: renovate/carbon-react-1.x-lockfile
• Merge into: main
• Upgrade @carbon/react to 1.107.0

Update dependency @ibm-cloud/ibm-code-engine-sdk to ^4.35.0

• Schedule: ["at any time"]
• Branch name: renovate/ibm-cloud-ibm-code-engine-sdk-4.x
• Merge into: main
• Upgrade @ibm-cloud/ibm-code-engine-sdk to ^4.35.0

Update dependency @ibm-cloud/secrets-manager to v2.1.4

• Schedule: ["at any time"]
• Branch name: renovate/ibm-cloud-secrets-manager-2.x-lockfile
• Merge into: main
• Upgrade @ibm-cloud/secrets-manager to 2.1.4

Update dependency @​rollup/rollup-linux-x64-gnu to v4.60.3

• Schedule: ["at any time"]
• Branch name: renovate/rollup-rollup-linux-x64-gnu-4.x
• Merge into: main
• Upgrade @rollup/rollup-linux-x64-gnu to 4.60.3

Update dependency @​sveltejs/adapter-node to v5.5.4

• Schedule: ["at any time"]
• Branch name: renovate/sveltejs-adapter-node-5.x-lockfile
• Merge into: main
• Upgrade @sveltejs/adapter-node to 5.5.4

Update dependency @​types/node to v20.19.39

• Schedule: ["at any time"]
• Branch name: renovate/node-20.x
• Merge into: main
• Upgrade @types/node to 20.19.39

Update dependency accelerate to v1.13.0

• Schedule: ["at any time"]
• Branch name: renovate/accelerate-1.x
• Merge into: main
• Upgrade accelerate to ==1.13.0

Update dependency carbon-components-svelte to ^0.107.0

• Schedule: ["at any time"]
• Branch name: renovate/carbon-components-svelte-0.x
• Merge into: main
• Upgrade carbon-components-svelte to ^0.107.0

Update dependency carbon-icons-svelte to v12.23.0

• Schedule: ["at any time"]
• Branch name: renovate/carbon-icons-svelte-12.x-lockfile
• Merge into: main
• Upgrade carbon-icons-svelte to 12.23.0

Update dependency certifi to v2025.11.12

• Schedule: ["at any time"]
• Branch name: renovate/certifi-2025.x
• Merge into: main
• Upgrade certifi to ==2025.11.12

Update dependency com.ibm.cloud:sdk-core to v9.25.0

• Schedule: ["at any time"]
• Branch name: renovate/com.ibm.cloud-sdk-core-9.x
• Merge into: main
• Upgrade com.ibm.cloud:sdk-core to 9.25.0

Update dependency express to v4.22.1

• Schedule: ["at any time"]
• Branch name: renovate/express-4.x-lockfile
• Merge into: main
• Upgrade express to 4.22.1

Update dependency express to v5.2.1

• Schedule: ["at any time"]
• Branch name: renovate/express-5.x-lockfile
• Merge into: main
• Upgrade express to 5.2.1

Update dependency fsspec to v2025.12.0

• Schedule: ["at any time"]
• Branch name: renovate/fsspec-2025.x
• Merge into: main
• Upgrade fsspec to ==2025.12.0

Update dependency hf-xet to v1.5.0

• Schedule: ["at any time"]
• Branch name: renovate/hf-xet-1.x
• Merge into: main
• Upgrade hf-xet to ==1.5.0

Update dependency huggingface-hub to v0.36.2

• Schedule: ["at any time"]
• Branch name: renovate/huggingface-hub-0.x
• Merge into: main
• Upgrade huggingface-hub to ==0.36.2

Update dependency idna to v3.13

• Schedule: ["at any time"]
• Branch name: renovate/idna-3.x
• Merge into: main
• Upgrade idna to ==3.13

Update dependency mermaid to v11.14.0

• Schedule: ["at any time"]
• Branch name: renovate/mermaid-11.x-lockfile
• Merge into: main
• Upgrade mermaid to 11.14.0

Update dependency mpmath to v1.4.1

• Schedule: ["at any time"]
• Branch name: renovate/mpmath-1.x
• Merge into: main
• Upgrade mpmath to ==1.4.1

