chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .github/workflows/build.yml (github-actions)
• .github/workflows/release-patch.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• app/pom.xml (maven)
• bom/pom.xml (maven)
• core/pom.xml (maven)
• graphql/api/pom.xml (maven)
• graphql/maven-plugin/pom.xml (maven)
• graphql/scalars/pom.xml (maven)
• handler-spi/pom.xml (maven)
• it/pom.xml (maven)
• model/pom.xml (maven)
• pom.xml (maven)
• repository/api/pom.xml (maven)
• repository/kafka/pom.xml (maven)
• spring-boot-starter/pom.xml (maven)
• state/api/pom.xml (maven)
• state/avro/pom.xml (maven)
• state/core/pom.xml (maven)
• state/example/pom.xml (maven)
• state/graphql-sender/pom.xml (maven)
• state/it/pom.xml (maven)
• state/kafka-receiver/pom.xml (maven)
• state/kafka-sender/pom.xml (maven)
• .mvn/wrapper/maven-wrapper.properties (maven-wrapper)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Pin all dependency versions except peerDependencies.
• Special rules covering major version updates.
• Rules governing github actions.
• Weekly schedule on early Monday mornings (before 4 AM).
• Base Renovate configuration for Expedia Group projects
• Run Renovate on following schedule: * 0-3 * * 1

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 21 Pull Requests:

fix(deps): update build com.thoughtworks.xstream:xstream from v1.4.15 to v1.4.21 [security]

• Branch name: renovate/maven-com.thoughtworks.xstream-xstream-vulnerability
• Merge into: master
• Upgrade com.thoughtworks.xstream:xstream to 1.4.21

fix(deps): update compile org.apache.avro:avro from v1.11.3 to v1.11.4 [security]

• Branch name: renovate/maven-org.apache.avro-avro-vulnerability
• Merge into: master
• Upgrade org.apache.avro:avro to 1.11.4

feat(deps): update compile com.graphql-java:graphql-java from v21.0 to v21.5 [security]

• Branch name: renovate/maven-com.graphql-java-graphql-java-vulnerability
• Merge into: master
• Upgrade com.graphql-java:graphql-java to 21.5

fix(deps): update compile com.graphql-java-kickstart:graphql-java-tools from v13.1.0 to v13.1.1

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/graphql-java-tools.version
• Merge into: master
• Upgrade com.graphql-java-kickstart:graphql-java-tools to 13.1.1

feat(deps): update build org.apache.avro:avro-maven-plugin from v1.11.3 to v1.12.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/avro.version
• Merge into: master
• Upgrade org.apache.avro:avro-maven-plugin to 1.12.0

feat(deps): update build org.apache.maven.plugins:maven-compiler-plugin from v3.8.0 to v3.13.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/maven-compiler-plugin.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.13.0

feat(deps): update build org.apache.maven.plugins:maven-enforcer-plugin from v3.0.0-m2 to v3.5.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/maven-enforcer-plugin.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-enforcer-plugin to 3.5.0

feat(deps): update build org.apache.maven.plugins:maven-failsafe-plugin from v3.0.0-m3 to v3.5.2

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/maven-failsafe-plugin.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 3.5.2

feat(deps): update build org.apache.maven.plugins:maven-javadoc-plugin from v3.1.0 to v3.11.2

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/maven-javadoc-plugin.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-javadoc-plugin to 3.11.2

feat(deps): update build org.apache.maven.plugins:maven-plugin-plugin from v3.10.1 to v3.15.1

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/maven-plugin-plugin.version
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-plugin-plugin to 3.15.1

feat(deps): update build org.codehaus.mojo:build-helper-maven-plugin from v3.1.0 to v3.6.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/build-helper-maven-plugin.version
• Merge into: master
• Upgrade org.codehaus.mojo:build-helper-maven-plugin to 3.6.0

feat(deps): update compile com.graphql-java-kickstart:graphql-spring-boot-starter from v15.0.0 to v15.1.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/graphql-spring-boot.version
• Merge into: master
• Upgrade com.graphql-java-kickstart:graphql-spring-boot-starter to 15.1.0

feat(deps): update confluent.version from v7.7.2 to v7.8.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/confluent.version
• Merge into: master
• Upgrade io.confluent:kafka-avro-serializer to 7.8.0
• Upgrade io.confluent:kafka-streams-avro-serde to 7.8.0

feat(deps): update dependency maven from v3.6.0 to v3.9.9

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/maven-3.x
• Merge into: master
• Upgrade maven to 3.9.9

feat(deps): update import org.springframework.boot:spring-boot-dependencies from v3.3.6 to v3.4.0

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/spring-boot
• Merge into: master
• Upgrade org.springframework.boot:spring-boot-dependencies to 3.4.0

chore(deps): update actions/cache action from vv2 to v4

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/actions-cache-4.x
• Merge into: master
• Upgrade actions/cache to v4

chore(deps): update actions/checkout action from vv2 to v4

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: master
• Upgrade actions/checkout to v4

chore(deps): update actions/setup-java action to v4

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/actions-setup-java-4.x
• Merge into: master
• Upgrade actions/setup-java to v4

feat(deps): update compile com.apollographql.apollo:apollo-runtime from v2.5.14 to v4

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/major-apollo-graphql-packages
• Merge into: master
• Upgrade com.apollographql.apollo:apollo-runtime to 4.1.0

feat(deps): update compile com.graphql-java-kickstart:graphql-java-tools from v13.1.0 to v14

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/major-graphql-java-tools.version
• Merge into: master
• Upgrade com.graphql-java-kickstart:graphql-java-tools to 14.0.0

feat(deps): update github-runner ubuntu from v20.04 to v24

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/ubuntu-24.x
• Merge into: master
• Upgrade ubuntu to 24.04

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.