Update Dependency Dashboard with Renovate Rate-Limited PRs

[bscriver123]

Pull Request Description: Implement Dependency Dashboard Updates

Overview

This pull request addresses Issue #XXX titled "Dependency Dashboard" by providing an overview of all detected dependencies and their respective updates. Utilizing Renovate, we aim to automate and simplify dependency management for our project. This PR will include configurations needed for migration, a list of rate-limited updates, as well as a review of open pull requests related to dependency updates.

Background

As part of our commitment to maintain up-to-date dependencies, we have leveraged the Renovate bot to monitor and propose updates for our dependencies. This includes security fixes and major version updates for various libraries within our project.

Key Changes

• Config Migration: Added a checkbox prompt for the automated creation of a config migration pull request for Renovate.
• Rate-Limited Updates: Listed various rate-limited dependency updates with checkboxes to:
  • Force the creation of updates for dependencies like loguru, flask, and packaging (among others).
  • Enable the ability to create all rate-limited PRs at once via a single checkbox.
• Open Pull Requests: Displayed existing open pull requests that require rebasing or retrying, including high-priority security updates for werkzeug and gunicorn.
• Detected Dependencies: Summarized detected dependencies across different formats such as requirements.txt and pyproject.toml, detailing their current versions.

Dependencies Detected

From requirements.txt

• black == 24.4.2
• flask == 3.0.3
• pytest == 8.2.2
• (and many others...)

From pyproject.toml

• poetry-core >= 1.0.0
• flask *
• (and others...)

Next Steps

Checklist

• Select Checkbox for Config Migration: Review and check to enable Renovate to create a config migration PR.
• Force Creation of Dependency Updates: Choose option(s) to force updates for any rate-limited dependencies.
• Rebase Existing PRs: Initiate a rebase for open pull requests if necessary.

Conclusion

This pull request will enhance our dependency management strategy by ensuring we are utilizing the latest and most secure versions of our project dependencies. Once merged, we will be better positioned to react to new updates automatically and maintain a robust project environment.

---

Please review the changes outlined above and provide any feedback or concerns regarding this pull request. Thank you!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud