chore: Configure Renovate by cognigy-renovate[bot] · Pull Request #277 · Cognigy/chat-components

cognigy-renovate · 2026-09-10T14:04:58Z

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

Detected Package Files

.github/workflows/a11y.yml (github-actions)
.github/workflows/deploy-pages.yml (github-actions)
.github/workflows/dom-compat.yml (github-actions)
.github/workflows/format.yml (github-actions)
.github/workflows/lint.yml (github-actions)
.github/workflows/publish.yml (github-actions)
.github/workflows/release.yml (github-actions)
.github/workflows/sonarqube.yml (github-actions)
.github/workflows/test.yml (github-actions)
package.json (npm)
renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

Start dependency updates only once this onboarding PR is merged
Enable Renovate Dependency Dashboard creation.
Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
Group known monorepo packages together.
Use curated list of recommended non-monorepo package groupings.
Show only the Age and Confidence Merge Confidence badges for pull requests.
Apply crowd-sourced package replacement rules.
Apply crowd-sourced workarounds for known problems with packages.
Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
Correctly link to the source code for golang.org/x packages
Link to pkg.go.dev/... for golang.org/x packages' title
Provide a link to octochangelog's improved breakdown for Renovate's changelogs
Pin Docker digests.
Pin github-action digests.
Enable Renovate configuration migration PRs when needed.
Pin dependency versions for development dependencies.
Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
Run lock file maintenance (updates) early Monday mornings.
Use semantic prefixes for commit messages and PR titles.
If Renovate detects semantic commits, it will use semantic commit type chore for all commits.
Enable Renovate Dependency Dashboard creation.
Automerge digest upgrades if they pass tests.
Preserve (but continue to upgrade) any existing SemVer ranges.
Group known monorepo packages together.
Use curated list of recommended non-monorepo package groupings.
Apply crowd-sourced package replacement rules.
Apply crowd-sourced workarounds for known problems with packages.
Show OpenSSF badge on pull requests.
Pin github-action digests.
Convert pinned GitHub Action digests to SemVer.

What to Expect

With your current configuration, Renovate will create 37 Pull Requests:

chore(deps): Update dependency dompurify to v3.4.13 [SECURITY]

Schedule: ["at any time"]
Branch name: renovate/npm-dompurify-vulnerability
Merge into: main
Upgrade dompurify to 3.4.13

chore(deps): Update dependency moment to v2.31.0 [SECURITY]

Schedule: ["at any time"]
Branch name: renovate/npm-moment-vulnerability
Merge into: main
Upgrade moment to 2.31.0

chore(deps): Update dependency vite to v7.3.5 [SECURITY]

Schedule: ["at any time"]
Branch name: renovate/npm-vite-vulnerability
Merge into: main
Upgrade vite to 7.3.5

chore(deps): Update dependency vitest to v4 [SECURITY]

Schedule: ["at any time"]
Branch name: renovate/npm-vitest-vulnerability
Merge into: main
Upgrade vitest to ^4.0.0

chore(deps): Pin dependencies

Schedule: ["at any time"]
Branch name: renovate/pin-dependencies
Merge into: main
Upgrade SonarSource/sonarqube-scan-action to c7ee0f9df90b7aa20e8dcf9695dcfe2e7da5b4f2
Upgrade ergebnis/.github to 3f92fddff613c9e5f78ceb452b4c7ee93573be6b
Upgrade github/codeql-action to b8d3b6e8af63cde30bdc382c0bc28114f4346c88
Upgrade technote-space/package-version-check-action to 5b8670322cb31a68e5252c2dc7bc0016f7701ce6

chore(deps): Update dependency @cognigy/socket-client to v5.0.0-beta.26

Schedule: ["at any time"]
Branch name: renovate/devdependencies-(non-grouped)
Merge into: main
Upgrade @cognigy/socket-client to 5.0.0-beta.26

chore(deps): Update dependency adaptivecards to v2.11.3

Schedule: ["at any time"]
Branch name: renovate/adaptivecards-2.x
Merge into: main
Upgrade adaptivecards to 2.11.3

chore(deps): Update dependency react-player to v2.16.1

Schedule: ["at any time"]
Branch name: renovate/react-player-2.x
Merge into: main
Upgrade react-player to 2.16.1

