Configure Renovate

[svc-secops]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request.

---

Detected Package Files

• .circleci/config.yml (circleci)
• docker-compose.yml (docker-compose)
• router/Dockerfile (dockerfile)
• subgraphs/playback/Dockerfile (dockerfile)
• subgraphs/spotify/Dockerfile (dockerfile)
• .github/workflows/playback_checks.yaml (github-actions)
• .github/workflows/playback_publish.yaml (github-actions)
• .github/workflows/pull_request.yml (github-actions)
• .github/workflows/register_pq.yaml (github-actions)
• .github/workflows/spotify_checks.yaml (github-actions)
• .github/workflows/spotify_publish.yaml (github-actions)
• client/package.json (npm)
• package.json (npm)
• shared/field-synthetics/package.json (npm)
• shared/spotify-api/package.json (npm)
• subgraphs/playback/package.json (npm)
• subgraphs/spotify/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Apply Apollo's centralized, default Renovate configuration
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Show all Merge Confidence badges for pull requests.
• Pin dependency versions for devDependencies and retain SemVer ranges for others.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to .github/renovate.json5 in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 54 Pull Requests:

chore(deps): update dependency postcss to v8.4.31 [security]

• Branch name: renovate/npm-postcss-vulnerability
• Merge into: main
• Upgrade postcss to 8.4.31

fix(deps): update dependency body-parser to v1.20.3 [security]

• Branch name: renovate/npm-body-parser-vulnerability
• Merge into: main
• Upgrade body-parser to 1.20.3

chore(deps): update dependency vite to v4.5.6 [security]

• Branch name: renovate/npm-vite-vulnerability
• Merge into: main
• Upgrade vite to 4.5.6

fix(deps): update dependency express to v4.20.0 [security]

• Branch name: renovate/npm-express-vulnerability
• Merge into: main
• Upgrade express to 4.20.0

fix(deps): update dependency ws to v8.17.1 [security]

• Branch name: renovate/npm-ws-vulnerability
• Merge into: main
• Upgrade ws to 8.17.1

chore(deps): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/apollo-graphql-packages
• Merge into: main
• Pin @apollo/generate-persisted-query-manifest to 1.0.0
• Pin @apollo/rover to 0.17.1
• Pin @apollo/rover to 0.16.2
• Upgrade @apollo/utils.fetcher to ^3.0.0
• Upgrade @apollo/utils.keyvaluecache to ^3.0.0
• Upgrade ghcr.io/apollographql/router to v1.59.1

chore(deps): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Pin @graphql-codegen/cli to 4.0.1
• Pin @graphql-codegen/fragment-matcher to 5.0.0
• Pin @graphql-codegen/typescript to 4.0.1
• Pin @graphql-codegen/typescript-operations to 4.0.1
• Pin @graphql-codegen/typescript-resolvers to 4.0.1
• Pin @graphql-eslint/eslint-plugin to 3.20.1
• Pin @mdx-js/rollup to 2.3.0
• Pin @sentry/types to 7.60.1
• Pin @tailwindcss/line-clamp to 0.4.4
• Pin @types/cors to 2.8.13
• Pin @types/inquirer to 8.2.6
• Pin @types/jest to 27.5.2
• Pin @types/lodash to 4.14.196
• Pin @types/mdx to 2.0.5
• Pin @types/node to 20.4.5
• Pin @types/prismjs to 1.26.0
• Pin @typescript-eslint/eslint-plugin to 5.62.0
• Pin @typescript-eslint/parser to 5.62.0
• Pin @vitejs/plugin-react to 3.1.0
• Pin autoprefixer to 10.4.14
• Pin babel-plugin-prismjs to 2.1.0
• Pin concurrently to 8.2.0
• Pin eslint to 8.45.0
• Pin eslint-plugin-react to 7.33.0
• Pin eslint-plugin-react-hooks to 4.6.0
• Pin graphql to 16.8.1
• Pin jest to 29.6.1
• Pin nodemon to 2.0.22
• Pin prettier to 3.0.0
• Pin remark-mdx-frontmatter to 2.1.1
• Pin rimraf to 3.0.2
• Pin tailwindcss to 3.3.3
• Pin ts-jest to 29.1.1
• Pin ts-node to 10.9.1
• Pin type-fest to 0.21.3
• Pin typescript to 5.1.6

chore(deps): pin dependency remark-frontmatter to 4.0.1

• Schedule: ["at any time"]
• Branch name: renovate/remark
• Merge into: main
• Pin remark-frontmatter to 4.0.1

chore(deps): update dependency @​types/mdx to ^2.0.5

• Schedule: ["at any time"]
• Branch name: renovate/mdx-2.x
• Merge into: main
• Upgrade @types/mdx to ^2.0.5

chore(deps): update dependency autoprefixer to ^10.4.14

• Schedule: ["at any time"]
• Branch name: renovate/autoprefixer-10.x
• Merge into: main
• Upgrade autoprefixer to ^10.4.14

