Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/maven.yml (github-actions)
• .github/workflows/nodejs.yml (github-actions)
• blb-backend/aggregation-service/consumer-aggregation-service/pom.xml (maven)
• blb-backend/aggregation-service/pom.xml (maven)
• blb-backend/aggregation-service/rider-aggregation-service/pom.xml (maven)
• blb-backend/aggregation-service/seller-aggregation-service/pom.xml (maven)
• blb-backend/basic-service-api/auth-service-api/pom.xml (maven)
• blb-backend/basic-service-api/cache-service-api/pom.xml (maven)
• blb-backend/basic-service-api/message-service-api/pom.xml (maven)
• blb-backend/basic-service-api/pom.xml (maven)
• blb-backend/basic-service-api/upload-service-api/pom.xml (maven)
• blb-backend/basic-service-impl/auth-service-impl/pom.xml (maven)
• blb-backend/basic-service-impl/cache-service-impl/pom.xml (maven)
• blb-backend/basic-service-impl/message-service-impl/pom.xml (maven)
• blb-backend/basic-service-impl/pom.xml (maven)
• blb-backend/basic-service-impl/upload-service-impl/pom.xml (maven)
• blb-backend/business-service-api/cart-service-api/pom.xml (maven)
• blb-backend/business-service-api/consumer-service-api/pom.xml (maven)
• blb-backend/business-service-api/location-service-api/pom.xml (maven)
• blb-backend/business-service-api/order-service-api/pom.xml (maven)
• blb-backend/business-service-api/pay-service-api/pom.xml (maven)
• blb-backend/business-service-api/pom.xml (maven)
• blb-backend/business-service-api/product-service-api/pom.xml (maven)
• blb-backend/business-service-api/rider-service-api/pom.xml (maven)
• blb-backend/business-service-api/seller-service-api/pom.xml (maven)
• blb-backend/business-service-api/shop-service-api/pom.xml (maven)
• blb-backend/business-service-impl/cart-service-impl/pom.xml (maven)
• blb-backend/business-service-impl/consumer-service-impl/pom.xml (maven)
• blb-backend/business-service-impl/order-service-impl/pom.xml (maven)
• blb-backend/business-service-impl/pay-service-impl/pom.xml (maven)
• blb-backend/business-service-impl/pom.xml (maven)
• blb-backend/business-service-impl/product-service-impl/pom.xml (maven)
• blb-backend/business-service-impl/rider-service-impl/pom.xml (maven)
• blb-backend/business-service-impl/seller-service-impl/pom.xml (maven)
• blb-backend/business-service-impl/shop-service-impl/pom.xml (maven)
• blb-backend/common/pom.xml (maven)
• blb-backend/parent/pom.xml (maven)
• blb-backend/service-govern/gateway-service/pom.xml (maven)
• blb-backend/service-govern/pom.xml (maven)
• blb-seller-frontend/package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation
• If semantic commits detected, use semantic commit type fix for dependencies and chore for all others
• Ignore node_modules, bower_components, vendor and various test/tests directories
• Autodetect whether to pin dependencies or maintain ranges
• Rate limit PR creation to a maximum of two per hour
• Limit to maximum 10 open PRs at any time
• Group known monorepo packages together
• Use curated list of recommended non-monorepo package groupings
• Fix some problems with very old Maven commons versions
• Ignore spring cloud 1.x releases
• Ignore http4s digest-based 1.x milestones
• Use node versioning for @types/node
• Limit concurrent requests to reduce load on Repology servers until we can fix this properly, see issue 10133

🔡 Would you like to change the way Renovate is upgrading your dependencies? Simply edit the renovate.json in this branch with your custom config and the list of Pull Requests in the "What to Expect" section below will be updated the next time Renovate runs.

