feat(actions): allow automege of certain actions

action.json

@@ -13,7 +13,6 @@
         "https://gitea.t000-n.de/t.behrendt/actions/*",
         "https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment",
         "https://gitea.t000-n.de/t.behrendt/k_deploy_workflows",
-        "https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action",
         
         "actions/checkout",
         "actions/cache",
@@ -25,9 +24,9 @@
         "azure/k8s-set-context",
         "azure/k8s-create-secret",
         "azure/k8s-deploy",
-        "azure/k8s-lint",
         
         "helmfile/helmfile-action",
+        "azure/k8s-lint",
 
         "docker/setup-buildx-action",
         "docker/login-action",

common.json

@@ -2,38 +2,20 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "dependencyDashboard": true,
   "semanticCommits": "enabled",
-  "extends": [
+  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
-    "config:recommended",
-    "docker:pinDigests",
-    "helpers:pinGitHubActionDigests",
-    ":configMigration",
-    ":pinDevDependencies",
-    "abandonments:recommended",
-    ":maintainLockFilesWeekly",
-    ":semanticCommitTypeAll(chore)"
-  ],
   "packageRules": [
     {
-      "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
+      "description": "Don't update dependencies unless they are at least 7 days old",
-      "matchPackageNames": [
+      "matchPackageNames": ["*"],
-        "!https://gitea.t000-n.de/t.behrendt/**"
-      ],
       "minimumReleaseAge": "7 days",
       "minimumReleaseAgeBehaviour": "timestamp-required",
       "internalChecksFilter": "strict"
+    },
+    {
+      "description": "Exempt local dependencies from the minimum release age (last rule wins over earlier packageRules for the same options)",
+      "matchPackageNames": ["/^(https:\\/\\/)?gitea\\.t000-n\\.de/"],
+      "minimumReleaseAge": "0 days",
+      "internalChecksFilter": "none"
     }
-  ],
+  ]
-  "osvVulnerabilityAlerts": true,
-  "dependencyDashboardOSVVulnerabilitySummary": "all",
-  "vulnerabilityAlerts": {
-    "enabled": true,
-    "automerge": true,
-    "platformAutomerge": true,
-    "automergeType": "pr",
-    "addLabels": [
-      "automerge",
-      "security"
-    ],
-    "vulnerabilityFixStrategy": "lowest"
-  }
 }