chore(deps): update dependency secops to v2.0.7

• Schedule: ["at any time"]
• Branch name: renovate/circleci-dependencies-(non-major)
• Merge into: main
• Upgrade secops to 2.0.7

chore(deps): update dependency @graphql-codegen/typescript-operations to ^4.4.0

• Schedule: ["at any time"]
• Branch name: renovate/graphqlcodegenerator-monorepo
• Merge into: main
• Upgrade @graphql-codegen/typescript-operations to ^4.4.0

chore(deps): update dependency @​sentry/types to ^7.60.1

• Schedule: ["at any time"]
• Branch name: renovate/sentry-javascript-monorepo
• Merge into: main
• Upgrade @sentry/types to ^7.60.1

chore(deps): update dependency @​types/lodash to ^4.17.14

• Schedule: ["at any time"]
• Branch name: renovate/lodash-4.x
• Merge into: main
• Upgrade @types/lodash to ^4.17.14

chore(deps): update dependency @​types/node to ^20.4.5

• Schedule: ["at any time"]
• Branch name: renovate/node-20.x
• Merge into: main
• Upgrade @types/node to ^20.4.5

chore(deps): update dependency eslint to ^8.45.0

• Schedule: ["at any time"]
• Branch name: renovate/eslint-monorepo
• Merge into: main
• Upgrade eslint to ^8.45.0

chore(deps): update dependency eslint-plugin-react to ^7.33.0

• Schedule: ["at any time"]
• Branch name: renovate/eslint-plugin-react-7.x
• Merge into: main
• Upgrade eslint-plugin-react to ^7.33.0

chore(deps): update dependency graphql to ^16.10.0

• Schedule: ["at any time"]
• Branch name: renovate/graphql-16.x
• Merge into: main
• Upgrade graphql to ^16.10.0

chore(deps): update dependency jest to ^29.7.0

• Schedule: ["at any time"]
• Branch name: renovate/jest-monorepo
• Merge into: main
• Upgrade jest to ^29.7.0

chore(deps): update dependency tailwindcss to ^3.3.3

• Schedule: ["at any time"]
• Branch name: renovate/tailwindcss-3.x
• Merge into: main
• Upgrade tailwindcss to ^3.3.3

chore(deps): update dependency ts-jest to ^29.1.1

• Schedule: ["at any time"]
• Branch name: renovate/ts-jest-29.x
• Merge into: main
• Upgrade ts-jest to ^29.1.1

chore(deps): update dependency typescript to ^5.7.3

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x
• Merge into: main
• Upgrade typescript to ^5.7.3

chore(deps): update node.js to v18.20.6

• Schedule: ["at any time"]
• Branch name: renovate/node-18.x
• Merge into: main
• Upgrade node to 18.20.6

fix(deps): update dependency lucide-react to ^0.473.0

• Schedule: ["at any time"]
• Branch name: renovate/lucide-monorepo
• Merge into: main
• Upgrade lucide-react to ^0.473.0

chore(deps): update actions/checkout action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to v4

chore(deps): update actions/setup-node action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-4.x
• Merge into: main
• Upgrade actions/setup-node to v4

chore(deps): update dependency @graphql-codegen/cli to v5

• Schedule: ["at any time"]
• Branch name: renovate/major-graphqlcodegenerator-monorepo
• Merge into: main
• Upgrade @graphql-codegen/cli to ^5.0.0

chore(deps): update dependency @graphql-eslint/eslint-plugin to v4

• Schedule: ["at any time"]
• Branch name: renovate/graphql-eslint-eslint-plugin-4.x
• Merge into: main
• Upgrade @graphql-eslint/eslint-plugin to ^4.0.0

chore(deps): update dependency @mdx-js/rollup to v3

• Schedule: ["at any time"]
• Branch name: renovate/major-mdx-monorepo
• Merge into: main
• Upgrade @mdx-js/rollup to ^3.0.0

chore(deps): update dependency @​types/inquirer to v9

• Schedule: ["at any time"]
• Branch name: renovate/inquirer-9.x
• Merge into: main
• Upgrade @types/inquirer to ^9.0.0

chore(deps): update dependency @​types/jest to v29

• Schedule: ["at any time"]
• Branch name: renovate/major-jest-monorepo
• Merge into: main
• Upgrade @types/jest to ^29.0.0

chore(deps): update dependency @​vitejs/plugin-react to v4

• Schedule: ["at any time"]
• Branch name: renovate/vitejs-plugin-react-4.x
• Merge into: main
• Upgrade @vitejs/plugin-react to ^4.0.0

chore(deps): update dependency concurrently to v9

• Schedule: ["at any time"]
• Branch name: renovate/concurrently-9.x
• Merge into: main
• Upgrade concurrently to ^9.0.0

chore(deps): update dependency eslint to v9

• Schedule: ["at any time"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: main
• Upgrade eslint to ^9.0.0