---

What to Expect

With your current configuration, Renovate will create 53 Pull Requests:

Update dependency ansi-regex to 5.0.1 [SECURITY]

• Branch name: renovate/npm-ansi-regex-vulnerability
• Merge into: master
• Upgrade ansi-regex to 5.0.1

Update dependency axios to 0.21.2 [SECURITY]

• Branch name: renovate/npm-axios-vulnerability
• Merge into: master
• Upgrade axios to 0.21.2

Update dependency follow-redirects to 1.14.7 [SECURITY]

• Branch name: renovate/npm-follow-redirects-vulnerability
• Merge into: master
• Upgrade follow-redirects to 1.14.7

Update dependency glob-parent to 5.1.2 [SECURITY]

• Branch name: renovate/npm-glob-parent-vulnerability
• Merge into: master
• Upgrade glob-parent to 5.1.2

Update dependency highlight.js to 10.4.1 [SECURITY]

• Branch name: renovate/npm-highlight.js-vulnerability
• Merge into: master
• Upgrade highlight.js to 10.4.1

Update dependency is-svg to 4.3.0 [SECURITY]

• Branch name: renovate/npm-is-svg-vulnerability
• Merge into: master
• Upgrade is-svg to 4.3.0

Update dependency json-schema to 0.4.0 [SECURITY]

• Branch name: renovate/npm-json-schema-vulnerability
• Merge into: master
• Upgrade json-schema to 0.4.0

Update dependency node-forge to 1.0.0 [SECURITY]

• Branch name: renovate/npm-node-forge-vulnerability
• Merge into: master
• Upgrade node-forge to 1.0.0

Update dependency nth-check to 2.0.1 [SECURITY]

• Branch name: renovate/npm-nth-check-vulnerability
• Merge into: master
• Upgrade nth-check to 2.0.1

Update dependency postcss to 8.2.13 [SECURITY]

• Branch name: renovate/npm-postcss-vulnerability
• Merge into: master
• Upgrade postcss to 8.2.13

Update dependency serialize-javascript to 3.1.0 [SECURITY]

• Branch name: renovate/npm-serialize-javascript-vulnerability
• Merge into: master
• Upgrade serialize-javascript to 3.1.0

Update dependency sockjs to 0.3.20 [SECURITY]

• Branch name: renovate/npm-sockjs-vulnerability
• Merge into: master
• Upgrade sockjs to 0.3.20

Update dependency zrender to 5.2.1 [SECURITY]

• Branch name: renovate/npm-zrender-vulnerability
• Merge into: master
• Upgrade zrender to 5.2.1

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: master
• Pin @vue/cli-plugin-babel to 4.3.1
• Pin @vue/cli-plugin-eslint to 4.3.1
• Pin @vue/cli-plugin-router to 4.3.1
• Pin @vue/cli-plugin-vuex to 4.3.1
• Pin @vue/cli-service to 4.3.1
• Pin @vue/eslint-config-standard to 5.1.2
• Pin babel-eslint to 10.1.0
• Pin core-js to 3.6.5
• Pin echarts to 4.9.0
• Pin element-ui to 2.13.1
• Pin eslint to 6.8.0
• Pin eslint-plugin-import to 2.20.2
• Pin eslint-plugin-node to 11.1.0
• Pin eslint-plugin-promise to 4.2.1
• Pin eslint-plugin-standard to 4.0.1
• Pin eslint-plugin-vue to 6.2.2
• Pin express to 4.17.1
• Pin less to 3.11.1
• Pin less-loader to 5.0.0
• Pin moment to 2.26.0
• Pin vue to 2.6.11
• Pin vue-amap to 0.5.10
• Pin vue-router to 3.1.6
• Pin vue-template-compiler to 2.6.11
• Pin vuex to 3.1.3

Update dependency com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config to v2.2.7.RELEASE

• Schedule: ["at any time"]
• Branch name: renovate/com.alibaba.cloud-spring-cloud-starter-alibaba-nacos-config-2.x
• Merge into: master
• Upgrade com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config to 2.2.7.RELEASE

Update dependency com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-discovery to v2.2.7.RELEASE

• Schedule: ["at any time"]
• Branch name: renovate/com.alibaba.cloud-spring-cloud-starter-alibaba-nacos-discovery-2.x
• Merge into: master
• Upgrade com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-discovery to 2.2.7.RELEASE

Update dependency com.alibaba.cloud:spring-cloud-starter-alibaba-sentinel to v2.2.7.RELEASE

