chore: Configure Renovate

[CodesphereBot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• .github/workflows/main.yml (github-actions)
• package.json (npm)
• server/package.json (npm)
• renovate.json (renovate-config-presets)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for development dependencies.
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
• Run lock file maintenance (updates) early Monday mornings.
• Use semantic prefixes for commit messages and PR titles.
• Raise PR when vulnerability alerts are detected.

---

What to Expect

With your current configuration, Renovate will create 38 Pull Requests:

chore(deps): update dependency ws to v8.17.1 [security]

• Branch name: renovate/npm-ws-vulnerability
• Merge into: main
• Upgrade ws to 8.17.1

chore(deps): update dependency axios to v1.15.2 [security]

• Branch name: renovate/npm-axios-vulnerability
• Merge into: main
• Upgrade axios to 1.15.2

chore(deps): update dependency rollup to v2.80.0 [security]

• Branch name: renovate/npm-rollup-vulnerability
• Merge into: main
• Upgrade rollup to 2.80.0

chore(deps): update dependency webpack to v5.104.1 [security]

• Branch name: renovate/npm-webpack-vulnerability
• Merge into: main
• Upgrade webpack to 5.104.1

chore(deps): update dependency svelte to v5 [security]

• Branch name: renovate/npm-svelte-vulnerability
• Merge into: main
• Upgrade svelte to ^5.0.0

chore(deps): replace dependency rollup-plugin-terser with @​rollup/plugin-terser ^0.1.0

• Schedule: ["at any time"]
• Branch name: renovate/rollup-plugin-terser-replacement
• Merge into: main
• Upgrade rollup-plugin-terser to ^0.1.0

chore(deps): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: main
• Pin @rollup/plugin-commonjs to 25.0.8
• Pin @rollup/plugin-html to 1.0.3
• Pin @rollup/plugin-json to 6.1.0
• Pin @rollup/plugin-node-resolve to 15.2.3
• Pin @rollup/plugin-typescript to 11.1.6
• Pin @tsconfig/svelte to 5.0.4
• Pin @types/mocha to 10.0.6
• Pin @types/node to 18.19.33
• Pin @types/request to 2.48.12
• Pin @types/vscode to 1.89.0
• Pin @types/vscode-webview to 1.57.5
• Pin @types/ws to 8.5.10
• Pin @typescript-eslint/eslint-plugin to 7.10.0
• Pin @typescript-eslint/parser to 7.10.0
• Pin @vscode/test-cli to 0.0.8
• Pin @vscode/test-electron to 2.3.10
• Upgrade actions/checkout to f43a0e5ff2bd294095638e18286ca9a3d1956744
• Pin cloudflared to 0.5.1
• Upgrade codesphere-cloud/gh-action-deploy to 9dbbe8d245b6d14ae9998deb7cdc2d73cd75f8ca
• Pin concurrently to 8.2.2
• Pin eslint to 8.57.0
• Pin fs to 0.0.1-security
• Pin path to 0.12.7
• Pin rollup-plugin-svelte to 6.1.1
• Pin rollup-plugin-svg to 2.0.0
• Pin rollup-plugin-terser to 7.0.2
• Pin svelte-check to 3.7.1
• Pin svelte-preprocess to 5.1.4
• Pin svelte2tsx to 0.7.8
• Pin ts-loader to 9.5.1
• Pin typescript to 5.4.5
• Pin webpack-cli to 5.1.4

chore(deps): update dependency @​vscode/test-cli to ^0.0.12

• Schedule: ["at any time"]
• Branch name: renovate/vscode-test-cli-0.x
• Merge into: main
• Upgrade @vscode/test-cli to ^0.0.12

chore(deps): update dependency svelte2tsx to ^0.7.8

• Schedule: ["at any time"]
• Branch name: renovate/svelte2tsx-0.x
• Merge into: main
• Upgrade svelte2tsx to ^0.7.8

chore(deps): update dependency utf-8-validate to v6.0.6

• Schedule: ["at any time"]
• Branch name: renovate/utf-8-validate-6.x-lockfile
• Merge into: main
• Upgrade utf-8-validate to 6.0.6

chore(deps): update dependency @​rollup/plugin-html to ^1.1.0

• Schedule: ["at any time"]
• Branch name: renovate/rollup-plugin-html-1.x
• Merge into: main
• Upgrade @rollup/plugin-html to ^1.1.0

chore(deps): update dependency @​rollup/plugin-node-resolve to ^15.3.1

• Schedule: ["at any time"]
• Branch name: renovate/rollup-plugin-node-resolve-15.x
• Merge into: main
• Upgrade @rollup/plugin-node-resolve to ^15.3.1

chore(deps): update dependency @​types/vscode to ^1.89.0

• Schedule: ["at any time"]
• Branch name: renovate/vscode-1.x
• Merge into: main
• Upgrade @types/vscode to ^1.89.0

chore(deps): update dependency @​types/ws to ^8.18.1

• Schedule: ["at any time"]
• Branch name: renovate/ws-8.x
• Merge into: main
• Upgrade @types/ws to ^8.18.1

