chore: Configure Renovate

[renovate-bot]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• docker-compose.test.yml (docker-compose)
• docker-compose.yml (docker-compose)
• Dockerfile (dockerfile)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/codeql.yml (github-actions)
• .github/workflows/first-interaction.yml (github-actions)
• go.mod (gomod)
• web/admin-dash/package.json (npm)
• web/frontend/package.json (npm)
• web/tester/package.json (npm)
• pyproject.toml (pep621)
• .python-version (pyenv)
• infra/main.tf (terraform)
• infra/modules/cloud-run-iam/versions.tf (terraform)
• infra/modules/cloud-run-services/versions.tf (terraform)
• infra/modules/project-apis/versions.tf (terraform)
• infra/versions.tf (terraform)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

---

What to Expect

With your current configuration, Renovate will create 38 Pull Requests:

fix(deps): update dependency protobufjs to v8.2.0 [security]

• Branch name: renovate/npm-protobufjs-vulnerability
• Merge into: main
• Upgrade protobufjs to ^8.0.0
• Upgrade protobufjs to 8.2.0

chore(deps): update astral-sh/setup-uv digest to 38f3f10

• Schedule: ["at any time"]
• Branch name: renovate/astral-sh-setup-uv-digest
• Merge into: main
• Upgrade astral-sh/setup-uv to 38f3f104447c67c051c4a08e39b64a148898af3a

chore(deps): update github/codeql-action digest to 95e58e9

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-digest
• Merge into: main
• Upgrade github/codeql-action to 95e58e9a2cdfd71adc6e0353d5c52f41a045d225

chore(deps): update angular monorepo

• Schedule: ["at any time"]
• Branch name: renovate/angular-monorepo
• Merge into: main
• Upgrade @angular/animations to 21.2.14
• Upgrade @angular/common to 21.2.14
• Upgrade @angular/compiler to 21.2.14
• Upgrade @angular/compiler-cli to 21.2.14
• Upgrade @angular/core to 21.2.14
• Upgrade @angular/forms to 21.2.14
• Upgrade @angular/platform-browser to 21.2.14
• Upgrade @angular/platform-browser-dynamic to 21.2.14
• Upgrade @angular/router to 21.2.14
• Upgrade zone.js to 0.16.2

chore(deps): update angular-cli monorepo to v21.2.13

• Schedule: ["at any time"]
• Branch name: renovate/angular-cli-monorepo
• Merge into: main
• Upgrade @angular/build to 21.2.13
• Upgrade @angular/cli to 21.2.13

chore(deps): update dependency @​types/three to v0.184.1

• Schedule: ["at any time"]
• Branch name: renovate/three-0.x-lockfile
• Merge into: main
• Upgrade @types/three to 0.184.1

chore(deps): update dependency dompurify to v3.4.7

• Schedule: ["at any time"]
• Branch name: renovate/dompurify-3.x-lockfile
• Merge into: main
• Upgrade dompurify to 3.4.7

chore(deps): update dependency jsdom to v29.1.1

• Schedule: ["at any time"]
• Branch name: renovate/jsdom-29.x-lockfile
• Merge into: main
• Upgrade jsdom to 29.1.1

chore(deps): update dependency marked to v17.0.6

• Schedule: ["at any time"]
• Branch name: renovate/marked-17.x-lockfile
• Merge into: main
• Upgrade marked to 17.0.6

chore(deps): update dependency postcss to v8.5.15

• Schedule: ["at any time"]
• Branch name: renovate/postcss-8.x-lockfile
• Merge into: main
• Upgrade postcss to 8.5.15

chore(deps): update dependency vite to v8.0.14

• Schedule: ["at any time"]
• Branch name: renovate/vite-8.x-lockfile
• Merge into: main
• Upgrade vite to 8.0.14

chore(deps): update vitest monorepo to v4.1.7

• Schedule: ["at any time"]
• Branch name: renovate/vitest-monorepo
• Merge into: main
• Upgrade @vitest/browser to 4.1.7
• Upgrade @vitest/coverage-v8 to 4.1.7
• Upgrade vitest to 4.1.7

chore(deps): update dependency go to 1.26

• Schedule: ["at any time"]
• Branch name: renovate/go-1.x
• Merge into: main
• Upgrade go to 1.26

chore(deps): update dependency ngx-markdown to v21.3.0

• Schedule: ["at any time"]
• Branch name: renovate/ngx-markdown-21.x-lockfile
• Merge into: main
• Upgrade ngx-markdown to 21.3.0

chore(deps): update github/codeql-action action to v4.36.0

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to 7211b7c8077ea37d8641b6271f6a365a22a5fbfa

chore(deps): update golang docker tag to v1.26

• Schedule: ["at any time"]
• Branch name: renovate/golang-1.x
• Merge into: main
• Upgrade golang to 1.26

