Configure Renovate

[elastic-renovate-prod]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .buildkite/it/serverless-pipeline.yml (buildkite)
• docker/docker-compose-tests.yml (docker-compose)
• recipes/ccr/docker-compose.yml (docker-compose)
• docker/Dockerfiles/dev/Dockerfile (dockerfile)
• docker/Dockerfiles/release/Dockerfile (dockerfile)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• pyproject.toml (pep621)
• renovate.json (renovate-config-presets)
• docker/Dockerfiles/dev/Dockerfile (regex)
• docker/Dockerfiles/release/Dockerfile (regex)
• docker/Dockerfiles/dev/Dockerfile (regex)
• docker/Dockerfiles/release/Dockerfile (regex)
• .buildkite/dev-docker/pipeline.yml (regex)
• .buildkite/it/pipeline.yml (regex)
• .buildkite/it/serverless-pipeline.yml (regex)
• .buildkite/release-docker/pipeline.yml (regex)
• docker/Dockerfiles/dev/Dockerfile (regex)
• docker/Dockerfiles/release/Dockerfile (regex)
• docker/Dockerfiles/dev/Dockerfile (regex)
• docker/Dockerfiles/release/Dockerfile (regex)
• .buildkite/dev-docker/pipeline.yml (regex)
• .buildkite/it/pipeline.yml (regex)
• .buildkite/it/serverless-pipeline.yml (regex)
• .buildkite/release-docker/pipeline.yml (regex)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Capture APK packages provided by Chainguard (https://ela.st/wolfi)
• Capture packages annotated with # renovate: datasource=... depName=... headers; via https://renovate-docs.elastic.dev/modules/manager/dockerfile/
• Renovate configuration to manage containers in docker.elastic.co/ci-agent-images/*. This is included by default and doesn't need to be explicitly pulled in
• Group Chainguard packages, including Wolfi and Chainguard APKs
• DEPRECATED: USE "github>elastic/renovate-config//presets/base" instead
• Capture APK packages provided by Chainguard (https://ela.st/wolfi)
• Capture packages annotated with # renovate: datasource=... depName=... headers; via https://renovate-docs.elastic.dev/modules/manager/dockerfile/
• Renovate configuration to manage containers in docker.elastic.co/ci-agent-images/*. This is included by default and doesn't need to be explicitly pulled in
• Group Chainguard packages, including Wolfi and Chainguard APKs
• Baseline configuration for our internal setup
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for development dependencies.
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
• Shared Renovate configuration for an out-of-the-box set of defaults for Renovate at Elastic

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 66 Pull Requests:

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: master
• Upgrade actions/checkout to 34e114876b0b11c390a56381ad16ebd13914f8d5
• Upgrade actions/checkout to f43a0e5ff2bd294095638e18286ca9a3d1956744
• Upgrade actions/setup-java to c1e323688fd81a25caa38c78aa6df2d33d3e20d9
• Upgrade actions/setup-python to 7f4fc3e22c37d6ff65e88745f38bd3157c663f7c
• Upgrade actions/upload-artifact to ea165f8d65b6e75b540449e92b4886f43607fa02
• Upgrade astral-sh/setup-uv to 37802adc94f370d6bfd71619e3f0bf239e1f3b78
• Upgrade docker.elastic.co/elasticsearch/elasticsearch to sha256:b9f90aa70522c9a26ded74095755ba574294474e4a1cde902c0bc221e2a15daf
• Upgrade elastic/es-perf-github-status to a3ac9d282d63b92763472fa3b1ad33e4ee572ef4
• Upgrade gabrielfalcao/pyenv-action to 5668dcb49bd9d228bba29dd5e1fbb6e0aae55a71
• Upgrade ghcr.io/astral-sh/uv to sha256:b46b03ddfcfbf8f547af7e9eaefdf8a39c8cebcba7c98858d3162bd28cf536f6

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/wolfi-versioned
• Merge into: master
• Upgrade docker.elastic.co/wolfi/chainguard-base to sha256:1528876c97cc38e8b7a031ca22555df64d4cd3d47d40bea325102df860884081
• Upgrade docker.elastic.co/wolfi/python to sha256:550784584ec1d16cc0aabf4c790630bda42c5eb8ec3771c158418cd08c90accb