Update dependency networkx to v3.6.1

• Schedule: ["at any time"]
• Branch name: renovate/networkx-3.x
• Merge into: main
• Upgrade networkx to ==3.6.1

Update dependency numpy to v2.4.4

• Schedule: ["at any time"]
• Branch name: renovate/numpy-2.x
• Merge into: main
• Upgrade numpy to ==2.4.4

Update dependency org.apache.maven.plugins:maven-clean-plugin to v3.5.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-clean-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-clean-plugin to 3.5.0

Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-compiler-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.15.0

Update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-jar-plugin-3.x
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-jar-plugin to 3.5.0

Update dependency pg to v8.20.0

• Schedule: ["at any time"]
• Branch name: renovate/pg-8.x-lockfile
• Merge into: main
• Upgrade pg to 8.20.0

Update dependency pg-connection-string to v2.12.0

• Schedule: ["at any time"]
• Branch name: renovate/pg-connection-string-2.x-lockfile
• Merge into: main
• Upgrade pg-connection-string to 2.12.0

Update dependency psutil to v7.2.2

• Schedule: ["at any time"]
• Branch name: renovate/psutil-7.x
• Merge into: main
• Upgrade psutil to ==7.2.2

Update dependency safetensors to v0.7.0

• Schedule: ["at any time"]
• Branch name: renovate/safetensors-0.x
• Merge into: main
• Upgrade safetensors to ==0.7.0

Update dependency standard to v17.1.2

• Schedule: ["at any time"]
• Branch name: renovate/standard-17.x-lockfile
• Merge into: main
• Upgrade standard to 17.1.2

Update dependency tokenizers to v0.23.1

• Schedule: ["at any time"]
• Branch name: renovate/tokenizers-0.x
• Merge into: main
• Upgrade tokenizers to ==0.23.1

Update dependency torch to v2.11.0

• Schedule: ["at any time"]
• Branch name: renovate/torch-2.x
• Merge into: main
• Upgrade torch to ==2.11.0

Update dependency transformers to v5.8.0

• Schedule: ["at any time"]
• Branch name: renovate/transformers-5.x
• Merge into: main
• Upgrade transformers to v5.8.0

Update dependency typescript to v5.9.3

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x
• Merge into: main
• Upgrade typescript to 5.9.3

Update dependency typing_extensions to v4.15.0

• Schedule: ["at any time"]
• Branch name: renovate/typing_extensions-4.x
• Merge into: main
• Upgrade typing_extensions to ==4.15.0

Update dependency uvicorn to v0.46.0

• Schedule: ["at any time"]
• Branch name: renovate/uvicorn-0.x
• Merge into: main
• Upgrade uvicorn to ==0.46.0

Update dependency winston to v3.19.0

• Schedule: ["at any time"]
• Branch name: renovate/winston-3.x-lockfile
• Merge into: main
• Upgrade winston to 3.19.0

Update kubernetes monorepo to v0.36.0

• Schedule: ["at any time"]
• Branch name: renovate/kubernetes-monorepo
• Merge into: main
• Upgrade k8s.io/api to v0.36.0
• Upgrade k8s.io/apimachinery to v0.36.0
• Upgrade k8s.io/client-go to v0.36.0
• Upgrade k8s.io/kubectl to v0.36.0
• Upgrade k8s.io/metrics to v0.36.0

Update module github.com/gin-gonic/gin to v1.12.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-gin-gonic-gin-1.x
• Merge into: main
• Upgrade github.com/gin-gonic/gin to v1.12.0

Update module github.com/go-openapi/strfmt to v0.26.2

• Schedule: ["at any time"]
• Branch name: renovate/go-openapi
• Merge into: main
• Upgrade github.com/go-openapi/strfmt to v0.26.2

Update module github.com/go-playground/webhooks/v6 to v6.4.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-go-playground-webhooks-v6-6.x
• Merge into: main
• Upgrade github.com/go-playground/webhooks/v6 to v6.4.0

