default.json

{
  "description": "THIS FILE IS GENERATED FROM default.template.json5",
  "extends": [
    "config:recommended",
    "group:linters",
    "helpers:pinGitHubActionDigests",
    "preview:dockerVersions",
    "docker:pinDigests",
    "preview:dockerCompose",
    ":separateMultipleMajorReleases",
    ":ignoreUnstable",
    ":semanticCommits",
    ":semanticPrefixFixDepsChoreOthers",
    "customManagers:dockerfileVersions",
    "customManagers:githubActionsVersions",
    "security:openssf-scorecard"
  ],
  "dependencyDashboardTitle": "Renovate Dependency Dashboard",
  "dependencyDashboardLabels": ["auto-update"],
  "dependencyDashboardHeader": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>Main configs and useful links are located in [SpotOnInc/renovate-config](/~https://github.com/SpotOnInc/renovate-config); Renovate logs for debug [here](https://developer.mend.io/{{platform}}/{{repository}}).",
  "minimumReleaseAge": "3 days",
  "rollbackPrs": true,
  "addLabels": ["auto-update"],
  "configMigration": true,
  "prCreation": "not-pending",
  "vulnerabilityAlerts": {
    "description": "Be sure that the Dependency graph and Dependabot alerts are enabled for the repo. Details: https://docs.renovatebot.com/configuration-options/#vulnerabilityalerts",
    "enabled": true,
    "addLabels": ["security"]
  },
  "osvVulnerabilityAlerts": true,
  "terraform": {
    "ignorePaths": ["**/context.tf"],
    "pinDigests": true
  },
  "pre-commit": {
    "enabled": true
  },
  "kubernetes": {
    "fileMatch": ["\\.yaml$"]
  },
  "copier": {
    "enabled": false
  },
  "packageRules": [
    {
      "description": "v prefix workaround for action updates",
      "matchDepTypes": ["action"],
      "extractVersion": "^(?<version>v\\d+\\.\\d+\\.\\d+)$",
      "versioning": "regex:^v(?<major>\\d+)(\\.(?<minor>\\d+)\\.(?<patch>\\d+))?$"
    },
    {
      "description": "Remove v prefix in regex `_VERSION` updates",
      "matchManagers": ["custom.regex"],
      "extractVersion": "^?v?(?<version>\\d+\\.\\d+\\.\\d+.*)$",
      "versioning": "regex:^v?(?<major>\\d+)(\\.(?<minor>\\d+)\\.(?<patch>\\d+.*))?$"
    },
    {
      "matchDatasources": ["docker"],
      "schedule": ["after 4am on monday and tuesday"]
    },
    {
      "matchManagers": ["custom.regex"],
      "schedule": ["after 4am on monday and tuesday"]
    }
  ],
  "schedule": ["after 4am on tuesday"]
}