chore(deps): update dependency nodemon to v3

• Schedule: ["at any time"]
• Branch name: renovate/nodemon-3.x
• Merge into: main
• Upgrade nodemon to ^3.0.0

chore(deps): update dependency remark-mdx-frontmatter to v5

• Schedule: ["at any time"]
• Branch name: renovate/remark-mdx-frontmatter-5.x
• Merge into: main
• Upgrade remark-mdx-frontmatter to ^5.0.0

chore(deps): update dependency rimraf to v6

• Schedule: ["at any time"]
• Branch name: renovate/rimraf-6.x
• Merge into: main
• Upgrade rimraf to ^6.0.0

chore(deps): update dependency tailwindcss to v4

• Schedule: ["at any time"]
• Branch name: renovate/tailwindcss-4.x
• Merge into: main
• Upgrade tailwindcss to ^4.0.0

chore(deps): update node.js to v22

• Schedule: ["at any time"]
• Branch name: renovate/node-22.x
• Merge into: main
• Upgrade node to 22.13.1
• Upgrade node to 22
• Upgrade @types/node to ^22.0.0

chore(deps): update typescript-eslint monorepo to v8 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-typescript-eslint-monorepo
• Merge into: main
• Upgrade @typescript-eslint/eslint-plugin to ^8.0.0
• Upgrade @typescript-eslint/parser to ^8.0.0

fix(deps): update dependency chalk to v5

• Schedule: ["at any time"]
• Branch name: renovate/chalk-5.x
• Merge into: main
• Upgrade chalk to ^5.0.0

fix(deps): update dependency date-fns to v4

• Schedule: ["at any time"]
• Branch name: renovate/date-fns-4.x
• Merge into: main
• Upgrade date-fns to ^4.0.0

fix(deps): update dependency graphql-ws to v6

• Schedule: ["at any time"]
• Branch name: renovate/graphql-ws-6.x
• Merge into: main
• Upgrade graphql-ws to ^6.0.0

fix(deps): update dependency inquirer to v12

• Schedule: ["at any time"]
• Branch name: renovate/inquirer-12.x
• Merge into: main
• Upgrade inquirer to ^12.0.0

fix(deps): update dependency node-vibrant to v4

• Schedule: ["at any time"]
• Branch name: renovate/node-vibrant-4.x
• Merge into: main
• Upgrade node-vibrant to 4.0.3

fix(deps): update dependency prism-react-renderer to v2

• Schedule: ["at any time"]
• Branch name: renovate/prism-react-renderer-2.x
• Merge into: main
• Upgrade prism-react-renderer to ^2.0.0

fix(deps): update dependency react-router-dom to v7

• Schedule: ["at any time"]
• Branch name: renovate/major-react-router-monorepo
• Merge into: main
• Upgrade react-router-dom to ^7.0.0

fix(deps): update dependency type-fest to v4

• Schedule: ["at any time"]
• Branch name: renovate/type-fest-4.x
• Merge into: main
• Upgrade type-fest to ^4.0.0

fix(deps): update dependency web-vitals to v4

• Schedule: ["at any time"]
• Branch name: renovate/web-vitals-4.x
• Merge into: main
• Upgrade web-vitals to ^4.0.0

fix(deps): update react monorepo (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-react-monorepo
• Merge into: main
• Upgrade @types/react to ^19.0.0
• Upgrade @types/react-dom to ^19.0.0
• Upgrade eslint-plugin-react-hooks to ^5.0.0
• Upgrade react to ^19.0.0
• Upgrade react-dom to ^19.0.0

fix(deps): update remark (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-remark
• Merge into: main
• Upgrade react-markdown to ^9.0.0
• Upgrade remark to ^15.0.0
• Upgrade remark-frontmatter to ^5.0.0
• Upgrade remark-parse to ^11.0.0
• Upgrade strip-markdown to ^6.0.0

fix(deps): update sentry-javascript monorepo to v8 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-sentry-javascript-monorepo
• Merge into: main
• Upgrade @sentry/node to ^8.0.0
• Upgrade @sentry/types to ^8.0.0

fix(deps): update testing-library monorepo (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-testing-library-monorepo
• Merge into: main
• Upgrade @testing-library/jest-dom to ^6.0.0
• Upgrade @testing-library/react to ^16.0.0
• Upgrade @testing-library/user-event to ^14.0.0

chore(deps): lock file maintenance

• Schedule: ["before 4am on monday"]
• Branch name: renovate/lock-file-maintenance
• Merge into: main
• Regenerate lock files to use latest dependency versions

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up npm package @shared/field-synthetics

Files affected: subgraphs/playback/package.json, subgraphs/spotify/package.json

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.

[codesandbox]

This branch is running in CodeSandbox. Use the links below to review this PR faster.


  Open in CodeSandbox Web Editor | VS Code | VS Code Insiders | Preview