Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• template/{{app_name}}/Dockerfile (dockerfile)
• .github/workflows/cd.yml (github-actions)
• template/{{app_name}}/pyproject.toml (poetry)
• template/{{app_name}}/.python-version (pyenv)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 28 Pull Requests:

Update dependency black to v24 [SECURITY]

• Branch name: renovate/pypi-black-vulnerability
• Merge into: main
• Upgrade black to ^24.0.0

Update dependency bandit to v1.8.6

• Schedule: ["at any time"]
• Branch name: renovate/bandit-1.x-lockfile
• Merge into: main
• Upgrade bandit to 1.8.6

Update dependency debugpy to v1.8.17

• Schedule: ["at any time"]
• Branch name: renovate/debugpy-1.x-lockfile
• Merge into: main
• Upgrade debugpy to 1.8.17

Update dependency factory-boy to v3.3.3

• Schedule: ["at any time"]
• Branch name: renovate/factory-boy-3.x-lockfile
• Merge into: main
• Upgrade factory-boy to 3.3.3

Update dependency psycopg to v3.2.12

• Schedule: ["at any time"]
• Branch name: renovate/psycopg-3.x-lockfile
• Merge into: main
• Upgrade psycopg to 3.2.12

Update dependency SQLAlchemy to v2.0.44

• Schedule: ["at any time"]
• Branch name: renovate/sqlalchemy-2.x-lockfile
• Merge into: main
• Upgrade SQLAlchemy to 2.0.44

Update dependency alembic to v1.17.2

• Schedule: ["at any time"]
• Branch name: renovate/alembic-1.x-lockfile
• Merge into: main
• Upgrade alembic to 1.17.2

Update dependency APIFlask to v2.4.0

• Schedule: ["at any time"]
• Branch name: renovate/apiflask-2.x-lockfile
• Merge into: main
• Upgrade APIFlask to 2.4.0

Update dependency boto3 to v1.40.75

• Schedule: ["at any time"]
• Branch name: renovate/boto3-1.x-lockfile
• Merge into: main
• Upgrade boto3 to 1.40.75

Update dependency botocore to v1.40.75

• Schedule: ["at any time"]
• Branch name: renovate/botocore-1.x-lockfile
• Merge into: main
• Upgrade botocore to 1.40.75

Update dependency coverage to v7.11.3

• Schedule: ["at any time"]
• Branch name: renovate/coverage-7.x-lockfile
• Merge into: main
• Upgrade coverage to 7.11.3

Update dependency marshmallow to v3.26.1

• Schedule: ["at any time"]
• Branch name: renovate/marshmallow-3.x-lockfile
• Merge into: main
• Upgrade marshmallow to 3.26.1

Update dependency mypy to v1.18.2

• Schedule: ["at any time"]
• Branch name: renovate/mypy-1.x-lockfile
• Merge into: main
• Upgrade mypy to 1.18.2

Update dependency pydantic to v2.12.4

• Schedule: ["at any time"]
• Branch name: renovate/pydantic-2.x-lockfile
• Merge into: main
• Upgrade pydantic to 2.12.4

Update dependency pydantic-settings to v2.12.0

• Schedule: ["at any time"]
• Branch name: renovate/pydantic-settings-2.x-lockfile
• Merge into: main
• Upgrade pydantic-settings to 2.12.0

Update dependency python-dotenv to v1.2.1

• Schedule: ["at any time"]
• Branch name: renovate/python-dotenv-1.x-lockfile
• Merge into: main
• Upgrade python-dotenv to 1.2.1

Update dependency ruff to ^0.14.0

• Schedule: ["at any time"]
• Branch name: renovate/ruff-0.x
• Merge into: main
• Upgrade ruff to ^0.14.0

Update python Docker tag

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14
• Upgrade python to ~3.14.0
• Upgrade python to 3.14
• Upgrade python to 3.14-slim

Update actions/checkout action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-5.x
• Merge into: main
• Upgrade actions/checkout to v5

Update actions/setup-python action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: main
• Upgrade actions/setup-python to v6

Update dependency APIFlask to v3

• Schedule: ["at any time"]
• Branch name: renovate/apiflask-3.x
• Merge into: main
• Upgrade APIFlask to ^3.0.0

Update dependency Faker to v38

• Schedule: ["at any time"]
• Branch name: renovate/faker-38.x
• Merge into: main
• Upgrade Faker to ^38.0.0

Update dependency isort to v7

• Schedule: ["at any time"]
• Branch name: renovate/isort-7.x
• Merge into: main
• Upgrade isort to ^7.0.0

Update dependency marshmallow to v4

• Schedule: ["at any time"]
• Branch name: renovate/marshmallow-4.x
• Merge into: main
• Upgrade marshmallow to ^4.0.0

Update dependency moto to v5

• Schedule: ["at any time"]
• Branch name: renovate/moto-5.x
• Merge into: main
• Upgrade moto to ^5.0.0

Update dependency pytest to v9

• Schedule: ["at any time"]
• Branch name: renovate/pytest-9.x
• Merge into: main
• Upgrade pytest to ^9.0.0

Update dependency setuptools to v80

• Schedule: ["at any time"]
• Branch name: renovate/setuptools-80.x-lockfile
• Merge into: main
• Upgrade setuptools to 80.9.0

Update dependency smart-open to v7

• Schedule: ["at any time"]
• Branch name: renovate/smart-open-7.x
• Merge into: main
• Upgrade smart-open to ^7.0.0

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.