-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathrenovate.json
More file actions
138 lines (138 loc) · 3.7 KB
/
Copy pathrenovate.json
File metadata and controls
138 lines (138 loc) · 3.7 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [
"config:recommended",
"helpers:pinGitHubActionDigestsToSemver",
":semanticCommitTypeAll(chore)"
],
"configMigration": true,
"customManagers": [
{
"customType": "regex",
"managerFilePatterns": [
"/(^|/)Taskfile[^/]*\\.yml$/"
],
"matchStrings": [
"(?m)^\\s*#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?(?:\\s+registryUrl=(?<registryUrl>\\S+))?\\s*\\r?\\n\\s*(?<varName>[A-Z0-9_]+)_VERSION:\\s+\"?(?<currentValue>[^\"@\\s]+)\"?\\s*$"
],
"currentValueTemplate": "{{currentValue}}",
"description": [
"Custom dependency manager for updating tool version defined in Taskfile."
]
},
{
"customType": "regex",
"managerFilePatterns": [
"/(^|/)Taskfile[^/]*\\.yml$/"
],
"matchStrings": [
"(?m)^\\s*#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?(?:\\s+registryUrl=(?<registryUrl>\\S+))?\\s*\\r?\\n\\s*(?<varName>[A-Z0-9_]+)_VERSION:\\s+\"?(?:(?<currentValue>[^@\"\\s]+)@)?(?<currentDigest>sha256:[a-f0-9]+)\"?\\s*$"
],
"currentValueTemplate": "{{currentValue}}",
"description": [
"Custom dependency manager for updating image tag@digest defined in Taskfile."
]
}
],
"enabled": true,
"minimumReleaseAge": "7 days",
"prCreation": "not-pending",
"schedule": [
"before 8am on Monday",
"before 8am on Wednesday",
"before 8am on Friday"
],
"enabledManagers": [
"custom.regex",
"github-actions",
"npm",
"nvm",
"nodenv"
],
"labels": [
"dependencies"
],
"ignoreDeps": [
"@buf/agntcy_dir.bufbuild_es",
"@buf/bufbuild_protovalidate.bufbuild_es",
"@bufbuild/protobuf"
],
"osvVulnerabilityAlerts": true,
"lockFileMaintenance": {
"enabled": true,
"schedule": [
"at any time"
]
},
"packageRules": [
{
"groupName": "Node",
"groupSlug": "node",
"matchFileNames": [
"package.json"
],
"addLabels": [
"dependencies"
],
"description": [
"Add dependencies label to PRs which are related to Node dependencies.",
"Group Node dependency updates in single PR."
]
},
{
"groupName": "Taskfile",
"groupSlug": "taskfile",
"matchFileNames": [
"Taskfile.*"
],
"addLabels": [
"build"
],
"description": [
"Add build label to PRs which are related to build tools defined in Taskfile.",
"Group Taskfile dependency updates in single PR."
]
},
{
"groupName": "Github Actions",
"groupSlug": "github-actions",
"matchManagers": [
"github-actions"
],
"addLabels": [
"ci"
],
"description": [
"Add ci label to PRs which are related to Github Actions.",
"Group CI dependency updates in single PR."
]
},
{
"matchJsonata": [
"$exists(vulnerabilityFixVersion) or isVulnerabilityAlert = true"
],
"enabled": true,
"description": [
"Always allow vulnerability/security fixes, even when other rules disable specific dependencies."
]
}
],
"postUpdateOptions": [],
"prConcurrentLimit": 20,
"prHourlyLimit": 10,
"printConfig": false,
"rebaseWhen": "behind-base-branch",
"reviewersFromCodeOwners": true,
"semanticCommits": "enabled",
"timezone": "Etc/UTC",
"vulnerabilityAlerts": {
"enabled": true,
"labels": [
"security"
],
"minimumReleaseAge": null,
"schedule": [
"at any time"
]
}
}