chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

📚 See our Reading List for relevant documentation you may be interested in reading.

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

Detected Package Files

• crates/app/Cargo.toml (cargo)
• crates/highlighter/Cargo.toml (cargo)
• crates/models/Cargo.toml (cargo)
• crates/renderer/Cargo.toml (cargo)
• .github/workflows/ci.yml (github-actions)
• rust-toolchain.toml (rust-toolchain)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from Forgejo contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from Gitea contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitHub.com and Github enterprise contains a link to the commit-to-commit diff
• Ensure that every dependency pinned by digest and sourced from GitLab.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title
• Provide a link to octochangelog's improved breakdown for Renovate's changelogs

---

What to Expect

With your current configuration, Renovate will create 8 Pull Requests:

chore(deps): update dtolnay/rust-toolchain digest to 686976e

• Schedule: ["at any time"]
• Branch name: renovate/dtolnay-rust-toolchain-digest
• Merge into: main
• Upgrade dtolnay/rust-toolchain to 686976e191b89faba57d3206551f0f330d8cb249

chore(deps): update swatinem/rust-cache digest to c193711

• Schedule: ["at any time"]
• Branch name: renovate/swatinem-rust-cache-digest
• Merge into: main
• Upgrade Swatinem/rust-cache to c19371144df3bb44fab255c43d04cbc2ab54d1c4

chore(deps): update rust crate leptos to v0.8.22

• Schedule: ["at any time"]
• Branch name: renovate/leptos-0.x-lockfile
• Merge into: main
• Upgrade leptos to 0.8.22

chore(deps): update rust crate thiserror to v2.0.21

• Schedule: ["at any time"]
• Branch name: renovate/thiserror-2.x-lockfile
• Merge into: main
• Upgrade thiserror to 2.0.21

chore(deps): update rust-wasm-bindgen monorepo

• Schedule: ["at any time"]
• Branch name: renovate/rust-wasm-bindgen-monorepo
• Merge into: main
• Upgrade js-sys to 0.3.106
• Upgrade wasm-bindgen to 0.2.129
• Upgrade wasm-bindgen-futures to 0.4.79
• Upgrade web-sys to 0.3.106

chore(deps): update swatinem/rust-cache action to v2.9.2

• Schedule: ["at any time"]
• Branch name: renovate/swatinem-rust-cache-2.x
• Merge into: main
• Upgrade Swatinem/rust-cache to 6323deb102c322ba6fcbdcafc7e3dddab59af2b6

fix(deps): update rust crate gloo-timers to 0.4

• Schedule: ["at any time"]
• Branch name: renovate/gloo-timers-0.x
• Merge into: main
• Upgrade gloo-timers to 0.4

chore(deps): update github artifact actions (major)

• Schedule: ["at any time"]
• Branch name: renovate/major-github-artifact-actions
• Merge into: main
• Upgrade actions/download-artifact to v8
• Upgrade actions/upload-artifact to v7

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
codeshot	Ready	Preview	Oct 10, 2026 8:38pm UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2cdc0fcb-f4f7-44ca-8e00-09fc80885b1a

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}