Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .circleci/config.yml (circleci)
• content/src/main/content/jcr_root/apps/commerce/demandware/components/page/page/partials/headlibs.html (html)
• base-config/pom.xml (maven)
• bundles/commerce/pom.xml (maven)
• bundles/core/pom.xml (maven)
• bundles/init/pom.xml (maven)
• bundles/libs/pom.xml (maven)
• bundles/pim/pom.xml (maven)
• bundles/replication/pom.xml (maven)
• clean-up-sample-content/pom.xml (maven)
• content-multi-sample/pom.xml (maven)
• content-sample/pom.xml (maven)
• content/pom.xml (maven)
• parent/pom.xml (maven)
• pom.xml (maven)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 64 Pull Requests:

Update dependency org.apache.ant:ant to v1.9.16 [SECURITY]

• Branch name: renovate/maven-org.apache.ant-ant-vulnerability
• Merge into: master
• Upgrade org.apache.ant:ant to 1.9.16

Update dependency com.fasterxml.jackson.core:jackson-databind to v2.12.7.1 [SECURITY]

• Branch name: renovate/maven-com.fasterxml.jackson.core-jackson-databind-vulnerability
• Merge into: master
• Upgrade com.fasterxml.jackson.core:jackson-databind to 2.12.7.1

Update dependency commons-io:commons-io to v2.14.0 [SECURITY]

• Branch name: renovate/maven-commons-io-commons-io-vulnerability
• Merge into: master
• Upgrade commons-io:commons-io to 2.14.0

Update dependency junit:junit to v4.13.1 [SECURITY]

• Branch name: renovate/maven-junit-junit-vulnerability
• Merge into: master
• Upgrade junit:junit to 4.13.1

Update dependency org.apache.sling:org.apache.sling.i18n to v2.6.2 [SECURITY]

• Branch name: renovate/maven-org.apache.sling-org.apache.sling.i18n-vulnerability
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.i18n to 2.6.2

Update circleci/openjdk Docker tag to v8

• Schedule: ["at any time"]
• Branch name: renovate/circleci-openjdk-8.x
• Merge into: master
• Upgrade circleci/openjdk to 8-jdk-stretch

Update dependency com.day.jcr.vault:content-package-maven-plugin to v1.0.6

• Schedule: ["at any time"]
• Branch name: renovate/com.day.jcr.vault-content-package-maven-plugin-1.x
• Merge into: master
• Upgrade com.day.jcr.vault:content-package-maven-plugin to 1.0.6

Update dependency org.apache.httpcomponents:httpclient-osgi to v4.5.14

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.httpcomponents-httpclient-osgi-4.x
• Merge into: master
• Upgrade org.apache.httpcomponents:httpclient-osgi to 4.5.14

Update dependency org.apache.maven.plugins:maven-enforcer-plugin to v1.4.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-enforcer-plugin-1.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-enforcer-plugin to 1.4.1

Update dependency org.apache.maven.plugins:maven-release-plugin to v2.5.3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-release-plugin-2.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-release-plugin to 2.5.3

Update dependency org.apache.maven.release:maven-release-oddeven-policy to v2.5.3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.release-maven-release-oddeven-policy-2.x
• Merge into: master
• Upgrade org.apache.maven.release:maven-release-oddeven-policy to 2.5.3

Update dependency org.apache.sling:org.apache.sling.commons.osgi to v2.4.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-org.apache.sling.commons.osgi-2.x
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.commons.osgi to 2.4.2

Update dependency org.powermock:powermock-api-mockito2 to v2.0.9

• Schedule: ["at any time"]
• Branch name: renovate/org.powermock-powermock-api-mockito2-2.x
• Merge into: master
• Upgrade org.powermock:powermock-api-mockito2 to 2.0.9

Update slf4j monorepo to v1.7.36

• Schedule: ["at any time"]
• Branch name: renovate/slf4j-monorepo
• Merge into: master
• Upgrade org.slf4j:slf4j-simple to 1.7.36
• Upgrade org.slf4j:slf4j-api to 1.7.36

