Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• docs/GithubPages/Gemfile (bundler)
• Dockerfile (dockerfile)
• .github/workflows/automation-tests-runners.yml (github-actions)
• .github/workflows/automation-tests.yml (github-actions)
• .github/workflows/build-artifacts-full-lifecycle.yml (github-actions)
• .github/workflows/build-cybereason-release.yml (github-actions)
• .github/workflows/cla-assistant.yml (github-actions)
• .github/workflows/destroy-runners.yml (github-actions)
• .github/workflows/jekyll-gh-pages.yml (github-actions)
• .github/workflows/pr-approval-gate.yml (github-actions)
• .github/workflows/publish-release.yml (github-actions)
• Rules/RulesGenerator/requirements.txt (pip_requirements)
• scripts/CR_rules/requirements.txt (pip_requirements)
• scripts/aggregate_automation_results/requirements.txt (pip_requirements)
• scripts/build_shell_offsets_db/requirements.txt (pip_requirements)
• src/Tests/Automation/requirements.txt (pip_requirements)
• terraform/provider.tf (terraform)
• terraform/versions.tf (terraform)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 45 Pull Requests:

Update dependency charset-normalizer to v3.4.9

• Schedule: ["at any time"]
• Branch name: renovate/charset-normalizer-3.x
• Merge into: main
• Upgrade charset-normalizer to ==3.4.9

Update dependency cryptography to v46.0.7

• Schedule: ["at any time"]
• Branch name: renovate/cryptography-46.x
• Merge into: main
• Upgrade cryptography to ==46.0.7

Update dependency mako to v1.3.12

• Schedule: ["at any time"]
• Branch name: renovate/mako-1.x
• Merge into: main
• Upgrade mako to ==1.3.12

Update dependency tomli to v2.4.1

• Schedule: ["at any time"]
• Branch name: renovate/tomli-2.x
• Merge into: main
• Upgrade tomli to ==2.4.1

Update dependency types-pyyaml to v6.0.12.20260724

• Schedule: ["at any time"]
• Branch name: renovate/types-pyyaml-6.x
• Merge into: main
• Upgrade types-pyyaml to ==6.0.12.20260724

Update dependency certifi to v2026.7.22

• Schedule: ["at any time"]
• Branch name: renovate/certifi-2026.x
• Merge into: main
• Upgrade certifi to ==2026.7.22

Update dependency cffi to v2.1.0

• Schedule: ["at any time"]
• Branch name: renovate/cffi-2.x
• Merge into: main
• Upgrade cffi to ==2.1.0

Update dependency idna to v3.18

• Schedule: ["at any time"]
• Branch name: renovate/idna-3.x
• Merge into: main
• Upgrade idna to ==3.18

Update dependency jekyll-seo-tag to v2.9.0

• Schedule: ["at any time"]
• Branch name: renovate/jekyll-ecosystem-packages
• Merge into: main
• Upgrade jekyll-seo-tag to 2.9.0

Update dependency jmespath to v1.1.0

• Schedule: ["at any time"]
• Branch name: renovate/jmespath-1.x
• Merge into: main
• Upgrade jmespath to ==1.1.0

Update dependency parse to v1.22.1

• Schedule: ["at any time"]
• Branch name: renovate/parse-1.x
• Merge into: main
• Upgrade parse to ==1.22.1

Update dependency pip to v23.3.2

• Schedule: ["at any time"]
• Branch name: renovate/pip-23.x
• Merge into: main
• Upgrade pip to ==23.3.2

Update dependency psutil to v7.2.2

• Schedule: ["at any time"]
• Branch name: renovate/psutil-7.x
• Merge into: main
• Upgrade psutil to ==7.2.2

Update dependency pyelftools to v0.33

• Schedule: ["at any time"]
• Branch name: renovate/pyelftools-0.x
• Merge into: main
• Upgrade pyelftools to ==0.33

Update dependency pygments to v2.20.0

• Schedule: ["at any time"]
• Branch name: renovate/pygments-2.x
• Merge into: main
• Upgrade pygments to ==2.20.0

Update dependency pyinstaller to v6.21.0

• Schedule: ["at any time"]
• Branch name: renovate/pyinstaller-6.x
• Merge into: main
• Upgrade pyinstaller to ==6.21.0

Update dependency pysigma to v1.4.0

• Schedule: ["at any time"]
• Branch name: renovate/pysigma-1.x
• Merge into: main
• Upgrade pysigma to ==1.4.0

Update dependency pytest to v8.4.2

• Schedule: ["at any time"]
• Branch name: renovate/pytest-8.x
• Merge into: main
• Upgrade pytest to ==8.4.2

