lexparse/renovate.json5 at main · ianlewis/lexparse · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
{
  $schema: "https://docs.renovatebot.com/renovate-schema.json",
  extends: [
    // Use the best-practices preset. Adds options to pin dependencies.
    // https://docs.renovatebot.com/upgrade-best-practices/#whats-in-the-configbest-practices-preset
    "config:best-practices",

    // Update dependencies monthly
    "schedule:monthly",

    // Add DCO sign-off
    ":gitSignOff",

    // Add Aqua present to allow updating CLI tools.
    // https://aquaproj.github.io/docs/guides/renovate/
    "github>aquaproj/aqua-renovate-config#2.13.0",

    // Update version numbers in Makefile.
    // https://docs.renovatebot.com/presets-customManagers/#custommanagersmakefileversions
    "customManagers:makefileVersions",
  ],
  // NOTE: Set the prHourlyLimit to 0 to disable the hourly limit. This is done
  // because we are using a monthly schedule and the default hourly limit of 2
  // would cause Renovate to only create 2 PRs every month.
  // Similarly set prConcurrentLimit to 0 to disable the concurrent PR limit.
  prHourlyLimit: 0,
  prConcurrentLimit: 0,

  // Security alerts/updates.
  vulnerabilityAlerts: {
    enabled: true,
    // Explicitly set the schedule to "at any time" to ensure that security
    // update PRs are created as soon as possible.
    schedule: ["at any time"],
  },
  osvVulnerabilityAlerts: true,

  // Apply a dependency cooldown of 14 days. This helps to avoid issues with
  // compromised releases.
  // https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns
  // https://docs.renovatebot.com/configuration-options/#minimumreleaseage
  minimumReleaseAge: "14 days",
  // internalChecksFilter suppress PR creation for dependencies that were
  // released within minimumReleaseAge.
  // strict: All pending releases will be filtered. PRs will be skipped unless a
  // non-pending version is available.
  // https://docs.renovatebot.com/configuration-options/#internalchecksfilter
  internalChecksFilter: "strict",

  // Enable the lock file maintenance feature to keep transitive dependencies up
  // to date.
  lockFileMaintenance: {
    enabled: true,
    // NOTE: Same as schedule:monthly preset.
    schedule: ["* 0-3 1 * *"],
  },

  // Enable git submodule updates.
  "git-submodules": {
    enabled: true,
    // NOTE: Same as schedule:monthly preset.
    schedule: ["* 0-3 1 * *"],
  },

  // Create a new issue for each config warning. By default, Renovate re-opens
  // an existing issue which can be very old and is easily missed. Opening new
  // issues is more intuitive.
  configWarningReuseIssue: false,

  // Group various ecosystem updates. Security updates are always separate.
  packageRules: [
    {
      matchUpdateTypes: ["minor", "patch"],
      groupName: "aqua",
      matchFileNames: [".aqua.yaml", ".aqua-checksums.yaml"],
    },
    {
      matchUpdateTypes: ["minor", "patch"],
      groupName: "makefile",
      matchFileNames: ["Makefile"],
    },
    {
      matchManagers: ["github-actions"],
      matchUpdateTypes: ["minor", "patch"],
      groupName: "github-actions",
      pinDigests: true,
    },
    {
      matchManagers: ["pep621"],
      matchUpdateTypes: ["minor", "patch"],
      groupName: "pep621",
    },
    {
      matchManagers: ["pip_requirements"],
      matchUpdateTypes: ["minor", "patch"],
      groupName: "python",
    },
    {
      matchManagers: ["npm"],
      matchDepTypes: ["dependencies"],
      matchUpdateTypes: ["minor", "patch"],
      groupName: "npm",
    },
    {
      matchManagers: ["npm"],
      matchDepTypes: ["devDependencies"],
      groupName: "npm dev",
    },
    {
      matchManagers: ["gomod"],
      matchUpdateTypes: ["minor", "patch"],
      groupName: "go",
    },
  ],
}