Files
Jamie Tanna fc4719beca test(manager/github-actions): update pinned version of gh actions-lock via Renovate (#46987)
test(manager/github-actions): update pinned version of `gh-actions-lock` via Renovate

So we can get dependency updates for the extension, without needing
manual code changes.
2026-10-14 18:29:17 +00:00

185 lines
5.9 KiB
JSON

{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["github>renovatebot/.github"],
"assignees": ["viceice", "secustor", "jamietanna"],
"reviewers": ["@renovatebot/maintainers"],
"semanticCommitScope": "deps",
"automergeType": "pr",
"prCreation": "immediate",
"ignorePresets": [":ignoreModulesAndTests"],
"ignorePaths": ["**/node_modules/**", "**/__fixtures__/**", "test/**"],
"rebaseWhen": "conflicted",
"baseBranchPatterns": ["$default", "/^disable-next$/"],
"dockerfile": {
"semanticCommitType": "build"
},
"packageRules": [
{
"matchPackageNames": ["containerbase/node"],
"versioning": "node"
},
{
"matchDepTypes": ["dependencies", "optionalDependencies"],
"semanticCommitType": "build"
},
{
"matchPackageNames": ["semantic-release"],
"semanticCommitType": "build"
},
{
"matchPackageNames": ["@types/jest"],
"groupName": "jest monorepo"
},
{
"matchFileNames": ["**/__fixtures__/**"],
"enabled": false
},
{
"description": "group base image docker and npm updates, they must stay on the same version",
"matchPackageNames": [
"ghcr.io/renovatebot/base-image",
"@renovatebot/base-image"
],
"groupName": "renovate-base-image"
},
{
"description": "set fix scope for base image",
"matchPackageNames": [
"ghcr.io/renovatebot/base-image",
"@renovatebot/base-image"
],
"semanticCommitType": "fix"
},
{
"description": "set feat scope for base image major and minor",
"matchPackageNames": [
"ghcr.io/renovatebot/base-image",
"@renovatebot/base-image"
],
"matchUpdateTypes": ["major", "minor"],
"semanticCommitType": "feat"
},
{
"description": "use `feat` semantic commit scope with breaking change for for base image major",
"matchPackageNames": [
"ghcr.io/renovatebot/base-image",
"@renovatebot/base-image"
],
"matchUpdateTypes": ["major"],
"commitMessagePrefix": "feat(deps)!:"
},
{
"description": "allow prereleases for base image on next branch",
"matchPackageNames": [
"ghcr.io/renovatebot/base-image",
"@renovatebot/base-image"
],
"matchBaseBranches": ["next"],
"ignoreUnstable": false
},
{
"description": "set build scope for node updates",
"matchDepNames": ["node"],
"matchFileNames": [".nvmrc", "tools/docker/Dockerfile"],
"semanticCommitType": "build"
},
{
"description": "set branch prefix for node major updates to split from minor updates",
"matchPackageNames": ["node", "containerbase/node-prebuild"],
"matchUpdateTypes": ["major"],
"additionalBranchPrefix": "major"
},
{
"description": "disable some invalid deps from docs",
"matchPackageNames": ["my.old.registry/**", "my.new.registry/**"],
"matchFileNames": ["docs/**/*.md"],
"enabled": false
},
{
"description": "require approval on next branch",
"matchPackageNames": ["*"],
"matchBaseBranches": ["next"],
"dependencyDashboardApproval": true
},
{
"description": "require approval on next branch lockfile maintenance",
"matchBaseBranches": ["next"],
"matchUpdateTypes": ["lockFileMaintenance"],
"dependencyDashboardApproval": true
},
{
"description": "Mark major version bumps with the breaking label",
"matchUpdateTypes": ["major"],
"addLabels": ["breaking"]
},
{
"description": "Multiple major updates for got",
"matchDatasources": ["npm"],
"matchDepNames": ["got"],
"separateMultipleMajor": true
},
{
"description": "Zizmor's GitHub Action doesn't immediately support the latest Zizmor container image until there's an explicit update",
"groupName": "zizmor",
"matchPackageNames": [
"ghcr.io/zizmorcore/zizmor",
"zizmorcore/zizmor-action"
],
"minimumGroupSize": 2
},
{
"description": "Only update the major version constraint for Erlang",
"matchFileNames": ["lib/modules/manager/mix/artifacts.ts"],
"matchPackageNames": ["containerbase/erlang-prebuild"],
"extractVersion": "^(?<version>\\d+)",
"separateMultipleMajor": true
},
{
"matchPackageNames": ["github/gh-actions-lock"],
"matchFileNames": ["lib/config/options/index.ts"],
"semanticCommitType": "fix"
},
{
"description": "Group commander major updates, they depend on each other.",
"matchDatasources": ["npm"],
"matchPackageNames": ["@commander-js/extra-typings", "commander"],
"matchUpdateTypes": ["major"],
"groupName": "commander"
}
],
"customManagers": [
{
"customType": "regex",
"managerFilePatterns": ["lib/config/options/index.ts"],
"matchStrings": [
"default: '(?<depName>ghcr.io/renovatebot/base-image):(?<currentValue>.*)'"
],
"datasourceTemplate": "docker"
},
{
"customType": "regex",
"managerFilePatterns": ["lib/modules/manager/mix/artifacts.ts"],
"matchStrings": ["const erlangVersion = '(?<currentValue>[\\^0-9]*)'"],
"datasourceTemplate": "github-releases",
"packageNameTemplate": "containerbase/erlang-prebuild",
"versioningTemplate": "loose"
},
{
"customType": "regex",
"managerFilePatterns": ["lib/config/options/index.ts"],
"matchStrings": ["ghActionsLock: '(?<currentValue>.*)'"],
"datasourceTemplate": "github-releases",
"packageNameTemplate": "github/gh-actions-lock"
},
{
"customType": "regex",
"managerFilePatterns": [
"lib/modules/manager/github-actions/artifacts.spec.ts"
],
"matchStrings": ["actionsLockVersion = '(?<currentValue>.*)'"],
"datasourceTemplate": "github-releases",
"packageNameTemplate": "github/gh-actions-lock"
}
]
}