mercury/renovate.json at main · ayoub3bidi/mercury · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended"],
  "timezone": "Africa/Tunis",
  "schedule": ["before 6am on Monday"],
  "labels": ["dependencies"],
  "dependencyDashboard": true,
  "packageRules": [
    {
      "description": "Auto-merge non-breaking Python dep updates",
      "matchManagers": ["pip_requirements"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "Python deps (minor/patch)",
      "automerge": true,
      "automergeType": "pr",
      "platformAutomerge": true
    },
    {
      "description": "Major Python updates need manual review",
      "matchManagers": ["pip_requirements"],
      "matchUpdateTypes": ["major"],
      "groupName": "Python deps (major)",
      "automerge": false
    },
    {
      "description": "Core framework deps always need manual review",
      "matchPackageNames": ["fastapi", "sqlalchemy", "pydantic", "pydantic-settings", "alembic"],
      "automerge": false,
      "labels": ["dependencies", "core"]
    },
    {
      "description": "Docker base image bumps - manual review",
      "matchManagers": ["dockerfile", "docker-compose"],
      "groupName": "Docker base images",
      "automerge": false,
      "labels": ["dependencies", "docker"]
    },
    {
      "description": "GitHub Actions - auto-merge patch, manual for major",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["minor", "patch"],
      "automerge": true,
      "groupName": "GitHub Actions"
    }
  ],
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": ["security", "dependencies"]
  },
  "osvVulnerabilityAlerts": true
}