Configure Renovate

[elastic-renovate-prod]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---

Detected Package Files

• .buildkite/it/serverless-pipeline.yml (buildkite)
• docker/docker-compose-tests.yml (docker-compose)
• recipes/ccr/docker-compose.yml (docker-compose)
• docker/Dockerfiles/dev/Dockerfile (dockerfile)
• docker/Dockerfiles/release/Dockerfile (dockerfile)
• .github/workflows/ci.yml (github-actions)
• .github/workflows/release.yml (github-actions)
• pyproject.toml (pep621)
• renovate.json (renovate-config-presets)
• docker/Dockerfiles/dev/Dockerfile (regex)
• docker/Dockerfiles/release/Dockerfile (regex)
• docker/Dockerfiles/dev/Dockerfile (regex)
• docker/Dockerfiles/release/Dockerfile (regex)
• .buildkite/dev-docker/pipeline.yml (regex)
• .buildkite/it/pipeline.yml (regex)
• .buildkite/it/serverless-pipeline.yml (regex)
• .buildkite/release-docker/pipeline.yml (regex)
• docker/Dockerfiles/dev/Dockerfile (regex)
• docker/Dockerfiles/release/Dockerfile (regex)
• docker/Dockerfiles/dev/Dockerfile (regex)
• docker/Dockerfiles/release/Dockerfile (regex)
• .buildkite/dev-docker/pipeline.yml (regex)
• .buildkite/it/pipeline.yml (regex)
• .buildkite/it/serverless-pipeline.yml (regex)
• .buildkite/release-docker/pipeline.yml (regex)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Capture APK packages provided by Chainguard (https://ela.st/wolfi)
• Capture packages annotated with # renovate: datasource=... depName=... headers; via https://renovate-docs.elastic.dev/modules/manager/dockerfile/
• Renovate configuration to manage containers in docker.elastic.co/ci-agent-images/*. This is included by default and doesn't need to be explicitly pulled in
• Group Chainguard packages, including Wolfi and Chainguard APKs
• DEPRECATED: USE "github>elastic/renovate-config//presets/base" instead
• Capture APK packages provided by Chainguard (https://ela.st/wolfi)
• Capture packages annotated with # renovate: datasource=... depName=... headers; via https://renovate-docs.elastic.dev/modules/manager/dockerfile/
• Renovate configuration to manage containers in docker.elastic.co/ci-agent-images/*. This is included by default and doesn't need to be explicitly pulled in
• Group Chainguard packages, including Wolfi and Chainguard APKs
• Baseline configuration for our internal setup
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for development dependencies.
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
• Shared Renovate configuration for an out-of-the-box set of defaults for Renovate at Elastic

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 68 Pull Requests:

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/pin-dependencies
• Merge into: master
• Upgrade actions/checkout to 11d5960a326750d5838078e36cf38b85af677262
• Upgrade actions/checkout to a37ce9120846195fa4ece8f58b268e6043cb2f26
• Upgrade actions/setup-java to c1e323688fd81a25caa38c78aa6df2d33d3e20d9
• Upgrade actions/setup-python to 7f4fc3e22c37d6ff65e88745f38bd3157c663f7c
• Upgrade actions/upload-artifact to ea165f8d65b6e75b540449e92b4886f43607fa02
• Upgrade astral-sh/setup-uv to 37802adc94f370d6bfd71619e3f0bf239e1f3b78
• Upgrade docker.elastic.co/elasticsearch/elasticsearch to sha256:b9f90aa70522c9a26ded74095755ba574294474e4a1cde902c0bc221e2a15daf
• Upgrade elastic/es-perf-github-status to a3ac9d282d63b92763472fa3b1ad33e4ee572ef4
• Upgrade gabrielfalcao/pyenv-action to 5668dcb49bd9d228bba29dd5e1fbb6e0aae55a71
• Upgrade ghcr.io/astral-sh/uv to sha256:b46b03ddfcfbf8f547af7e9eaefdf8a39c8cebcba7c98858d3162bd28cf536f6

Pin dependencies

• Schedule: ["at any time"]
• Branch name: renovate/wolfi-versioned
• Merge into: master
• Upgrade docker.elastic.co/wolfi/chainguard-base to sha256:035a2593c6d26cc96f5ca5cfd48fe9bd0930f7472a950f05210f3f98a2eb2fa4
• Upgrade docker.elastic.co/wolfi/python to sha256:fd7c8c217310e5bb537245e1368841aa4c2e2f07c3ed0524973238bb329c9e8c

