renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:base"
  ],
  "branchPrefix": "renovate-",
  "commitMessageAction": "Renovate Update",
  "labels": [
    "Dependencies",
    "Renovate"
  ],
  "packageRules": [
    {
      "description": "Terraform: bundle all updates together",
      "labels": ["devDependencies", "Renovate", "Terraform"],
      "groupName": "Terraform",
      "matchUpdateTypes": ["minor", "patch"],
      "matchManagers": ["terraform"]
    },
    {
      "groupName": "Patch & Minor Updates",
      "groupSlug": "all-minor-patch-updates",
      "labels": [
        "Dependencies",
        "Renovate"
      ],
      "matchPackagePatterns": [
        "*"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "prCreation": "immediate",
      "prPriority": 0,
      "stabilityDays": 3,
      "excludePackageNames": [
        "php"
      ]
    },
    {
      "description": [
        "Github Actions: bundle all updates together"
      ],
      "groupName": "GitHub Actions",
      "matchPackagePatterns": [
        "actions/*"
      ],
      "automerge": true,
      "dependencyDashboardApproval": true,
      "labels": [
        "Dependencies",
        "Renovate"
      ],
      "prTitle": "chore(deps): update GitHub Actions",
      "prBody": "Updates the following GitHub Actions dependencies:\n\n{{#each dependencies}}- {{this.name}}\n{{/each}}",
      "prCreation": "immediate",
      "schedule": [
        "after 6am and before 9am on Monday"
      ],
      "stabilityDays": 3,
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["minor", "patch"]
    },
    {
      "description": [
        "Docker: group all updates together"
      ],
      "labels": ["Dependencies", "Renovate", "Docker"],
      "groupName": "Docker Updates",
      "matchUpdateTypes": ["minor", "patch"],
      "matchManagers": ["dockerfile", "docker-compose"],
      "automerge": false
    },
    {
      "description": [
        "Golang: group all updates together"
      ],
      "labels": ["Dependencies", "Renovate", "Golang"],
      "groupName": "Golang Updates",
      "matchUpdateTypes": ["minor", "patch"],
      "matchManagers": ["gomod"],
      "automerge": false
    },
    {
      "description": [
        "npm minor and patch updates (stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "minor and patch updates (npm)",
      "groupSlug": "all-minor-patch-updates-npm",
      "labels": ["Dependencies", "Renovate", "nodejs"],
      "matchManagers": ["npm"],
      "matchUpdateTypes": ["minor", "patch"],
      "matchFiles": [
        "package.json",
        "service-front/package.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    },
    {
      "description": ["AWS SDK"],
      "labels": ["Renovate", "AWS SDK"],
      "matchUpdateTypes": ["minor", "patch"],
      "matchManagers": ["composer"],
      "matchPackageNames": ["aws/aws-sdk-php"],
      "extends": ["schedule:monthly"],
      "automerge": false
    },
    {
      "description": [
        "front composer minor and patch updates (PHP 8.2, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "front minor and patch updates (PHP 8.2)",
      "groupSlug": "front-minor-patch-updates-php82",
      "labels": ["Dependencies", "Renovate", "PHP 8.2"],
      "matchManagers": ["composer"],
      "matchUpdateTypes": ["minor", "patch"],
      "excludePackageNames": ["php"],
      "matchFiles": [
        "service-front/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    },
    {
      "description": [
        "api composer minor and patch updates (PHP 8.2, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "api minor and patch updates (PHP 8.2)",
      "groupSlug": "api-minor-patch-updates-php82",
      "labels": ["Dependencies", "Renovate", "PHP 8.2"],
      "matchManagers": ["composer"],
      "matchUpdateTypes": ["minor", "patch"],
      "excludePackageNames": ["php"],
      "matchFiles": [
        "service-api/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    }
  ],
  "major": {
    "labels": [
        "Dependencies",
        "Renovate"
    ],
    "prCreation": "immediate",
    "rangeStrategy": "pin"
  },
  "branchConcurrentLimit": 5,
  "prConcurrentLimit": 1,
  "prHourlyLimit": 1,
  "vulnerabilityAlerts": {
    "groupName": "Security Alerts",
    "labels": [
      "Dependencies",
      "Renovate"
    ],
    "dependencyDashboardApproval": false,
    "stabilityDays": 0,
    "rangeStrategy": "pin",
    "commitMessagePrefix": "[SECURITY]",
    "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
    "prCreation": "immediate"
  }
}