Nils Andreas Svee
6b373380f4
Add the pinGitHubActionDigests helper to improve CI security by using immutable commit SHA digests instead of mutable tags.
71 lines
1.9 KiB
JSON
71 lines
1.9 KiB
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
|
|
"extends": ["config:recommended", "helpers:pinGitHubActionDigests"],
|
|
|
|
"timezone": "Asia/Jakarta",
|
|
"schedule": ["before 10am on monday"],
|
|
|
|
"dependencyDashboard": true,
|
|
"dependencyDashboardTitle": "Renovate Dashboard",
|
|
|
|
"semanticCommits": "enabled",
|
|
"semanticCommitType": "chore",
|
|
"semanticCommitScope": "deps",
|
|
|
|
"prConcurrentLimit": 4,
|
|
"prHourlyLimit": 1,
|
|
|
|
"rebaseWhen": "conflicted",
|
|
"rangeStrategy": "bump",
|
|
|
|
"labels": ["dependencies"],
|
|
|
|
"lockFileMaintenance": {
|
|
"enabled": true,
|
|
"schedule": ["before 10am on monday"],
|
|
"commitMessageAction": "maintain",
|
|
"commitMessageTopic": "Cargo lockfile"
|
|
},
|
|
|
|
"packageRules": [
|
|
{
|
|
"description": "Never automerge Cargo updates by default",
|
|
"matchManagers": ["cargo"],
|
|
"automerge": false
|
|
},
|
|
{
|
|
"description": "Group RustCrypto updates together",
|
|
"matchManagers": ["cargo"],
|
|
"matchPackageNames": ["hmac", "md-5"],
|
|
"groupName": "RustCrypto dependencies",
|
|
"commitMessageTopic": "RustCrypto dependencies"
|
|
},
|
|
{
|
|
"description": "Keep socket/platform dependencies together but reviewed",
|
|
"matchManagers": ["cargo"],
|
|
"matchPackageNames": ["socket2", "libc"],
|
|
"groupName": "socket dependencies",
|
|
"commitMessageTopic": "socket dependencies"
|
|
},
|
|
{
|
|
"description": "Group GitHub Actions updates",
|
|
"matchManagers": ["github-actions"],
|
|
"groupName": "GitHub Actions",
|
|
"commitMessageTopic": "GitHub Actions"
|
|
},
|
|
{
|
|
"description": "Automerge patch and minor GitHub Actions updates",
|
|
"matchManagers": ["github-actions"],
|
|
"matchUpdateTypes": ["patch", "minor"],
|
|
"automerge": true,
|
|
"platformAutomerge": true
|
|
},
|
|
{
|
|
"description": "Never automerge major updates",
|
|
"matchUpdateTypes": ["major"],
|
|
"automerge": false
|
|
}
|
|
]
|
|
}
|