chore: Configure Renovate

[svc-secops]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request.

---

Detected Package Files

• .github/workflows/build.yml (github-actions)
• .github/workflows/deploy-javadoc.yml (github-actions)
• .github/workflows/deploy-snapshots.yml (github-actions)
• .github/workflows/release-drafter.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• .github/workflows/scorecard.yml (github-actions)
• pom.xml (maven)
• .mvn/wrapper/maven-wrapper.properties (maven-wrapper)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Apply Apollo's centralized, default Renovate configuration
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Show all Merge Confidence badges for pull requests.
• Pin dependency versions for development dependencies and retain SemVer ranges for others.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to .github/renovate.json5 in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 38 Pull Requests:

chore(deps): update dependency maven to v3.9.11

• Schedule: ["at any time"]
• Branch name: renovate/maven-3.x
• Merge into: main
• Upgrade maven to 3.9.11

chore(deps): update dependency maven-wrapper to v3.3.4

• Schedule: ["at any time"]
• Branch name: renovate/maven-wrapper-3.x
• Merge into: main
• Upgrade maven-wrapper to 3.3.4

chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.14.1

• Schedule: ["at any time"]
• Branch name: renovate/maven-compiler-plugin.version
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.14.1

chore(deps): update dependency org.apache.maven.plugins:maven-failsafe-plugin to v3.5.4

• Schedule: ["at any time"]
• Branch name: renovate/maven-failsafe-plugin.version
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 3.5.4

chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8

• Schedule: ["at any time"]
• Branch name: renovate/maven-gpg-plugin.version
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-gpg-plugin to 3.2.8

chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.4

• Schedule: ["at any time"]
• Branch name: renovate/maven-surefire-plugin.version
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 3.5.4

chore(deps): update dependency org.jacoco:jacoco-maven-plugin to v0.8.14

• Schedule: ["at any time"]
• Branch name: renovate/jacoco-maven-plugin.version
• Merge into: main
• Upgrade org.jacoco:jacoco-maven-plugin to 0.8.14

chore(deps): update dependency org.spdx:spdx-maven-plugin to v1.0.3

• Schedule: ["at any time"]
• Branch name: renovate/spdx-maven-plugin.version
• Merge into: main
• Upgrade org.spdx:spdx-maven-plugin to 1.0.3

chore(deps): update ossf/scorecard-action action to v2.4.3

• Schedule: ["at any time"]
• Branch name: renovate/ossf-scorecard-action-2.x
• Merge into: main
• Upgrade ossf/scorecard-action to 4eaacf0543bb3f2c246792bd56e8cdeffafb205a

fix(deps): update dependency ch.qos.logback:logback-classic to v1.5.20

• Schedule: ["at any time"]
• Branch name: renovate/logback-monorepo
• Merge into: main
• Upgrade ch.qos.logback:logback-classic to 1.5.20

fix(deps): update dependency com.github.luben:zstd-jni to v1.5.7-6

• Schedule: ["at any time"]
• Branch name: renovate/zstd-jni.version
• Merge into: main
• Upgrade com.github.luben:zstd-jni to 1.5.7-6

fix(deps): update dependency com.google.code.gson:gson to v2.13.2

• Schedule: ["at any time"]
• Branch name: renovate/gson.version
• Merge into: main
• Upgrade com.google.code.gson:gson to 2.13.2

fix(deps): update dependency io.github.classgraph:classgraph to v4.8.184

• Schedule: ["at any time"]
• Branch name: renovate/classgraph.version
• Merge into: main
• Upgrade io.github.classgraph:classgraph to 4.8.184

fix(deps): update testcontainers-java monorepo to v1.21.3

• Schedule: ["at any time"]
• Branch name: renovate/testcontainers-java-monorepo
• Merge into: main
• Upgrade org.testcontainers:testcontainers to 1.21.3
• Upgrade org.testcontainers:junit-jupiter to 1.21.3

chore(deps): update actions/checkout action to v4.3.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-4.x
• Merge into: main
• Upgrade actions/checkout to 08eba0b27e820071cde6df949e0beb9ba4906955

chore(deps): update codecov/codecov-action action to v5.5.1

• Schedule: ["at any time"]
• Branch name: renovate/codecov-codecov-action-5.x
• Merge into: main
• Upgrade codecov/codecov-action to 5a1091511ad55cbe89839c7260b706298ca349f7

chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.46.1

• Schedule: ["at any time"]
• Branch name: renovate/spotless-maven-plugin.version
• Merge into: main
• Upgrade com.diffplug.spotless:spotless-maven-plugin to 2.46.1

chore(deps): update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.2

• Schedule: ["at any time"]
• Branch name: renovate/maven-enforcer-plugin.version
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-enforcer-plugin to 3.6.2

chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.12.0

• Schedule: ["at any time"]
• Branch name: renovate/maven-javadoc-plugin.version
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-javadoc-plugin to 3.12.0

chore(deps): update dependency org.apache.maven.plugins:maven-release-plugin to v3.2.0

