Files
renovate-configs/common.json
T
t.behrendt c614d01ab6
CD / Release (push) Successful in 4s
fix: skip minimum release age for internal docker deps (#90)
Should resolve #88

Docker images have the registry as part of the package name, therefore the current pattern didn't match them.

Reviewed-on: #90
Co-authored-by: t.behrendt <t.behrendt@t00n.de>
Co-committed-by: t.behrendt <t.behrendt@t00n.de>
2026-07-07 06:53:15 +02:00

35 lines
1.0 KiB
JSON

{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"dependencyDashboard": true,
"semanticCommits": "enabled",
"extends": [
"config:recommended",
"docker:pinDigests",
"helpers:pinGitHubActionDigests",
":configMigration",
":pinDevDependencies",
"abandonments:recommended",
":maintainLockFilesWeekly",
":semanticCommitTypeAll(chore)"
],
"packageRules": [
{
"description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
"matchPackageNames": ["!t.behrendt/**", "gitea.t000-n.de/t.behrendt/**"],
"minimumReleaseAge": "7 days",
"minimumReleaseAgeBehaviour": "timestamp-required",
"internalChecksFilter": "strict"
}
],
"osvVulnerabilityAlerts": true,
"dependencyDashboardOSVVulnerabilitySummary": "all",
"vulnerabilityAlerts": {
"enabled": true,
"automerge": true,
"platformAutomerge": true,
"automergeType": "pr",
"addLabels": ["automerge", "security"],
"vulnerabilityFixStrategy": "lowest"
}
}