renovate-config.json5

{
  // see https://docs.renovatebot.com/configuration-options
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "branchNameStrict": true,  // remove special characters from branch names
  "cdnurl": {
    "managerFilePatterns": [
      "/(^|/)assets/.*[.]css$/",
    ],
  },
  "cloneSubmodules": true,  // needed for pyproject.toml that depend on submodules
  "cloneSubmodulesFilter": [
    "packaging/linux/flatpak/deps/flatpak-builder-tools",  // Sunshine
    "third-party/glad",  // Sunshine
    "third-party/lizardbyte-common",  // c/c++ projects
    "third-party/sphinx-csharp",  // Themerr-jellyfin
  ],
  "configMigration": true,  // allow renovate to open PRs to update config
  "description": "Default renovate configuration for LizardByte repositories",
  "dependencyDashboard": true,  // Creates an issue with a "dashboard" of dependencies
  "dependencyDashboardLabels": [
    "dependencies"
  ],
  "extends": [
    "config:recommended",
    "group:monorepos",
    "group:recommended",
    ":semanticCommits",
    ":semanticCommitTypeAll(chore)",
  ],
  "labels": [
    "dependencies",
    "{{categories}}"
  ],
  lockFileMaintenance: {
    enabled: true,
  },
  "prConcurrentLimit": 10,
  "rebaseWhen": "never",  // to reduce CI load, do not auto rebase PRs
  "rollbackPrs": true,  // create a rollback PR when a dependency is yanked
  "schedule": ["after 1am and before 8am"],
  "semanticCommitScope": "deps",
  "semanticCommitType": "chore",
  "semanticCommits": "enabled",
  "timezone": "America/New_York",
  "updatePinnedDependencies": true,
  // beta features
  "git-submodules": {
    "enabled": false  // renovate cannot update to tagged submodules, so keep using dependabot for this
  },
  // group/package rules
  "packageRules": [
    // Create separate PRs for each major version unless the dependency is already grouped.
    {
      "matchJsonata": ["groupName = null or $not($exists(groupName))"],
      "separateMultipleMajor": true,
    },
    // Do not open standalone cdnjs SRI digest updates. Version updates still refresh the paired SRI hash.
    {
      "matchDatasources": ["cdnjs"],
      "matchUpdateTypes": ["digest"],
      "enabled": false,
    },
    // Keep Debian Docker tags on plain codenames or major versions, not dated rebuild tags.
    {
      "matchDatasources": ["docker"],
      "matchPackageNames": [
        "debian",
      ],
      "matchCurrentValue": "/^(?:[a-z]+|\\d+)(?:-[a-z]+)?$/",
      "allowedVersions": "/^(?:[a-z]+|\\d+)(?:-[a-z]+)?$/"
    },
    // Group GitHub maintained actions
    {
      "groupName": "Official GitHub Actions",
      "groupSlug": "github-actions",
      "matchManagers": [
        "github-actions"
      ],
      "matchPackageNames": [
        "actions/**",
        "github/**"
      ],
      "separateMultipleMajor": false,
    },
    // Group docker actions
    {
      "groupName": "Docker Actions",
      "groupSlug": "docker-actions",
      "matchManagers": [
        "github-actions"
      ],
      "matchPackageNames": [
        "docker/**",
      ],
      "separateMultipleMajor": false,
    },
    // Group dev dependencies
    {
      "groupName": "devDependencies (non-major)",
      "matchDepTypes": [
        "devDependencies",
      ],
      "matchUpdateTypes": ["patch", "minor"]
    },
    // Rollback PRs miscalculate PEP 440 values for uv-backed pinned dependencies.
    {
      "matchDatasources": [
        "pypi",
      ],
      "matchManagers": [
        "pep621",
      ],
      "rollbackPrs": false,
    },
    // Group pytest
    {
      "groupName": "pytest",
      "matchCategories": [
        "python",
      ],
      "matchPackageNames": [
          "pytest*",
      ],
      "separateMultipleMajor": false,
    },
    // combine oddstr13/jellyfin-plugin-repository-manager and pypi jprm into a single group
    {
      "groupName": "jprm",
      "matchCategories": [
        "ci",
        "python",
      ],
      "matchPackageNames": [
          "oddstr13/jellyfin-plugin-repository-manager",
          "jprm",
      ],
      "separateMultipleMajor": false,
    },
  ],
  "customManagers": [
    // cdnjs URLs in Jekyll config files, front matter, data YAML, and simple HTML attrs, with optional adjacent SRI hashes.