• Schedule: ["at any time"]
• Branch name: renovate/com.alibaba.cloud-spring-cloud-starter-alibaba-sentinel-2.x
• Merge into: master
• Upgrade com.alibaba.cloud:spring-cloud-starter-alibaba-sentinel to 2.2.7.RELEASE

Update dependency com.google.code.gson:gson to v2.8.9

• Schedule: ["at any time"]
• Branch name: renovate/com.google.code.gson-gson-2.x
• Merge into: master
• Upgrade com.google.code.gson:gson to 2.8.9

Update dependency express to v4.17.2

• Schedule: ["at any time"]
• Branch name: renovate/express-4.x
• Merge into: master
• Upgrade express to 4.17.2

Update dependency org.springframework.cloud:spring-cloud-dependencies to v2021.0.0

• Schedule: ["at any time"]
• Branch name: renovate/spring-cloud
• Merge into: master
• Upgrade org.springframework.cloud:spring-cloud-dependencies to 2021.0.0

Update dependency com.alipay.sdk:alipay-sdk-java to v4.22.30.ALL

• Schedule: ["at any time"]
• Branch name: renovate/com.alipay.sdk-alipay-sdk-java-4.x
• Merge into: master
• Upgrade com.alipay.sdk:alipay-sdk-java to 4.22.30.ALL

Update dependency com.baomidou:mybatis-plus-boot-starter to v3.5.0

• Schedule: ["at any time"]
• Branch name: renovate/com.baomidou-mybatis-plus-boot-starter-3.x
• Merge into: master
• Upgrade com.baomidou:mybatis-plus-boot-starter to 3.5.0

Update dependency core-js to v3.20.3

• Schedule: ["at any time"]
• Branch name: renovate/core-js-3.x
• Merge into: master
• Upgrade core-js to 3.20.3

Update dependency element-ui to v2.15.6

• Schedule: ["at any time"]
• Branch name: renovate/element-ui-2.x
• Merge into: master
• Upgrade element-ui to 2.15.6

Update dependency eslint-plugin-import to v2.25.4

• Schedule: ["at any time"]
• Branch name: renovate/eslint-plugin-import-2.x
• Merge into: master
• Upgrade eslint-plugin-import to 2.25.4

Update dependency eslint-plugin-promise to v4.3.1

• Schedule: ["at any time"]
• Branch name: renovate/eslint-plugin-promise-4.x
• Merge into: master
• Upgrade eslint-plugin-promise to 4.3.1

Update dependency eslint-plugin-standard to v4.1.0

• Schedule: ["at any time"]
• Branch name: renovate/eslint-plugin-standard-4.x
• Merge into: master
• Upgrade eslint-plugin-standard to 4.1.0

Update dependency less to v3.13.1

• Schedule: ["at any time"]
• Branch name: renovate/less-3.x
• Merge into: master
• Upgrade less to 3.13.1

Update dependency moment to v2.29.1

• Schedule: ["at any time"]
• Branch name: renovate/moment-2.x
• Merge into: master
• Upgrade moment to 2.29.1

Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.9.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-compiler-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.9.0

Update dependency org.elasticsearch.client:elasticsearch-rest-client to v7.16.3

• Schedule: ["at any time"]
• Branch name: renovate/org.elasticsearch.client-elasticsearch-rest-client-7.x
• Merge into: master
• Upgrade org.elasticsearch.client:elasticsearch-rest-client to 7.16.3

Update dependency org.elasticsearch.client:elasticsearch-rest-high-level-client to v7.16.3

• Schedule: ["at any time"]
• Branch name: renovate/org.elasticsearch.client-elasticsearch-rest-high-level-client-7.x
• Merge into: master
• Upgrade org.elasticsearch.client:elasticsearch-rest-high-level-client to 7.16.3

Update dependency org.elasticsearch:elasticsearch to v7.16.3

• Schedule: ["at any time"]
• Branch name: renovate/org.elasticsearch-elasticsearch-7.x
• Merge into: master
• Upgrade org.elasticsearch:elasticsearch to 7.16.3

Update dependency org.hibernate.validator:hibernate-validator to v6.2.1.Final

• Schedule: ["at any time"]
• Branch name: renovate/hibernate-validator
• Merge into: master
• Upgrade org.hibernate.validator:hibernate-validator to 6.2.1.Final