Update dependency pytest-bdd to v7.3.0

• Schedule: ["at any time"]
• Branch name: renovate/pytest-bdd-7.x
• Merge into: main
• Upgrade pytest-bdd to ==7.3.0

Update dependency requests to v2.34.2

• Schedule: ["at any time"]
• Branch name: renovate/requests-2.x
• Merge into: main
• Upgrade requests to ==2.34.2

Update dependency ruby to v3.4.10

• Schedule: ["at any time"]
• Branch name: renovate/ruby-3.x
• Merge into: main
• Upgrade ruby to 3.4.10

Update dependency typing-extensions to v4.16.0

• Schedule: ["at any time"]
• Branch name: renovate/typing-extensions-4.x
• Merge into: main
• Upgrade typing-extensions to ==4.16.0

Update dependency urllib3 to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/urllib3-2.x
• Merge into: main
• Upgrade urllib3 to ==2.7.0

Update Terraform oci to v7.32.0

• Schedule: ["at any time"]
• Branch name: renovate/oci-7.x
• Merge into: main
• Upgrade oci to 7.32.0

Update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: main
• Upgrade actions/checkout to v7

Update actions/configure-pages action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-configure-pages-6.x
• Merge into: main
• Upgrade actions/configure-pages to v6

Update actions/deploy-pages action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-deploy-pages-5.x
• Merge into: main
• Upgrade actions/deploy-pages to v5

Update actions/upload-pages-artifact action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-pages-artifact-5.x
• Merge into: main
• Upgrade actions/upload-pages-artifact to v5

Update dependency attrs to v26

• Schedule: ["at any time"]
• Branch name: renovate/attrs-26.x
• Merge into: main
• Upgrade attrs to ==26.1.0

Update dependency cryptography to v49

• Schedule: ["at any time"]
• Branch name: renovate/cryptography-49.x
• Merge into: main
• Upgrade cryptography to ==49.0.0

Update dependency gherkin-official to v42

• Schedule: ["at any time"]
• Branch name: renovate/gherkin-official-42.x
• Merge into: main
• Upgrade gherkin-official to ==42.0.0

Update dependency invoke to v3

• Schedule: ["at any time"]
• Branch name: renovate/invoke-3.x
• Merge into: main
• Upgrade invoke to ==3.0.3

Update dependency packaging to v26

• Schedule: ["at any time"]
• Branch name: renovate/packaging-26.x
• Merge into: main
• Upgrade packaging to ==26.2

Update dependency paramiko to v5

• Schedule: ["at any time"]
• Branch name: renovate/paramiko-5.x
• Merge into: main
• Upgrade paramiko to ==5.0.0

Update dependency pip to v26

• Schedule: ["at any time"]
• Branch name: renovate/pip-26.x
• Merge into: main
• Upgrade pip to ==26.1.2

Update dependency pycparser to v3

• Schedule: ["at any time"]
• Branch name: renovate/pycparser-3.x
• Merge into: main
• Upgrade pycparser to ==3.0

Update dependency pytest to v9.1.1

• Schedule: ["at any time"]
• Branch name: renovate/pytest-9.x
• Merge into: main
• Upgrade pytest to ==9.1.1

Update dependency pytest-bdd to v8

• Schedule: ["at any time"]
• Branch name: renovate/pytest-bdd-8.x
• Merge into: main
• Upgrade pytest-bdd to ==8.1.0

Update dependency ruby to v4

• Schedule: ["at any time"]
• Branch name: renovate/ruby-4.x
• Merge into: main
• Upgrade ruby to 4.0.6

Update dependency setuptools to v83

• Schedule: ["at any time"]
• Branch name: renovate/setuptools-83.x
• Merge into: main
• Upgrade setuptools to ==83.0.0

Update GitHub Artifact Actions (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/download-artifact to v8
• Upgrade actions/upload-artifact to v7

Update hashicorp/setup-terraform action to v4

• Schedule: ["at any time"]
• Branch name: renovate/hashicorp-setup-terraform-4.x
• Merge into: main
• Upgrade hashicorp/setup-terraform to v4

Update softprops/action-gh-release action to v3

• Schedule: ["at any time"]
• Branch name: renovate/softprops-action-gh-release-3.x
• Merge into: main
• Upgrade softprops/action-gh-release to v3

Update Terraform oci to v8

• Schedule: ["at any time"]
• Branch name: renovate/oci-8.x
• Merge into: main
• Upgrade oci to 8.24.0

Update ubuntu Docker tag to v26

• Schedule: ["at any time"]
• Branch name: renovate/ubuntu-26.x
• Merge into: main
• Upgrade ubuntu to 26.04

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.