Update dependency com.adobe.aem:uber-jar to v6.5.22

• Schedule: ["at any time"]
• Branch name: renovate/com.adobe.aem-uber-jar-6.x
• Merge into: master
• Upgrade com.adobe.aem:uber-jar to 6.5.22

Update dependency com.fasterxml.jackson.core:jackson-annotations to v2.18.1

• Schedule: ["at any time"]
• Branch name: renovate/com.fasterxml.jackson.core-jackson-annotations-2.x
• Merge into: master
• Upgrade com.fasterxml.jackson.core:jackson-annotations to 2.18.1

Update dependency com.fasterxml.jackson.core:jackson-core to v2.18.1

• Schedule: ["at any time"]
• Branch name: renovate/com.fasterxml.jackson.core-jackson-core-2.x
• Merge into: master
• Upgrade com.fasterxml.jackson.core:jackson-core to 2.18.1

Update dependency com.github.lookfirst:sardine to v5.12

• Schedule: ["at any time"]
• Branch name: renovate/com.github.lookfirst-sardine-5.x
• Merge into: master
• Upgrade com.github.lookfirst:sardine to 5.12

Update dependency io.wcm:io.wcm.testing.aem-mock.junit4 to v2.7.2

• Schedule: ["at any time"]
• Branch name: renovate/io.wcm-io.wcm.testing.aem-mock.junit4-2.x
• Merge into: master
• Upgrade io.wcm:io.wcm.testing.aem-mock.junit4 to 2.7.2

Update dependency javax.servlet.jsp:jsp-api to v2.2

• Schedule: ["at any time"]
• Branch name: renovate/javax.servlet.jsp-jsp-api-2.x
• Merge into: master
• Upgrade javax.servlet.jsp:jsp-api to 2.2

Update dependency org.apache.ant:ant-launcher to v1.10.15

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.ant-ant-launcher-1.x
• Merge into: master
• Upgrade org.apache.ant:ant-launcher to 1.10.15

Update dependency org.apache.commons:commons-lang3 to v3.17.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.commons-commons-lang3-3.x
• Merge into: master
• Upgrade org.apache.commons:commons-lang3 to 3.17.0

Update dependency org.apache.felix:maven-bundle-plugin to v3.5.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.felix-maven-bundle-plugin-3.x
• Merge into: master
• Upgrade org.apache.felix:maven-bundle-plugin to 3.5.1

Update dependency org.apache.felix:maven-scr-plugin to v1.26.4

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.felix-maven-scr-plugin-1.x
• Merge into: master
• Upgrade org.apache.felix:maven-scr-plugin to 1.26.4

Update dependency org.apache.geronimo.specs:geronimo-atinject_1.0_spec to v1.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.geronimo.specs-geronimo-atinject_1.0_spec-1.x
• Merge into: master
• Upgrade org.apache.geronimo.specs:geronimo-atinject_1.0_spec to 1.2

Update dependency org.apache.jackrabbit:filevault-package-maven-plugin to v1.4.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.jackrabbit-filevault-package-maven-plugin-1.x
• Merge into: master
• Upgrade org.apache.jackrabbit:filevault-package-maven-plugin to 1.4.0

Update dependency org.apache.jackrabbit:jackrabbit-jcr-commons to v2.22.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.jackrabbit-jackrabbit-jcr-commons-2.x
• Merge into: master
• Upgrade org.apache.jackrabbit:jackrabbit-jcr-commons to 2.22.0

Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.13.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-compiler-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-compiler-plugin to 3.13.0

Update dependency org.apache.maven.plugins:maven-failsafe-plugin to v2.22.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-failsafe-plugin-2.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 2.22.2

Update dependency org.apache.maven.plugins:maven-source-plugin to v3.3.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-source-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-source-plugin to 3.3.1

Update dependency org.apache.maven.plugins:maven-surefire-plugin to v2.22.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-surefire-plugin-2.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 2.22.2

