chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/backport.yml (github-actions)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/dependency-scan.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• agent/pom.xml (maven)
• common/pom.xml (maven)
• exporter/pom.xml (maven)
• pom.xml (maven)
• protocol/pom.xml (maven)
• server/pom.xml (maven)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 55 Pull Requests:

fix(deps): update dependency ch.qos.logback:logback-classic to v1.2.13 [security]

• Branch name: renovate/maven-ch.qos.logback-logback-classic-vulnerability
• Merge into: main
• Upgrade ch.qos.logback:logback-classic to 1.2.13

fix(deps): update dependency org.scala-lang:scala-library to v2.13.9 [security]

• Branch name: renovate/maven-org.scala-lang-scala-library-vulnerability
• Merge into: main
• Upgrade org.scala-lang:scala-library to 2.13.9

fix(deps): update dependency com.google.guava:guava to v32 [security]

• Branch name: renovate/maven-com.google.guava-guava-vulnerability
• Merge into: main
• Upgrade com.google.guava:guava to 32.0.0-android

fix(deps): update dependency org.yaml:snakeyaml to v2 [security]

• Branch name: renovate/maven-org.yaml-snakeyaml-vulnerability
• Merge into: main
• Upgrade org.yaml:snakeyaml to 2.0

chore(deps): update actions/cache digest to 704facf

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-digest
• Merge into: main
• Upgrade actions/cache to 704facf57e6136b1bc63b828d79edcd491f0ee84

chore(deps): update actions/checkout digest to b4ffde6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-digest
• Merge into: main
• Upgrade actions/checkout to b4ffde65f46336ab88eb53be808477a3936bae11

chore(deps): update actions/setup-java digest to 3232623

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-digest
• Merge into: main
• Upgrade actions/setup-java to 3232623d9c428cc5f228a01a2ae8d2d70f79775e

chore(deps): update actions/upload-release-asset digest to ef2adfe

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-release-asset-digest
• Merge into: main
• Upgrade actions/upload-release-asset to ef2adfe8cb8ebfa540930c452c576b3819990faa

chore(deps): update camunda-community-hub/community-action-maven-release digest to de8be61

• Schedule: ["at any time"]
• Branch name: renovate/camunda-community-hub-community-action-maven-release-digest
• Merge into: main
• Upgrade camunda-community-hub/community-action-maven-release to de8be6187dbd1873523d2c1ba3ef7832652a9525

chore(deps): update actions/cache action to v2.1.8

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-2.x
• Merge into: main
• Upgrade actions/cache to v2.1.8

chore(deps): update dependency kr.motd.maven:os-maven-plugin to v1.7.1

• Schedule: ["at any time"]
• Branch name: renovate/extension.version.os-maven-plugin
• Merge into: main
• Upgrade kr.motd.maven:os-maven-plugin to 1.7.1

fix(deps): update dependency io.netty:netty-bom to v4.1.103.final

• Schedule: ["at any time"]
• Branch name: renovate/netty-monorepo
• Merge into: main
• Upgrade io.netty:netty-bom to 4.1.103.Final

fix(deps): update version.slf4j to v1.7.36

• Schedule: ["at any time"]
• Branch name: renovate/version.slf4j
• Merge into: main
• Upgrade org.slf4j:slf4j-simple to 1.7.36
• Upgrade org.slf4j:slf4j-api to 1.7.36

chore(deps): update dependency com.coveo:fmt-maven-plugin to v2.13

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.fmt
• Merge into: main
• Upgrade com.coveo:fmt-maven-plugin to 2.13

chore(deps): update dependency com.mycila:license-maven-plugin to v4.3

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.license
• Merge into: main
• Upgrade com.mycila:license-maven-plugin to 4.3

chore(deps): update dependency org.apache.maven.plugins:maven-checkstyle-plugin to v3.3.1

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.checkstyle
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-checkstyle-plugin to 3.3.1

chore(deps): update dependency org.apache.maven.plugins:maven-clean-plugin to v3.3.2