Update dependency org.springframework.boot:spring-boot-starter-parent to v2.6.3

• Schedule: ["at any time"]
• Branch name: renovate/spring-boot
• Merge into: master
• Upgrade org.springframework.boot:spring-boot-starter-parent to 2.6.3

Update vue monorepo

• Schedule: ["at any time"]
• Branch name: renovate/vue-monorepo
• Merge into: master
• Upgrade @vue/cli-plugin-babel to 4.5.15
• Upgrade @vue/cli-plugin-eslint to 4.5.15
• Upgrade @vue/cli-plugin-router to 4.5.15
• Upgrade @vue/cli-plugin-vuex to 4.5.15
• Upgrade @vue/cli-service to 4.5.15
• Upgrade vue to 2.6.14
• Upgrade vue-router to 3.5.3
• Upgrade vue-template-compiler to 2.6.14
• Upgrade vuex to 3.6.2

Update actions/setup-java action to v2

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-2.x
• Merge into: master
• Upgrade actions/setup-java to v2

Update actions/setup-node action to v2

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-2.x
• Merge into: master
• Upgrade actions/setup-node to v2

Update actions/upload-artifact action to v2

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-2.x
• Merge into: master
• Upgrade actions/upload-artifact to v2

Update dependency @​vue/eslint-config-standard to v6

• Schedule: ["at any time"]
• Branch name: renovate/vue-eslint-config-standard-6.x
• Merge into: master
• Upgrade @vue/eslint-config-standard to 6.1.0

Update dependency com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config to v2021

• Schedule: ["at any time"]
• Branch name: renovate/com.alibaba.cloud-spring-cloud-starter-alibaba-nacos-config-2021.x
• Merge into: master
• Upgrade com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config to 2021.1

Update dependency com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-discovery to v2021

• Schedule: ["at any time"]
• Branch name: renovate/com.alibaba.cloud-spring-cloud-starter-alibaba-nacos-discovery-2021.x
• Merge into: master
• Upgrade com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-discovery to 2021.1

Update dependency com.alibaba.cloud:spring-cloud-starter-alibaba-sentinel to v2021

• Schedule: ["at any time"]
• Branch name: renovate/com.alibaba.cloud-spring-cloud-starter-alibaba-sentinel-2021.x
• Merge into: master
• Upgrade com.alibaba.cloud:spring-cloud-starter-alibaba-sentinel to 2021.1

Update dependency com.google.guava:guava to v31

• Schedule: ["at any time"]
• Branch name: renovate/major-guava-monorepo
• Merge into: master
• Upgrade com.google.guava:guava to 31.0.1-jre

Update dependency com.h2database:h2 to v2

• Schedule: ["at any time"]
• Branch name: renovate/com.h2database-h2-2.x
• Merge into: master
• Upgrade com.h2database:h2 to 2.1.210

Update dependency com.spring4all:swagger-spring-boot-starter to v2

• Schedule: ["at any time"]
• Branch name: renovate/com.spring4all-swagger-spring-boot-starter-2.x
• Merge into: master
• Upgrade com.spring4all:swagger-spring-boot-starter to 2.0.2.RELEASE

Update dependency echarts to v5

• Schedule: ["at any time"]
• Branch name: renovate/echarts-5.x
• Merge into: master
• Upgrade echarts to 5.2.2

Update dependency eslint to v8

• Schedule: ["at any time"]
• Branch name: renovate/eslint-8.x
• Merge into: master
• Upgrade eslint to 8.7.0

Update dependency eslint-plugin-promise to v6

• Schedule: ["at any time"]
• Branch name: renovate/eslint-plugin-promise-6.x
• Merge into: master
• Upgrade eslint-plugin-promise to 6.0.0

Update dependency eslint-plugin-vue to v8

• Schedule: ["at any time"]
• Branch name: renovate/eslint-plugin-vue-8.x
• Merge into: master
• Upgrade eslint-plugin-vue to 8.3.0

Update dependency less to v4

• Schedule: ["at any time"]
• Branch name: renovate/less-4.x
• Merge into: master
• Upgrade less to 4.1.2

Update dependency less-loader to v10

• Schedule: ["at any time"]
• Branch name: renovate/less-loader-10.x
• Merge into: master
• Upgrade less-loader to 10.2.0

Update dependency org.hibernate.validator:hibernate-validator to v7

• Schedule: ["at any time"]
• Branch name: renovate/major-hibernate-validator
• Merge into: master
• Upgrade org.hibernate.validator:hibernate-validator to 7.0.2.Final

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or spam the project. See docs for prhourlylimit for details.

