Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .circleci/config.yml (circleci)
• components/dash-core-components/index.html (html)
• @plotly/dash-component-plugins/package.json (npm)
• @plotly/dash-generator-test-component-nested/package.json (npm)
• @plotly/dash-generator-test-component-standard/package.json (npm)
• @plotly/dash-test-components/package.json (npm)
• @plotly/eslint-config-dash/package.json (npm)
• @plotly/prettier-config-dash/package.json (npm)
• @plotly/webpack-dash-dynamic-import/package.json (npm)
• components/dash-core-components/package.json (npm)
• components/dash-html-components/package.json (npm)
• components/dash-table/package.json (npm)
• dash/dash-renderer/package.json (npm)
• package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation
• If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
• Ignore node_modules, bower_components, vendor and various test/tests directories
• Autodetect whether to pin dependencies or maintain ranges
• Rate limit PR creation to a maximum of two per hour
• Limit to maximum 10 open PRs at any time
• Group known monorepo packages together
• Use curated list of recommended non-monorepo package groupings
• Fix some problems with very old Maven commons versions
• Ignore spring cloud 1.x releases
• Ignore web3j 5.0.0 release
• Ignore http4s digest-based 1.x milestones
• Use node versioning for @types/node
• Limit concurrent requests to reduce load on Repology servers until we can fix this properly, see issue 10133
• Do not upgrade from Alpine stable to edge

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.

---

What to Expect

With your current configuration, Renovate will create 39 Pull Requests:

Update dependency glob-parent to 5.1.2 [SECURITY]

• Branch name: renovate/npm-glob-parent-vulnerability
• Merge into: dev
• Upgrade glob-parent to 5.1.2

Update dependency lodash to 4.17.21 [SECURITY]

• Branch name: renovate/npm-lodash-vulnerability
• Merge into: dev
• Upgrade lodash to 4.17.21

Update dependency node-forge to 1.3.0 [SECURITY]

• Branch name: renovate/npm-node-forge-vulnerability
• Merge into: dev
• Upgrade node-forge to 1.3.0

Update dependency nth-check to 2.0.1 [SECURITY]

• Branch name: renovate/npm-nth-check-vulnerability
• Merge into: dev
• Upgrade nth-check to 2.0.1

Update dependency trim to 0.0.3 [SECURITY]

• Branch name: renovate/npm-trim-vulnerability
• Merge into: dev
• Upgrade trim to 0.0.3

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: dev
• Pin @babel/cli to 7.17.6
• Pin @babel/core to 7.17.9
• Pin @babel/plugin-proposal-class-properties to 7.16.7
• Pin @babel/plugin-syntax-dynamic-import to 7.8.3
• Pin @babel/plugin-transform-regenerator to 7.17.9
• Pin @babel/polyfill to 7.12.1
• Pin @babel/preset-env to 7.16.11
• Pin @babel/preset-react to 7.16.7
• Pin @babel/preset-typescript to 7.16.7
• Pin @lerna/filter-options to 4.0.0
• Pin @percy/storybook to 3.3.1
• Pin @plotly/dash-component-plugins to 1.2.3
• Pin @plotly/webpack-dash-dynamic-import to 1.3.0
• Pin @storybook/builder-webpack5 to 6.4.22
• Pin @storybook/cli to 6.4.22
• Pin @storybook/manager-webpack5 to 6.4.22
• Pin @storybook/react to 6.4.22
• Pin @storybook/semver to 7.3.2
• Pin @svgr/webpack to 6.2.1
• Pin @types/chai to 4.3.1
• Pin @types/d3-format to 3.0.1
• Pin @types/mocha to 9.1.0
• Pin @types/papaparse to 5.3.2
• Pin @types/react to 16.14.25
• Pin @types/react-dom to 16.9.14
• Pin @types/react-redux to 7.1.24
• Pin @​types/react-select to 4.0.18
• Pin @types/redux to 3.6.31
• Pin @types/redux-actions to 2.6.2
• Pin @typescript-eslint/eslint-plugin to 5.19.0
• Pin @typescript-eslint/parser to 5.19.0
• Pin babel-eslint to 10.1.0
• Pin babel-loader to 8.2.4
• Pin chai to 4.3.6
• Pin cheerio to 0.22.0
• Pin component-playground to 3.2.1
• Pin copyfiles to 2.4.1
• Pin cross-env to 7.0.3
• Pin css-loader to 6.7.1
• Pin css.escape to 1.5.1
• Pin d3-format to 3.1.0
• Pin es-check to 6.2.1
• Pin eslint to 8.13.0
• Pin eslint-config-prettier to 8.5.0
• Pin eslint-plugin-import to 2.26.0
• Pin eslint-plugin-react to 7.29.4
• Pin fast-isnumeric to 1.1.4
• Pin file-loader to 6.2.0
• Pin highlight.js to 11.5.1
• Pin identity-obj-proxy to 3.0.0
• Pin karma to 6.3.18
• Pin karma-chrome-launcher to 3.1.1
• Pin karma-mocha to 2.0.1
• Pin karma-typescript to 5.5.3
• Pin karma-webpack to 5.0.0
• Pin lerna to 4.0.0
• Pin less to 4.1.2
• Pin less-loader to 10.2.0
• Pin mocha to 9.2.2
• Pin npm-run-all to 4.1.5
• Pin papaparse to 5.3.2
• Pin prettier to 2.6.2
• Pin prop-types to 15.8.1
• Pin ramda to 0.28.0
• Pin raw-loader to 4.0.2
• Pin react to 16.14.0
• Pin react-docgen to 5.4.0
• Pin react-dom to 16.14.0
• Pin react-select to 1.3.0
• Pin regenerator-runtime to 0.13.9
• Pin remarkable to 2.0.1
• Pin request to 2.88.2
• Pin sheetclip to 0.3.0
• Pin string to 3.3.3
• Pin style-loader to 3.3.1
• Pin styled-jsx to 3.4.7
• Pin ts-loader to 9.2.8
• Pin typescript to 4.6.3
• Pin webpack to 5.72.0
• Pin webpack to 4.46.0
• Pin webpack-cli to 4.9.2
• Pin webpack-dev-server to 3.11.3
• Pin webpack-preprocessor to 0.1.12
• Pin whatwg-fetch to 3.6.2
• Pin xlsx to 0.17.5