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.clean
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-clean-plugin to 3.3.2

chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.11.0

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.compiler
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.11.0

chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.6.1

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.dependency
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-dependency-plugin to 3.6.1

chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.4.1

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.enforcer
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-enforcer-plugin to 3.4.1

chore(deps): update dependency org.apache.maven.plugins:maven-failsafe-plugin to v3.2.3

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.failsafe
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 3.2.3

chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.5.1

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.shade
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-shade-plugin to 3.5.1

chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.2.3

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.surefire
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 3.2.3

chore(deps): update dependency org.revapi:revapi-java to v0.28.1

• Schedule: ["at any time"]
• Branch name: renovate/version.revapi
• Merge into: main
• Upgrade org.revapi:revapi-java to 0.28.1

chore(deps): update dependency org.revapi:revapi-maven-plugin to v0.15.0

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.revapi
• Merge into: main
• Upgrade org.revapi:revapi-maven-plugin to 0.15.0

chore(deps): update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v3.10.0.2594

• Schedule: ["at any time"]
• Branch name: renovate/plugin.version.sonar
• Merge into: main
• Upgrade org.sonarsource.scanner.maven:sonar-maven-plugin to 3.10.0.2594

chore(deps): update version.zeebe to v1.3.14

• Schedule: ["at any time"]
• Branch name: renovate/version.zeebe
• Merge into: main
• Upgrade io.camunda:zeebe-build-tools to 1.3.14
• Upgrade io.camunda:zeebe-bom to 1.3.14

fix(deps): update dependency com.fasterxml.jackson:jackson-bom to v2.16.0

• Schedule: ["at any time"]
• Branch name: renovate/version.jackson
• Merge into: main
• Upgrade com.fasterxml.jackson:jackson-bom to 2.16.0

fix(deps): update dependency com.google.api.grpc:proto-google-common-protos to v2.29.0

• Schedule: ["at any time"]
• Branch name: renovate/version.google-protos
• Merge into: main
• Upgrade com.google.api.grpc:proto-google-common-protos to 2.29.0

fix(deps): update dependency com.google.errorprone:error_prone_annotations to v2.23.0

• Schedule: ["at any time"]
• Branch name: renovate/version.errorprone
• Merge into: main
• Upgrade com.google.errorprone:error_prone_annotations to 2.23.0

fix(deps): update dependency com.google.protobuf:protobuf-bom to v3.25.1

• Schedule: ["at any time"]
• Branch name: renovate/version.protobuf
• Merge into: main
• Upgrade com.google.protobuf:protobuf-bom to 3.25.1

fix(deps): update dependency io.grpc:grpc-bom to v1.60.0

• Schedule: ["at any time"]
• Branch name: renovate/version.grpc
• Merge into: main
• Upgrade io.grpc:grpc-bom to 1.60.0

fix(deps): update dependency io.prometheus:simpleclient to v0.16.0

• Schedule: ["at any time"]
• Branch name: renovate/prometheus-simpleclient-monorepo
• Merge into: main
• Upgrade io.prometheus:simpleclient to 0.16.0

fix(deps): update dependency io.zeebe:zeebe-test-container to v3.6.0

• Schedule: ["at any time"]
• Branch name: renovate/version.zeebe-test-container
• Merge into: main
• Upgrade io.zeebe:zeebe-test-container to 3.6.0

fix(deps): update dependency net.java.dev.jna:jna to v5.14.0

• Schedule: ["at any time"]
• Branch name: renovate/jna-monorepo
• Merge into: main
• Upgrade net.java.dev.jna:jna to 5.14.0

fix(deps): update dependency org.assertj:assertj-core to v3.24.2

• Schedule: ["at any time"]
• Branch name: renovate/version.assertj
• Merge into: main
• Upgrade org.assertj:assertj-core to 3.24.2

fix(deps): update dependency org.awaitility:awaitility to v4.2.0

• Schedule: ["at any time"]
• Branch name: renovate/version.awaitility
• Merge into: main
• Upgrade org.awaitility:awaitility to 4.2.0

fix(deps): update dependency org.camunda:camunda-release-parent to v3.9.1

• Schedule: ["at any time"]
• Branch name: renovate/org.camunda-camunda-release-parent-3.x
• Merge into: main
• Upgrade org.camunda:camunda-release-parent to 3.9.1