chore(deps): Update dependency react-tooltip to v5.30.1

Schedule: ["at any time"]
Branch name: renovate/react-tooltip-5.x
Merge into: main
Upgrade react-tooltip to 5.30.1

chore(deps): Update dependency @fontsource/figtree to v5.3.0

Schedule: ["at any time"]
Branch name: renovate/fontsource-monorepo
Merge into: main
Upgrade @fontsource/figtree to 5.3.0

chore(deps): Update dependency eslint-plugin-react-refresh to ^0.5.0

Schedule: ["at any time"]
Branch name: renovate/eslint
Merge into: main
Upgrade eslint-plugin-react-refresh to ^0.5.0

chore(deps): Update dependency prettier to v3.9.9

Schedule: ["at any time"]
Branch name: renovate/prettier
Merge into: main
Upgrade prettier to 3.9.9

chore(deps): Update dependency react-markdown to v9.1.0

Schedule: ["at any time"]
Branch name: renovate/remark
Merge into: main
Upgrade react-markdown to 9.1.0

chore(deps): Update ergebnis/.github action to v1.13.4

Schedule: ["at any time"]
Branch name: renovate/ergebnis-.github-1.x
Merge into: main
Upgrade ergebnis/.github to 07ba5718eac189644381e5972cd671c80c135ae7

chore(deps): Update github-official-actions

Schedule: ["at any time"]
Branch name: renovate/github-official-actions
Merge into: main
Upgrade actions/checkout to 11d5960a326750d5838078e36cf38b85af677262
Upgrade actions/checkout to d23441a48e516b6c34aea4fa41551a30e30af803
Upgrade actions/checkout to a37ce9120846195fa4ece8f58b268e6043cb2f26
Upgrade actions/configure-pages to 983d7736d9b0ae728b81ab479565c72886d7745b
Upgrade actions/deploy-pages to d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e
Upgrade actions/setup-node to 3235b876344d2a9aa001b8d1453c930bba69e610
Upgrade actions/setup-node to 49933ea5288caeca8642d1e84afbd3f7d6820020
Upgrade actions/upload-pages-artifact to 56afc609e74202658d3ffba0e8f6dda462b719fa

chore(deps): Update github/codeql-action action to v2.28.1

Schedule: ["at any time"]
Branch name: renovate/github-codeql-action-2.x
Merge into: main
Upgrade github/codeql-action to b8d3b6e8af63cde30bdc382c0bc28114f4346c88

chore(deps): Update SonarSource/sonarqube-scan-action action to v7.2.1

Schedule: ["at any time"]
Branch name: renovate/sonarsource-sonarqube-scan-action-7.x
Merge into: main
Upgrade SonarSource/sonarqube-scan-action to c7ee0f9df90b7aa20e8dcf9695dcfe2e7da5b4f2

chore(deps): Update technote-space/package-version-check-action action to v1.9.3

Schedule: ["at any time"]
Branch name: renovate/technote-space-package-version-check-action-1.x
Merge into: main
Upgrade technote-space/package-version-check-action to 5b8670322cb31a68e5252c2dc7bc0016f7701ce6

chore(deps): Update dependency @testing-library/jest-dom to v7

Schedule: ["at any time"]
Branch name: renovate/major-testing-library-monorepo
Merge into: main
Upgrade @testing-library/jest-dom to ^7.0.0

chore(deps): Update dependency adaptivecards to v3

Schedule: ["at any time"]
Branch name: renovate/adaptivecards-3.x
Merge into: main
Upgrade adaptivecards to 3.0.6

chore(deps): Update dependency eslint to v10

Schedule: ["at any time"]
Branch name: renovate/major-eslint-monorepo
Merge into: main
Upgrade eslint to ^10.0.0

chore(deps): Update dependency jsdom to v30

Schedule: ["at any time"]
Branch name: renovate/jsdom-30.x
Merge into: main
Upgrade jsdom to ^30.0.0

chore(deps): Update dependency lint-staged to v17

Schedule: ["at any time"]
Branch name: renovate/lint-staged-17.x
Merge into: main
Upgrade lint-staged to ^17.0.0