Update actions/checkout action to v6.0.3

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: master
• Upgrade actions/checkout to df4cb1c069e1874edd31b4311f1884172cec0e10

Update actions/upload-artifact action to v7.0.1

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-7.x
• Merge into: master
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

Update dependency astral-sh/uv to v0.11.27

• Schedule: ["at any time"]
• Branch name: renovate/astral-sh-uv-0.x
• Merge into: master
• Upgrade astral-sh/uv to 0.11.27

Update dependency gitpython to v3.1.50

• Schedule: ["at any time"]
• Branch name: renovate/gitpython-3.x
• Merge into: master
• Upgrade gitpython to ==3.1.50

Update dependency pip to v26.1.2

• Schedule: ["at any time"]
• Branch name: renovate/pip-26.x
• Merge into: master
• Upgrade pip to ==26.1.2

Update dependency psutil to v5.9.8

• Schedule: ["at any time"]
• Branch name: renovate/psutil-5.x
• Merge into: master
• Upgrade psutil to ==5.9.8

Update dependency pylint to v3.3.9

• Schedule: ["at any time"]
• Branch name: renovate/pylint-3.x
• Merge into: master
• Upgrade pylint to ==3.3.9

Update dependency pytest-benchmark to v5.2.3

• Schedule: ["at any time"]
• Branch name: renovate/pytest-benchmark-5.x
• Merge into: master
• Upgrade pytest-benchmark to ==5.2.3

Update dependency pytest-httpserver to v1.1.5

• Schedule: ["at any time"]
• Branch name: renovate/pytest-httpserver-1.x
• Merge into: master
• Upgrade pytest-httpserver to ==1.1.5

Update dependency types-jsonschema to v3.2.1

• Schedule: ["at any time"]
• Branch name: renovate/types-jsonschema-3.x
• Merge into: master
• Upgrade types-jsonschema to ==3.2.1

Update dependency types-psutil to v5.9.5.20240516

• Schedule: ["at any time"]
• Branch name: renovate/types-psutil-5.x
• Merge into: master
• Upgrade types-psutil to ==5.9.5.20240516

Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v8.19.18

• Schedule: ["at any time"]
• Branch name: renovate/docker.elastic.co-elasticsearch-elasticsearch-8.x
• Merge into: master
• Upgrade docker.elastic.co/elasticsearch/elasticsearch to sha256:805d9a33ee81a522fbefaeb8ffe3ded9aba20af0f8c843f55ae01bad398d2db7

Update ghcr.io/astral-sh/uv Docker tag to v0.11.27

• Schedule: ["at any time"]
• Branch name: renovate/ghcr.io-astral-sh-uv-0.x
• Merge into: master
• Upgrade ghcr.io/astral-sh/uv to sha256:4d01caf3b22dfd11003455e2e68153da08c4ee1fa54fdbd166c6282d22693419

Update buildkite plugin elastic/vault-secrets to v0.1.0

• Schedule: ["at any time"]
• Branch name: renovate/elastic-vault-secrets-0.x
• Merge into: master
• Upgrade elastic/vault-secrets to v0.1.0

Update dependency black to v26.5.1

• Schedule: ["at any time"]
• Branch name: renovate/black-26.x
• Merge into: master
• Upgrade black to ==26.5.1

Update dependency boto3 to v1.43.41

• Schedule: ["at any time"]
• Branch name: renovate/boto3-1.x
• Merge into: master
• Upgrade boto3 to ==1.43.41

Update dependency boto3-stubs to v1.43.41

• Schedule: ["at any time"]
• Branch name: renovate/boto3-stubs-1.x
• Merge into: master
• Upgrade boto3-stubs to ==1.43.41

Update dependency ecs-logging to v2.3.0

• Schedule: ["at any time"]
• Branch name: renovate/ecs-logging-2.x
• Merge into: master
• Upgrade ecs-logging to ==2.3.0

Update dependency elastic-transport to v9.4.2

• Schedule: ["at any time"]
• Branch name: renovate/elastic-transport-9.x
• Merge into: master
• Upgrade elastic-transport to ==9.4.2

Update dependency elasticsearch to v9.4.1

• Schedule: ["at any time"]
• Branch name: renovate/elasticsearch-9.x
• Merge into: master
• Upgrade elasticsearch to ==9.4.1

