reconfigure renovate

[emdneto]

• Gradually add other test-requirements.txt files and dev-requirements.txt
• ignore -contrib sha pin for GHA

[renovate]

Reconfigure PR Results

This is a reconfigure PR comment to help you understand and re-configure your renovate bot settings. If this Reconfigure PR were to be merged, we'd expect to see the following outcome:

---

Detected Package Files

• docs/examples/opencensus-exporter-tracer/docker/docker-compose.yaml (docker-compose)
• tests/opentelemetry-docker-tests/tests/docker-compose.yml (docker-compose)
• docs/examples/sqlcommenter/books_database/Dockerfile (dockerfile)
• .github/workflows/add-to-project.yml (github-actions)
• .github/workflows/backport.yml (github-actions)
• .github/workflows/benchmarks.yml (github-actions)
• .github/workflows/changelog.yml (github-actions)
• .github/workflows/check-links.yml (github-actions)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/codeql-analysis.yml (github-actions)
• .github/workflows/fossa.yml (github-actions)
• .github/workflows/lint.yml (github-actions)
• .github/workflows/misc.yml (github-actions)
• .github/workflows/ossf-scorecard.yml (github-actions)
• .github/workflows/prepare-patch-release.yml (github-actions)
• .github/workflows/prepare-release-branch.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/stale.yml (github-actions)
• .github/workflows/templates/ci.yml.j2 (github-actions)
• .github/workflows/templates/lint.yml.j2 (github-actions)
• .github/workflows/templates/misc.yml.j2 (github-actions)
• .github/workflows/templates/test.yml.j2 (github-actions)
• .github/workflows/test.yml (github-actions)
• opentelemetry-proto/test-requirements.in (pip-compile)
• opentelemetry-proto-json/test-requirements.in (pip-compile)
• exporter/opentelemetry-exporter-otlp-proto-grpc/test-requirements.in (pip-compile)
• exporter/opentelemetry-exporter-otlp-common/test-requirements.in (pip-compile)
• exporter/opentelemetry-exporter-http-transport/test-requirements.in (pip-compile)
• codegen/opentelemetry-codegen-json/test-requirements.txt (pip_requirements)
• dev-requirements.txt (pip_requirements)
• docs/examples/fork-process-model/flask-gunicorn/requirements.txt (pip_requirements)
• docs/examples/fork-process-model/flask-uwsgi/requirements.txt (pip_requirements)
• docs/examples/metrics/instruments/requirements.txt (pip_requirements)
• docs/examples/metrics/prometheus-grafana/requirements.txt (pip_requirements)
• docs/examples/metrics/reader/requirements.txt (pip_requirements)
• docs/examples/metrics/sdk-metrics/requirements.txt (pip_requirements)
• docs/examples/metrics/views/requirements.txt (pip_requirements)
• docs/examples/opencensus-shim/requirements.txt (pip_requirements)
• docs/examples/opentracing/requirements.txt (pip_requirements)
• docs/getting_started/tests/requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-http-transport/test-requirements.latest.txt (pip_requirements)
• exporter/opentelemetry-exporter-http-transport/test-requirements.oldest.txt (pip_requirements)
• exporter/opentelemetry-exporter-opencensus/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-common/test-requirements.latest.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-common/test-requirements.oldest.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-json-common/benchmark-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-json-common/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-json-file/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-json-http/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-proto-common/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-proto-grpc/benchmark-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-proto-grpc/test-requirements.latest.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-proto-grpc/test-requirements.oldest.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp-proto-http/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-otlp/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-prometheus/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-zipkin-json/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-zipkin-proto-http/test-requirements.txt (pip_requirements)
• exporter/opentelemetry-exporter-zipkin/test-requirements.txt (pip_requirements)
• opentelemetry-api/test-requirements.txt (pip_requirements)
• opentelemetry-configuration/test-requirements.txt (pip_requirements)
• opentelemetry-proto-json/test-requirements.latest.txt (pip_requirements)
• opentelemetry-proto-json/test-requirements.oldest.txt (pip_requirements)
• opentelemetry-proto/test-requirements.latest.txt (pip_requirements)
• opentelemetry-proto/test-requirements.oldest.txt (pip_requirements)
• opentelemetry-sdk/benchmark-requirements.txt (pip_requirements)
• opentelemetry-sdk/test-requirements.txt (pip_requirements)
• opentelemetry-semantic-conventions/test-requirements.txt (pip_requirements)
• propagator/opentelemetry-propagator-b3/benchmark-requirements.txt (pip_requirements)
• propagator/opentelemetry-propagator-b3/test-requirements.txt (pip_requirements)
• propagator/opentelemetry-propagator-jaeger/test-requirements.txt (pip_requirements)
• scripts/tests/test-requirements.txt (pip_requirements)
• shim/opentelemetry-opencensus-shim/test-requirements.txt (pip_requirements)
• shim/opentelemetry-opentracing-shim/test-requirements.txt (pip_requirements)
• tests/opentelemetry-test-utils/test-requirements.txt (pip_requirements)