Update actions/upload-artifact action to v7.0.1

• Schedule: ["at any time"]
• Branch name: renovate/actions-upload-artifact-7.x
• Merge into: master
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

Update dependency aiohttp to v3.14.3

• Schedule: ["at any time"]
• Branch name: renovate/aiohttp-3.x
• Merge into: master
• Upgrade aiohttp to ==3.14.3

Update dependency astral-sh/uv to v0.11.32

• Schedule: ["at any time"]
• Branch name: renovate/astral-sh-uv-0.x
• Merge into: master
• Upgrade astral-sh/uv to 0.11.32

Update dependency gitpython to v3.1.57

• Schedule: ["at any time"]
• Branch name: renovate/gitpython-3.x
• Merge into: master
• Upgrade gitpython to ==3.1.57

Update dependency psutil to v5.9.8

• Schedule: ["at any time"]
• Branch name: renovate/psutil-5.x
• Merge into: master
• Upgrade psutil to ==5.9.8

Update dependency pylint to v3.3.9

• Schedule: ["at any time"]
• Branch name: renovate/pylint-3.x
• Merge into: master
• Upgrade pylint to ==3.3.9

Update dependency pytest-benchmark to v5.2.3

• Schedule: ["at any time"]
• Branch name: renovate/pytest-benchmark-5.x
• Merge into: master
• Upgrade pytest-benchmark to ==5.2.3

Update dependency pytest-httpserver to v1.1.5

• Schedule: ["at any time"]
• Branch name: renovate/pytest-httpserver-1.x
• Merge into: master
• Upgrade pytest-httpserver to ==1.1.5

Update dependency types-jsonschema to v3.2.1

• Schedule: ["at any time"]
• Branch name: renovate/types-jsonschema-3.x
• Merge into: master
• Upgrade types-jsonschema to ==3.2.1

Update dependency types-psutil to v5.9.5.20240516

• Schedule: ["at any time"]
• Branch name: renovate/types-psutil-5.x
• Merge into: master
• Upgrade types-psutil to ==5.9.5.20240516

Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v8.19.19

• Schedule: ["at any time"]
• Branch name: renovate/docker.elastic.co-elasticsearch-elasticsearch-8.x
• Merge into: master
• Upgrade docker.elastic.co/elasticsearch/elasticsearch to sha256:5dbf405a97e008f3024cf6f8f4a314d91b765d82954530893dcc13f8e87d21f4

Update ghcr.io/astral-sh/uv Docker tag to v0.11.32

• Schedule: ["at any time"]
• Branch name: renovate/ghcr.io-astral-sh-uv-0.x
• Merge into: master
• Upgrade ghcr.io/astral-sh/uv to sha256:df4cae8f3a96d175e2e5f992e597550000edbe78fdc2594d5cd8de1a217f504c

Update actions/checkout action to v6.1.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: master
• Upgrade actions/checkout to d23441a48e516b6c34aea4fa41551a30e30af803

Update actions/setup-python action to v6.3.0

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-6.x
• Merge into: master
• Upgrade actions/setup-python to ece7cb06caefa5fff74198d8649806c4678c61a1

Update buildkite plugin elastic/vault-secrets to v0.1.1

• Schedule: ["at any time"]
• Branch name: renovate/elastic-vault-secrets-0.x
• Merge into: master
• Upgrade elastic/vault-secrets to v0.1.1

Update dependency black to v26.5.1

• Schedule: ["at any time"]
• Branch name: renovate/black-26.x
• Merge into: master
• Upgrade black to ==26.5.1

Update dependency boto3 to v1.43.57

• Schedule: ["at any time"]
• Branch name: renovate/boto3-1.x
• Merge into: master
• Upgrade boto3 to ==1.43.57

Update dependency boto3-stubs to v1.43.57

• Schedule: ["at any time"]
• Branch name: renovate/boto3-stubs-1.x
• Merge into: master
• Upgrade boto3-stubs to ==1.43.57

Update dependency docker to v7.2.0

• Schedule: ["at any time"]
• Branch name: renovate/docker-7.x
• Merge into: master
• Upgrade docker to ==7.2.0

Update dependency ecs-logging to v2.3.0

• Schedule: ["at any time"]
• Branch name: renovate/ecs-logging-2.x
• Merge into: master
• Upgrade ecs-logging to ==2.3.0

Update dependency elastic-transport to v9.4.2

• Schedule: ["at any time"]
• Branch name: renovate/elastic-transport-9.x
• Merge into: master
• Upgrade elastic-transport to ==9.4.2

