dev-infra-squad.json

{
    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
    "extends": [
        "github>SonarSource/renovate-config",
        ":maintainLockFilesWeekly",
        ":enablePreCommit",
        "docker:enableMajor",
        "docker:pinDigests"
    ],
    "timezone": "Europe/Paris",
    "schedule": [
        "after 7am every weekday",
        "before 8pm every weekday"
    ],
    "enabledManagers": [
        "github-actions",
        "custom.regex",
        "maven",
        "npm",
        "poetry",
        "pipenv",
        "terraform"
    ],
    "configMigration": true,
    "addLabels": [
        "dependencies"
    ],
    "github-actions": {
        "fileMatch": [
            "^(github-action)(\\/[^/]+)?\\/action\\.ya?ml$"
        ]
    },
    "packageRules": [
        {
            "matchPackagePatterns": [
                ".*sonar-(ubuntu|windowsserver|amazon|centos)-.*"
            ],
            "addLabels": [
                "golden-ami"
            ]
        },
        {
            "groupName": "GitHub actions updates",
            "matchManagers": [
                "github-actions"
            ],
            "groupSlug": "github-actions",
            "separateMinorPatch": false,
            "automerge": true
        },
        {
            "groupName": "Python dependencies updates",
            "matchManagers": [
                "poetry",
                "pipenv"
            ],
            "groupSlug": "python-deps",
            "separateMinorPatch": false,
            "automerge": true
        }
    ],
    "vulnerabilityAlerts": {
        "enabled": true,
        "labels": [
            "security"
        ]
    },
    "osvVulnerabilityAlerts": true,
    "customDatasources": {
        "mend-linux": {
            "defaultRegistryUrlTemplate": "https://repox.jfrog.io/artifactory/internal-binaries/ci-3rd-party-binaries/mend/linux",
            "format": "html"
        },
        "mend-windows": {
            "defaultRegistryUrlTemplate": "https://repox.jfrog.io/artifactory/internal-binaries/ci-3rd-party-binaries/mend/windows",
            "format": "html"
        }
    },
    "customManagers": [
        {
            "customType": "regex",
            "fileMatch": [
                ".*pkrvars\\.hcl$",
                ".*tfvars$"
            ],
            "matchStrings": [
                ".*amiFilter=(?<packageName>.*?)\\n(.*currentImageName=(?<currentDigest>.*?)\\n)?(.*\\n)?.*?(?<depName>[a-zA-Z0-9-_:.\"]*)[ ]*?=[ ]*?[\"](?<currentValue>ami-[a-z0-9]{17})[\"]"
            ],
            "datasourceTemplate": "aws-machine-image",
            "versioningTemplate": "aws-machine-image",
            "depNameTemplate": "{{{replace '\"' '' depName}}}"
        },
        {
            "customType": "regex",
            "fileMatch": [
                "^cdk\\.context\\.json$"
            ],
            "matchStrings": [
                ".*[\\\"|\"]ami:account=[0-9]{12}:filters\\.image-type\\.0=(?<imageType>.*?):filters\\.name\\.0=(?<imageName>.*?):.*[\\\"|\"]:[ ]*?[\\\"|\"]?(?<currentValue>ami-[a-z0-9]{17})[\\\"|\"]?"
            ],
            "datasourceTemplate": "aws-machine-image",
            "versioningTemplate": "aws-machine-image",
            "packageNameTemplate": "[{\"Name\":\"name\",\"Values\":[\"{{{imageName}}}\"]},{\"Name\":\"state\",\"Values\":[\"available\"]},{\"Name\":\"image-type\",\"Values\":[\"{{{imageType}}}\"]},{\"Name\":\"is-public\",\"Values\":[\"false\"]}]",
            "depNameTemplate": "{{{replace ' \\*' '' imageName}}}"
        },
        {
            "customType": "regex",
            "fileMatch": [
                "^lib\\.star$"
            ],
            "matchStrings": [
                "datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\n.*CIRRUS_AGENT_VERSION\": \"(?<currentValue>.*)\""
            ]
        },
        {
            "customType": "regex",
            "fileMatch": [
                "^\\.cirrus\\.star$"
            ],
            "matchStrings": [
                "datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\n.*load.*\"github.com\\/.*@(?<currentDigest>[a-f0-9]+)\",.* # (?<currentValue>.*)"
            ]
        },
        {
            "customType": "regex",
            "fileMatch": [
                ".*\\.sh$",
                ".*\\.?Dockerfile"
            ],
            "matchStrings": [
                "datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\n[ A-Z_]*=(?<currentValue>.*)"
            ]
        },
        {
            "customType": "regex",
            "fileMatch": [
                ".*\\.?Dockerfile"
            ],
            "matchStrings": [
                "datasource=(?<datasource>mend-.*?) depName=(?<depName>.*?)\\n[ A-Z_]*=(?<currentValue>.*)"
            ],
            "extractVersionTemplate": "^[a-zA-Z-]*_(?<version>.+)"
        },
        {
            "customType": "regex",
            "fileMatch": [
                "^\\.cirrus\\.ya?ml$"
            ],
            "matchStrings": [
                "image: (?<depName>ghcr\\.io.*?)(@(?<currentDigest>sha256:[a-f0-9]{64}) # |:)(?<currentValue>v?[.\\d]+)"
            ],
            "datasourceTemplate": "docker"
        }
    ]
}