default.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "description": "Default preset for our containerbase repositories.",
  "extends": [
    "config:best-practices",
    ":maintainLockFilesWeekly",
    ":semanticCommits",
    ":semanticCommitScope(deps)",
    "docker:enableMajor",
    "customManagers:tsconfigNodeVersions"
  ],
  "assignees": ["viceice"],
  "dependencyDashboard": true,
  "separateMajorMinor": true,
  "packageRules": [
    {
      "description": "Wait three days for npm packages to stabilize, except Renovate.",
      "matchDatasources": ["npm"],
      "matchPackageNames": [
        "!renovate",
        "!@renovatebot/*",
        "!@containerbase/*"
      ],
      "stabilityDays": 3
    },
    {
      "description": "Group linter minor and patch updates",
      "extends": ["packages:linters"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "linters"
    },
    {
      "description": "Require Dependency Dashboard approval for major updates, except Renovate.",
      "matchPackageNames": [
        "!/^renovate(bot)?($|/)/",
        "!/^(?:ghcr.io/)?containerbase//",
        "!@renovatebot/**",
        "!@containerbase/*",
        "!ghcr.io/renovatebot/**"
      ],
      "matchUpdateTypes": ["major"],
      "dependencyDashboardApproval": true
    },
    {
      "description": "Require approval for @tsconfig/node replacements",
      "matchDatasources": ["npm"],
      "matchPackageNames": ["@tsconfig/node*"],
      "matchUpdateTypes": ["replacement"],
      "dependencyDashboardApproval": true
    },
    {
      "description": "Do not require Dependency Dashboard approval for major GitHub Action updates.",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["major"],
      "dependencyDashboardApproval": false
    },
    {
      "description": "Automerge non-major updates.",
      "matchUpdateTypes": ["minor", "patch", "digest", "lockFileMaintenance"],
      "automerge": true
    },
    {
      "description": "Automerge some major updates.",
      "matchUpdateTypes": ["major"],
      "matchPackageNames": ["@containerbase/*", "containerbase/internal-tools"],
      "automerge": true
    },
    {
      "description": "v prefix workaround for action updates.",
      "matchDepTypes": ["action"],
      "extractVersion": "^(?<version>v\\d+\\.\\d+\\.\\d+)$",
      "versioning": "regex:^v(?<major>\\d+)(\\.(?<minor>\\d+)\\.(?<patch>\\d+))?$"
    },
    {
      "description": "Group Prettier packages",
      "matchPackageNames": ["prettier", "@prettier/**", "prettier-plugin-**"],
      "groupName": "prettier packages"
    },
    {
      "description": "Update references to Docker tags for renovate/renovate in Markdown files weekly.",
      "matchPackageNames": [
        "renovate/renovate",
        "ghcr.io/renovatebot/renovate"
      ],
      "matchPaths": ["**/*.md"],
      "extends": ["schedule:weekly"],
      "automerge": true,
      "stabilityDays": 0,
      "commitMessageTopic": "references to {{{depName}}}",
      "semanticCommitType": "docs",
      "semanticCommitScope": null,
      "additionalBranchPrefix": "docs-"
    },
    {
      "description": "Disable minor updates for Ubuntu.",
      "matchDatasources": ["docker"],
      "matchDepNames": [
        "amd64/ubuntu",
        "ubuntu",
        "ghcr.io/containerbase/ubuntu"
      ],
      "matchUpdateTypes": ["minor"],
      "enabled": false
    },
    {
      "description": "Group Renovate Buildpack and Ubuntu digest updates.",
      "matchDatasources": ["docker"],
      "matchUpdateTypes": ["digest"],
      "matchDepNames": [
        "ubuntu",
        "containerbase/base",
        "ghcr.io/containerbase/base",
        "ghcr.io/containerbase/ubuntu"
      ],
      "branchTopic": "{{{depNameSanitized}}}-digests",
      "commitMessageTopic": "{{{depName}}} Docker digests"
    },
    {
      "description": "Require approval for aws-sdk, as it updates too often.",
      "matchDatasources": ["npm"],
      "matchPackageNames": ["aws-sdk", "@aws-sdk/**"],
      "dependencyDashboardApproval": true
    },
    {
      "description": "Only patch updates on renovate rebuild trigger files.",
      "matchFiles": ["renovate.Dockerfile"],
      "separateMinorPatch": true
    },
    {
      "description": "Use node versioning for containerbase node.",
      "matchPackageNames": ["containerbase/node", "ghcr.io/containerbase/node"],
      "versioning": "node"
    },
    {
      "description": "Only patch updates on renovate rebuild trigger files.",
      "matchFiles": ["renovate.Dockerfile"],
      "matchUpdateTypes": ["major", "minor"],
      "enabled": false
    },
    {
      "description": "Trigger fix release for buildpack updates.",
      "matchDatasources": ["docker"],
      "matchPackageNames": ["containerbase/base", "ghcr.io/containerbase/base"],
      "semanticCommitType": "fix"
    },
    {
      "description": "Handle tag prefix in kustomize monorepo.",