fix(deps): update dependency org.graalvm.sdk:graal-sdk to v21.3.8

• Schedule: ["at any time"]
• Branch name: renovate/version.graalvm
• Merge into: main
• Upgrade org.graalvm.sdk:graal-sdk to 21.3.8

fix(deps): update dependency org.objenesis:objenesis to v3.3

• Schedule: ["at any time"]
• Branch name: renovate/org.objenesis-objenesis-3.x
• Merge into: main
• Upgrade org.objenesis:objenesis to 3.3

fix(deps): update junit5 monorepo to v5.10.1

• Schedule: ["at any time"]
• Branch name: renovate/junit5-monorepo
• Merge into: main
• Upgrade org.junit.jupiter:junit-jupiter-params to 5.10.1
• Upgrade org.junit.jupiter:junit-jupiter-engine to 5.10.1
• Upgrade org.junit.jupiter:junit-jupiter-api to 5.10.1

fix(deps): update mockito monorepo to v4.11.0

• Schedule: ["at any time"]
• Branch name: renovate/mockito-monorepo
• Merge into: main
• Upgrade org.mockito:mockito-junit-jupiter to 4.11.0
• Upgrade org.mockito:mockito-core to 4.11.0

fix(deps): update testcontainers-java monorepo to v1.19.3

• Schedule: ["at any time"]
• Branch name: renovate/testcontainers-java-monorepo
• Merge into: main
• Upgrade org.testcontainers:junit-jupiter to 1.19.3
• Upgrade org.testcontainers:testcontainers to 1.19.3

fix(deps): update version.picocli to v4.7.5

• Schedule: ["at any time"]
• Branch name: renovate/version.picocli
• Merge into: main
• Upgrade info.picocli:picocli-codegen to 4.7.5
• Upgrade info.picocli:picocli to 4.7.5

chore(deps): update actions/cache action to v3

• Schedule: ["at any time"]
• Branch name: renovate/actions-cache-3.x
• Merge into: main
• Upgrade actions/cache to v3.3.2

chore(deps): update actions/checkout action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to v4

chore(deps): update actions/setup-java action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-4.x
• Merge into: main
• Upgrade actions/setup-java to v4

chore(deps): update actions/upload-artifact action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-4.x
• Merge into: main
• Upgrade actions/upload-artifact to v4

chore(deps): update dependency org.owasp:dependency-check-maven to v9

• Schedule: ["at any time"]
• Branch name: renovate/major-plugin.version.owasp
• Merge into: main
• Upgrade org.owasp:dependency-check-maven to 9.0.5

chore(deps): update dependency ubuntu to v22

• Schedule: ["at any time"]
• Branch name: renovate/ubuntu-22.x
• Merge into: main
• Upgrade ubuntu to 22.04

chore(deps): update github/codeql-action action to v3

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-3.x
• Merge into: main
• Upgrade github/codeql-action to v3

chore(deps): update version.zeebe to v8 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-version.zeebe
• Merge into: main
• Upgrade io.camunda:zeebe-build-tools to 8.3.4
• Upgrade io.camunda:zeebe-bom to 8.3.4

fix(deps): update dependency org.graalvm.sdk:graal-sdk to v23

• Schedule: ["at any time"]
• Branch name: renovate/major-version.graalvm
• Merge into: main
• Upgrade org.graalvm.sdk:graal-sdk to 23.1.1

fix(deps): update mockito monorepo to v5 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-mockito-monorepo
• Merge into: main
• Upgrade org.mockito:mockito-junit-jupiter to 5.8.0
• Upgrade org.mockito:mockito-core to 5.8.0

fix(deps): update version.slf4j to v2 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-version.slf4j
• Merge into: main
• Upgrade org.slf4j:slf4j-simple to 2.0.9
• Upgrade org.slf4j:slf4j-api to 2.0.9

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate. View repository job log here.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. If you believe this is a mistake, please reply to this comment to keep it open. If there isn't one already, a PR to fix or at least reproduce the problem in a test case will always help us get back on track to tackle this.