Configure Renovate

[transcend-renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• gradle.properties (gradle)
• settings.gradle.kts (gradle)
• gradle/libs.versions.toml (gradle)
• build.gradle.kts (gradle)
• app/build.gradle.kts (gradle)
• gradle/wrapper/gradle-wrapper.properties (gradle-wrapper)
• renovate.json (renovate-config)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs
• Pin Docker digests.
• Pin github-action digests.
• Enable Renovate configuration migration PRs when needed.
• Pin dependency versions for development dependencies.
• Recommended configuration for abandoned packages, treating packages without a release for 1 year as abandoned, while taking into account community-sourced overrides.
• Wait until the npm package is three days old before raising the update. This a) introduces a short delay to allow for malware researchers and scanners to (possibly) detect any malicious behaviour in packages, and b) prevents the maintainer and/or NPM from unpublishing a package you already upgraded to, breaking builds.
• Run lock file maintenance (updates) early Monday mornings.
• Pin all dependency versions except peerDependencies.
• Show all Merge Confidence badges for pull requests.
• Primary Renovate configuration for all Transcend repos
• Run Renovate on following schedule: before 6am on monday

---

What to Expect

With your current configuration, Renovate will create 19 Pull Requests:

Update dependency com.google.code.gson:gson to v2.8.9 [SECURITY]

• Branch name: renovate/maven-com.google.code.gson-gson-vulnerability
• Merge into: main
• Upgrade com.google.code.gson:gson to 2.8.9

Update dependency composeOptions to v1.5.15

• Schedule: ["before 6am on monday"]
• Branch name: renovate/composeoptions-1.x
• Merge into: main
• Upgrade composeOptions to 1.5.15

Update dependency androidx.activity:activity-compose to v1.13.0

• Schedule: ["before 6am on monday"]
• Branch name: renovate/activitycompose
• Merge into: main
• Upgrade androidx.activity:activity-compose to 1.13.0

Update dependency androidx.appcompat:appcompat to v1.8.0

• Schedule: ["before 6am on monday"]
• Branch name: renovate/androidx.appcompat-appcompat-1.x
• Merge into: main
• Upgrade androidx.appcompat:appcompat to 1.8.0

Update dependency androidx.compose:compose-bom to v2024.12.01

• Schedule: ["before 6am on monday"]
• Branch name: renovate/composebom
• Merge into: main
• Upgrade androidx.compose:compose-bom to 2024.12.01

Update dependency androidx.constraintlayout:constraintlayout to v2.2.2

• Schedule: ["before 6am on monday"]
• Branch name: renovate/androidx.constraintlayout-constraintlayout-2.x
• Merge into: main
• Upgrade androidx.constraintlayout:constraintlayout to 2.2.2

Update dependency androidx.core:core-ktx to v1.19.0

• Schedule: ["before 6am on monday"]
• Branch name: renovate/corektx
• Merge into: main
• Upgrade androidx.core:core-ktx to 1.19.0

Update dependency androidx.lifecycle:lifecycle-runtime-ktx to v2.11.0

• Schedule: ["before 6am on monday"]
• Branch name: renovate/lifecycleruntimektx
• Merge into: main
• Upgrade androidx.lifecycle:lifecycle-runtime-ktx to 2.11.0

Update dependency com.android.application to v8.13.2

• Schedule: ["before 6am on monday"]
• Branch name: renovate/agp
• Merge into: main
• Upgrade com.android.application to 8.13.2

Update dependency com.google.android.material:material to v1.14.0

• Schedule: ["before 6am on monday"]
• Branch name: renovate/com.google.android.material-material-1.x
• Merge into: main
• Upgrade com.google.android.material:material to 1.14.0

Update dependency com.google.firebase:firebase-bom to v34.18.0

• Schedule: ["before 6am on monday"]
• Branch name: renovate/com.google.firebase-firebase-bom-34.x
• Merge into: main
• Upgrade com.google.firebase:firebase-bom to 34.18.0

Update dependency io.transcend.webview:webview to v2.4.2

• Schedule: ["before 6am on monday"]
• Branch name: renovate/io.transcend.webview-webview-2.x
• Merge into: main
• Upgrade io.transcend.webview:webview to 2.4.2

Update Gradle to v8.14.5

• Schedule: ["before 6am on monday"]
• Branch name: renovate/gradle-8.x
• Merge into: main
• Upgrade gradle to 8.14.5

Update kotlin to v2.4.10

• Schedule: ["before 6am on monday"]
• Branch name: renovate/kotlin
• Merge into: main
• Upgrade org.jetbrains.kotlin.plugin.compose to 2.4.10
• Upgrade org.jetbrains.kotlin.android to 2.4.10

Update plugin com.google.gms.google-services to v4.5.0

• Schedule: ["before 6am on monday"]
• Branch name: renovate/com.google.gms.google-services-4.x
• Merge into: main
• Upgrade com.google.gms.google-services to 4.5.0

Update dependency androidx.compose:compose-bom to v2026

• Schedule: ["before 6am on monday"]
• Branch name: renovate/major-composebom
• Merge into: main
• Upgrade androidx.compose:compose-bom to 2026.08.00

Update dependency com.android.application to v9

• Schedule: ["before 6am on monday"]
• Branch name: renovate/major-agp
• Merge into: main
• Upgrade com.android.application to 9.3.1

Update Gradle to v9

• Schedule: ["before 6am on monday"]
• Branch name: renovate/gradle-9.x
• Merge into: main
• Upgrade gradle to 9.7.1

Lock file maintenance

• Schedule: ["before 6am on monday"]
• Branch name: renovate/lock-file-maintenance
• Merge into: main
• Regenerate lock files to use latest dependency versions

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR has been generated by Mend Renovate.