chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• docker-compose.yml (docker-compose)
• .github/workflows/pull-request-check.yml (github-actions)
• package.json (npm)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 34 Pull Requests:

chore(deps): update dependency validator to v13.15.22 [security]

• Branch name: renovate/npm-validator-vulnerability
• Merge into: main
• Upgrade validator to 13.15.22

chore(deps): update dependency ajv to v8.18.0 [security]

• Branch name: renovate/npm-ajv-vulnerability
• Merge into: main
• Upgrade ajv to 8.18.0

chore(deps): update dependency @​biomejs/biome to v1.9.4

• Schedule: ["at any time"]
• Branch name: renovate/biomejs-biome-1.x
• Merge into: main
• Upgrade @biomejs/biome to 1.9.4

chore(deps): update dependency @​types/express to v4.17.25

• Schedule: ["at any time"]
• Branch name: renovate/express-4.x-lockfile
• Merge into: main
• Upgrade @types/express to 4.17.25

chore(deps): update dependency cors to v2.8.6

• Schedule: ["at any time"]
• Branch name: renovate/cors-2.x-lockfile
• Merge into: main
• Upgrade cors to 2.8.6
• Upgrade @types/cors to 2.8.19

chore(deps): update dependency tsc-alias to v1.8.16

• Schedule: ["at any time"]
• Branch name: renovate/tsc-alias-1.x-lockfile
• Merge into: main
• Upgrade tsc-alias to 1.8.16

chore(deps): update dependency @​types/node to v22.19.11

• Schedule: ["at any time"]
• Branch name: renovate/node-22.x-lockfile
• Merge into: main
• Upgrade @types/node to 22.19.11

chore(deps): update dependency @​types/validator to v13.15.10

• Schedule: ["at any time"]
• Branch name: renovate/validator-13.x-lockfile
• Merge into: main
• Upgrade @types/validator to 13.15.10

chore(deps): update dependency dotenv to v16.6.1

• Schedule: ["at any time"]
• Branch name: renovate/dotenv-16.x-lockfile
• Merge into: main
• Upgrade dotenv to 16.6.1

chore(deps): update dependency drizzle-kit to ^0.31.0

• Schedule: ["at any time"]
• Branch name: renovate/drizzle-kit-0.x
• Merge into: main
• Upgrade drizzle-kit to ^0.31.0

chore(deps): update dependency express to v5.2.1

• Schedule: ["at any time"]
• Branch name: renovate/express-5.x-lockfile
• Merge into: main
• Upgrade express to 5.2.1

chore(deps): update dependency express-zod-safe to v1.5.4

• Schedule: ["at any time"]
• Branch name: renovate/express-zod-safe-1.x-lockfile
• Merge into: main
• Upgrade express-zod-safe to 1.5.4

chore(deps): update dependency pg to v8.18.0

• Schedule: ["at any time"]
• Branch name: renovate/pg-8.x-lockfile
• Merge into: main
• Upgrade pg to 8.18.0
• Upgrade @types/pg to 8.16.0

chore(deps): update dependency supertest to v7.2.2

• Schedule: ["at any time"]
• Branch name: renovate/supertest-7.x-lockfile
• Merge into: main
• Upgrade supertest to 7.2.2

chore(deps): update dependency tsx to v4.21.0

• Schedule: ["at any time"]
• Branch name: renovate/tsx-4.x-lockfile
• Merge into: main
• Upgrade tsx to 4.21.0

chore(deps): update dependency typescript to v5.9.3

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x-lockfile
• Merge into: main
• Upgrade typescript to 5.9.3

chore(deps): update dependency yaml to v2.8.2

• Schedule: ["at any time"]
• Branch name: renovate/yaml-2.x-lockfile
• Merge into: main
• Upgrade yaml to 2.8.2

chore(deps): update dependency zod to v3.25.76

• Schedule: ["at any time"]
• Branch name: renovate/zod-3.x-lockfile
• Merge into: main
• Upgrade zod to 3.25.76

chore(deps): update dependency zod-validation-error to v3.5.4

• Schedule: ["at any time"]
• Branch name: renovate/zod-validation-error-3.x-lockfile
• Merge into: main
• Upgrade zod-validation-error to 3.5.4

chore(deps): update pnpm to v10.30.1

• Schedule: ["at any time"]
• Branch name: renovate/pnpm-10.x
• Merge into: main
• Upgrade pnpm to 10.30.1

fix(deps): update dependency drizzle-orm to ^0.45.0

• Schedule: ["at any time"]
• Branch name: renovate/drizzle-orm-0.x
• Merge into: main
• Upgrade drizzle-orm to ^0.45.0

fix(deps): update dependency drizzle-zod to ^0.8.0

• Schedule: ["at any time"]
• Branch name: renovate/drizzle-zod-0.x
• Merge into: main
• Upgrade drizzle-zod to ^0.8.0

chore(deps): update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to v6

chore(deps): update actions/setup-node action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-6.x
• Merge into: main
• Upgrade actions/setup-node to v6

chore(deps): update actions/upload-artifact action to v6

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/upload-artifact to v6

chore(deps): update dependency @​biomejs/biome to v2

• Schedule: ["at any time"]
• Branch name: renovate/biomejs-biome-2.x
• Merge into: main
• Upgrade @biomejs/biome to 2.4.4

chore(deps): update dependency @​types/express to v5

• Schedule: ["at any time"]
• Branch name: renovate/express-5.x
• Merge into: main
• Upgrade @types/express to ^5.0.0

chore(deps): update dependency @​types/node to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade @types/node to ^24.0.0

chore(deps): update postgres docker tag to v18

• Schedule: ["at any time"]
• Branch name: renovate/postgres-18.x
• Merge into: main
• Upgrade postgres to 18

fix(deps): update dependency dotenv to v17

• Schedule: ["at any time"]
• Branch name: renovate/dotenv-17.x
• Merge into: main
• Upgrade dotenv to ^17.0.0

fix(deps): update dependency express-zod-safe to v3

• Schedule: ["at any time"]
• Branch name: renovate/express-zod-safe-3.x
• Merge into: main
• Upgrade express-zod-safe to ^3.0.0

fix(deps): update dependency zod to v4

• Schedule: ["at any time"]
• Branch name: renovate/zod-4.x
• Merge into: main
• Upgrade zod to ^4.0.0

fix(deps): update dependency zod-openapi to v5

• Schedule: ["at any time"]
• Branch name: renovate/zod-openapi-5.x
• Merge into: main
• Upgrade zod-openapi to ^5.0.0

fix(deps): update dependency zod-validation-error to v5

• Schedule: ["at any time"]
• Branch name: renovate/zod-validation-error-5.x
• Merge into: main
• Upgrade zod-validation-error to ^5.0.0

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud