renovate.json (5029B)
1 { 2 "$schema": "https://docs.renovatebot.com/renovate-schema.json", 3 "extends": [ 4 "config:recommended", 5 ":dependencyDashboard", 6 ":semanticCommits", 7 ":separateMultipleMinorReleases" 8 ], 9 "prConcurrentLimit": 4, 10 "prHourlyLimit": 5, 11 "suppressNotifications": [ 12 "prIgnoreNotification" 13 ], 14 "rebaseWhen": "conflicted", 15 "enabledManagers": [ 16 "github-actions", 17 "helm-values", 18 "helmv3", 19 "flux" 20 ], 21 "flux": { 22 "managerFilePatterns": [ 23 "/(^|/)clusters/.+\\.ya?ml$/", 24 "/(^|/)infrastructure_talos/.+\\.ya?ml$/", 25 "/(^|/)apps/.+\\.ya?ml$/" 26 ] 27 }, 28 "helm-values": { 29 "managerFilePatterns": [ 30 "/(^|/)apps/.+/values\\.ya?ml$/", 31 "/(^|/)infrastructure_talos/.+/values\\.ya?ml$/" 32 ] 33 }, 34 "kubernetes": { 35 "managerFilePatterns": [ 36 "/(^|/)clusters/.+\\.ya?ml$/", 37 "/(^|/)infrastructure_talos/.+\\.ya?ml$/", 38 "/(^|/)apps/.+\\.ya?ml$/" 39 ] 40 }, 41 "packageRules": [ 42 { 43 "description": "Auto-merge patch updates", 44 "matchUpdateTypes": [ 45 "patch" 46 ], 47 "matchCurrentVersion": "!/^0/", 48 "automerge": true, 49 "automergeType": "pr", 50 "platformAutomerge": true 51 }, 52 { 53 "description": "Auto-merge minor updates for non-breaking changes", 54 "matchUpdateTypes": [ 55 "minor" 56 ], 57 "matchCurrentVersion": "!/^0/", 58 "automerge": false, 59 "groupName": "minor-updates" 60 }, 61 { 62 "description": "Group Flux component updates", 63 "matchDatasources": [ 64 "docker", 65 "github-releases" 66 ], 67 "groupName": "flux-components", 68 "automerge": false, 69 "matchPackageNames": [ 70 "/^fluxcd//" 71 ] 72 }, 73 { 74 "description": "Group cert-manager updates", 75 "matchDatasources": [ 76 "docker", 77 "helm" 78 ], 79 "groupName": "cert-manager", 80 "automerge": false, 81 "matchPackageNames": [ 82 "/cert-manager/" 83 ] 84 }, 85 { 86 "description": "Group monitoring stack updates", 87 "matchDatasources": [ 88 "docker", 89 "helm" 90 ], 91 "groupName": "monitoring-stack", 92 "automerge": false, 93 "matchPackageNames": [ 94 "/prometheus/", 95 "/grafana/", 96 "/alertmanager/", 97 "/kube-state-metrics/", 98 "/node-exporter/" 99 ] 100 }, 101 { 102 "description": "Group security updates and auto-merge", 103 "matchDatasources": [ 104 "docker" 105 ], 106 "matchUpdateTypes": [ 107 "patch" 108 ], 109 "vulnerabilityAlerts": { 110 "enabled": true 111 }, 112 "groupName": "security-updates", 113 "automerge": true, 114 "schedule": [ 115 "at any time" 116 ] 117 }, 118 { 119 "description": "Pin GitHub Actions digests", 120 "matchManagers": [ 121 "github-actions" 122 ], 123 "pinDigests": true 124 }, 125 { 126 "description": "Group GitHub Actions updates", 127 "matchManagers": [ 128 "github-actions" 129 ], 130 "groupName": "github-actions", 131 "automerge": true, 132 "automergeType": "pr" 133 }, 134 { 135 "description": "Separate major updates", 136 "matchUpdateTypes": [ 137 "major" 138 ], 139 "automerge": false, 140 "labels": [ 141 "type/major-update" 142 ] 143 }, 144 { 145 "description": "Label minor updates", 146 "matchUpdateTypes": [ 147 "minor" 148 ], 149 "labels": [ 150 "type/minor-update" 151 ] 152 }, 153 { 154 "description": "Label patch updates", 155 "matchUpdateTypes": [ 156 "patch" 157 ], 158 "labels": [ 159 "type/patch-update" 160 ] 161 } 162 ], 163 "customManagers": [ 164 { 165 "customType": "regex", 166 "description": "Update _VERSION variables in shell scripts", 167 "managerFilePatterns": [ 168 "/\\.sh$/" 169 ], 170 "matchStrings": [ 171 "datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)( versioning=(?<versioning>\\S+))?\n.*?_VERSION=\"(?<currentValue>.*)\"" 172 ] 173 } 174 ], 175 "vulnerabilityAlerts": { 176 "enabled": true, 177 "labels": [ 178 "security", 179 "type/security-update" 180 ] 181 } 182 }