Update module github.com/IBM/event-notifications-go-admin-sdk to v0.24.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-ibm-event-notifications-go-admin-sdk-0.x
• Merge into: main
• Upgrade github.com/IBM/event-notifications-go-admin-sdk to v0.24.0

Update module github.com/IBM/go-sdk-core/v5 to v5.21.2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-ibm-go-sdk-core-v5-5.x
• Merge into: main
• Upgrade github.com/IBM/go-sdk-core/v5 to v5.21.2

Update module github.com/IBM/ibm-cos-sdk-go to v1.14.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-ibm-ibm-cos-sdk-go-1.x
• Merge into: main
• Upgrade github.com/IBM/ibm-cos-sdk-go to v1.14.0

Update module github.com/IBM/sarama to v1.48.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-ibm-sarama-1.x
• Merge into: main
• Upgrade github.com/IBM/sarama to v1.48.0

Update module github.com/lib/pq to v1.12.3

• Schedule: ["at any time"]
• Branch name: renovate/github.com-lib-pq-1.x
• Merge into: main
• Upgrade github.com/lib/pq to v1.12.3

Update module github.com/redis/go-redis/v9 to v9.19.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-redis-go-redis-v9-9.x
• Merge into: main
• Upgrade github.com/redis/go-redis/v9 to v9.19.0

Update module github.com/shipwright-io/build to v0.19.3

• Schedule: ["at any time"]
• Branch name: renovate/github.com-shipwright-io-build-0.x
• Merge into: main
• Upgrade github.com/shipwright-io/build to v0.19.3

Update module go.uber.org/zap to v1.28.0

• Schedule: ["at any time"]
• Branch name: renovate/go.uber.org-zap-1.x
• Merge into: main
• Upgrade go.uber.org/zap to v1.28.0

Update module google.golang.org/grpc to v1.81.0

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-grpc-1.x
• Merge into: main
• Upgrade google.golang.org/grpc to v1.81.0

Update module knative.dev/serving to v0.49.0

• Schedule: ["at any time"]
• Branch name: renovate/knative.dev-serving-0.x
• Merge into: main
• Upgrade knative.dev/serving to v0.49.0

Update Python

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to >=3.14,<3.15
• Upgrade python to 3.14-slim-bookworm

Update pytorch/pytorch Docker tag to v2.11.0

• Schedule: ["at any time"]
• Branch name: renovate/pytorch-pytorch-2.x
• Merge into: main
• Upgrade pytorch/pytorch to 2.11.0-cuda13.0-cudnn9-devel

Update quay.io/projectquay/golang Docker tag to v1.26

• Schedule: ["at any time"]
• Branch name: renovate/quay.io-projectquay-golang-1.x
• Merge into: main
• Upgrade quay.io/projectquay/golang to 1.26

Update react monorepo

• Schedule: ["at any time"]
• Branch name: renovate/react-monorepo
• Merge into: main
• Upgrade @types/react to 18.3.28
• Upgrade react to 18.3.1

Update Terraform ibm to v1.89.0

• Schedule: ["at any time"]
• Branch name: renovate/ibm-1.x
• Merge into: main
• Upgrade ibm to 1.89.0

Update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to v6

Update actions/dependency-review-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-dependency-review-action-4.x
• Merge into: main
• Upgrade actions/dependency-review-action to v4.9.0

Update dependency @ibm-cloud/ibm-code-engine-sdk to v6

• Schedule: ["at any time"]
• Branch name: renovate/ibm-cloud-ibm-code-engine-sdk-6.x
• Merge into: main
• Upgrade @ibm-cloud/ibm-code-engine-sdk to ^6.0.0

Update dependency @​sveltejs/adapter-auto to v7

• Schedule: ["at any time"]
• Branch name: renovate/sveltejs-adapter-auto-7.x
• Merge into: main
• Upgrade @sveltejs/adapter-auto to ^7.0.0

Update dependency @​sveltejs/vite-plugin-svelte to v7

• Schedule: ["at any time"]
• Branch name: renovate/sveltejs-vite-plugin-svelte-7.x
• Merge into: main
• Upgrade @sveltejs/vite-plugin-svelte to ^7.0.0

