default.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "description": "Default preset for our containerbase repositories.",
  "extends": [
    "config:best-practices",
    ":maintainLockFilesWeekly",
    ":semanticCommits",
    ":semanticCommitScope(deps)",
    "docker:enableMajor",
    "customManagers:tsconfigNodeVersions"
  ],
  "assignees": ["viceice"],
  "dependencyDashboard": true,
  "separateMajorMinor": true,
  "statusCheckWhen": {
    "artifactError": "always"
  },
  "packageRules": [
    {
      "description": "Wait 7 days for runtime dependencies, so published packages never require a younger version",
      "matchDatasources": ["npm"],
      "matchDepTypes": ["dependencies", "peerDependencies", "optionalDependencies"],
      "minimumReleaseAge": "7 days"
    },
    {
      "description": "Exclude packages from minimum relrease age",
      "matchDatasources": ["npm"],
      "matchPackageNames": ["renovate", "@renovatebot/*", "@containerbase/*"],
      "minimumReleaseAge": null
    },
    {
      "description": "Group linter minor and patch updates",
      "extends": ["packages:linters"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "linters"
    },
    {
      "description": "Require Dependency Dashboard approval for major updates, except Renovate.",
      "matchPackageNames": [
        "!/^renovate(bot)?($|/)/",
        "!/^(?:ghcr.io/)?containerbase//",
        "!@renovatebot/**",
        "!@containerbase/*",
        "!ghcr.io/renovatebot/**"
      ],
      "matchUpdateTypes": ["major"],
      "dependencyDashboardApproval": true
    },
    {
      "description": "Require approval for @tsconfig/node replacements",
      "matchDatasources": ["npm"],
      "matchPackageNames": ["@tsconfig/node*"],
      "matchUpdateTypes": ["replacement"],
      "dependencyDashboardApproval": true
    },
    {
      "description": "Do not require Dependency Dashboard approval for major GitHub Action updates.",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["major"],
      "dependencyDashboardApproval": false
    },
    {
      "description": "Automerge non-major updates.",
      "matchUpdateTypes": ["minor", "patch", "digest", "lockFileMaintenance"],
      "automerge": true
    },
    {
      "description": "Automerge some major updates.",
      "matchUpdateTypes": ["major"],
      "matchPackageNames": ["@containerbase/*", "containerbase/internal-tools"],
      "automerge": true
    },
    {
      "description": "Do not automerge GitHub Action digest updates.",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["digest"],
      "automerge": false
    },
    {
      "description": "Group Prettier packages",
      "matchPackageNames": ["prettier", "@prettier/**", "prettier-plugin-**"],
      "groupName": "prettier packages"
    },
    {
      "description": "Update references to Docker tags for renovate/renovate in Markdown files weekly.",
      "matchPackageNames": ["renovate/renovate", "ghcr.io/renovatebot/renovate"],
      "matchFileNames": ["**/*.md"],
      "extends": ["schedule:weekly"],
      "automerge": true,
      "minimumReleaseAge": null,
      "commitMessageTopic": "references to {{{depName}}}",
      "semanticCommitType": "docs",
      "semanticCommitScope": null,
      "additionalBranchPrefix": "docs-"
    },
    {
      "description": "Disable minor updates for Ubuntu.",
      "matchDatasources": ["docker"],
      "matchDepNames": ["amd64/ubuntu", "ubuntu", "ghcr.io/containerbase/ubuntu"],
      "matchUpdateTypes": ["minor"],
      "enabled": false
    },
    {
      "description": "Group Renovate Buildpack and Ubuntu digest updates.",
      "matchDatasources": ["docker"],
      "matchUpdateTypes": ["digest"],
      "matchDepNames": [
        "ubuntu",
        "containerbase/base",
        "ghcr.io/containerbase/base",
        "ghcr.io/containerbase/ubuntu"
      ],
      "branchTopic": "{{{depNameSanitized}}}-digests",
      "commitMessageTopic": "{{{depName}}} Docker digests"
    },
    {
      "description": "Require approval for aws-sdk, as it updates too often.",
      "matchDatasources": ["npm"],
      "matchPackageNames": ["aws-sdk", "@aws-sdk/**"],
      "dependencyDashboardApproval": true
    },
    {
      "description": "Only patch updates on renovate rebuild trigger files.",
      "matchFileNames": ["renovate.Dockerfile"],
      "separateMinorPatch": true
    },
    {
      "description": "Use node versioning for containerbase node.",
      "matchPackageNames": ["containerbase/node", "ghcr.io/containerbase/node"],
      "versioning": "node"
    },
    {
      "description": "Only patch updates on renovate rebuild trigger files.",
      "matchFileNames": ["renovate.Dockerfile"],
      "matchUpdateTypes": ["major", "minor"],
      "enabled": false
    },
    {
      "description": "Trigger fix release for buildpack updates.",
      "matchDatasources": ["docker"],
      "matchPackageNames": ["containerbase/base", "ghcr.io/containerbase/base"],
      "semanticCommitType": "fix"
    },
    {
      "description": "Handle tag prefix in kustomize monorepo.",
      "matchPackageNames": ["kubernetes-sigs/kustomize"],
      "extractVersion": "^kustomize/v(?<version>.*)$"
    },
    {
      "description": "Handle tag prefix in haskell cabal repo.",
      "matchPackageNames": ["haskell/cabal"],
      "extractVersion": "^cabal-install-v(?<version>.*)$",
      "versioning": "docker"
    },
    {
      "description": "Use `build` semantic commit scope for build deps.",
      "matchDatasources": ["npm"],
      "matchPackageNames": ["@yao-pkg/pkg", "esbuild", "rolldown", "vite"],
      "semanticCommitType": "build"
    },
    {
      "description": "Use `ci` semanctic type for some deps.",
      "matchFileNames": [".github/workflows/**", ".github/actions/**"],
      "semanticCommitType": "ci",
      "additionalBranchPrefix": "ci-"
    },
    {
      "description": "Do not pin our dev Docker image digest.",
      "matchFileNames": [".devcontainer/Dockerfile"],
      "matchPackageNames": ["ghcr.io/containerbase/devcontainer", "ghcr.io/containerbase/node"],
      "semanticCommitType": "chore",
      "pinDigests": false
    },
    {
      "description": "Do not pin digest for regex manager.",
      "matchManagers": ["custom.regex"],
      "pinDigests": false
    },
    {
      "description": "defer prebuild updates to wait for arm64 builds",
      "matchPackageNames": ["/^containerbase/.+-prebuild$/"],
      "minimumReleaseAge": "2h"
    },
    {
      "description": "allow newer pnpm and don't require approval",
      "matchPackageNames": ["pnpm"],
      "respectLatest": false,
      "dependencyDashboardApproval": false
    },
    {
      "description": "separate multiple major for node",
      "matchDepNames": ["node", "**/node"],
      "separateMultipleMajor": true
    },
    {
      "description": "set branch prefix for node major updates to split from minor updates",
      "matchPackageNames": ["node", "**/node"],
      "matchUpdateTypes": ["major"],
      "additionalBranchPrefix": "major"
    },
    {
      "description": "split node types to separate pr",
      "matchPackageNames": ["@types/node"],
      "matchUpdateTypes": ["major"],
      "additionalBranchPrefix": "major-types"
    },
    {
      "description": "widen node engines",
      "matchPackageNames": ["node"],
      "matchDepTypes": ["engines"],
      "rangeStrategy": "widen"
    },
    {
      "description": "disable ubuntu major and minor on prebuild repos",
      "matchPackageNames": ["ghcr.io/containerbase/ubuntu"],
      "matchDatasources": ["docker"],
      "matchUpdateTypes": ["major", "minor"],
      "matchRepositories": ["containerbase/*-prebuild"],
      "matchFileNames": ["Dockerfile"],
      "enabled": false
    }
  ],
  "customManagers": [
    {
      "customType": "regex",
      "description": "Update Renovate references in Markdown files.",
      "managerFilePatterns": ["/\\.md$/"],
      "matchStrings": [
        "(?<depName>renovate/renovate):(?<currentValue>[a-z0-9.-]+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?"
      ],
      "datasourceTemplate": "docker",
      "versioningTemplate": "docker"
    },
    {
      "customType": "regex",
      "description": "Update _VERSION variables in Dockerfiles.",
      "managerFilePatterns": ["/(^|/|\\.)Dockerfile$/", "/(^|/)Dockerfile\\.[^/]*$/"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z0-9-]+?))?\\s(?:ENV|ARG) .+?_VERSION=(?<currentValue>.+?)\\s"
      ]
    },
    {
      "customType": "regex",
      "description": "Update install-* Buildpack commands in Dockerfiles.",
      "managerFilePatterns": ["/(^|/|\\.)Dockerfile$/", "/(^|/)Dockerfile\\.[^/]*$/"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-z-]+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z0-9-]+?))?\\sRUN install-[a-z]+? (?<depName>[a-z-]+?) (?<currentValue>.+?)\\s"
      ]
    },
    {
      "customType": "regex",
      "description": "Update _VERSION variables in Shell and .bats scripts.",
      "managerFilePatterns": ["/\\.sh$/", "/\\.bats$/"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>[a-z0-9-]+?))?\\s+[A-Z_]+?_VERSION=(?<currentValue>.+?)\\s"
      ]
    },
    {
      "customType": "regex",
      "description": "Update `version:` and `_VERSION:` variables in GitHub workflow files.",
      "managerFilePatterns": ["/^\\.github/workflows/[^/]+\\.ya?ml$/"],
      "matchStrings": [
        "\\s+version: (?<currentValue>.+?) # renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>.+?))?\\s",
        "\\s*[A-Z_]+?_VERSION: (?<currentValue>.+?) # renovate: datasource=(?<datasource>.+?) depName=(?<depName>.+?)(?: (?:packageName|lookupName)=(?<packageName>.+?))?(?: versioning=(?<versioning>.+?))?\\s"
      ]
    },
    {
      "customType": "regex",
      "description": "Update `os:` matrix runner variables in GitHub workflow files.",
      "managerFilePatterns": ["/^\\.github/workflows/[^/]+\\.ya?ml$/"],
      "matchStrings": ["\\s+os: (?<depName>[a-z-]+?)-(?<currentValue>[a-z0-9.-]+?)\\s"],
      "datasourceTemplate": "github-runners"
    }
  ]
}