Configuration Summary

Based on the default config's presets, Renovate will:

• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for development dependencies.
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
• Run lock file maintenance (updates) early Monday mornings.
• Pin github-action digests.
• Convert pinned GitHub Action digests to SemVer.
• Use semantic prefixes for commit messages and PR titles.

---

What to Expect

With your current configuration, Renovate will create 57 Pull Requests:

chore(ci): pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/ci
• Merge into: main
• Upgrade actions/add-to-project to 244f685bbc3b7adfa8466e08b698b5577571133e
• Upgrade actions/checkout to 11d5960a326750d5838078e36cf38b85af677262
• Upgrade actions/stale to 1e223db275d687790206a7acac4d1a11bd6fe629
• Upgrade benchmark-action/github-action-benchmark to 52576c92bccf6ac60c8223ec7eb2565637cae9ba
• Upgrade fossas/fossa-action to ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3
• Upgrade github/codeql-action to c4dd10e44af883a891fe31ced449bcb4a6728b9b
• Upgrade mysql to sha256:b3b90af2a6552ae30c266fdb7d5dd55f3afb72404bb78d37fe8a23eb857fd3fb
• Upgrade ossf/scorecard-action to 2d1146689b8cda280b9bc96326124645441f03bc
• Upgrade otel/opentelemetry-collector-contrib to sha256:c5918f78992ee73b0d6f0e599423ac5ec52dd5d9726733114d6eca53d5a32ed5
• Upgrade python to sha256:a7fb1e634c4a578f9e0bd6327f11a3cde11b7a9395f48e24360c0988bcc5c2bc
• Upgrade rafaeljesus/opencensus-collector to sha256:1bfcd226bb2eaf0702e09888507abfe345537f9f859cfba4143c0093f20bf68a
• Upgrade re-actors/alls-green to 05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe

chore(deps): update all patch versions

• Schedule: ["before 8am every weekday"]
• Branch name: renovate/all-patch-versions
• Merge into: main
• Upgrade GitPython to ==3.1.59
• Upgrade PyYAML to ==6.0.3
• Upgrade googleapis-common-protos to ==1.75.1
• Upgrade markupsafe to ==2.1.5
• Upgrade mocket to ==3.14.3
• Upgrade opencensus to ==0.11.4
• Upgrade protobuf to ==7.35.1
• Upgrade pylint to ==3.3.9
• Upgrade pyright to ==1.1.411
• Upgrade rsa to ==4.9.1
• Upgrade ruff to ==0.16.2
• Upgrade sphinx-autodoc-typehints to ==1.25.3

chore(docs): update docs deps

• Schedule: ["before 8am every weekday"]
• Branch name: renovate/docs-deps
• Merge into: main
• Upgrade Jinja2 to ==3.1.6
• Upgrade MarkupSafe to ==2.1.5
• Upgrade Werkzeug to ==3.1.8
• Upgrade asgiref to ==3.12.1
• Upgrade attrs to ==23.2.0
• Upgrade certifi to ==2024.12.14
• Upgrade charset-normalizer to ==2.1.1
• Upgrade click to ==8.4.2
• Upgrade googleapis-common-protos to ==1.75.1
• Upgrade grpcio to ==1.83.0
• Upgrade idna to ==3.18
• Upgrade iniconfig to ==2.3.0
• Upgrade itsdangerous to ==2.2.0
• Upgrade opentelemetry-api to ==1.44.0
• Upgrade opentelemetry-exporter-otlp to ==1.44.0
• Upgrade opentelemetry-sdk to ==1.44.0
• Upgrade packaging to ==24.2
• Upgrade protobuf to ~=3.20.3
• Upgrade requests to ==2.34.2
• Upgrade six to ==1.17.0
• Upgrade thrift to ==0.24.0
• Upgrade tomli to ==2.4.1
• Upgrade typing_extensions to ==4.16.0
• Upgrade uWSGI to ==2.0.31
• Upgrade urllib3 to ==1.26.20
• Upgrade wrapt to ==1.17.3