Update dependency body-parser to v2

• Schedule: ["at any time"]
• Branch name: renovate/body-parser-2.x
• Merge into: main
• Upgrade body-parser to ^2.0.0

Update dependency carbon-icons-svelte to v13

• Schedule: ["at any time"]
• Branch name: renovate/carbon-icons-svelte-13.x
• Merge into: main
• Upgrade carbon-icons-svelte to ^13.0.0

Update dependency certifi to v2026

• Schedule: ["at any time"]
• Branch name: renovate/certifi-2026.x
• Merge into: main
• Upgrade certifi to ==2026.4.22

Update dependency concurrently to v9

• Schedule: ["at any time"]
• Branch name: renovate/concurrently-9.x
• Merge into: main
• Upgrade concurrently to ^9.0.0

Update dependency ejs to v5

• Schedule: ["at any time"]
• Branch name: renovate/ejs-5.x
• Merge into: main
• Upgrade ejs to ^5.0.0

Update dependency express to v5

• Schedule: ["at any time"]
• Branch name: renovate/express-5.x
• Merge into: main
• Upgrade express to ^5.0.0

Update dependency fsspec to v2026

• Schedule: ["at any time"]
• Branch name: renovate/fsspec-2026.x
• Merge into: main
• Upgrade fsspec to ==2026.4.0

Update dependency huggingface-hub to v1

• Schedule: ["at any time"]
• Branch name: renovate/huggingface-hub-1.x
• Merge into: main
• Upgrade huggingface-hub to ==1.14.0

Update dependency lorem-ipsum to v3

• Schedule: ["at any time"]
• Branch name: renovate/lorem-ipsum-3.x
• Merge into: main
• Upgrade lorem-ipsum to ^3.0.0
• Upgrade lorem-ipsum to 3.0.0

Update dependency lru-cache to v11

• Schedule: ["at any time"]
• Branch name: renovate/lru-cache-11.x-lockfile
• Merge into: main
• Upgrade lru-cache to 11.3.6

Update dependency packaging to v26

• Schedule: ["at any time"]
• Branch name: renovate/packaging-26.x
• Merge into: main
• Upgrade packaging to ==26.2

Update dependency regex to v2026

• Schedule: ["at any time"]
• Branch name: renovate/regex-2026.x
• Merge into: main
• Upgrade regex to ==2026.4.4

Update dependency typescript to v6

• Schedule: ["at any time"]
• Branch name: renovate/typescript-6.x
• Merge into: main
• Upgrade typescript to 6.0.3
• Upgrade typescript to ^6.0.0

Update module github.com/IBM/secrets-manager-go-sdk to v2

• Schedule: ["at any time"]
• Branch name: renovate/github.com-ibm-secrets-manager-go-sdk-2.x
• Merge into: main
• Upgrade github.com/IBM/secrets-manager-go-sdk to v2.0.20

Update module gopkg.in/yaml.v2 to v3

• Schedule: ["at any time"]
• Branch name: renovate/gopkg.in-yaml.v2-3.x
• Merge into: main
• Upgrade gopkg.in/yaml.v2 to v3.0.1

Update Node.js to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade node to 24
• Upgrade node to ^24.0.0
• Upgrade @types/node to 24.12.2

Update react monorepo to v19 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-react-monorepo
• Merge into: main
• Upgrade @types/react to 19.2.14
• Upgrade react to 19.2.6

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v9

• Schedule: ["at any time"]
• Branch name: renovate/registry.access.redhat.com-ubi9-go-toolset-9.x
• Merge into: main
• Upgrade registry.access.redhat.com/ubi9/go-toolset to 9.7-1778054913

Update Terraform ibm to v2

• Schedule: ["at any time"]
• Branch name: renovate/ibm-2.x
• Merge into: main
• Upgrade ibm to 2.1.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Renovate is disabled

Renovate is disabled because the onboarding PR has been unmerged for more than 366 days. To enable Renovate, you can either (a) change this PR's title to get a new onboarding PR, and merge the new onboarding PR, or (b) create a Renovate config file, and commit that file to your base branch.