Update dependency esbonio to v2.1.0

• Schedule: ["at any time"]
• Branch name: renovate/esbonio-2.x
• Merge into: master
• Upgrade esbonio to ==2.1.0

Update dependency furo to v2022.12.7

• Schedule: ["at any time"]
• Branch name: renovate/furo-2022.x
• Merge into: master
• Upgrade furo to ==2022.12.7

Update dependency google-auth to v2.55.1

• Schedule: ["at any time"]
• Branch name: renovate/google-auth-2.x
• Merge into: master
• Upgrade google-auth to ==2.55.1

Update dependency google-crc32c to v1.8.0

• Schedule: ["at any time"]
• Branch name: renovate/google-crc32c-1.x
• Merge into: master
• Upgrade google-crc32c to ==1.8.0

Update dependency google-resumable-media to v2.10.0

• Schedule: ["at any time"]
• Branch name: renovate/google-resumable-media-2.x
• Merge into: master
• Upgrade google-resumable-media to ==2.10.0

Update dependency hatch to v1.17.0

• Schedule: ["at any time"]
• Branch name: renovate/hatch-1.x
• Merge into: master
• Upgrade hatch to ==1.17.0

Update dependency hatchling to v1.30.1

• Schedule: ["at any time"]
• Branch name: renovate/hatchling-1.x
• Merge into: master
• Upgrade hatchling to ==1.30.1

Update dependency ijson to v3.5.1

• Schedule: ["at any time"]
• Branch name: renovate/ijson-3.x
• Merge into: master
• Upgrade ijson to ==3.5.1

Update dependency jsonschema to v3.2.0

• Schedule: ["at any time"]
• Branch name: renovate/jsonschema-3.x
• Merge into: master
• Upgrade jsonschema to ==3.2.0

Update dependency markupsafe to v2.1.5

• Schedule: ["at any time"]
• Branch name: renovate/markupsafe-2.x
• Merge into: master
• Upgrade markupsafe to ==2.1.5

Update dependency mypy to v1.20.2

• Schedule: ["at any time"]
• Branch name: renovate/mypy-1.x
• Merge into: master
• Upgrade mypy to ==1.20.2

Update dependency pre-commit to v2.21.0

• Schedule: ["at any time"]
• Branch name: renovate/pre-commit-2.x
• Merge into: master
• Upgrade pre-commit to ==2.21.0

Update dependency pytest-asyncio to v1.4.0

• Schedule: ["at any time"]
• Branch name: renovate/pytest-asyncio-1.x
• Merge into: master
• Upgrade pytest-asyncio to ==1.4.0

Update dependency requests to <2.34.3

• Schedule: ["at any time"]
• Branch name: renovate/requests-2.x
• Merge into: master
• Upgrade requests to <2.34.3

Update dependency sphinx to v5.3.0

• Schedule: ["at any time"]
• Branch name: renovate/sphinx-5.x
• Merge into: master
• Upgrade sphinx to ==5.3.0

Update dependency tabulate to v0.10.0

• Schedule: ["at any time"]
• Branch name: renovate/tabulate-0.x
• Merge into: master
• Upgrade tabulate to ==0.10.0

Update dependency types-tabulate to v0.10.0.20260508

• Schedule: ["at any time"]
• Branch name: renovate/types-tabulate-0.x
• Merge into: master
• Upgrade types-tabulate to ==0.10.0.20260508

Update dependency typing-extensions to v4.16.0

• Schedule: ["at any time"]
• Branch name: renovate/typing-extensions-4.x
• Merge into: master
• Upgrade typing-extensions to ==4.16.0

Update dependency wheel to v0.47.0

• Schedule: ["at any time"]
• Branch name: renovate/wheel-0.x
• Merge into: master
• Upgrade wheel to ==0.47.0

Update dependency yappi to v1.7.6

• Schedule: ["at any time"]
• Branch name: renovate/yappi-1.x
• Merge into: master
• Upgrade yappi to ==1.7.6

Update pypa/gh-action-pypi-publish action to v1.14.0

• Schedule: ["at any time"]
• Branch name: renovate/pypa-gh-action-pypi-publish-1.x
• Merge into: master
• Upgrade pypa/gh-action-pypi-publish to cef221092ed1bacb1cc03d23a2d87d1d172e277b

