renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended"
  ],
  "branchPrefix": "renovate-",
  "commitMessageAction": "Renovate Update",
  "labels": [
    "Dependencies",
    "Renovate"
  ],
  "packageRules": [
    {
      "description": "Terraform: bundle all updates together",
      "labels": [
        "devDependencies",
        "Renovate",
        "Terraform"
      ],
      "groupName": "Terraform",
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "matchManagers": [
        "terraform"
      ]
    },
    {
      "groupName": "Patch & Minor Updates",
      "groupSlug": "all-minor-patch-updates",
      "labels": [
        "Dependencies",
        "Renovate"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "prCreation": "immediate",
      "prPriority": 0,
      "minimumReleaseAge": "3 days",
      "matchPackageNames": [
        "*",
        "!php"
      ]
    },
    {
      "description": [
        "Github Actions: bundle all updates together"
      ],
      "groupName": "GitHub Actions",
      "automerge": true,
      "dependencyDashboardApproval": true,
      "labels": [
        "Dependencies",
        "Renovate"
      ],
      "prTitle": "chore(deps): update GitHub Actions",
      "prBody": "Updates the following GitHub Actions dependencies:\n\n{{#each dependencies}}- {{this.name}}\n{{/each}}",
      "prCreation": "immediate",
      "schedule": [
        "after 6am and before 9am on Monday"
      ],
      "minimumReleaseAge": "3 days",
      "matchManagers": [
        "github-actions"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "matchPackageNames": [
        "/actions/*/"
      ]
    },
    {
      "description": [
        "Docker: group all updates together"
      ],
      "labels": [
        "Dependencies",
        "Renovate",
        "Docker"
      ],
      "groupName": "Docker Updates",
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "matchManagers": [
        "dockerfile",
        "docker-compose"
      ],
      "automerge": false
    },
    {
      "description": [
        "Golang: group all updates together"
      ],
      "labels": [
        "Dependencies",
        "Renovate",
        "Golang"
      ],
      "groupName": "Golang Updates",
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "matchManagers": [
        "gomod"
      ],
      "automerge": false
    },
    {
      "description": [
        "npm minor and patch updates (stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "minor and patch updates (npm)",
      "groupSlug": "all-minor-patch-updates-npm",
      "labels": [
        "Dependencies",
        "Renovate",
        "nodejs"
      ],
      "matchManagers": [
        "npm"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "matchFileNames": [
        "package.json",
        "service-front/package.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "minimumReleaseAge": "3 days"
    },
    {
      "description": [
        "AWS SDK"
      ],
      "labels": [
        "Renovate",
        "AWS SDK"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "matchManagers": [
        "composer"
      ],
      "matchPackageNames": [
        "aws/aws-sdk-php"
      ],
      "extends": [
        "schedule:monthly"
      ],
      "automerge": false
    },
    {
      "description": [
        "front composer minor and patch updates (PHP 8.2, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "front minor and patch updates (PHP 8.2)",
      "groupSlug": "front-minor-patch-updates-php82",
      "labels": [
        "Dependencies",
        "Renovate",
        "PHP 8.2"
      ],
      "matchManagers": [
        "composer"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "matchFileNames": [
        "service-front/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "minimumReleaseAge": "3 days",
      "matchPackageNames": [
        "!php"
      ]
    },
    {
      "description": [
        "api composer minor and patch updates (PHP 8.2, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "api minor and patch updates (PHP 8.2)",
      "groupSlug": "api-minor-patch-updates-php82",
      "labels": [
        "Dependencies",
        "Renovate",
        "PHP 8.2"
      ],
      "matchManagers": [
        "composer"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "matchFileNames": [
        "service-api/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "minimumReleaseAge": "3 days",
      "matchPackageNames": [
        "!php"
      ]
    }
  ],
  "major": {
    "labels": [
      "Dependencies",
      "Renovate"
    ],
    "prCreation": "immediate",
    "rangeStrategy": "pin"
  },
  "branchConcurrentLimit": 5,
  "prConcurrentLimit": 1,
  "prHourlyLimit": 1,
  "vulnerabilityAlerts": {
    "groupName": "Security Alerts",
    "labels": [
      "Dependencies",
      "Renovate"
    ],
    "dependencyDashboardApproval": false,
    "minimumReleaseAge": null,
    "rangeStrategy": "pin",
    "commitMessagePrefix": "[SECURITY]",
    "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
    "prCreation": "immediate"
  }
}