.github/renovate-base.json at main · itiquette/.github · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "description": "Base Renovate configuration for Itiquette projects",
  "osvVulnerabilityAlerts": true,
  "dependencyDashboardOSVVulnerabilitySummary": "all",
  "extends": [
    "config:best-practices",
    "workarounds:all",
    "security:openssf-scorecard",
    ":configMigration",
    ":dependencyDashboard",
    ":gitSignOff",
    ":maintainLockFilesWeekly",
    ":semanticCommits",
    ":rebaseStalePrs",
    "mergeConfidence:all-badges",
    ":semanticCommitTypeAll(build)"
  ],
  "semanticCommitScope": "deps",
  "commitMessageLowerCase": "auto",
  "commitBody": "Signed-off-by: {{{gitAuthor}}}",
  "minimumReleaseAge": "7 days",
  "labels": [
    "dependencies"
  ],
  "vulnerabilityAlerts": {
    "labels": [
      "security",
      "dependencies"
    ],
    "enabled": true,
    "automerge": true
  },
  "packageRules": [
    {
      "description": "Group all GitHub Actions minor and patch updates",
      "matchManagers": [
        "github-actions"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "addLabels": [
        "actions"
      ],
      "groupName": "github actions",
      "automerge": true,
      "pinDigests": true
    },
    {
      "description": "GitHub Actions - Major updates (no grouping)",
      "matchManagers": [
        "github-actions"
      ],
      "matchUpdateTypes": [
        "major"
      ],
      "addLabels": [
        "actions",
        "major-update"
      ],
      "automerge": false,
      "pinDigests": true
    },
    {
      "description": "SLSA generator must use semantic versioning without digest pinning",
      "matchManagers": [
        "github-actions"
      ],
      "matchPackageNames": [
        "slsa-framework/slsa-github-generator"
      ],
      "pinDigests": false
    },
    {
      "description": "Auto-merge Dockerfile updates",
      "matchManagers": [
        "dockerfile"
      ],
      "addLabels": [
        "container"
      ],
      "automerge": true
    }
  ],
  "prConcurrentLimit": 8,
  "prCreation": "immediate",
  "rangeStrategy": "auto",
  "ignorePresets": [
    ":prHourlyLimit2"
  ],
  "schedule": [
    "after 8:00pm on Saturday",
    "before 11:59pm on Sunday"
  ]
}