Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• pom.xml (maven)
• sonar-csharp-core/pom.xml (maven)
• sonar-csharp-plugin/pom.xml (maven)
• sonar-dotnet-core/pom.xml (maven)
• sonar-vbnet-core/pom.xml (maven)
• sonar-vbnet-plugin/pom.xml (maven)
• analyzers/CodeAnalysis.targets (nuget)
• analyzers/global.json (nuget)
• analyzers/src/RuleDescriptorGenerator/RuleDescriptorGenerator.csproj (nuget)
• analyzers/src/SonarAnalyzer.CFG/SonarAnalyzer.CFG.csproj (nuget)
• analyzers/src/SonarAnalyzer.CSharp.Core/SonarAnalyzer.CSharp.Core.csproj (nuget)
• analyzers/src/SonarAnalyzer.CSharp.Styling/SonarAnalyzer.CSharp.Styling.csproj (nuget)
• analyzers/src/SonarAnalyzer.CSharp/SonarAnalyzer.CSharp.csproj (nuget)
• analyzers/src/SonarAnalyzer.Core/SonarAnalyzer.Core.csproj (nuget)
• analyzers/src/SonarAnalyzer.ShimLayer.CodeGeneration/SonarAnalyzer.ShimLayer.CodeGeneration.csproj (nuget)
• analyzers/src/SonarAnalyzer.ShimLayer/SonarAnalyzer.ShimLayer.csproj (nuget)
• analyzers/src/SonarAnalyzer.SourceGenerators/SonarAnalyzer.SourceGenerators.csproj (nuget)
• analyzers/src/SonarAnalyzer.VisualBasic.Core/SonarAnalyzer.VisualBasic.Core.csproj (nuget)
• analyzers/src/SonarAnalyzer.VisualBasic/SonarAnalyzer.VisualBasic.csproj (nuget)
• analyzers/tests/SonarAnalyzer.CSharp.Core.Test/SonarAnalyzer.CSharp.Core.Test.csproj (nuget)
• analyzers/tests/SonarAnalyzer.CSharp.Styling.Test/SonarAnalyzer.CSharp.Styling.Test.csproj (nuget)
• analyzers/tests/SonarAnalyzer.Core.Test/SonarAnalyzer.Core.Test.csproj (nuget)
• analyzers/tests/SonarAnalyzer.Test/SonarAnalyzer.Test.csproj (nuget)
• analyzers/tests/SonarAnalyzer.TestFramework.Test/SonarAnalyzer.TestFramework.Test.csproj (nuget)
• analyzers/tests/SonarAnalyzer.TestFramework/SonarAnalyzer.TestFramework.csproj (nuget)
• analyzers/tests/SonarAnalyzer.VisualBasic.Core.Test/SonarAnalyzer.VisualBasic.Core.Test.csproj (nuget)
• sonar-dotnet-core/src/test/resources/RazorProtobufImporter/Roslyn 4.10/global.json (nuget)
• sonar-dotnet-core/src/test/resources/RazorProtobufImporter/Roslyn 4.9/global.json (nuget)
• sonar-dotnet-core/src/test/resources/RazorProtobufImporter/WebProject/BlazorWebAssembly.csproj (nuget)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Evaluate schedules according to timezone CET.
• Schedule during typical non-office hours on weekdays (i.e., 10 PM - 5 AM) and anytime on weekends.
• Remove hourly and concurrent rate limits.
• Disable Renovate Dependency Dashboard creation.
• Rebase existing PRs any time the base branch has been updated.
• Run Renovate on following schedule: * 0-4,22-23 * * 1-5,* * * * 0,6

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 29 Pull Requests:

Update dependency Google.Protobuf to 3.15.0 [SECURITY]

• Branch name: renovate/nuget-google.protobuf-vulnerability
• Merge into: master
• Upgrade Google.Protobuf to 3.15.0

Update dependency FluentAssertions to 6.12.2

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/fluentassertions-6.x
• Merge into: master
• Upgrade FluentAssertions to 6.12.2

Update dependency Microsoft.Composition to 1.0.31

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/microsoft.composition-1.x
• Merge into: master
• Upgrade Microsoft.Composition to 1.0.31

Update dotnet monorepo

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/dotnet-monorepo
• Merge into: master
• Upgrade Microsoft.AspNetCore.Components.WebAssembly to 8.0.11
• Upgrade Microsoft.AspNetCore.Components.WebAssembly.DevServer to 8.0.11
• Upgrade Microsoft.AspNetCore.WebUtilities to 8.0.11
• Upgrade Microsoft.CodeAnalysis.CSharp to 4.12.0
• Upgrade Microsoft.CodeAnalysis.CSharp.Workspaces to 4.12.0
• Upgrade Microsoft.CodeAnalysis.VisualBasic.Workspaces to 4.12.0
• Upgrade Microsoft.CodeAnalysis.Workspaces.Common to 4.12.0
• Upgrade Microsoft.CodeAnalysis.Workspaces.MSBuild to 4.12.0
• Upgrade dotnet-sdk to 8.0.404
• Upgrade dotnet-sdk to 9.0.101

Update dependency FluentAssertions.Analyzers to 0.34.1

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/fluentassertions.analyzers-0.x
• Merge into: master
• Upgrade FluentAssertions.Analyzers to 0.34.1

