renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "enabledManagers": [
    "gomod",
    "dockerfile",
    "docker-compose",
    "github-actions",
    "npm",
    "custom.regex"
  ],
  "npm": {
    "managerFilePatterns": [
      "/frontend/package.json/",
      "/docs/package.json/"
    ]
  },
  "extends": [
    "config:recommended",
    ":dependencyDashboard",
    ":enableVulnerabilityAlertsWithLabel('security')",
    ":rebaseStalePrs",
    "group:recommended",
    ":semanticCommits"
  ],
  "labels": ["renovate"],
  "constraints": {
    "npm": "^11"
  },
  "ignoreUnstable": true,
  "packageRules": [
    {
      "matchManagers": ["gomod"],
      "groupName": "Go dependencies",
      "postUpdateOptions": ["gomodTidy"]
    },
    {
      "matchManagers": ["custom.regex"],
      "groupName": "Go tools"
    },
    {
      "description": "A Go major version is a new module path (mockery/v2 -> mockery/v3); the regex manager only swaps the version",
      "matchManagers": ["custom.regex"],
      "matchDatasources": ["go"],
      "matchUpdateTypes": ["major"],
      "enabled": false
    },
    {
      "description": "golangci-lint majors change the .golangci.yml format; upgrade by hand",
      "matchManagers": ["custom.regex"],
      "matchPackageNames": ["golangci/golangci-lint"],
      "matchUpdateTypes": ["major"],
      "enabled": false
    },
    {
      "matchManagers": ["dockerfile"],
      "groupName": "Docker images"
    },
    {
      "matchManagers": ["docker-compose"],
      "groupName": "Docker Compose"
    },
    {
      "description": "The example compose files use the solis image at :latest on purpose",
      "matchManagers": ["docker-compose"],
      "matchPackageNames": ["ghcr.io/dombyte/solis"],
      "enabled": false
    },
    {
      "matchManagers": ["github-actions"],
      "groupName": "GitHub Actions"
    },
    {
      "matchManagers": ["npm"],
      "groupName": "npm dependencies",
      "rangeStrategy": "bump"
    },
    {
      "description": "typescript-eslint supports only typescript <6.1; lift once it supports TS 7",
      "matchManagers": ["npm"],
      "matchPackageNames": ["typescript"],
      "allowedVersions": "<7"
    }
  ],
  "customManagers": [
    {
      "description": "Go tools run as `go run <module>[/cmd/<tool>]@vX.Y.Z` in CI, the pre-commit script and AGENTS.md",
      "customType": "regex",
      "managerFilePatterns": ["/^\\.github/workflows/.+\\.ya?ml$/", "/^scripts/.+\\.sh$/", "/^AGENTS\\.md$/"],
      "matchStrings": ["go run (?<depName>[^@\\s]+?)(?:/cmd/[^@\\s]+)?@(?<currentValue>v[^\\s]+)"],
      "datasourceTemplate": "go"
    },
    {
      "description": "golangci-lint version pinned in the CI action (`version: vX.Y`); the github-actions manager only tracks the action itself",
      "customType": "regex",
      "managerFilePatterns": ["/^\\.github/workflows/.+\\.ya?ml$/"],
      "matchStrings": ["golangci/golangci-lint-action@\\S+\\s+with:\\s+version:\\s*(?<currentValue>v\\d+\\.\\d+(?:\\.\\d+)?)"],
      "depNameTemplate": "golangci/golangci-lint",
      "datasourceTemplate": "github-releases",
      "versioningTemplate": "semver-coerced"
    }
  ],
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 6am on monday"]
  },
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": ["security"]
  },
  "separateMinorPatch": true,
  "stopUpdatingLabel": "renovate/stop_updating"
}