chore(deps): update dependency asgiref to v3.12.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/asgiref-3.x
• Merge into: main
• Upgrade asgiref to ==3.12.1

chore(deps): update dependency cachetools to v5.5.2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/cachetools-5.x
• Merge into: main
• Upgrade cachetools to ==5.5.2

chore(deps): update dependency certifi to v2024.12.14

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/certifi-2024.x
• Merge into: main
• Upgrade certifi to ==2024.12.14

chore(deps): update dependency charset-normalizer to v3.4.9

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/charset-normalizer-3.x
• Merge into: main
• Upgrade charset-normalizer to ==3.4.9

chore(deps): update dependency codespell to v2.4.3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/codespell-2.x
• Merge into: main
• Upgrade codespell to ==2.4.3

chore(deps): update dependency decorator to v5.3.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/decorator-5.x
• Merge into: main
• Upgrade decorator to ==5.3.1

chore(deps): update dependency flaky to v3.8.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/flaky-3.x
• Merge into: main
• Upgrade flaky to ==3.8.1

chore(deps): update dependency google-api-core to v2.34.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/google-api-core-2.x
• Merge into: main
• Upgrade google-api-core to ==2.34.0

chore(deps): update dependency google-auth to v2.56.3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/google-auth-2.x
• Merge into: main
• Upgrade google-auth to ==2.56.3

chore(deps): update dependency googleapis-common-protos to v1.75.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/googleapis-common-protos-1.x
• Merge into: main
• Upgrade googleapis-common-protos to ==1.75.1

chore(deps): update dependency grpcio to v1.83.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/grpcio-1.x
• Merge into: main
• Upgrade grpcio to ==1.83.0

chore(deps): update dependency grpcio-tools to v1.83.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/grpcio-tools-1.x
• Merge into: main
• Upgrade grpcio-tools to ==1.83.0

chore(deps): update dependency idna to v3.18

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/idna-3.x
• Merge into: main
• Upgrade idna to ==3.18

chore(deps): update dependency iniconfig to v2.3.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/iniconfig-2.x
• Merge into: main
• Upgrade iniconfig to ==2.3.0

chore(deps): update dependency jsonschema to v4.26.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/jsonschema-4.x
• Merge into: main
• Upgrade jsonschema to ==4.26.0

chore(deps): update dependency packaging to v24.2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/packaging-24.x
• Merge into: main
• Upgrade packaging to ==24.2

chore(deps): update dependency pluggy to v1.6.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pluggy-1.x
• Merge into: main
• Upgrade pluggy to ==1.6.0

chore(deps): update dependency pre-commit to v3.8.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pre-commit-3.x
• Merge into: main
• Upgrade pre-commit to ==3.8.0

chore(deps): update dependency prometheus_client to v0.26.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/prometheus_client-0.x
• Merge into: main
• Upgrade prometheus_client to ==0.26.0

chore(deps): update dependency protobuf to v6.33.6

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/protobuf-6.x
• Merge into: main
• Upgrade protobuf to ==6.33.6

chore(deps): update dependency pyasn1 to v0.6.4

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pyasn1-0.x
• Merge into: main
• Upgrade pyasn1 to ==0.6.4

chore(deps): update dependency pyasn1-modules to v0.4.2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pyasn1-modules-0.x
• Merge into: main
• Upgrade pyasn1-modules to ==0.4.2

chore(deps): update dependency pytest to v8.4.2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pytest-8.x
• Merge into: main
• Upgrade pytest to ==8.4.2

chore(deps): update dependency requests to v2.34.2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/requests-2.x
• Merge into: main
• Upgrade requests to ==2.34.2

chore(deps): update dependency responses to v0.26.2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/responses-0.x
• Merge into: main
• Upgrade responses to ==0.26.2

chore(deps): update dependency rpds-py to v0.30.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/rpds-py-0.x
• Merge into: main
• Upgrade rpds-py to ==0.30.0

chore(deps): update dependency ruamel.yaml to v0.19.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/ruamel.yaml-0.x
• Merge into: main
• Upgrade ruamel.yaml to ==0.19.1

chore(deps): update dependency six to v1.17.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/six-1.x
• Merge into: main
• Upgrade six to ==1.17.0

chore(deps): update dependency sphinx to v8.2.3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/sphinx-8.x
• Merge into: main
• Upgrade sphinx to ==8.2.3

chore(deps): update dependency tomli to v2.4.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/tomli-2.x
• Merge into: main
• Upgrade tomli to ==2.4.1

chore(deps): update dependency typing_extensions to v4.16.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/typing_extensions-4.x
• Merge into: main
• Upgrade typing_extensions to ==4.16.0

chore(deps): update dependency urllib3 to v2.7.0

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/urllib3-2.x
• Merge into: main
• Upgrade urllib3 to ==2.7.0

chore(deps): update dependency wrapt to v1.17.3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/wrapt-1.x
• Merge into: main
• Upgrade wrapt to ==1.17.3

chore(deps): update dependency zipp to v3.23.1

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/zipp-3.x
• Merge into: main
• Upgrade zipp to ==3.23.1

chore(ci): update ci (major)