Update Python to v3.14.6

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to >=3.14,<3.15
• Upgrade python to 3.14

Update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: master
• Upgrade actions/checkout to 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0

Update actions/setup-java action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-5.x
• Merge into: master
• Upgrade actions/setup-java to 1bcf9fb12cf4aa7d266a90ae39939e61372fe520

Update actions/setup-python action

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: master
• Upgrade actions/setup-python to ece7cb06caefa5fff74198d8649806c4678c61a1

Update actions/upload-artifact action to v7

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: master
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

Update dependency furo to v2025

• Schedule: ["at any time"]
• Branch name: renovate/furo-2025.x
• Merge into: master
• Upgrade furo to ==2025.12.19

Update dependency github3-py to v4

• Schedule: ["at any time"]
• Branch name: renovate/github3-py-4.x
• Merge into: master
• Upgrade github3-py to ==4.0.1

Update dependency jsonschema to v4

• Schedule: ["at any time"]
• Branch name: renovate/jsonschema-4.x
• Merge into: master
• Upgrade jsonschema to ==4.26.0

Update dependency markupsafe to v3

• Schedule: ["at any time"]
• Branch name: renovate/markupsafe-3.x
• Merge into: master
• Upgrade markupsafe to ==3.0.3

Update dependency mypy to v2

• Schedule: ["at any time"]
• Branch name: renovate/mypy-2.x
• Merge into: master
• Upgrade mypy to ==2.1.0

Update dependency pre-commit to v4

• Schedule: ["at any time"]
• Branch name: renovate/pre-commit-4.x
• Merge into: master
• Upgrade pre-commit to ==4.6.0

Update dependency psutil to v7

• Schedule: ["at any time"]
• Branch name: renovate/psutil-7.x
• Merge into: master
• Upgrade psutil to ==7.2.2

Update dependency py-cpuinfo to v9

• Schedule: ["at any time"]
• Branch name: renovate/py-cpuinfo-9.x
• Merge into: master
• Upgrade py-cpuinfo to ==9.0.0

Update dependency pylint to v4

• Schedule: ["at any time"]
• Branch name: renovate/pylint-4.x
• Merge into: master
• Upgrade pylint to ==4.0.6

Update dependency pytest to v9

• Schedule: ["at any time"]
• Branch name: renovate/pytest-9.x
• Merge into: master
• Upgrade pytest to ==9.1.1

Update dependency python-json-logger to v4

• Schedule: ["at any time"]
• Branch name: renovate/python-json-logger-4.x
• Merge into: master
• Upgrade python-json-logger to ==4.1.0

Update dependency sphinx to v9

• Schedule: ["at any time"]
• Branch name: renovate/sphinx-9.x
• Merge into: master
• Upgrade sphinx to ==9.1.0

Update dependency trustme to v1

• Schedule: ["at any time"]
• Branch name: renovate/trustme-1.x
• Merge into: master
• Upgrade trustme to ==1.2.1

Update dependency types-jsonschema to v4

• Schedule: ["at any time"]
• Branch name: renovate/types-jsonschema-4.x
• Merge into: master
• Upgrade types-jsonschema to ==4.26.0.20260518

Update dependency types-psutil to v7

• Schedule: ["at any time"]
• Branch name: renovate/types-psutil-7.x
• Merge into: master
• Upgrade types-psutil to ==7.2.2.20260518

Update dependency ubuntu to v24

• Schedule: ["at any time"]
• Branch name: renovate/ubuntu-24.x
• Merge into: master
• Upgrade ubuntu to 24.04

Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v9

• Schedule: ["at any time"]
• Branch name: renovate/docker.elastic.co-elasticsearch-elasticsearch-9.x
• Merge into: master
• Upgrade docker.elastic.co/elasticsearch/elasticsearch to sha256:851ff5f9615ab7d2f00931114f6db32850f0208ec9fe7e841f135ac78f5f13d5

Update gabrielfalcao/pyenv-action action to v19

• Schedule: ["at any time"]
• Branch name: renovate/gabrielfalcao-pyenv-action-19.x
• Merge into: master
• Upgrade gabrielfalcao/pyenv-action to b87c106701c870bb86081a69fc903806426ad8a2

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.