renovate.json5

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:best-practices",
  ],
  "baseBranchPatterns": ["main"],

  "git-submodules": {
    "enabled": true
  },

  // Do not rebase when the default branch is updated
  "rebaseWhen": "never",
    customManagers: [
    {
      customType: 'regex',
      managerFilePatterns: [
        '/^Justfile$/',
      ],
      matchStrings: [
        '(?<justName>.+?)\\s:=\\s"(?<packageName>\\S+):(?<currentValue>\\S+)@(?<currentDigest>sha256:[a-f0-9]+?)"',
      ],
      datasourceTemplate: 'docker',
    },
    // Track GNOME extension submodules that pin to a release tag via the
    // `branch =` field in .gitmodules. Renovate's git-submodules manager
    // alone can't see new tags because tags don't move; this rewrites the
    // `branch =` line and the git-submodules manager then advances the SHA.
    // Uses github-tags (not github-releases) because some upstreams ship
    // git tags without publishing GitHub Releases (e.g. caffeine).
    {
      customType: 'regex',
      managerFilePatterns: [
        '/^\\.gitmodules$/',
      ],
      matchStringsStrategy: 'recursive',
      matchStrings: [
        '\\[submodule "[^"]+"\\][^\\[]*?url\\s*=\\s*https?://github\\.com/(?<depName>[^/\\s]+/[^/\\s]+?)(?:\\.git)?\\s[^\\[]*?branch\\s*=\\s*(?<currentValue>\\S*v\\d+\\S*)',
      ],
      datasourceTemplate: 'github-tags',
      versioningTemplate: 'loose',
      depTypeTemplate: 'gnome-extension',
    },
    ],

  "packageRules": [
    {
      "automerge": true,
      "matchUpdateTypes": ["pin", "pinDigest"]
    },
    {
      "automerge": true,
      "matchManagers": ["dockerfile"],
      "matchUpdateTypes": ["digest"]
    },
    {
      "matchUpdateTypes": ["pin", "digest", "pinDigest"],
      "matchPackageNames": ["quay.io/coreos/chunkah"],
      "automerge": false
    },
    {
      "matchUpdateTypes": ["pin", "digest", "pinDigest"],
      "matchDepNames": ["ghcr.io/projectbluefin/common"],
      "automerge": false
    },
    {
      "automerge": true,
      "matchUpdateTypes": ["digest"],
      "matchDepNames": [
        "quay.io/fedora-ostree-desktops/silverblue"
      ]
    },
    {
      "matchDepNames": ["quay.io/fedora-ostree-desktops/silverblue"],
      "matchUpdateTypes": ["major"],
      "enabled": false
    },
    {
      "matchDepTypes": ["gnome-extension"],
      "matchPackageNames": ["micheleg/dash-to-dock"],
      "versioning": "regex:^extensions\\.gnome\\.org-v(?<major>\\d+)$"
    },
    {
      "matchDepTypes": ["gnome-extension"],
      "groupName": "GNOME extensions"
    }
  ]
}