devsecops-actions/renovate.json at main · tomvaughan77/devsecops-actions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
{
  "extends": ["config:recommended"],
  "timezone": "Europe/London",
  "schedule": ["* 00 * * 0,6"],
  "description": "Weekend update only, covering pre-commit, GHA, Docker, NPM and Python changes. Updates are only triggered once specified duration has elapsed for the provided type.",
  "dependencyDashboard": true,
  "semanticCommits": "enabled",
  "prConcurrentLimit": 10,
  "prHourlyLimit": 7,
  "minimumReleaseAgeBehaviour": "timestamp-required",
  "pre-commit": {
    "enabled": true
  },
  "packageRules": [
    {
      "matchUpdateTypes": ["patch"],
      "minimumReleaseAge": "3 days"
    },
    {
      "matchUpdateTypes": ["minor"],
      "minimumReleaseAge": "7 days"
    },
    {
      "matchUpdateTypes": ["major"],
      "minimumReleaseAge": "30 days"
    },
    {
      "matchManagers": ["github-actions"],
      "pinDigests": true,
      "groupName": "renovate: github-actions"
    },
    {
      "matchManagers": ["pre-commit"],
      "groupName": "renovate: pre-commit"
    },
    {
      "matchDatasources": ["docker"],
      "pinDigests": true,
      "groupName": "renovate: docker"
    },
    {
      "matchDatasources": ["npm"],
      "groupName": "renovate: npm",
      "rangeStrategy": "bump"
    },
    {
      "matchDatasources": ["pip"],
      "groupName": "renovate: pip"
    }
  ],
  "vulnerabilityAlerts": {
    "enabled": true,
    "schedule": ["* * * * *"]
  },
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["* 00 * * 0,6"],
    "minimumReleaseAge": "7 days"
  }
}