pixels/renovate.json5 at main · fuf-stack/pixels · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
{
  // validate with (see: https://docs.renovatebot.com/config-validation/):
  // npx --yes --package renovate -- renovate-config-validator renovate.json5 --strict

  dependencyDashboardLabels: ['effort | ongoing', 'scope | dependencies'],
  dependencyDashboardOSVVulnerabilitySummary: 'all',
  extends: [
    'config:recommended',
    'default:automergeDigest',
    'default:automergeMinor',
    'default:combinePatchMinorReleases',
    'default:dependencyDashboard',
    'default:docker',
    'default:enableVulnerabilityAlerts',
    'default:maintainLockFilesWeekly',
    'default:prHourlyLimit4',
  ],
  ignorePaths: ['/node_modules/'],
  // wait 7 days before creating mrs (supply chain attacks)
  // see: https://docs.renovatebot.com/configuration-options/#minimumreleaseage
  minimumReleaseAge: '7 days',
  // see: https://docs.renovatebot.com/configuration-options/#prconcurrentlimit
  prConcurrentLimit: 20,
  // only rebase merge requests when they become conflicted
  // see: https://docs.renovatebot.com/configuration-options/#rebasewhen
  rebaseWhen: 'conflicted',
  // https://docs.renovatebot.com/configuration-options/#stopupdatinglabel
  stopUpdatingLabel: 'renovate | stop update',
  packageRules: [
    // @dnd-kit monorepo
    {
      matchPackageNames: ['/^@dnd-kit/'],
      groupName: '@dnd-kit monorepo',
    },

    // @fuf-stack packages: skip minimumReleaseAge (fuf packages)
    {
      matchPackageNames: ['/^@fuf-stack/'],
      minimumReleaseAge: null,
    },

    // @heroui monorepo
    {
      matchPackageNames: ['/^@heroui/'],
      groupName: '@heroui monorepo',
    },

    // framer-motion: weekly only (rate-limiting)
    {
      matchPackageNames: ['framer-motion'],
      schedule: ['before 9am on monday'],
    },
  ],
}