Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• docker-compose.yaml (docker-compose)
• c3d-graphql-gateway/Dockerfile (dockerfile)
• c3d-graphql/Dockerfile (dockerfile)
• c3d-core/package.json (npm)
• c3d-graphql-gateway/package.json (npm)
• c3d-graphql/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 27 Pull Requests:

Update dependency express to v4.20.0 [SECURITY]

• Branch name: renovate/npm-express-vulnerability
• Merge into: master
• Upgrade express to 4.20.0

Update dependency @​types/express to v4.17.25

• Schedule: ["at any time"]
• Branch name: renovate/express-4.x-lockfile
• Merge into: master
• Upgrade @types/express to 4.17.25

Update dependency @​types/node to v17.0.45

• Schedule: ["at any time"]
• Branch name: renovate/node-17.x-lockfile
• Merge into: master
• Upgrade @types/node to 17.0.45

Update dependency cors to v2.8.6

• Schedule: ["at any time"]
• Branch name: renovate/cors-2.x-lockfile
• Merge into: master
• Upgrade cors to 2.8.6

Update dependency node-pg-migrate to v6.2.2

• Schedule: ["at any time"]
• Branch name: renovate/node-pg-migrate-6.x-lockfile
• Merge into: master
• Upgrade node-pg-migrate to 6.2.2

Update dependency nodemon to v2.0.22

• Schedule: ["at any time"]
• Branch name: renovate/nodemon-2.x-lockfile
• Merge into: master
• Upgrade nodemon to 2.0.22

Update Apollo GraphQL packages to v3.13.0

• Schedule: ["at any time"]
• Branch name: renovate/apollo-graphql-packages
• Merge into: master
• Upgrade apollo-server to 3.13.0
• Upgrade apollo-server-express to 3.13.0

Update dependency cross-fetch to v3.2.0

• Schedule: ["at any time"]
• Branch name: renovate/cross-fetch-3.x-lockfile
• Merge into: master
• Upgrade cross-fetch to 3.2.0

Update dependency graphile-build to v4.14.1

• Schedule: ["at any time"]
• Branch name: renovate/graphile-build-4.x-lockfile
• Merge into: master
• Upgrade graphile-build to 4.14.1

Update dependency graphile-build-pg to v4.14.1

• Schedule: ["at any time"]
• Branch name: renovate/graphile-build-pg-4.x-lockfile
• Merge into: master
• Upgrade graphile-build-pg to 4.14.1

Update dependency graphql to v16.13.1

• Schedule: ["at any time"]
• Branch name: renovate/graphql-16.x-lockfile
• Merge into: master
• Upgrade graphql to 16.13.1

Update dependency pg to v8.20.0

• Schedule: ["at any time"]
• Branch name: renovate/pg-8.x-lockfile
• Merge into: master
• Upgrade pg to 8.20.0

Update dependency postgraphile to v4.14.1

• Schedule: ["at any time"]
• Branch name: renovate/postgraphile-4.x-lockfile
• Merge into: master
• Upgrade postgraphile to 4.14.1

Update dependency postgraphile-core to v4.14.1

• Schedule: ["at any time"]
• Branch name: renovate/postgraphile-core-4.x-lockfile
• Merge into: master
• Upgrade postgraphile-core to 4.14.1

Update dependency postgraphile-plugin-connection-filter to v2.3.0

• Schedule: ["at any time"]
• Branch name: renovate/postgraphile-plugin-connection-filter-2.x-lockfile
• Merge into: master
• Upgrade postgraphile-plugin-connection-filter to 2.3.0

Update dependency ts-node to v10.9.2

• Schedule: ["at any time"]
• Branch name: renovate/ts-node-10.x-lockfile
• Merge into: master
• Upgrade ts-node to 10.9.2

Update dependency tslib to v2.8.1

• Schedule: ["at any time"]
• Branch name: renovate/tslib-2.x-lockfile
• Merge into: master
• Upgrade tslib to 2.8.1

Update dependency typescript to v4.9.5

• Schedule: ["at any time"]
• Branch name: renovate/typescript-4.x-lockfile
• Merge into: master
• Upgrade typescript to 4.9.5

Update postgres Docker tag to v10.21

• Schedule: ["at any time"]
• Branch name: renovate/postgres-10.x
• Merge into: master
• Upgrade postgres to 10.21

Update dependency @​types/express to v5

• Schedule: ["at any time"]
• Branch name: renovate/express-5.x
• Merge into: master
• Upgrade @types/express to ^5.0.0

Update dependency cross-fetch to v4

• Schedule: ["at any time"]
• Branch name: renovate/cross-fetch-4.x
• Merge into: master
• Upgrade cross-fetch to ^4.0.0

Update dependency graphql to v16

• Schedule: ["at any time"]
• Branch name: renovate/graphql-16.x
• Merge into: master
• Upgrade graphql to 16.x
• Upgrade graphql to ^16.0.0

Update dependency node-pg-migrate to v8

• Schedule: ["at any time"]
• Branch name: renovate/node-pg-migrate-8.x
• Merge into: master
• Upgrade node-pg-migrate to ^8.0.0

Update dependency nodemon to v3

• Schedule: ["at any time"]
• Branch name: renovate/nodemon-3.x
• Merge into: master
• Upgrade nodemon to ^3.0.0

Update dependency typescript to v5

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x
• Merge into: master
• Upgrade typescript to ^5.0.0

Update Node.js to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: master
• Upgrade node to 24.14.0
• Upgrade @types/node to ^24.0.0

Update postgres Docker tag to v18

• Schedule: ["at any time"]
• Branch name: renovate/postgres-18.x
• Merge into: master
• Upgrade postgres to 18.3

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.