github-actions/renovate.json5 at main · EO-DataHub/github-actions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",

  "extends": [
    // Core behavior
    ":dependencyDashboard",
    ":configMigration",
    ":semanticCommits",
    ":semanticPrefixFixDepsChoreOthers",
    ":ignoreModulesAndTests",

    // Grouping
    "group:monorepos",
    "group:recommended",

    // Scheduling & automerge
    "schedule:weekly",
    ":maintainLockFilesWeekly",
    ":automergePatch",

    // Pinning
    ":pinDevDependencies",
    "docker:pinDigests",
    "helpers:pinGitHubActionDigests",

    // Security
    "security:openssf-scorecard",
    "mergeConfidence:age-confidence-badges",

    // Docker
    "preview:dockerCompose",
    "preview:dockerVersions",

    // Housekeeping
    "abandonments:recommended",
    "replacements:all",
    "workarounds:all",
    "helpers:githubDigestChangelogs"
  ],

  "minimumReleaseAge": "7 days",
  "prConcurrentLimit": 5,
  "addLabels": ["dependencies"],

  // This requires "Dependabot alerts" enabled
  "vulnerabilityAlerts": {
    "enabled": true,
    "addLabels": ["security"],
    "schedule": ["at any time"],
  },

  "packageRules": [
    {
      "description": "Skip internal reusable workflows and actions",
      "matchManagers": ["github-actions"],
      "matchPackageNames": ["EO-DataHub/github-actions"],
      "enabled": false
    },
    {
      "description": "Group GitHub Actions non-major updates and automerge",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
      "groupName": "GitHub Actions (non-major)",
      "automerge": true
    },
    {
      "description": "Group GitHub Actions major updates for review",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["major"],
      "groupName": "GitHub Actions (major)"
    },
    {
      "description": "Pin dev dependency-groups (dependency groups PEP 735)",
      "matchManagers": ["pep621"],
      "matchDepTypes": ["dependency-groups"],
      "rangeStrategy": "pin"
    }
  ]
}