chore(deps): update dependency @​vscode/test-electron to ^2.5.2

• Schedule: ["at any time"]
• Branch name: renovate/vscode-test-electron-2.x
• Merge into: main
• Upgrade @vscode/test-electron to ^2.5.2

chore(deps): update dependency bufferutil to v4.1.0

• Schedule: ["at any time"]
• Branch name: renovate/bufferutil-4.x-lockfile
• Merge into: main
• Upgrade bufferutil to 4.1.0

chore(deps): update dependency cloudflared to ^0.7.0

• Schedule: ["at any time"]
• Branch name: renovate/cloudflared-0.x
• Merge into: main
• Upgrade cloudflared to ^0.7.0

chore(deps): update dependency svelte-check to ^3.7.1

• Schedule: ["at any time"]
• Branch name: renovate/svelte-check-3.x
• Merge into: main
• Upgrade svelte-check to ^3.7.1

chore(deps): update dependency typescript to ^5.9.3

• Schedule: ["at any time"]
• Branch name: renovate/typescript-5.x
• Merge into: main
• Upgrade typescript to ^5.9.3

chore(deps): update typescript-eslint monorepo to ^7.10.0

• Schedule: ["at any time"]
• Branch name: renovate/typescript-eslint-monorepo
• Merge into: main
• Upgrade @typescript-eslint/eslint-plugin to ^7.10.0
• Upgrade @typescript-eslint/parser to ^7.10.0

chore(deps): update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to de0fac2e4500dabe0009e67214ff5f5447ce83dd

chore(deps): update dependency @​rollup/plugin-commonjs to v29

• Schedule: ["at any time"]
• Branch name: renovate/rollup-plugin-commonjs-29.x
• Merge into: main
• Upgrade @rollup/plugin-commonjs to ^29.0.0

chore(deps): update dependency @​rollup/plugin-html to v2

• Schedule: ["at any time"]
• Branch name: renovate/rollup-plugin-html-2.x
• Merge into: main
• Upgrade @rollup/plugin-html to ^2.0.0

chore(deps): update dependency @​rollup/plugin-node-resolve to v16

• Schedule: ["at any time"]
• Branch name: renovate/rollup-plugin-node-resolve-16.x
• Merge into: main
• Upgrade @rollup/plugin-node-resolve to ^16.0.0

chore(deps): update dependency @​rollup/plugin-typescript to v12

• Schedule: ["at any time"]
• Branch name: renovate/rollup-plugin-typescript-12.x
• Merge into: main
• Upgrade @rollup/plugin-typescript to ^12.0.0

chore(deps): update dependency @​types/node to v24

• Schedule: ["at any time"]
• Branch name: renovate/node-24.x
• Merge into: main
• Upgrade @types/node to 24.x

chore(deps): update dependency concurrently to v9

• Schedule: ["at any time"]
• Branch name: renovate/concurrently-9.x
• Merge into: main
• Upgrade concurrently to ^9.0.0

chore(deps): update dependency eslint to v10

• Schedule: ["at any time"]
• Branch name: renovate/major-eslint-monorepo
• Merge into: main
• Upgrade eslint to ^10.0.0

chore(deps): update dependency rollup-plugin-svelte to v7

• Schedule: ["at any time"]
• Branch name: renovate/rollup-plugin-svelte-7.x
• Merge into: main
• Upgrade rollup-plugin-svelte to ^7.0.0

chore(deps): update dependency svelte-check to v4

• Schedule: ["at any time"]
• Branch name: renovate/svelte-check-4.x
• Merge into: main
• Upgrade svelte-check to ^4.0.0

chore(deps): update dependency svelte-preprocess to v6

• Schedule: ["at any time"]
• Branch name: renovate/svelte-preprocess-6.x
• Merge into: main
• Upgrade svelte-preprocess to ^6.0.0

chore(deps): update dependency typescript to v6

• Schedule: ["at any time"]
• Branch name: renovate/typescript-6.x
• Merge into: main
• Upgrade typescript to ^6.0.0

chore(deps): update dependency webpack-cli to v7

• Schedule: ["at any time"]
• Branch name: renovate/webpack-cli-7.x
• Merge into: main
• Upgrade webpack-cli to ^7.0.0

chore(deps): update typescript-eslint monorepo to v8 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-typescript-eslint-monorepo
• Merge into: main
• Upgrade @typescript-eslint/eslint-plugin to ^8.0.0
• Upgrade @typescript-eslint/parser to ^8.0.0

fix(deps): update dependency @​vscode/vsce to v3

• Schedule: ["at any time"]
• Branch name: renovate/vscode-vsce-3.x
• Merge into: main
• Upgrade @vscode/vsce to ^3.0.0

fix(deps): update dependency express to v5

• Schedule: ["at any time"]
• Branch name: renovate/express-5.x
• Merge into: main
• Upgrade express to ^5.0.0

fix(deps): update dependency n to v10

• Schedule: ["at any time"]
• Branch name: renovate/n-10.x
• Merge into: main
• Upgrade n to ^10.0.0

chore(deps): lock file maintenance

• Schedule: ["* 0-3 * * 1"]
• Branch name: renovate/lock-file-maintenance
• Merge into: main
• Regenerate lock files to use latest dependency versions

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.