chore(deps): Update dependency react-markdown to v10

Schedule: ["at any time"]
Branch name: renovate/major-remark
Merge into: main
Upgrade react-markdown to 10.1.0

chore(deps): Update dependency react-player to v3

Schedule: ["at any time"]
Branch name: renovate/react-player-3.x
Merge into: main
Upgrade react-player to 3.4.0

chore(deps): Update dependency react-tooltip to v6

Schedule: ["at any time"]
Branch name: renovate/react-tooltip-6.x
Merge into: main
Upgrade react-tooltip to 6.0.8

chore(deps): Update dependency swiper to v14

Schedule: ["at any time"]
Branch name: renovate/swiper-14.x
Merge into: main
Upgrade swiper to ^14.0.0

chore(deps): Update dependency typescript to v7

Schedule: ["at any time"]
Branch name: renovate/typescript-7.x
Merge into: main
Upgrade typescript to ^7.0.0

chore(deps): Update dependency vite-plugin-css-injected-by-js to v5

Schedule: ["at any time"]
Branch name: renovate/vite-plugin-css-injected-by-js-5.x
Merge into: main
Upgrade vite-plugin-css-injected-by-js to ^5.0.0

chore(deps): Update dependency vite-plugin-dts to v5

Schedule: ["at any time"]
Branch name: renovate/vite-plugin-dts-5.x
Merge into: main
Upgrade vite-plugin-dts to ^5.0.0

chore(deps): Update dependency vite-plugin-svgr to v5

Schedule: ["at any time"]
Branch name: renovate/vite-plugin-svgr-5.x
Merge into: main
Upgrade vite-plugin-svgr to ^5.0.0

chore(deps): Update github-official-actions (major)

Schedule: ["at any time"]
Branch name: renovate/major-github-official-actions
Merge into: main
Upgrade actions/checkout to 3d3c42e5aac5ba805825da76410c181273ba90b1
Upgrade actions/configure-pages to 45bfe0192ca1faeb007ade9deae92b16b8254a0d
Upgrade actions/deploy-pages to 368f82528645a54fb793d4d04e342629a3f51346
Upgrade actions/setup-node to 820762786026740c76f36085b0efc47a31fe5020
Upgrade actions/upload-pages-artifact to fc324d3547104276b827a68afc52ff2a11cc49c9

chore(deps): Update github/codeql-action action to v4

Schedule: ["at any time"]
Branch name: renovate/github-codeql-action-4.x
Merge into: main
Upgrade github/codeql-action to 1c5b675653bb5c22dbe9b12b556ec555138e09fd

chore(deps): Update react monorepo to v19

Schedule: ["at any time"]
Branch name: renovate/major-react-monorepo
Merge into: main
Upgrade react to ^19.0.0
Upgrade react-dom to ^19.0.0

chore(deps): Update SonarSource/sonarqube-scan-action action to v8

Schedule: ["at any time"]
Branch name: renovate/sonarsource-sonarqube-scan-action-8.x
Merge into: main
Upgrade SonarSource/sonarqube-scan-action to ba9859eae8dd6bd29e412f25ddbbef3d032000f4

chore(deps): Update vitest monorepo to v5

Schedule: ["at any time"]
Branch name: renovate/major-vitest-monorepo
Merge into: main
Upgrade @vitest/browser to ^5.0.0
Upgrade @vitest/coverage-v8 to ^5.0.0
Upgrade @vitest/ui to ^5.0.0

chore(deps): Lock file maintenance

Schedule: ["on sunday"]
Branch name: renovate/lock-file-maintenance
Merge into: main
Regenerate lock files to use latest dependency versions

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

This PR has been generated by Mend Renovate.

snyk-io · 2026-09-10T14:05:15Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copilot

Pull request overview

Adds Renovate configuration to enable automated dependency and GitHub Actions update PRs for @cognigy/chat-components using the shared Cognigy preset.

Changes:

Introduces a renovate.json onboarding configuration.
Extends the organization-wide Renovate preset (Cognigy/renovate).