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/major-ci
• Merge into: main
• Upgrade actions/add-to-project to 5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd
• Upgrade actions/checkout to 3d3c42e5aac5ba805825da76410c181273ba90b1
• Upgrade actions/stale to 4391f3da665fdf50b6810c1a66712fb9ba21aa93
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• Upgrade fossas/fossa-action to 29693cc50323968e039056be419b32989fc5880c
• Upgrade github/codeql-action to 5595ccaf912efad79be6eef63a5619ff05969be3
• Upgrade mysql to sha256:66aec17cd21a956029b83f083b813073859e8355dc1a00e55df6ba02f0e32345

chore(deps): update dependency cachetools to v7

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/cachetools-7.x
• Merge into: main
• Upgrade cachetools to ==7.1.7

chore(deps): update dependency certifi to v2026

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/certifi-2026.x
• Merge into: main
• Upgrade certifi to ==2026.7.22

chore(deps): update dependency importlib-metadata to v9

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/importlib-metadata-9.x
• Merge into: main
• Upgrade importlib-metadata to ==9.0.0

chore(deps): update dependency markupsafe to v3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/markupsafe-3.x
• Merge into: main
• Upgrade markupsafe to ==3.0.3

chore(deps): update dependency packaging to v26.3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/packaging-26.x
• Merge into: main
• Upgrade packaging to ==26.3

chore(deps): update dependency pre-commit to v4

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pre-commit-4.x
• Merge into: main
• Upgrade pre-commit to ==4.6.2

chore(deps): update dependency protobuf to v7

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/protobuf-7.x
• Merge into: main
• Upgrade protobuf to ==7.35.1

chore(deps): update dependency puremagic to v2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/puremagic-2.x
• Merge into: main
• Upgrade puremagic to ==2.2.0

chore(deps): update dependency pylint to v4

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pylint-4.x
• Merge into: main
• Upgrade pylint to ==4.0.7

chore(deps): update dependency pytest to v9

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pytest-9.x
• Merge into: main
• Upgrade pytest to ==9.1.1

chore(deps): update dependency pytest-benchmark to v5

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pytest-benchmark-5.x
• Merge into: main
• Upgrade pytest-benchmark to ==5.2.3

chore(deps): update dependency pytest-cov to v7

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pytest-cov-7.x
• Merge into: main
• Upgrade pytest-cov to ==7.1.0

chore(deps): update dependency readme-renderer to v45

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/readme-renderer-45.x
• Merge into: main
• Upgrade readme-renderer to ==45.0

chore(deps): update dependency sphinx to v9

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/sphinx-9.x
• Merge into: main
• Upgrade sphinx to ==9.1.0

chore(deps): update dependency sphinx-autodoc-typehints to v3

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/sphinx-autodoc-typehints-3.x
• Merge into: main
• Upgrade sphinx-autodoc-typehints to ==3.13.2

chore(deps): update dependency wrapt to v2

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/wrapt-2.x
• Merge into: main
• Upgrade wrapt to ==2.3.0

chore(deps): update dependency zipp to v4

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/zipp-4.x
• Merge into: main
• Upgrade zipp to ==4.1.0

chore(docs): update docs deps (major)

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/major-docs-deps
• Merge into: main
• Upgrade Flask to ==3.1.3
• Upgrade MarkupSafe to ==3.0.3
• Upgrade attrs to ==26.1.0
• Upgrade certifi to ==2026.7.22
• Upgrade charset-normalizer to ==3.4.9
• Upgrade gunicorn to ==26.0.0
• Upgrade packaging to ==26.3
• Upgrade protobuf to ~=7.35.1
• Upgrade protobuf to ==7.35.1
• Upgrade pytest to ==9.1.1
• Upgrade urllib3 to ==2.7.0
• Upgrade wrapt to ==2.3.0

chore(deps): refresh pip-compile outputs

• Schedule: ["before 8am on Monday"]
• Branch name: renovate/pip-compile-refresh
• Merge into: main
• Regenerate lock files to use latest dependency versions

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.