    {
      "customType": "regex",
      "managerFilePatterns": [
        "/^(?:_config(?:_[^/]+)?[.]ya?ml|_data/.*[.]ya?ml|_layouts/.*[.]html|[^/]+[.](?:html|md)|blog/.*[.]html|_posts/.*[.]md|docs/.*[.]md|gh-pages-template/(?:_data/.*[.]ya?ml|.*[.](?:html|md)))$/",
      ],
      "matchStrings": [
        "(?:(?:href|src):\\s*[\"']?|-\\s*[\"']?|(?:href|src)=[\"'])(?:https?:)?//cdnjs\\.cloudflare\\.com/ajax/libs/(?<depName>[^/\"'\\s]+)/(?<currentValue>[^/\"'\\s]+)/(?<asset>[^\"'\\s?#]+)(?:\\?[^\"'\\s]*)?[\"']?(?:\\s*\\r?\\n\\s*sri:\\s*[\"'](?<currentDigest>sha(?:256|384|512)-[^\"']+)[\"'])?",
      ],
      "datasourceTemplate": "cdnjs",
      "packageNameTemplate": "{{depName}}/{{asset}}",
      "versioningTemplate": "semver",
    },
    // Versioned npm CDN href/src/scalar entries in Jekyll config files, front matter, data YAML, and simple HTML attrs without SRI.
    {
      "customType": "regex",
      "managerFilePatterns": [
        "/^(?:_config(?:_[^/]+)?[.]ya?ml|_data/.*[.]ya?ml|_layouts/.*[.]html|[^/]+[.](?:html|md)|blog/.*[.]html|_posts/.*[.]md|docs/.*[.]md|gh-pages-template/(?:_data/.*[.]ya?ml|.*[.](?:html|md)))$/",
      ],
      "matchStrings": [
        "(?:(?:href|src|icon_img):\\s*[\"']?|(?:href|src)=[\"'])https://(?:cdn\\.jsdelivr\\.net/npm|unpkg\\.com)/(?<depName>(?:@[^@/\"'\\s]+/)?[^@/\"'\\s]+)@(?<currentValue>[^/\"'\\s?#]+)",
        "(?:^|\\r?\\n)[ \\t]*-[ \\t]*[\"']?https://(?:cdn\\.jsdelivr\\.net/npm|unpkg\\.com)/(?<depName>(?:@[^@/\"'\\s]+/)?[^@/\"'\\s]+)@(?<currentValue>[^/\"'\\s?#]+)",
      ],
      "datasourceTemplate": "npm",
      "versioningTemplate": "npm",
    },
    // Versioned npm CDN URLs in selected source/data files without SRI.
    {
      "customType": "regex",
      "managerFilePatterns": [
        "/^(?:_includes/.*[.]html|apps/.*[.]json|assets/.*[.]js|docs/source/conf[.]py)$/",
      ],
      "matchStrings": [
        "https://(?:cdn\\.jsdelivr\\.net/npm|unpkg\\.com)/(?<depName>(?:@[^@/\"'\\s]+/)?[^@/\"'\\s]+)@(?<currentValue>v?\\d[^/\"'\\s?#]*)",
      ],
      "datasourceTemplate": "npm",
      "versioningTemplate": "npm",
    },
    // Annotated YAML version fields such as _data/licenses.yml in LizardByte.github.io
    {
      "customType": "regex",
      "managerFilePatterns": [
        "/^(?:_data/.*[.]ya?ml|gh-pages-template/_data/.*[.]ya?ml)$/",
      ],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?:(?:[ \\t]+|\\s*\\r?\\n\\s*#\\s*)packageName=(?<packageName>[^\\s]+?))?(?:(?:[ \\t]+|\\s*\\r?\\n\\s*#\\s*)versioning=(?<versioning>[^\\s]+?))?\\s+version:\\s*[\"']?(?<currentValue>[^\"'\\s]+)[\"']?",
      ],
      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{/if}}",
    },
    // CPM Package Lock
    {
      "customType": "regex",
      "managerFilePatterns": ["/(^|\/)package-lock.cmake$/"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?:(?:[ \\t]+|\\s*\\r?\\n#\\s*)packageName=(?<packageName>[^\\s]+?))?(?:(?:[ \\t]+|\\s*\\r?\\n#\\s*)versioning=(?<versioning>[^\\s]+?))?(?:(?:[ \\t]+|\\s*\\r?\\n#\\s*)extractVersion=(?<extractVersion>[^\\s]+?))?(?:(?:[ \\t]+|\\s*\\r?\\n#\\s*)registryUrl=(?<registryUrl>[^\\s]+?))?\\s+set\\([A-Za-z0-9_]+?_(?:VERSION|TAG)\\s+\\\"?(?<currentValue>[^\\\"\\s\\)]+)\\\"?\\s*\\)",
        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?:(?:[ \\t]+|\\s*\\r?\\n#\\s*)packageName=(?<packageName>[^\\s]+?))?(?:(?:[ \\t]+|\\s*\\r?\\n#\\s*)versioning=(?<versioning>[^\\s]+?))?(?:(?:[ \\t]+|\\s*\\r?\\n#\\s*)extractVersion=(?<extractVersion>[^\\s]+?))?(?:(?:[ \\t]+|\\s*\\r?\\n#\\s*)registryUrl=(?<registryUrl>[^\\s]+?))?\\s+set\\([A-Za-z0-9_]+?_(?:VERSION|TAG)\\s+\\\"?(?<currentValue>[^\\\"\\s\\)]+)\\\"?\\s*\\)\\s+set\\([A-Za-z0-9_]+?_SHA256\\s+(?<currentDigest>[a-fA-F0-9]{64})\\s*\\)",
      ],
      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{/if}}"
    },
  ],
}