fix: ignore min age for internal deps (#68 )

Reviewed-on: #68 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
feat(sec): add vulnerabilities to dashboard (#67 )
2026-06-20 21:28:46 +02:00 · 2026-06-20 21:22:00 +02:00 · 2026-06-20 21:02:06 +02:00
2 changed files with 26 additions and 12 deletions
@@ -16,7 +16,7 @@ jobs:
          fetch-depth: 0
      - name: Increment tag
        id: tag
-        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@d6ea474a97989499561ba86fa974ad33215369f0 # 0.1.36
+        uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@b8806ee0141a44be30e8734dff15001361be100c # 0.1.35
        with:
          token: ${{ secrets.GITEA_TOKEN }}
          prerelease: ${{ github.event_name == 'workflow_dispatch' }}
@@ -2,24 +2,38 @@
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "dependencyDashboard": true,
  "semanticCommits": "enabled",
-  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
+  "extends": [
+    "config:recommended",
+    "docker:pinDigests",
+    "helpers:pinGitHubActionDigests",
+    ":configMigration",
+    ":pinDevDependencies",
+    "abandonments:recommended",
+    ":maintainLockFilesWeekly",
+    ":semanticCommitTypeAll(chore)"
+  ],
  "packageRules": [
    {
-      "description": "Don't update dependencies unless they are at least 7 days old",
-      "matchPackageNames": ["*"],
+      "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
+      "matchPackageNames": [
+        "!https://gitea.t000-n.de/t.behrendt/**"
+      ],
      "minimumReleaseAge": "7 days",
      "minimumReleaseAgeBehaviour": "timestamp-required",
      "internalChecksFilter": "strict"
-    },
-    {
-      "description": "Exempt local dependencies from the minimum release age (last rule wins over earlier packageRules for the same options)",
-      "matchPackageNames": ["/^(https:\\/\\/)?gitea\\.t000-n\\.de/"],
-      "minimumReleaseAge": "0 days",
-      "internalChecksFilter": "none"
    }
  ],
  "osvVulnerabilityAlerts": true,
+  "dependencyDashboardOSVVulnerabilitySummary": "all",
  "vulnerabilityAlerts": {
-    "enabled": true
+    "enabled": true,
+    "automerge": true,
+    "platformAutomerge": true,
+    "automergeType": "pr",
+    "addLabels": [
+      "automerge",
+      "security"
+    ],
+    "vulnerabilityFixStrategy": "lowest"
  }
 }
Author	SHA1	Message	Date
t.behrendt	78ad0f0588	fix: ignore min age for internal deps (#68 ) CD / Release (push) Successful in 23s Details Reviewed-on: #68 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:28:46 +02:00
t.behrendt	f8788986cb	feat(sec): add vulnerabilities to dashboard (#67 ) CD / Release (push) Successful in 28s Details Reviewed-on: #67 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:22:00 +02:00
t.behrendt	444178a987	feat(sec): add sec label and allow automerge (#66 ) CD / Release (push) Successful in 6s Details Reviewed-on: #66 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:02:06 +02:00