Skip to content

Commit 18d52a3

Browse files
committed
Configure Renovate for project requirements
- Add dependency dashboard for better visibility - Group GitHub Actions, Docker images, and Python deps separately - Require approval for major updates to critical dependencies - Enable vulnerability alerts with security labels - Schedule updates for Monday mornings to avoid disrupting work - Limit concurrent PRs to avoid CI overload - Enable lock file maintenance monthly - Assign to adilhusain-s for review - CRITICAL: Ignore paths to protect build artifacts and manifests - versions-manifests/** (ppc64le/s390x Python release manifests) - versions-manifest.json and versions-manifest-ppc64le.json - PowerShell/patch/** (binary patches and tarballs)
1 parent 8d739e6 commit 18d52a3

File tree

1 file changed

+68
-0
lines changed

1 file changed

+68
-0
lines changed

renovate.json

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
3+
"extends": [
4+
"config:recommended",
5+
":dependencyDashboard",
6+
":semanticCommits",
7+
":separateMajorReleases"
8+
],
9+
"schedule": ["before 3am on Monday"],
10+
"prConcurrentLimit": 2,
11+
"prHourlyLimit": 2,
12+
"labels": ["dependencies"],
13+
"ignorePaths": [
14+
"**/versions-manifests/**",
15+
"versions-manifest.json",
16+
"versions-manifest-ppc64le.json",
17+
"**/PowerShell/patch/**/*.tar.gz",
18+
"**/PowerShell/patch/**/*.patch"
19+
],
20+
"packageRules": [
21+
{
22+
"description": "Group all GitHub Actions updates together",
23+
"matchManagers": ["github-actions"],
24+
"groupName": "GitHub Actions",
25+
"automerge": false,
26+
"schedule": ["before 3am on Monday"]
27+
},
28+
{
29+
"description": "Group all Docker base image updates",
30+
"matchDatasources": ["docker"],
31+
"groupName": "Docker base images",
32+
"automerge": false,
33+
"schedule": ["before 3am on Monday"]
34+
},
35+
{
36+
"description": "Python dependencies in pyproject.toml",
37+
"matchManagers": ["poetry"],
38+
"groupName": "Python dependencies",
39+
"automerge": false,
40+
"schedule": ["before 3am on Monday"]
41+
},
42+
{
43+
"description": "Require approval for major updates to critical dependencies",
44+
"matchUpdateTypes": ["major"],
45+
"matchPackagePatterns": ["python", "ubuntu", "dotnet", "powershell"],
46+
"dependencyDashboardApproval": true,
47+
"automerge": false
48+
},
49+
{
50+
"description": "Auto-approve minor and patch updates for non-critical deps",
51+
"matchUpdateTypes": ["minor", "patch"],
52+
"matchPackagePatterns": ["^actions/"],
53+
"automerge": false
54+
}
55+
],
56+
"vulnerabilityAlerts": {
57+
"enabled": true,
58+
"labels": ["security"],
59+
"assignees": ["@adilhusain-s"]
60+
},
61+
"lockFileMaintenance": {
62+
"enabled": true,
63+
"schedule": ["before 3am on the first day of the month"]
64+
},
65+
"ignoreDeps": [],
66+
"assignees": ["adilhusain-s"],
67+
"reviewers": ["adilhusain-s"]
68+
}

0 commit comments

Comments
 (0)