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/font-awesome
• Merge into: dev
• Pin @fortawesome/free-regular-svg-icons to 5.15.4
• Pin @fortawesome/free-solid-svg-icons to 5.15.4
• Pin @fortawesome/react-fontawesome to 0.1.18

Update browser-tools orb to v1.2.5

• Schedule: ["at any time"]
• Branch name: renovate/browser-tools-1.x
• Merge into: dev
• Upgrade browser-tools to 1.2.5

Update dependency @​types/mocha to v9.1.1

• Schedule: ["at any time"]
• Branch name: renovate/mocha-9.x
• Merge into: dev
• Upgrade @types/mocha to 9.1.1

Update dependency @​types/react-dom to v16.9.15

• Schedule: ["at any time"]
• Branch name: renovate/react-dom-16.x
• Merge into: dev
• Upgrade @types/react-dom to 16.9.15

Update dependency babel-loader to v8.2.5

• Schedule: ["at any time"]
• Branch name: renovate/babel-monorepo
• Merge into: dev
• Upgrade babel-loader to 8.2.5

Update dependency karma to v6.3.19

• Schedule: ["at any time"]
• Branch name: renovate/karma-6.x
• Merge into: dev
• Upgrade karma to 6.3.19

Update win orb to v2.4.1

• Schedule: ["at any time"]
• Branch name: renovate/win-2.x
• Merge into: dev
• Upgrade win to 2.4.1

Update Node.js to v16.14

• Schedule: ["at any time"]
• Branch name: renovate/cimg-node-16.x
• Merge into: dev
• Upgrade cimg/node to 16.14-browsers

Update dependency cimg/python to v3.10.4

• Schedule: ["at any time"]
• Branch name: renovate/cimg-python-3.x
• Merge into: dev
• Upgrade cimg/python to 3.10.4-node
• Upgrade cimg/python to 3.10.4-browsers
• Upgrade cimg/python to 3.10.4

Update dependency codemirror to v5.65.3

• Schedule: ["at any time"]
• Branch name: renovate/codemirror-5.x
• Merge into: dev
• Upgrade codemirror to sha512-I6CdJdruzGtvDyvdO4YsiAq+pkWf2efgd1ZUSK2FnM/u2VuRASPC7GowWQrWyjxCZn6CT89s3ddGI+be0Ak9Fg==
• Upgrade codemirror to sha512-/8pAp30QGvOa8tNBv7WmWiPFgYGOg2JdVtqI8vK+xZsqWHnNd939v9s+zJHXZcJe5wPD44D66zz+CLTD3KacYA==

Update dependency eslint to v8.14.0

• Schedule: ["at any time"]
• Branch name: renovate/eslint-8.x
• Merge into: dev
• Upgrade eslint to 8.14.0

Update dependency react-jsx-parser to v1.29.0

• Schedule: ["at any time"]
• Branch name: renovate/react-jsx-parser-1.x
• Merge into: dev
• Upgrade react-jsx-parser to 1.29.0

