|
1 | 1 | { |
2 | | - $schema: "https://docs.renovatebot.com/renovate-schema.json", |
| 2 | + $schema: 'https://docs.renovatebot.com/renovate-schema.json', |
3 | 3 | automerge: true, |
4 | 4 | platformAutomerge: true, |
5 | 5 | pinDigests: true, |
6 | | - // All checks must pass for automerge, default setting |
7 | 6 | ignoreTests: false, |
8 | | - baseBranches: ["main"], |
| 7 | + baseBranches: [ |
| 8 | + 'main', |
| 9 | + ], |
9 | 10 | extends: [ |
10 | | - "github>defenseunicorns/narwhal-delivery-renovate-config:hostRules_registry1.json5", |
11 | | - // Tells Renovate to maintain one GitHub issue as the "dependency dashboard". See https://docs.renovatebot.com/key-concepts/dashboard |
12 | | - ":dependencyDashboard", |
13 | | - // Use semantic commit type fix for dependencies and chore for all others if semantic commits are in use. See https://docs.renovatebot.com/presets-default/#semanticprefixfixdepschoreothers |
14 | | - ":semanticPrefixFixDepsChoreOthers", |
15 | | - // Group all updates together. See https://docs.renovatebot.com/presets-group/#groupall |
16 | | - // Other less drastic groupings that may be of interest include: group:allNonMajor, group:recommended, group:monorepos |
17 | | - "group:all", |
18 | | - // Apply crowd-sourced package replacement rules. See https://docs.renovatebot.com/presets-replacements/#replacementsall |
19 | | - "replacements:all", |
20 | | - // Apply crowd-sourced workarounds for known problems with packages. See https://docs.renovatebot.com/presets-workarounds/#workaroundsall |
21 | | - "workarounds:all", |
22 | | - "helpers:pinGitHubActionDigests", |
| 11 | + 'github>defenseunicorns/narwhal-delivery-renovate-config:hostRules_registry1.json5', |
| 12 | + ':dependencyDashboard', |
| 13 | + ':semanticPrefixFixDepsChoreOthers', |
| 14 | + 'group:all', |
| 15 | + 'replacements:all', |
| 16 | + 'workarounds:all', |
| 17 | + 'helpers:pinGitHubActionDigests', |
| 18 | + ], |
| 19 | + timezone: 'America/New_York', |
| 20 | + schedule: [ |
| 21 | + 'at any time', |
| 22 | + ], |
| 23 | + postUpdateOptions: [ |
| 24 | + 'git-push', |
| 25 | + ], |
| 26 | + rebaseWhen: 'auto', |
| 27 | + labels: [ |
| 28 | + 'renovate', |
23 | 29 | ], |
24 | | - // If we don't specify a timezone then Renovate will use UTC |
25 | | - timezone: "America/New_York", |
26 | | - schedule: ["at any time"], |
27 | | - postUpdateOptions: ["git-push"], |
28 | | - // Using a value of "conflicted" means that Renovate will only rebase PRs if they are in a conflicted state. See https://docs.renovatebot.com/configuration-options/#rebasewhen |
29 | | - rebaseWhen: "auto", |
30 | | - // Labels to set in Pull Request. See https://docs.renovatebot.com/configuration-options/#labels |
31 | | - labels: ["renovate"], |
32 | | - // Rate limit PRs to maximum x created per hour. 0 means no limit. See https://docs.renovatebot.com/configuration-options/#prhourlylimit |
33 | 30 | prHourlyLimit: 0, |
34 | | - // Limit to a maximum of x concurrent branches/PRs. 0 means no limit. See https://docs.renovatebot.com/configuration-options/#prconcurrentlimit |
35 | 31 | prConcurrentLimit: 0, |
36 | | - // Enable updates to the pre-commit-config.yaml file. See https://docs.renovatebot.com/modules/manager/pre-commit/ |
37 | | - "pre-commit": { |
| 32 | + 'pre-commit': { |
38 | 33 | enabled: true, |
39 | 34 | }, |
40 | | - // Custom regex manager for the .env file that follows the pattern documented here: https://docs.renovatebot.com/modules/manager/regex/#advanced-capture |
41 | 35 | customManagers: [ |
42 | 36 | { |
43 | | - customType: "regex", |
44 | | - fileMatch: ["(^|/)zarf(-.+)?\\.ya?ml$", ".github/workflows/publish.yaml"], |
| 37 | + customType: 'regex', |
| 38 | + managerFilePatterns: [ |
| 39 | + '/(^|/)zarf(-.+)?\\.ya?ml$/', |
| 40 | + '/.github/workflows/publish.yaml/', |
| 41 | + ], |
45 | 42 | matchStrings: [ |
46 | | - "datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*agent_image_tag: (?<currentValue>.*)\\s", |
47 | | - "datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*registry_image_tag: (?<currentValue>.*)\\s", |
48 | | - "datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*version: (?<currentValue>.*)\\s", |
| 43 | + 'datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*agent_image_tag: (?<currentValue>.*)\\s', |
| 44 | + 'datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*registry_image_tag: (?<currentValue>.*)\\s', |
| 45 | + 'datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*version: (?<currentValue>.*)\\s', |
49 | 46 | 'datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*?gitea_image: "[^"]+:(?<currentValue>[^"]+)"\\s', |
50 | | - "datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*?init:(?<currentValue>[^\\s]+)\\s", |
51 | | - "datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*ZARF_VERSION: (?<currentValue>.*)\\s", |
| 47 | + 'datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*?init:(?<currentValue>[^\\s]+)\\s', |
| 48 | + 'datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*ZARF_VERSION: (?<currentValue>.*)\\s', |
52 | 49 | ], |
53 | | - versioningTemplate: "{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}", |
| 50 | + versioningTemplate: '{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}', |
54 | 51 | }, |
55 | 52 | ], |
56 | 53 | vulnerabilityAlerts: { |
57 | 54 | enabled: true, |
58 | | - groupName: "Security Updates", |
| 55 | + groupName: 'Security Updates', |
59 | 56 | schedule: [], |
60 | 57 | dependencyDashboardApproval: false, |
61 | 58 | minimumReleaseAge: null, |
62 | | - rangeStrategy: "update-lockfile", |
63 | | - commitMessageSuffix: "[SECURITY]", |
64 | | - branchTopic: "{{{datasource}}}-{{{depName}}}-vulnerability", |
65 | | - prCreation: "immediate", |
66 | | - labels: ["security"], |
| 59 | + rangeStrategy: 'update-lockfile', |
| 60 | + commitMessageSuffix: '[SECURITY]', |
| 61 | + branchTopic: '{{{datasource}}}-{{{depName}}}-vulnerability', |
| 62 | + prCreation: 'immediate', |
| 63 | + labels: [ |
| 64 | + 'security', |
| 65 | + ], |
67 | 66 | automerge: true, |
68 | | - assignees: ["@defenseunicorns/delivery-aws-iac"], |
| 67 | + assignees: [ |
| 68 | + '@defenseunicorns/delivery-aws-iac', |
| 69 | + ], |
69 | 70 | }, |
70 | 71 | osvVulnerabilityAlerts: true, |
71 | 72 | } |
0 commit comments