Update dependency org.apache.maven.scm:maven-scm-provider-gitexe to v1.13.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.scm-maven-scm-provider-gitexe-1.x
• Merge into: master
• Upgrade org.apache.maven.scm:maven-scm-provider-gitexe to 1.13.0

Update dependency org.apache.rat:apache-rat-plugin to v0.16.1

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.rat-apache-rat-plugin-0.x
• Merge into: master
• Upgrade org.apache.rat:apache-rat-plugin to 0.16.1

Update dependency org.apache.sling:maven-sling-plugin to v2.4.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-maven-sling-plugin-2.x
• Merge into: master
• Upgrade org.apache.sling:maven-sling-plugin to 2.4.2

Update dependency org.apache.sling:org.apache.sling.commons.johnzon to v1.2.16

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-org.apache.sling.commons.johnzon-1.x
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.commons.johnzon to 1.2.16

Update dependency org.apache.sling:org.apache.sling.jcr.resource to v2.9.2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-org.apache.sling.jcr.resource-2.x
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.jcr.resource to 2.9.2

Update dependency org.apache.sling:org.apache.sling.servlet-helpers to v1.4.6

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-org.apache.sling.servlet-helpers-1.x
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.servlet-helpers to 1.4.6

Update dependency org.apache.sling:org.apache.sling.testing.sling-mock.junit4 to v2.7.0

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-org.apache.sling.testing.sling-mock.junit4-2.x
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.testing.sling-mock.junit4 to 2.7.0

Update dependency org.codehaus.mojo:build-helper-maven-plugin to v1.12

• Schedule: ["at any time"]
• Branch name: renovate/org.codehaus.mojo-build-helper-maven-plugin-1.x
• Merge into: master
• Upgrade org.codehaus.mojo:build-helper-maven-plugin to 1.12

Update dependency org.mockito:mockito-core to v2.28.2

• Schedule: ["at any time"]
• Branch name: renovate/mockito-monorepo
• Merge into: master
• Upgrade org.mockito:mockito-core to 2.28.2

Update dependency org.powermock:powermock-core to v1.7.4

• Schedule: ["at any time"]
• Branch name: renovate/org.powermock-powermock-core-1.x
• Merge into: master
• Upgrade org.powermock:powermock-core to 1.7.4

Update dependency org.powermock:powermock-module-junit4 to v1.7.4

• Schedule: ["at any time"]
• Branch name: renovate/org.powermock-powermock-module-junit4-1.x
• Merge into: master
• Upgrade org.powermock:powermock-module-junit4 to 1.7.4

Update circleci/openjdk Docker tag to v11

• Schedule: ["at any time"]
• Branch name: renovate/circleci-openjdk-11.x
• Merge into: master
• Upgrade circleci/openjdk to 11-jdk-stretch

Update dependency io.wcm:io.wcm.testing.aem-mock.junit4 to v5

• Schedule: ["at any time"]
• Branch name: renovate/io.wcm-io.wcm.testing.aem-mock.junit4-5.x
• Merge into: master
• Upgrade io.wcm:io.wcm.testing.aem-mock.junit4 to 5.6.2

Update dependency javax.servlet:javax.servlet-api to v4

• Schedule: ["at any time"]
• Branch name: renovate/javax.servlet-javax.servlet-api-4.x
• Merge into: master
• Upgrade javax.servlet:javax.servlet-api to 4.0.1

Update dependency org.apache.felix:maven-bundle-plugin to v5

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.felix-maven-bundle-plugin-5.x
• Merge into: master
• Upgrade org.apache.felix:maven-bundle-plugin to 5.1.9

Update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-enforcer-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-enforcer-plugin to 3.5.0

Update dependency org.apache.maven.plugins:maven-failsafe-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-failsafe-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-failsafe-plugin to 3.5.2

Update dependency org.apache.maven.plugins:maven-release-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-release-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-release-plugin to 3.1.1

Update dependency org.apache.maven.plugins:maven-resources-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-resources-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-resources-plugin to 3.3.1

Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.plugins-maven-surefire-plugin-3.x
• Merge into: master
• Upgrade org.apache.maven.plugins:maven-surefire-plugin to 3.5.2

