chore: Configure Renovate

[renovate]

Welcome to Renovate! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 Renovate will begin keeping your dependencies up-to-date only once you merge or close this Pull Request.

---

Detected Package Files

• Cargo.toml (cargo)
• packages/api/Cargo.toml (cargo)
• packages/desktop/Cargo.toml (cargo)
• packages/mobile/Cargo.toml (cargo)
• packages/ui/Cargo.toml (cargo)
• packages/web/Cargo.toml (cargo)
• .github/workflows/ci.yaml (github-actions)

Configuration Summary

Based on the default config's presets, Renovate will:

• Start dependency updates only once this onboarding PR is merged
• Hopefully safe environment variables to allow users to configure.
• Show all Merge Confidence badges for pull requests.
• Enable Renovate Dependency Dashboard creation.
• Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use.
• Ignore node_modules, bower_components, vendor and various test/tests (except for nuget) directories.
• Group known monorepo packages together.
• Use curated list of recommended non-monorepo package groupings.
• Show only the Age and Confidence Merge Confidence badges for pull requests.
• Apply crowd-sourced package replacement rules.
• Apply crowd-sourced workarounds for known problems with packages.
• Ensure that every dependency pinned by digest and sourced from GitHub.com contains a link to the commit-to-commit diff
• Correctly link to the source code for golang.org/x packages
• Link to pkg.go.dev/... for golang.org/x packages' title

🔡 Do you want to change how Renovate upgrades your dependencies? Add your custom config to renovate.json in this branch. Renovate will update the Pull Request description the next time it runs.

---

What to Expect

With your current configuration, Renovate will create 5 Pull Requests:

chore(deps): update cachix/cachix-action digest to 3ba601f

• Schedule: ["at any time"]
• Branch name: renovate/cachix-cachix-action-digest
• Merge into: main
• Upgrade cachix/cachix-action to 3ba601ff5bbb07c7220846facfa2cd81eeee15a1

chore(deps): update actions/checkout action to v6.0.2

• Schedule: ["at any time"]
• Branch name: renovate/actions-checkout-6.x
• Merge into: main
• Upgrade actions/checkout to de0fac2e4500dabe0009e67214ff5f5447ce83dd

chore(deps): update rust crate dioxus to v0.7.3

• Schedule: ["at any time"]
• Branch name: renovate/dioxus-0.x-lockfile
• Merge into: main
• Upgrade dioxus to 0.7.3

chore(deps): update cachix/install-nix-action action to v31.10.1

• Schedule: ["at any time"]
• Branch name: renovate/cachix-install-nix-action-31.x
• Merge into: main
• Upgrade cachix/install-nix-action to 1ca7d21a94afc7c957383a2d217460d980de4934

chore(deps): update step-security/harden-runner action to v2.15.1

• Schedule: ["at any time"]
• Branch name: renovate/step-security-harden-runner-2.x
• Merge into: main
• Upgrade step-security/harden-runner to 58077d3c7e43986b6b15fba718e8ea69e387dfcc

🚸 PR creation will be limited to maximum 2 per hour, so it doesn't swamp any CI resources or overwhelm the project. See docs for prHourlyLimit for details.

---

❓ Got questions? Check out Renovate's Docs, particularly the Getting Started section.
If you need any further assistance then you can also request help here.

---

This PR was generated by Mend Renovate. View the repository job log.

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
devenv.lock	Unsupported file format
renovate.json	0% smaller

[deepsource-io]

DeepSource Code Review

We reviewed changes in 294e876...996b2d0 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Secrets		Mar 8, 2026 10:07a.m.	Review ↗
Shell		Mar 8, 2026 10:07a.m.	Review ↗
Rust		Mar 8, 2026 10:07a.m.	Review ↗