      "matchPackageNames": ["kubernetes-sigs/kustomize"],
      "extractVersion": "^kustomize/v(?<version>.*)$"
    },
    {
      "description": "Handle tag prefix in haskell cabal repo.",
      "matchPackageNames": ["haskell/cabal"],
      "extractVersion": "^cabal-install-v(?<version>.*)$",
      "versioning": "docker"
    },
    {
      "description": "Use `build` semantic commit scope for lockfile maintenance.",
      "matchUpdateTypes": ["lockFileMaintenance"],
      "semanticCommitType": "build"
    },
    {
      "description": "Use `build` semantic commit scope for build deps.",
      "matchDatasources": ["npm"],
      "matchPackageNames": ["@yao-pkg/pkg", "esbuild"],
      "semanticCommitType": "build"
    },
    {
      "description": "Use `ci` semanctic type for some deps.",
      "matchPaths": [".github/workflows/**", ".github/actions/**"],
      "semanticCommitType": "ci",
      "additionalBranchPrefix": "ci-"
    },
    {
      "description": "Do not pin our dev Docker image digest.",
      "matchFiles": [".devcontainer/Dockerfile"],
      "matchPackageNames": [
        "ghcr.io/containerbase/devcontainer",
        "ghcr.io/containerbase/node"
      ],
      "semanticCommitType": "chore",
      "pinDigests": false
    },
    {
      "description": "Do not pin digest for regex manager.",
      "matchManagers": ["regex"],
      "pinDigests": false
    },
    {
      "description": "defer prebuild updates to wait for arm64 builds",
      "matchPackageNames": ["/^containerbase/.+-prebuild$/"],
      "minimumReleaseAge": "2h"
    },
    {
      "description": "allow newer pnpm and don't require approval",
      "matchPackageNames": ["pnpm"],
      "respectLatest": false,
      "dependencyDashboardApproval": false
    },
    {
      "description": "allow unstable arm github runner upgrades",
      "matchDatasources": ["github-runners"],
      "matchCurrentValue": "/-arm$/",
      "ignoreUnstable": false
    },
    {
      "description": "separate multiple major for node",
      "matchDepNames": ["node", "**/node"],
      "separateMultipleMajor": true
    },
    {
      "description": "set branch prefix for node major updates to split from minor updates",
      "matchPackageNames": ["node", "**/node"],
      "matchUpdateTypes": ["major"],
      "additionalBranchPrefix": "major"
    },
    {
      "description": "split node types to separate pr",
      "matchPackageNames": ["@types/node"],
      "matchUpdateTypes": ["major"],
      "additionalBranchPrefix": "major-types"
    },
    {
      "description": "widen node engines",
      "matchPackageNames": ["node"],
      "matchDepTypes": ["engines"],
      "rangeStrategy": "widen"
    }
  ],
  "regexManagers": [
    {
      "description": "Update Renovate references in Markdown files.",
      "fileMatch": ["\\.md$"],
      "matchStrings": [
        "(?<depName>renovate/renovate):(?<currentValue>[a-z0-9.-]+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?"
      ],
      "datasourceTemplate": "docker",
      "versioningTemplate": "docker"
    },
    {
      "description": "Update _VERSION variables in Dockerfiles.",
      "fileMatch": ["(^|/|\\.)Dockerfile$", "(^|/)Dockerfile\\.[^/]*$"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG) .+?_VERSION=(?<currentValue>.+?)\\s"
      ],
      "versioningTemplate": "{{#if versioning}}{{versioning}}{{else}}semver{{/if}}"
    },
    {
      "description": "Update install-* Buildpack commands in Dockerfiles.",
      "fileMatch": ["(^|/|\\.)Dockerfile$", "(^|/)Dockerfile\\.[^/]*$"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-z-]+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z-]+?))?\\sRUN install-[a-z]+? (?<depName>[a-z-]+?) (?<currentValue>.+?)\\s"
      ],
      "versioningTemplate": "{{#if versioning}}{{versioning}}{{else}}semver{{/if}}"
    },
    {
      "description": "Update _VERSION variables in Shell and .bats scripts.",
      "fileMatch": ["\\.sh$", "\\.bats$"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z-]+?))?\\s+[A-Z_]+?_VERSION=(?<currentValue>.+?)\\s"
      ],
      "versioningTemplate": "{{#if versioning}}{{versioning}}{{else}}semver{{/if}}"
    },
    {
      "description": "Update `version:` and `_VERSION:` variables in GitHub workflow files.",
      "fileMatch": ["^\\.github/workflows/[^/]+\\.ya?ml$"],
      "matchStrings": [
        "\\s+version: (?<currentValue>.+?) # renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>.+?))?\\s",
        "\\s*[A-Z_]+?_VERSION: (?<currentValue>.+?) # renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>.+?))?\\s"
      ]
    },
    {
      "description": "Update `os:` matrix runner variables in GitHub workflow files.",
      "fileMatch": ["^\\.github/workflows/[^/]+\\.ya?ml$"],
      "matchStrings": [
        "\\s+os: (?<depName>[a-z-]+?)-(?<currentValue>[a-z0-9.-]+?)\\s"
      ],
      "datasourceTemplate": "github-runners"
    }
  ]
}