Update dependency elasticsearch to v9.4.1

• Schedule: ["at any time"]
• Branch name: renovate/elasticsearch-9.x
• Merge into: master
• Upgrade elasticsearch to ==9.4.1

Update dependency esbonio to v2.1.0

• Schedule: ["at any time"]
• Branch name: renovate/esbonio-2.x
• Merge into: master
• Upgrade esbonio to ==2.1.0

Update dependency furo to v2022.12.7

• Schedule: ["at any time"]
• Branch name: renovate/furo-2022.x
• Merge into: master
• Upgrade furo to ==2022.12.7

Update dependency google-auth to v2.56.2

• Schedule: ["at any time"]
• Branch name: renovate/google-auth-2.x
• Merge into: master
• Upgrade google-auth to ==2.56.2

Update dependency google-crc32c to v1.8.0

• Schedule: ["at any time"]
• Branch name: renovate/google-crc32c-1.x
• Merge into: master
• Upgrade google-crc32c to ==1.8.0

Update dependency google-resumable-media to v2.10.0

• Schedule: ["at any time"]
• Branch name: renovate/google-resumable-media-2.x
• Merge into: master
• Upgrade google-resumable-media to ==2.10.0

Update dependency hatch to v1.17.1

• Schedule: ["at any time"]
• Branch name: renovate/hatch-1.x
• Merge into: master
• Upgrade hatch to ==1.17.1

Update dependency hatchling to v1.31.0

• Schedule: ["at any time"]
• Branch name: renovate/hatchling-1.x
• Merge into: master
• Upgrade hatchling to ==1.31.0

Update dependency ijson to v3.5.1

• Schedule: ["at any time"]
• Branch name: renovate/ijson-3.x
• Merge into: master
• Upgrade ijson to ==3.5.1

Update dependency jsonschema to v3.2.0

• Schedule: ["at any time"]
• Branch name: renovate/jsonschema-3.x
• Merge into: master
• Upgrade jsonschema to ==3.2.0

Update dependency markupsafe to v2.1.5

• Schedule: ["at any time"]
• Branch name: renovate/markupsafe-2.x
• Merge into: master
• Upgrade markupsafe to ==2.1.5

Update dependency mypy to v1.20.2

• Schedule: ["at any time"]
• Branch name: renovate/mypy-1.x
• Merge into: master
• Upgrade mypy to ==1.20.2

Update dependency pre-commit to v2.21.0

• Schedule: ["at any time"]
• Branch name: renovate/pre-commit-2.x
• Merge into: master
• Upgrade pre-commit to ==2.21.0

Update dependency pytest-asyncio to v1.4.0

• Schedule: ["at any time"]
• Branch name: renovate/pytest-asyncio-1.x
• Merge into: master
• Upgrade pytest-asyncio to ==1.4.0

Update dependency requests to <2.34.3

• Schedule: ["at any time"]
• Branch name: renovate/requests-2.x
• Merge into: master
• Upgrade requests to <2.34.3

Update dependency sphinx to v5.3.0

• Schedule: ["at any time"]
• Branch name: renovate/sphinx-5.x
• Merge into: master
• Upgrade sphinx to ==5.3.0

Update dependency tabulate to v0.10.0

• Schedule: ["at any time"]
• Branch name: renovate/tabulate-0.x
• Merge into: master
• Upgrade tabulate to ==0.10.0

Update dependency types-tabulate to v0.10.0.20260508

• Schedule: ["at any time"]
• Branch name: renovate/types-tabulate-0.x
• Merge into: master
• Upgrade types-tabulate to ==0.10.0.20260508

Update dependency typing-extensions to v4.16.0

• Schedule: ["at any time"]
• Branch name: renovate/typing-extensions-4.x
• Merge into: master
• Upgrade typing-extensions to ==4.16.0

Update dependency wheel to v0.47.0

• Schedule: ["at any time"]
• Branch name: renovate/wheel-0.x
• Merge into: master
• Upgrade wheel to ==0.47.0

Update dependency yappi to v1.7.6

• Schedule: ["at any time"]
• Branch name: renovate/yappi-1.x
• Merge into: master
• Upgrade yappi to ==1.7.6

Update pypa/gh-action-pypi-publish action to v1.14.1

• Schedule: ["at any time"]
• Branch name: renovate/pypa-gh-action-pypi-publish-1.x
• Merge into: master
• Upgrade pypa/gh-action-pypi-publish to ba38be9e461d3875417946c167d0b5f3d385a247

Update Python to v3.14.6

• Schedule: ["at any time"]
• Branch name: renovate/python-3.x
• Merge into: master
• Upgrade python to >=3.14,<3.15
• Upgrade python to 3.14