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Dmitrii Ostasevich (kwinto) · 2026-09-30T08:30:55Z

Copilot make this mergable

Dmitrii Ostasevich (kwinto)

The configuration uses the existing Cognigy Renovate preset, and the referenced default.json5 is present. No blocking issues found.

Copilot · 2026-09-30T08:33:50Z

Copilot make this mergable

I can make this safe, but the Cognigy/renovate preset is inaccessible from this environment (GitHub returns 404, and unauthenticated Git access is denied), so I can’t verify a valid immutable ref. Please provide the approved tag or commit SHA; I don’t want to guess a ref that could leave Renovate unable to load the preset.

Dmitrii Ostasevich (kwinto) · 2026-09-30T09:03:10Z

Copilot fix format issue

Co-authored-by: kwinto <90881+kwinto@users.noreply.github.com>

Copilot · 2026-09-30T09:04:55Z

Copilot fix format issue

Applied the repository’s Prettier formatting to renovate.json; verified with npx prettier --check renovate.json. Commit: 404815d.

chore(deps): add renovate.json

bc2f773

Copilot AI lite review requested due to automatic review settings September 10, 2026 14:04

cognigy-renovate Bot added dependencies renovate labels Sep 10, 2026

Copilot started reviewing on behalf of Cognigy GmbH (Cognigy) September 10, 2026 14:05 View session

Copilot AI reviewed Sep 10, 2026

View reviewed changes

Comment thread renovate.json Outdated

Dmitrii Ostasevich (kwinto) approved these changes Sep 30, 2026

View reviewed changes

Copilot started work on behalf of Dmitrii Ostasevich (kwinto) September 30, 2026 08:31 View session

Copilot finished work on behalf of Dmitrii Ostasevich (kwinto) September 30, 2026 08:34

Copilot AI requested a review from Dmitrii Ostasevich (kwinto) September 30, 2026 08:34

Dmitrii Ostasevich (kwinto) previously approved these changes Sep 30, 2026

View reviewed changes

Dmitrii Ostasevich (kwinto) enabled auto-merge (squash) September 30, 2026 09:02

Copilot started work on behalf of Dmitrii Ostasevich (kwinto) September 30, 2026 09:04 View session

chore: format Renovate configuration

404815d

Co-authored-by: kwinto <90881+kwinto@users.noreply.github.com>

auto-merge was automatically disabled September 30, 2026 09:04
Head branch was pushed to by a user without write access

Copilot AI dismissed Dmitrii Ostasevich (kwinto)’s stale review via 404815d September 30, 2026 09:04

Copilot finished work on behalf of Dmitrii Ostasevich (kwinto) September 30, 2026 09:05

Copilot AI requested a review from Dmitrii Ostasevich (kwinto) September 30, 2026 09:05

Dmitrii Ostasevich (kwinto) enabled auto-merge (squash) September 30, 2026 09:07

Dmitrii Ostasevich (kwinto) approved these changes Sep 30, 2026

View reviewed changes

Navigation Menu

chore: Configure Renovate - #277

chore: Configure Renovate#277
cognigy-renovate[bot] wants to merge 2 commits into
mainfrom
renovate/configure

cognigy-renovate Bot commented Sep 10, 2026 •

edited

Loading

Uh oh!

snyk-io Bot commented Sep 10, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Dmitrii Ostasevich (kwinto) commented Sep 30, 2026

Uh oh!

Dmitrii Ostasevich (kwinto) left a comment

Uh oh!

Copilot AI commented Sep 30, 2026

Uh oh!

Dmitrii Ostasevich (kwinto) commented Sep 30, 2026

Uh oh!

Copilot AI commented Sep 30, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

cognigy-renovate Bot commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Detected Package Files

Configuration Summary

What to Expect

Uh oh!

snyk-io Bot commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Dmitrii Ostasevich (kwinto) commented Sep 30, 2026

Uh oh!

Dmitrii Ostasevich (kwinto) left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI commented Sep 30, 2026

Uh oh!

Dmitrii Ostasevich (kwinto) commented Sep 30, 2026

Uh oh!

Copilot AI commented Sep 30, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

cognigy-renovate Bot commented Sep 10, 2026 •

edited

Loading

snyk-io Bot commented Sep 10, 2026 •

edited

Loading