Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

migrate Renovate config #1652

Merged
merged 1 commit into from
Feb 10, 2025
Merged

migrate Renovate config #1652

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
74 changes: 35 additions & 39 deletions .github/renovate.json5
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [
"config:base",
"config:recommended",
":gitSignOff",
"helpers:pinGitHubActionDigests"
"helpers:pinGitHubActionDigests",
],
// This ensures that the gitAuthor and gitSignOff fields match
"gitAuthor": "renovate[bot] <[email protected]>",
Expand All @@ -14,15 +14,17 @@
"Makefile",
],
postUpdateOptions: [
"gomodTidy"
"gomodTidy",
],
"ignoreDeps": [
"github.com/cilium/cilium"
"github.com/cilium/cilium",
],
"pinDigests": true,
"prHourlyLimit": 2, // do not open more than two pull requests an hour
"prConcurrentLimit": 5, // do not open more than five PRs per branch at a time
"schedule": ["before 6am on tuesday"], // only run renovate part of the day tuesday
"schedule": [
"before 6am on tuesday", // only run renovate part of the day tuesday
],
"separateMajorMinor": true,
"separateMultipleMajor": true,
"separateMinorPatch": true,
Expand All @@ -36,11 +38,7 @@
"labels": [
"kind/enhancement",
"release-note/misc",
"priority/release-blocker"
],
// uncomment after renovate onboarding is merged and renovate PRs are merged
"schedule": [
"on friday"
"priority/release-blocker",
],
"stopUpdatingLabel": "renovate/stop-updating",
"packageRules": [
Expand All @@ -49,47 +47,45 @@
{
"matchPackageNames": [
"go", // golang version directive upgrade in go.mod
],
// list of trusted packages that can automerge
"matchPackagePrefixes": [
"docker.io/library/", // official Docker images
"github.com/golang/", // Golang official org
"golang.org/x/", // Golang official experimental org
"google.golang.org/", // Google official repo for api/genproto/grpc/protobuf
"github.com/google/", // Google official github org
"k8s.io/", // Kubernetes official repo
"sigs.k8s.io/", // Kubernetes official SIG repo
// list of trusted packages that can automerge
"docker.io/library/{/,}**", // official Docker images
"github.com/golang/{/,}**", // Golang official org
"golang.org/x/{/,}**", // Golang official experimental org
"google.golang.org/{/,}**", // Google official repo for api/genproto/grpc/protobuf
"github.com/google/{/,}**", // Google official github org
"k8s.io/{/,}**", // Kubernetes official repo
"sigs.k8s.io/{/,}**", // Kubernetes official SIG repo
],
// auto merge non-major updates
"matchUpdateTypes": [
"minor",
"patch",
"pin",
"pinDigest"
"pinDigest",
],
"automerge": true
},
{
"groupName": "all github action dependencies",
"groupSlug": "all-github-action",
"matchPaths": [
".github/workflows/**"
"matchFileNames": [
".github/workflows/**",
],
"matchUpdateTypes": [
"major",
"minor",
"digest",
"patch",
"pin",
"pinDigest"
"pinDigest",
],
},
{
"groupName": "all go dependencies main",
"groupSlug": "all-go-deps-main",
"matchFiles": [
"go.mod",
"go.sum"
"go.sum",
],
"postUpdateOptions": [
// update source import paths on major updates
Expand All @@ -101,10 +97,10 @@
"digest",
"patch",
"pin",
"pinDigest"
"pinDigest",
],
matchBaseBranches: [
"main"
"main",
]
},
{
Expand All @@ -126,11 +122,9 @@
// renovate wants to downgrade to 1.0.5. Can be removed if pflag ever
// tags a new release.
"github.com/spf13/pflag",
],
"matchPackagePatterns": [
// k8s dependencies will be updated manually along with tests
"k8s.io/*",
"sigs.k8s.io/*"
"/k8s.io/*/",
"/sigs.k8s.io/*/",
]
},
{
Expand All @@ -140,46 +134,48 @@
"docker.io/library/golang",
"library/golang",
"go",
"golang"
"golang",
],
},
{
"groupName": "alpine",
// Restrict the alpine version that can be used on stable branches
"matchPackageNames": [
"docker.io/library/alpine"
"docker.io/library/alpine",
],
},
{
// Group golangci-lint updates to overrule grouping of version updates in the GHA files.
// Without this, golangci-lint updates are not in sync for GHA files and other usages.
"groupName": "golangci-lint",
"matchDepNames": [
"golangci/golangci-lint"
"golangci/golangci-lint",
]
},
],
"regexManagers": [
"customManagers": [
{
"customType": "regex",
"fileMatch": [
"^\\.github/workflows/[^/]+\\.ya?ml$"
"^\\.github/workflows/[^/]+\\.ya?ml$",
],
// This regex manages version strings in GitHub actions workflow files,
// similar to the examples shown here:
// https://docs.renovatebot.com/modules/manager/regex/#advanced-capture
"matchStrings": [
"# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+(?:version|VERSION): +['\"]?(?<currentValue>[^\\s'\"]+)['\"]?"
"# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+(?:version|VERSION): +['\"]?(?<currentValue>[^\\s'\"]+)['\"]?",
]
},
{
"customType": "regex",
"fileMatch": [
"^Makefile$"
"^Makefile$",
],
// This regex manages version strings in the Makefile,
// similar to the examples shown here:
// https://docs.renovatebot.com/modules/manager/regex/#advanced-capture
"matchStrings": [
"# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+_VERSION = (?<currentValue>.*)\\s+.+_SHA = (?<currentDigest>sha256:[a-f0-9]+)"
"# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+_VERSION = (?<currentValue>.*)\\s+.+_SHA = (?<currentDigest>sha256:[a-f0-9]+)",
]
},
]
Expand Down