Update actions/checkout action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-7.x
• Merge into: master
• Upgrade actions/checkout to 3d3c42e5aac5ba805825da76410c181273ba90b1

Update actions/setup-java action to v5

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-java-5.x
• Merge into: master
• Upgrade actions/setup-java to 03ad4de0992f5dab5e18fcb136590ce7c4a0ac95

Update actions/setup-python action to v7

• Schedule: ["at any time"]
• Branch name: renovate/actions-setup-python-7.x
• Merge into: master
• Upgrade actions/setup-python to 5fda3b95a4ea91299a34e894583c3862153e4b97

Update actions/upload-artifact action to v7

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: master
• Upgrade actions/upload-artifact to 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

Update dependency furo to v2025

• Schedule: ["at any time"]
• Branch name: renovate/furo-2025.x
• Merge into: master
• Upgrade furo to ==2025.12.19

Update dependency github3-py to v4

• Schedule: ["at any time"]
• Branch name: renovate/github3-py-4.x
• Merge into: master
• Upgrade github3-py to ==4.0.1

Update dependency jsonschema to v4

• Schedule: ["at any time"]
• Branch name: renovate/jsonschema-4.x
• Merge into: master
• Upgrade jsonschema to ==4.26.0

Update dependency markupsafe to v3

• Schedule: ["at any time"]
• Branch name: renovate/markupsafe-3.x
• Merge into: master
• Upgrade markupsafe to ==3.0.3

Update dependency mypy to v2

• Schedule: ["at any time"]
• Branch name: renovate/mypy-2.x
• Merge into: master
• Upgrade mypy to ==2.3.0

Update dependency pre-commit to v4

• Schedule: ["at any time"]
• Branch name: renovate/pre-commit-4.x
• Merge into: master
• Upgrade pre-commit to ==4.6.1

Update dependency psutil to v7

• Schedule: ["at any time"]
• Branch name: renovate/psutil-7.x
• Merge into: master
• Upgrade psutil to ==7.2.2

Update dependency py-cpuinfo to v9

• Schedule: ["at any time"]
• Branch name: renovate/py-cpuinfo-9.x
• Merge into: master
• Upgrade py-cpuinfo to ==9.0.0

Update dependency pylint to v4

• Schedule: ["at any time"]
• Branch name: renovate/pylint-4.x
• Merge into: master
• Upgrade pylint to ==4.0.6

Update dependency pytest to v9

• Schedule: ["at any time"]
• Branch name: renovate/pytest-9.x
• Merge into: master
• Upgrade pytest to ==9.1.1

Update dependency python-json-logger to v4

• Schedule: ["at any time"]
• Branch name: renovate/python-json-logger-4.x
• Merge into: master
• Upgrade python-json-logger to ==4.1.0

Update dependency sphinx to v9

• Schedule: ["at any time"]
• Branch name: renovate/sphinx-9.x
• Merge into: master
• Upgrade sphinx to ==9.1.0

Update dependency trustme to v1

• Schedule: ["at any time"]
• Branch name: renovate/trustme-1.x
• Merge into: master
• Upgrade trustme to ==1.2.1

Update dependency types-jsonschema to v4

• Schedule: ["at any time"]
• Branch name: renovate/types-jsonschema-4.x
• Merge into: master
• Upgrade types-jsonschema to ==4.26.0.20260518

Update dependency types-psutil to v7

• Schedule: ["at any time"]
• Branch name: renovate/types-psutil-7.x
• Merge into: master
• Upgrade types-psutil to ==7.2.2.20260518

Update dependency ubuntu to v24

• Schedule: ["at any time"]
• Branch name: renovate/ubuntu-24.x
• Merge into: master
• Upgrade ubuntu to 24.04

Update docker.elastic.co/elasticsearch/elasticsearch Docker tag to v9

• Schedule: ["at any time"]
• Branch name: renovate/docker.elastic.co-elasticsearch-elasticsearch-9.x
• Merge into: master
• Upgrade docker.elastic.co/elasticsearch/elasticsearch to sha256:a3545404e436e348721786bed638042a81f2181ebe2e2636501bb43940677747

Update gabrielfalcao/pyenv-action action to v19

• Schedule: ["at any time"]
• Branch name: renovate/gabrielfalcao-pyenv-action-19.x
• Merge into: master
• Upgrade gabrielfalcao/pyenv-action to b87c106701c870bb86081a69fc903806426ad8a2

🚸 Branch creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prhourlylimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Renovate Bot.