Update dependency org.apache.maven.release:maven-release-oddeven-policy to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.release-maven-release-oddeven-policy-3.x
• Merge into: master
• Upgrade org.apache.maven.release:maven-release-oddeven-policy to 3.1.1

Update dependency org.apache.maven.scm:maven-scm-provider-gitexe to v2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.maven.scm-maven-scm-provider-gitexe-2.x
• Merge into: master
• Upgrade org.apache.maven.scm:maven-scm-provider-gitexe to 2.1.0

Update dependency org.apache.sling:org.apache.sling.commons.johnzon to v2

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-org.apache.sling.commons.johnzon-2.x
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.commons.johnzon to 2.0.0

Update dependency org.apache.sling:org.apache.sling.jcr.resource to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-org.apache.sling.jcr.resource-3.x
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.jcr.resource to 3.3.2

Update dependency org.apache.sling:org.apache.sling.testing.sling-mock.junit4 to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.apache.sling-org.apache.sling.testing.sling-mock.junit4-3.x
• Merge into: master
• Upgrade org.apache.sling:org.apache.sling.testing.sling-mock.junit4 to 3.5.2

Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3

• Schedule: ["at any time"]
• Branch name: renovate/org.codehaus.mojo-build-helper-maven-plugin-3.x
• Merge into: master
• Upgrade org.codehaus.mojo:build-helper-maven-plugin to 3.6.0

Update dependency org.mockito:mockito-core to v5

• Schedule: ["at any time"]
• Branch name: renovate/major-mockito-monorepo
• Merge into: master
• Upgrade org.mockito:mockito-core to 5.14.2

Update dependency org.osgi:osgi.annotation to v8

• Schedule: ["at any time"]
• Branch name: renovate/org.osgi-osgi.annotation-8.x
• Merge into: master
• Upgrade org.osgi:osgi.annotation to 8.1.0

Update dependency org.osgi:osgi.cmpn to v7

• Schedule: ["at any time"]
• Branch name: renovate/org.osgi-osgi.cmpn-7.x
• Merge into: master
• Upgrade org.osgi:osgi.cmpn to 7.0.0

Update dependency org.osgi:osgi.core to v8

• Schedule: ["at any time"]
• Branch name: renovate/org.osgi-osgi.core-8.x
• Merge into: master
• Upgrade org.osgi:osgi.core to 8.0.0

Update dependency org.powermock:powermock-core to v2

• Schedule: ["at any time"]
• Branch name: renovate/org.powermock-powermock-core-2.x
• Merge into: master
• Upgrade org.powermock:powermock-core to 2.0.9

Update dependency org.powermock:powermock-module-junit4 to v2

• Schedule: ["at any time"]
• Branch name: renovate/org.powermock-powermock-module-junit4-2.x
• Merge into: master
• Upgrade org.powermock:powermock-module-junit4 to 2.0.9

Update slf4j monorepo to v2 (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-slf4j-monorepo
• Merge into: master
• Upgrade org.slf4j:slf4j-simple to 2.0.16
• Upgrade org.slf4j:slf4j-api to 2.0.16

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

Warning

Please correct - or verify that you can safely ignore - these dependency lookup failures before you merge this PR.

• Failed to look up maven package com.adobe.cq.commerce:cq-commerce-demandware-core
• Failed to look up maven package com.adobe.cq.commerce:cq-commerce-demandware-sample-init
• Failed to look up maven package com.adobe.cq.commerce:cq-commerce-demandware-commerce
• Failed to look up maven package com.adobe.cq.commerce:cq-commerce-demandware-replication
• Failed to look up maven package com.adobe.cq.commerce:cq-commerce-demandware-libs
• Failed to look up maven package com.adobe.cq.commerce:cq-commerce-demandware-pim

Files affected: bundles/init/pom.xml, bundles/pim/pom.xml, bundles/replication/pom.xml, clean-up-sample-content/pom.xml, content-multi-sample/pom.xml, content-sample/pom.xml, content/pom.xml

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.