renovate-config/default.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "assigneesFromCodeOwners": true,
  "automergeStrategy": "squash",
  "commitBody": "Signed-off-by: {{{gitAuthor}}}",
  "commitMessageAction": "update",
  "commitMessageExtra": " ({{currentVersion}} → {{newVersion}})",
  "commitMessageSuffix": "",
  "commitMessageTopic": "{{depName}}",
  "configMigration": true,
  "customManagers": [
    {
      "customType": "regex",
      "datasourceTemplate": "docker",
      "description": [
        "Upgrade Dockerfile ENV and FROM variables base on regex. ",
        "See https://docs.renovatebot.com/configuration-options/#matchstringsstrategy"
      ],
      "managerFilePatterns": [
        "/^Dockerfile$/"
      ],
      "matchStrings": [
        "ENV [A-Z]+_VERSION=(?<currentValue>.*) # (?<datasource>.*?)/(?<depName>.*?)(\\&versioning=(?<versioning>.*?))?\\s",
        "FROM (?<depName>\\S*):(?<currentValue>\\S*)"
      ],
      "matchStringsStrategy": "any"
    }
  ],
  "dependencyDashboardLabels": [
    "no-stale"
  ],
  "dependencyDashboardOSVVulnerabilitySummary": "unresolved",
  "dependencyDashboardTitle": "Renovate Dashboard 🤖",
  "description": "Renovate config for projects ivuorinen manages",
  "digest": {
    "enabled": false
  },
  "extends": [
    "config:recommended",
    ":enableVulnerabilityAlerts",
    ":labels(dependencies)",
    ":maintainLockFilesWeekly",
    ":preserveSemverRanges",
    ":semanticCommits",
    ":timezone(Europe/Helsinki)",
    "docker:enableMajor",
    "group:recommended",
    "helpers:pinGitHubActionDigests",
    "npm:unpublishSafe",
    "replacements:all",
    "schedule:nonOfficeHours",
    "workarounds:all"
  ],
  "git-submodules": {
    "enabled": true,
    "managerFilePatterns": [
      "/(^|/)\\.gitmodules$/"
    ],
    "versioning": "git"
  },
  "ignorePaths": [
    "**/*.sops.*",
    "**/.archive/**",
    "**/testdata/**"
  ],
  "lockFileMaintenance": {
    "enabled": true,
    "extends": [
      "group:all"
    ]
  },
  "onboardingConfigFileName": ".github/renovate.json",
  "osvVulnerabilityAlerts": true,
  "packageRules": [
    {
      "commitMessagePrefix": "chore(deps)!: ",
      "commitMessageTopic": "{{depName}}",
      "matchUpdateTypes": [
        "major"
      ]
    },
    {
      "automerge": true,
      "automergeType": "branch",
      "matchUpdateTypes": [
        "minor",
        "patch",
        "digest"
      ]
    },
    {
      "commitMessageTopic": "chart {{depName}}",
      "matchDatasources": [
        "helm"
      ]
    },
    {
      "commitMessageTopic": "image {{depName}}",
      "matchDatasources": [
        "docker"
      ]
    },
    {
      "labels": [
        "type/major"
      ],
      "matchUpdateTypes": [
        "major"
      ]
    },
    {
      "labels": [
        "type/minor"
      ],
      "matchUpdateTypes": [
        "minor"
      ]
    },
    {
      "labels": [
        "type/patch"
      ],
      "matchUpdateTypes": [
        "patch"
      ]
    },
    {
      "labels": [
        "type/digest"
      ],
      "matchUpdateTypes": [
        "digest"
      ]
    },
    {
      "addLabels": [
        "renovate/container"
      ],
      "matchDatasources": [
        "docker"
      ]
    },
    {
      "addLabels": [
        "renovate/helm"
      ],
      "matchDatasources": [
        "helm"
      ]
    },
    {
      "addLabels": [
        "renovate/ansible"
      ],
      "matchDatasources": [
        "galaxy",
        "galaxy-collection"
      ]
    },
    {
      "addLabels": [
        "renovate/terraform"
      ],
      "matchDatasources": [
        "terraform-provider"
      ]
    },
    {
      "addLabels": [
        "renovate/github-release"
      ],
      "matchDatasources": [
        "github-releases",
        "github-tags"
      ]
    },
    {
      "addLabels": [
        "renovate/github-action"
      ],
      "matchManagers": [
        "github-actions"
      ]
    },
    {
      "addLabels": [
        "renovate/pip"
      ],
      "matchDatasources": [
        "pypi"
      ]
    },
    {
      "groupName": "devDependencies (non-major)",
      "matchDepTypes": [
        "devDependencies"
      ],
      "matchUpdateTypes": [
        "patch",
        "minor"
      ]
    },
    {
      "groupName": "eslint",
      "matchPackageNames": [
        "/eslint/"
      ]
    },
    {
      "groupName": "phpstan",
      "matchPackageNames": [
        "/phpstan/",
        "/larastan/"
      ]
    }
  ],
  "postUpdateOptions": [
    "bundlerConservative",
    "composerWithAll",
    "dotnetWorkloadRestore",
    "gomodUpdateImportPaths",
    "npmDedupe",
    "pnpmDedupe",
    "yarnDedupeHighest"
  ],
  "prHourlyLimit": 5,
  "pre-commit": {
    "enabled": true
  },
  "pruneStaleBranches": true,
  "renovate-config-presets": {
    "managerFilePatterns": [
      "renovate.json",
      "renovate.json5",
      ".github/renovate.json",
      ".github/renovate.json5",
      ".gitlab/renovate.json",
      ".gitlab/renovate.json5",
      ".renovaterc",
      ".renovaterc.json",
      ".renovaterc.json5",
      "default.json"
    ]
  },
  "reviewersFromCodeOwners": true,
  "semanticCommitScope": "deps",
  "semanticCommitType": "chore",
  "semanticCommits": "enabled",
  "separateMajorMinor": true,
  "separateMinorPatch": false,
  "separateMultipleMajor": true,
  "vulnerabilityAlerts": {
    "enabled": true
  }
}