default.json5

{
  // Default configuration for managed Renovate
  $schema: "https://docs.renovatebot.com/renovate-schema.json",
  extends: [ // default presets see https://docs.renovatebot.com/presets-default/
    "config:recommended",
    "helpers:pinGitHubActionDigestsToSemver",
    "security:openssf-scorecard",
    ":enableVulnerabilityAlertsWithLabel(security)",
  ],
  labels: [
    "renovate",
    "renovate/{{updateType}}",
  ],
  ignorePaths: [
    // Prevent running for terraform managed workflows
    ".github/workflows/tf-*.yml", ".github/workflows/tf-*.yaml"
  ],
  packageRules: [
    {
      description: "Update renovatebot/github-action minor/patch updates on Sundays",
      matchPackageNames: ["renovatebot/github-action"],
      matchUpdateTypes: ["minor", "patch"],
      schedule: ["* * * * 0"],
    },
    // Disable for eclipseconfig Gradle plugin (because latest version is not published to Plugin Portal)
    {
      matchPackageNames: ["org.standardout.eclipseconfig"],
      enabled: false,
    },
    // group logback related dependencies
    {
      "groupName": "logback dependencies",
      "groupSlug": "logback-deps",
      "matchPackagePrefixes": ["ch.qos.logback:"]
    },
    // group wetransform logging utils
    {
      "groupName": "wetransform logging dependencies",
      "groupSlug": "wetf-logging-deps",
      "matchPackagePrefixes": ["to.wetransform.logging:"]
    },
  ],
  customManagers: [
    {
      description: "Update semantic-release in GitHub Action workflows",
      customType: "regex",
      fileMatch: ["(^workflow-templates|\\.github/(actions|workflows))\\/.+\\.ya?ml$"],
      matchStrings: [
        "\
semantic_version\\s*:\\s*(\"|')?(?<currentValue>.+)(\"|')?\
(\\s+|\\s+.*)"
      ],
      datasourceTemplate: "npm",
      depNameTemplate: "semantic-release"
    },
    {
      description: "Any other workflows related file with dependencies",
      customType: "regex",
      fileMatch: [
        "(^workflow-templates|\\.github/workflows)/[^/]+\\.ya?ml$",
      ],
      matchStrings: [
        "\
.*renovate:\
\\sdatasource=(?<datasource>.*?)\
\\sdepName=(?<depName>.*?)\
(\\sversioning=(?<versioning>.*?))?\
\n.*(version|Version|VERSION)\\s*(:=|=|:)\\s*\"?(?<currentValue>.*?)\
(@(?<currentDigest>sha256:[a-f0-9]+))?\"?\
(\\s+|\\s+.*)"
      ],
      versioningTemplate: "\
{{#if versioning}}\
{{{versioning}}}\
{{else}}\
semver-coerced\
{{/if}}"
    },
  ],
  separateMinorPatch: false,
}