runner-init/renovate.json at main · circleci/runner-init · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    "mergeConfidence:all-badges",
    "abandonments:recommended",
    ":gomod",
    ":maintainLockFilesDisabled",
    ":docker",
    ":separateMajorReleases"
  ],
  "baseBranchPatterns": ["main"],
  "schedule": ["* * * * 0"],
  "configMigration": true,
  "postUpdateOptions": [
    "gomodTidy",
    "gomodUpdateImportPaths"
  ],
  "labels": ["renovate"],

  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": [
      "renovate",
      "AUTOMERGE",
      "security",
      "CVE"
    ],
    "automerge": true,
    "automergeSchedule": [
      "* 8-17 * * 1-5"
    ],
    "recreateWhen": "always"
  },
  "osvVulnerabilityAlerts": true,
  "dependencyDashboardOSVVulnerabilitySummary": "all",

  "minimumReleaseAge": "7 days",
  "minimumReleaseAgeBehaviour": "timestamp-optional",
  "internalChecksFilter": "strict",
  "prCreation": "not-pending",

  "customManagers": [
    {
      "customType": "regex",
      "description": "Update cimg/go version in config.yml file",
      "managerFilePatterns": [
        "^\\.circleci/config\\.ya?ml$"
      ],
      "matchStrings": [
        "go_image: &goimage (?<depName>cimg\\/go):(?<currentValue>\\d+\\.\\d+)"
      ],
      "datasourceTemplate": "docker"
    },
    {
      "customType": "regex",
      "description": "Update Go version in config.yml file",
      "managerFilePatterns": [
        "/^\\.circleci/config\\.ya?ml$/"
      ],
      "matchStrings": [
        "go_full_version: &go_full_version (?<currentValue>\\d+\\.\\d+\\.\\d+)"
      ],
      "depNameTemplate": "golang",
      "datasourceTemplate": "golang-version"
    }
  ],

  "packageRules": [
    {
      "description": "Set sourceUrl for circleci orbs, so changelogs are included",
      "matchDatasources": ["orb"],
      "matchPackageNames": ["circleci/*"],
      "sourceUrl": "https://github.com/CircleCI-Public/{{ lookup (split packageName '/') 1 }}-orb"
    },
    {
      "groupName": "go dependencies (patch versions)",
      "description": "Group all patch updates into a single pull request",
      "matchUpdateTypes": ["patch"],
      "matchDatasources": [
        "go"
      ]
    },
    {
      "groupName": "go version",
      "description": "Upgrade Go version in various places to keep them consistent",
      "matchDepNames": [
        "golang",
        "cimg/go",
        "go"
      ]
    },
    {
      "groupName": "circleci/ex",
      "description": "circleci/ex publishes with a prerelease tag and needs ignoreUnstable false",
      "matchPackageNames": [
        "github.com/circleci/ex"
      ],
      "ignoreUnstable": false
    }
  ]
}