default.json5

{
  branchPrefix: 'renovate.',
  extends: [
    'config:best-practices',
    ':rebaseStalePrs',
    ':semanticCommits',
  ],
  packageRules: [
    {
      matchPackageNames: [
        'hashicorp/terraform',
      ],
      enabled: false,
    },
    {
      matchDatasources: [
        'repology',
      ],
      versioning: 'loose',
    },
    {
      matchUpdateTypes: [
        'minor',
        'patch',
        'digest',
      ],
      groupName: 'bump-dependencies',
      schedule: [
        '* * * * 3',
      ],
    },
    {
      matchUpdateTypes: [
        'major',
      ],
      groupName: null,
      prConcurrentLimit: 1,
    },
    {
      matchDepTypes: [
        'action',
      ],
      groupName: 'github-actions',
      commitMessagePrefix: '[skip-release] ',
    },
  ],
  customManagers: [
    {
      customType: 'regex',
      description: 'Update *_VERSION ARG and ENV variables in Dockerfiles',
      managerFilePatterns: [
        '/(^|/|\\.)Dockerfile$/',
      ],
      matchStrings: [
        "([ ]+)?# renovate: datasource=(?<datasource>[a-z-\\.]+?) depName=(?<depName>.+?)(?: packageName=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG)? .+?_VERSION=(?<currentValue>.+?)(\\s|$)",
      ],
      versioningTemplate: '{{#if versioning}}{{{versioning}}}{{else}}loose{{/if}}',
    },
    {
      customType: 'regex',
      description: 'Update docker tags in *.tf',
      managerFilePatterns: [
        '/\\.tf$/',
      ],
      matchStrings: [
        '\\s+image\\s+= "(?<depName>[\\w\\/\\-]+)(?::(?<currentValue>[\\w.\\-]+))?(?:@(?<currentDigest>[\\w:]+))?"',
      ],
      datasourceTemplate: 'docker',
    },
  ],
  labels: [
    'dependencies',
  ],
  postUpdateOptions: [
    'composerWithAll',
    'gomodTidy',
  ],
  osvVulnerabilityAlerts: true,
  dependencyDashboardOSVVulnerabilitySummary: 'unresolved',
  vulnerabilityAlerts: {
    'enabled': true,
  },
}