chore(deps): update npm to v11.16.0

• Schedule: ["at any time"]
• Branch name: renovate/npm-11.x
• Merge into: main
• Upgrade npm to 11.16.0

chore(deps): update python docker tag

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14
• Upgrade python to 3.14
• Upgrade python to 3.14-slim

chore(deps): update tailwindcss monorepo to v4.3.0

• Schedule: ["at any time"]
• Branch name: renovate/tailwindcss-monorepo
• Merge into: main
• Upgrade @tailwindcss/postcss to 4.3.0
• Upgrade tailwindcss to 4.3.0

chore(deps): update terraform time to ~> 0.14

• Schedule: ["at any time"]
• Branch name: renovate/time-0.x
• Merge into: main
• Upgrade time to ~> 0.14

fix(deps): update dependency google-adk to v1.34.1

• Schedule: ["at any time"]
• Branch name: renovate/google-adk-1.x
• Merge into: main
• Upgrade google-adk to ==1.34.1

fix(deps): update module github.com/alicebob/miniredis/v2 to v2.38.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-alicebob-miniredis-v2-2.x
• Merge into: main
• Upgrade github.com/alicebob/miniredis/v2 to v2.38.0

fix(deps): update module github.com/redis/go-redis/v9 to v9.19.0

• Schedule: ["at any time"]
• Branch name: renovate/github.com-redis-go-redis-v9-9.x
• Merge into: main
• Upgrade github.com/redis/go-redis/v9 to v9.19.0

fix(deps): update module google.golang.org/api to v0.282.0

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-api-0.x
• Merge into: main
• Upgrade google.golang.org/api to v0.282.0

fix(deps): update module google.golang.org/grpc to v1.81.1

• Schedule: ["at any time"]
• Branch name: renovate/google.golang.org-grpc-1.x
• Merge into: main
• Upgrade google.golang.org/grpc to v1.81.1

chore(deps): update actions/checkout action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to de0fac2e4500dabe0009e67214ff5f5447ce83dd

chore(deps): update actions/setup-go action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-go-6.x
• Merge into: main
• Upgrade actions/setup-go to 4a3601121dd01d1626a1e23e37211e3254c1c06c

chore(deps): update actions/setup-node action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-node-6.x
• Merge into: main
• Upgrade actions/setup-node to 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e

chore(deps): update astral-sh/setup-uv action to v8

• Schedule: ["at any time"]
• Branch name: renovate/astral-sh-setup-uv-8.x
• Merge into: main
• Upgrade astral-sh/setup-uv to 08807647e7069bb48b6ef5acd8ec9567f424441b

chore(deps): update dependency typescript to v6

• Schedule: ["at any time"]
• Branch name: renovate/typescript-6.x
• Merge into: main
• Upgrade typescript to ~6.0.0

chore(deps): update postgres docker tag to v18

• Schedule: ["at any time"]
• Branch name: renovate/postgres-18.x
• Merge into: main
• Upgrade postgres to 18-alpine

chore(deps): update redis docker tag to v8

• Schedule: ["at any time"]
• Branch name: renovate/redis-8.x
• Merge into: main
• Upgrade redis to 8-alpine

chore(deps): update terraform google to v7

• Schedule: ["at any time"]
• Branch name: renovate/google-7.x
• Merge into: main
• Upgrade google to ~> 7.0

chore(deps): update terraform google-beta to v7

• Schedule: ["at any time"]
• Branch name: renovate/google-beta-7.x
• Merge into: main
• Upgrade google-beta to ~> 7.0

fix(deps): update dependency a2a-sdk to v1

• Schedule: ["at any time"]
• Branch name: renovate/a2a-sdk-1.x
• Merge into: main
• Upgrade a2a-sdk to >=1.0.3,<1.1.0

fix(deps): update dependency google-adk to v2

• Schedule: ["at any time"]
• Branch name: renovate/google-adk-2.x
• Merge into: main
• Upgrade google-adk to ==2.1.0

fix(deps): update dependency marked to v18

• Schedule: ["at any time"]
• Branch name: renovate/marked-18.x
• Merge into: main
• Upgrade marked to ^18.0.0

fix(deps): update dependency protobuf to v7

• Schedule: ["at any time"]
• Branch name: renovate/protobuf-7.x
• Merge into: main
• Upgrade protobuf to >=7.35,<8

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Thanks for the PR, @renovate-bot. This is your first one in this repo, so a quick heads up on what happens next:

• A maintainer needs to approve CI before it runs. That is a security policy for outside contributors, not a comment on your code.
• Code owners from @GoogleCloudPlatform/race-condition-maintainers will be auto-requested for review.
• Commits need to be signed and the branch history linear. CONTRIBUTING.md covers the local commands if anything trips.

Someone will be in touch shortly.