---

⚠ Dependency Lookup Warnings ⚠

Please correct - or verify that you can safely ignore - these lookup failures before you merge this PR.

• Failed to look up dependency wang.ismy.blb:aggregation-service
• Failed to look up dependency wang.ismy.blb:consumer-service-api
• Failed to look up dependency wang.ismy.blb:shop-service-api
• Failed to look up dependency wang.ismy.blb:product-service-api
• Failed to look up dependency wang.ismy.blb:cart-service-api
• Failed to look up dependency wang.ismy.blb:order-service-api
• Failed to look up dependency wang.ismy.blb:pay-service-api
• Failed to look up dependency wang.ismy.blb:upload-service-api
• Failed to look up dependency wang.ismy.blb:auth-service-api
• Failed to look up dependency wang.ismy.blb:parent
• Failed to look up dependency wang.ismy.blb:rider-service-api
• Failed to look up dependency wang.ismy.blb:seller-service-api
• Failed to look up dependency wang.ismy.blb:basic-service-api
• Failed to look up dependency wang.ismy.blb:basic-service-impl
• Failed to look up dependency wang.ismy.blb:cache-service-api
• Failed to look up dependency wang.ismy.blb:message-service-api
• Failed to look up dependency wang.ismy.blb:business-service-api
• Failed to look up dependency wang.ismy.blb:common
• Failed to look up dependency wang.ismy.blb:business-service-impl
• Failed to look up dependency wang.ismy.blb:service-govern

Files affected: blb-backend/aggregation-service/consumer-aggregation-service/pom.xml, blb-backend/aggregation-service/pom.xml, blb-backend/aggregation-service/rider-aggregation-service/pom.xml, blb-backend/aggregation-service/seller-aggregation-service/pom.xml, blb-backend/basic-service-api/auth-service-api/pom.xml, blb-backend/basic-service-api/cache-service-api/pom.xml, blb-backend/basic-service-api/message-service-api/pom.xml, blb-backend/basic-service-api/pom.xml, blb-backend/basic-service-api/upload-service-api/pom.xml, blb-backend/basic-service-impl/auth-service-impl/pom.xml, blb-backend/basic-service-impl/cache-service-impl/pom.xml, blb-backend/basic-service-impl/message-service-impl/pom.xml, blb-backend/basic-service-impl/pom.xml, blb-backend/basic-service-impl/upload-service-impl/pom.xml, blb-backend/business-service-api/cart-service-api/pom.xml, blb-backend/business-service-api/consumer-service-api/pom.xml, blb-backend/business-service-api/location-service-api/pom.xml, blb-backend/business-service-api/order-service-api/pom.xml, blb-backend/business-service-api/pay-service-api/pom.xml, blb-backend/business-service-api/pom.xml, blb-backend/business-service-api/product-service-api/pom.xml, blb-backend/business-service-api/rider-service-api/pom.xml, blb-backend/business-service-api/seller-service-api/pom.xml, blb-backend/business-service-api/shop-service-api/pom.xml, blb-backend/business-service-impl/cart-service-impl/pom.xml, blb-backend/business-service-impl/consumer-service-impl/pom.xml, blb-backend/business-service-impl/order-service-impl/pom.xml, blb-backend/business-service-impl/pay-service-impl/pom.xml, blb-backend/business-service-impl/pom.xml, blb-backend/business-service-impl/product-service-impl/pom.xml, blb-backend/business-service-impl/rider-service-impl/pom.xml, blb-backend/business-service-impl/seller-service-impl/pom.xml, blb-backend/business-service-impl/shop-service-impl/pom.xml, blb-backend/common/pom.xml, blb-backend/parent/pom.xml, blb-backend/service-govern/gateway-service/pom.xml, blb-backend/service-govern/pom.xml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.