Update dependency xlsx to v0.18.5

• Schedule: ["at any time"]
• Branch name: renovate/xlsx-0.x
• Merge into: dev
• Upgrade xlsx to 0.18.5

Update react monorepo to v16.14.0

• Schedule: ["at any time"]
• Branch name: renovate/react-monorepo
• Merge into: dev
• Upgrade react to 16.14.0
• Upgrade react-dom to 16.14.0

Update typescript-eslint monorepo to v5.21.0

• Schedule: ["at any time"]
• Branch name: renovate/typescript-eslint-monorepo
• Merge into: dev
• Upgrade @typescript-eslint/eslint-plugin to 5.21.0
• Upgrade @typescript-eslint/parser to 5.21.0

Update Font Awesome to v6 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-font-awesome
• Merge into: dev
• Upgrade @fortawesome/fontawesome-svg-core to 6.1.1
• Upgrade @fortawesome/free-regular-svg-icons to 6.1.1
• Upgrade @fortawesome/free-regular-svg-icons to ^6.0.0
• Upgrade @fortawesome/free-solid-svg-icons to 6.1.1
• Upgrade @fortawesome/free-solid-svg-icons to ^6.0.0

Update Node.js to v18

• Schedule: ["at any time"]
• Branch name: renovate/cimg-node-18.x
• Merge into: dev
• Upgrade cimg/node to 18.0-browsers

Update dependency @​percy/storybook to v4

• Schedule: ["at any time"]
• Branch name: renovate/percy-storybook-4.x
• Merge into: dev
• Upgrade @percy/storybook to 4.2.0

Update dependency @​types/react to v18

• Schedule: ["at any time"]
• Branch name: renovate/react-18.x
• Merge into: dev
• Upgrade @types/react to 18.0.7

Update dependency @​types/react-dom to v18

• Schedule: ["at any time"]
• Branch name: renovate/react-dom-18.x
• Merge into: dev
• Upgrade @types/react-dom to 18.0.0

Update dependency d3-format to v3

• Schedule: ["at any time"]
• Branch name: renovate/d3-format-3.x
• Merge into: dev
• Upgrade d3-format to ^3.0.0

Update dependency rc-slider to v10

• Schedule: ["at any time"]
• Branch name: renovate/rc-slider-10.x
• Merge into: dev
• Upgrade rc-slider to ^10.0.0

Update dependency react-dropzone to v12

• Schedule: ["at any time"]
• Branch name: renovate/react-dropzone-12.x
• Merge into: dev
• Upgrade react-dropzone to ^12.0.0

Update dependency react-markdown to v8

• Schedule: ["at any time"]
• Branch name: renovate/react-markdown-8.x
• Merge into: dev
• Upgrade react-markdown to ^8.0.0

Update dependency react-redux to v8

• Schedule: ["at any time"]
• Branch name: renovate/react-redux-8.x
• Merge into: dev
• Upgrade react-redux to ^8.0.0

Update dependency react-resize-detector to v7

• Schedule: ["at any time"]
• Branch name: renovate/react-resize-detector-7.x
• Merge into: dev
• Upgrade react-resize-detector to ^7.0.0

Update dependency react-select to v5

• Schedule: ["at any time"]
• Branch name: renovate/react-select-5.x
• Merge into: dev
• Upgrade react-select to 5.3.0
• Upgrade @​types/react-select to 5.0.0

Update dependency remark-math to v5

• Schedule: ["at any time"]
• Branch name: renovate/major-remark-monorepo
• Merge into: dev
• Upgrade remark-math to ^5.0.0

Update dependency styled-jsx to v5

• Schedule: ["at any time"]
• Branch name: renovate/styled-jsx-5.x
• Merge into: dev
• Upgrade styled-jsx to 5.0.2

Update dependency webpack to v5

• Schedule: ["at any time"]
• Branch name: renovate/webpack-5.x
• Merge into: dev
• Upgrade webpack to 5.72.0

Update dependency webpack-dev-server to v4

• Schedule: ["at any time"]
• Branch name: renovate/webpack-dev-server-4.x
• Merge into: dev
• Upgrade webpack-dev-server to 4.8.1

Update react monorepo to v18 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-react-monorepo
• Merge into: dev
• Upgrade react to 18.0.0
• Upgrade react to ^18.0.0
• Upgrade react to ^16.13.0 || ^18.0.0
• Upgrade react-dom to 18.0.0
• Upgrade react-dom to ^18.0.0
• Upgrade react-dom to ^16.13.0 || ^18.0.0

Update win orb to v4

• Schedule: ["at any time"]
• Branch name: renovate/win-4.x
• Merge into: dev
• Upgrade win to 4.1.1

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.