• Schedule: ["at any time"]
• Branch name: renovate/maven-release-plugin.version
• Merge into: main
• Upgrade org.apache.maven.plugins:maven-release-plugin to 3.2.0

chore(deps): update dependency org.codehaus.mojo:license-maven-plugin to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/maven-license-plugin.version
• Merge into: main
• Upgrade org.codehaus.mojo:license-maven-plugin to 2.7.0

chore(deps): update dependency org.sonatype.central:central-publishing-maven-plugin to v0.9.0

• Schedule: ["at any time"]
• Branch name: renovate/central-publishing-maven-plugin.version
• Merge into: main
• Upgrade org.sonatype.central:central-publishing-maven-plugin to 0.9.0

chore(deps): update dependency python to 3.14

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: main
• Upgrade python to 3.14

chore(deps): update github/codeql-action action to v3.31.2

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-3.x
• Merge into: main
• Upgrade github/codeql-action to 5d5cd550d3e189c569da8f16ea8de2d821c9bf7a

chore(deps): update s4u/setup-maven-action action to v1.19.0

• Schedule: ["at any time"]
• Branch name: renovate/s4u-setup-maven-action-1.x
• Merge into: main
• Upgrade s4u/setup-maven-action to 6c4e9964d4ecb8f1026310cd8618791fd51a8016

fix(deps): update dependency org.apache.commons:commons-compress to v1.28.0

• Schedule: ["at any time"]
• Branch name: renovate/apache.common-compress.version
• Merge into: main
• Upgrade org.apache.commons:commons-compress to 1.28.0

fix(deps): update dependency org.bouncycastle:bcprov-jdk18on to v1.82

• Schedule: ["at any time"]
• Branch name: renovate/bcprov-jdk18on.version
• Merge into: main
• Upgrade org.bouncycastle:bcprov-jdk18on to 1.82

fix(deps): update junit.version to v5.14.1

• Schedule: ["at any time"]
• Branch name: renovate/junit.version
• Merge into: main
• Upgrade org.junit.jupiter:junit-jupiter-engine to 5.14.1
• Upgrade org.junit.jupiter:junit-jupiter-api to 5.14.1

fix(deps): update mockito monorepo to v5.20.0

• Schedule: ["at any time"]
• Branch name: renovate/mockito-monorepo
• Merge into: main
• Upgrade org.mockito:mockito-junit-jupiter to 5.20.0
• Upgrade org.mockito:mockito-core to 5.20.0

chore(deps): update actions/checkout action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-5.x
• Merge into: main
• Upgrade actions/checkout to 08c6903cd8c0fde910a37f88322edcfb5dd907a8

chore(deps): update actions/setup-java action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-5.x
• Merge into: main
• Upgrade actions/setup-java to dded0888837ed1f317902acf8a20df0ad188d165

chore(deps): update actions/setup-python action to v6

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: main
• Upgrade actions/setup-python to e797f83bcb11b83ae66e0230d6156d7c80228e7c

chore(deps): update actions/upload-artifact action to v5

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/upload-artifact to 330a01c490aca151604b8cf639adc76d48f6c5d4

chore(deps): update actions/upload-pages-artifact action to v4

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-pages-artifact-4.x
• Merge into: main
• Upgrade actions/upload-pages-artifact to 7b1f4a764d45c48632c6b24a0339c27f5614fb0b

chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/major-spotless-maven-plugin.version
• Merge into: main
• Upgrade com.diffplug.spotless:spotless-maven-plugin to 3.0.0

chore(deps): update github/codeql-action action to v4

• Schedule: ["at any time"]
• Branch name: renovate/github-codeql-action-4.x
• Merge into: main
• Upgrade github/codeql-action to 0499de31b99561a6d14a36a5f662c2a54f91beee

fix(deps): update dependency org.testcontainers:testcontainers to v2

• Schedule: ["at any time"]
• Branch name: renovate/major-testcontainers-java-monorepo
• Merge into: main
• Upgrade org.testcontainers:testcontainers to 2.0.1

fix(deps): update junit.version to v6 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-junit.version
• Merge into: main
• Upgrade org.junit.jupiter:junit-jupiter-engine to 6.0.1
• Upgrade org.junit.jupiter:junit-jupiter-api to 6.0.1

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.