Update dependency Fody to 6.9.1

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/fody-6.x
• Merge into: master
• Upgrade Fody to 6.9.1

Update dependency Google.Protobuf.Tools to 3.29.0

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/google.protobuf.tools-3.x
• Merge into: master
• Upgrade Google.Protobuf.Tools to 3.29.0

Update dependency Grpc.Tools to 2.68.1

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/grpc.tools-2.x
• Merge into: master
• Upgrade Grpc.Tools to 2.68.1

Update dependency Microsoft.Build.Locator to 1.7.8

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/microsoft.build.locator-1.x
• Merge into: master
• Upgrade Microsoft.Build.Locator to 1.7.8

Update dependency Microsoft.CodeAnalysis.Analyzers to 3.11.0

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/microsoft.codeanalysis.analyzers-3.x
• Merge into: master
• Upgrade Microsoft.CodeAnalysis.Analyzers to 3.11.0

Update dependency Microsoft.NET.Test.Sdk to 17.12.0

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/vstest-monorepo
• Merge into: master
• Upgrade Microsoft.NET.Test.Sdk to 17.12.0

Update dependency NSubstitute to 5.3.0

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/nsubstitute-5.x
• Merge into: master
• Upgrade NSubstitute to 5.3.0

Update dependency NuGet.Protocol to 6.12.1

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/nuget.protocol-6.x
• Merge into: master
• Upgrade NuGet.Protocol to 6.12.1

Update dependency SonarAnalyzer.CSharp.Styling to 9.32.0.97167

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/sonaranalyzer.csharp.styling-9.x
• Merge into: master
• Upgrade SonarAnalyzer.CSharp.Styling to 9.32.0.97167

Update dependency System.Collections.Immutable to 1.7.1

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/system.collections.immutable-1.x
• Merge into: master
• Upgrade System.Collections.Immutable to 1.7.1

Update dependency altcover to 8.9.3

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/altcover-8.x
• Merge into: master
• Upgrade altcover to 8.9.3

Update dependency commons-io:commons-io to v2.18.0

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/commons-io-commons-io-2.x
• Merge into: master
• Upgrade commons-io:commons-io to 2.18.0

Update mstest monorepo to 3.6.4

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/mstest-monorepo
• Merge into: master
• Upgrade MSTest.TestAdapter to 3.6.4
• Upgrade MSTest.TestFramework to 3.6.4

Update protobuf.version to v4.29.0

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/protobuf.version
• Merge into: master
• Upgrade com.google.protobuf:protoc to 4.29.0
• Upgrade com.google.protobuf:protobuf-java to 4.29.0

Update sonar.plugin.api.version to v10.14.0.2599

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/sonar.plugin.api.version
• Merge into: master
• Upgrade org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures to 10.14.0.2599
• Upgrade org.sonarsource.api.plugin:sonar-plugin-api to 10.14.0.2599

Update dependency FluentAssertions to v7

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/fluentassertions-7.x
• Merge into: master
• Upgrade FluentAssertions to 7.0.0

Update dependency SonarAnalyzer.CSharp.Styling to v10

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/sonaranalyzer.csharp.styling-10.x
• Merge into: master
• Upgrade SonarAnalyzer.CSharp.Styling to 10.3.0.106239

Update dependency System.Collections.Immutable to v9

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/system.collections.immutable-9.x
• Merge into: master
• Upgrade System.Collections.Immutable to 9.0.0

Update dependency System.Text.Json to v9

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/system.text.json-9.x
• Merge into: master
• Upgrade System.Text.Json to 9.0.0

Update dependency altcover to v9

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/altcover-9.x
• Merge into: master
• Upgrade altcover to 9.0.1

Update dependency org.slf4j:slf4j-api to v2

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/major-slf4j-monorepo
• Merge into: master
• Upgrade org.slf4j:slf4j-api to 2.0.16

Update dependency org.sonarsource.parent:parent to v82

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/org.sonarsource.parent-parent-82.x
• Merge into: master
• Upgrade org.sonarsource.parent:parent to 82.0.0.2314

Update dependency org.sonarsource.sonarqube:sonar-plugin-api-impl to v24

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/major-sonar.api.impl.version
• Merge into: master
• Upgrade org.sonarsource.sonarqube:sonar-plugin-api-impl to 24.12.0.100206

Update dotnet monorepo (major)

• Schedule: ["* 0-4,22-23 * * 1-5","* * * * 0,6"]
• Branch name: renovate/major-dotnet-monorepo
• Merge into: master
• Upgrade Microsoft.AspNetCore.Components.WebAssembly to 9.0.0
• Upgrade Microsoft.AspNetCore.Components.WebAssembly.DevServer to 9.0.0
• Upgrade Microsoft.AspNetCore.WebUtilities to 9.0.0
• Upgrade Microsoft.CodeAnalysis.CSharp.Workspaces to 4.12.0
• Upgrade Microsoft.CodeAnalysis.VisualBasic.Workspaces to 4.12.0
• Upgrade Microsoft.CodeAnalysis.Workspaces.Common to 4.12.0
• Upgrade dotnet-sdk to 9.0.101

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[pavel-mikula-sonarsource]

Related to https://trello.com/c/FBou1byB/1206-replace-dependabot-with-renovate
Currently blocked