|
1 | | -// Dependency Update Configuration |
2 | | -// |
3 | | -// See https://docs.renovatebot.com/configuration-options/ |
4 | | -// See https://json5.org/ for JSON5 syntax |
5 | | - |
6 | | -// [!] While updating the Renovate config, test changes on your own fork. |
7 | | -// 1. Modify the Renovate configuration, which is located in .github/renovate.json5 and push your changes to the default branch of your fork. |
8 | | -// 2. Enable the Renovate GitHub app in your GitHub account. |
9 | | -// Verify that Renovate is activated in the repository settings within the Renovate Dashboard. |
10 | | -// To enable the dashboard set `dependencyDashboard` to true |
11 | | -// 3. Trigger the Renovate app from the dashboard, or push a new commit to your fork’s default branch to re-trigger Renovate. |
12 | | -// 4. Use the dashboard to initiate Renovate and create a PR on your fork, then check that the proposed PRs are modifying the correct parts. |
13 | | -// 5. Once you’ve validated that the Renovate configuration works on your fork, submit a PR, |
14 | | -// and include links in the description to share details about the testing you've conducted. |
15 | | - |
16 | 1 | { |
17 | 2 | $schema: "https://docs.renovatebot.com/renovate-schema.json", |
18 | | - |
19 | | - // regenerate lock weekly https://docs.renovatebot.com/configuration-options/#lockfilemaintenance |
20 | 3 | lockFileMaintenance: { |
21 | 4 | enabled: true, |
22 | | - schedule: ["* * * * 0"], // weekly |
| 5 | + schedule: ["* * * * 0"], |
23 | 6 | }, |
24 | | - |
25 | | - extends: ["config:base", ":gitSignOff", "helpers:pinGitHubActionDigests"], |
26 | | - // https://docs.renovatebot.com/presets-default/#gitsignoff |
27 | | - // https://docs.renovatebot.com/presets-helpers/#helperspingithubactiondigests |
28 | | - |
29 | | - // if necessary, add supported releases branches here |
30 | | - // it is possible to enable/disable specific upgrades per branch with |
31 | | - // `matchBaseBranches` in specific rule |
| 7 | + extends: [ |
| 8 | + "config:recommended", |
| 9 | + ":gitSignOff", |
| 10 | + "helpers:pinGitHubActionDigests", |
| 11 | + ], |
32 | 12 | baseBranches: ["master"], |
33 | | - |
34 | 13 | enabledManagers: ["github-actions", "pep621"], |
35 | | - |
36 | | - // Set limit to 10 |
37 | 14 | ignorePresets: [":prHourlyLimit2"], |
38 | 15 | prHourlyLimit: 10, |
39 | | - |
40 | 16 | packageRules: [ |
41 | 17 | { |
42 | 18 | enabled: true, |
43 | 19 | matchManagers: ["pep621"], |
44 | | - schedule: ["* * * * 0"], // weekly |
| 20 | + schedule: ["* * * * 0"], |
45 | 21 | }, |
46 | | - |
47 | | - // Disable ultralytics notifications (based on previous Dependabot config) |
48 | 22 | { |
49 | 23 | enabled: false, |
50 | 24 | matchDatasources: ["pypi"], |
51 | 25 | matchDepNames: ["ultralytics"], |
52 | 26 | }, |
53 | | - |
54 | | - // Group GitHub Actions updates |
55 | 27 | { |
56 | 28 | enabled: true, |
57 | 29 | separateMajorMinor: false, |
58 | 30 | groupName: "GitHub Actions", |
59 | 31 | matchManagers: ["github-actions"], |
60 | | - matchPackagePatterns: ["*"], |
61 | | - schedule: ["* * 1 * *"], // every month |
| 32 | + schedule: ["* * 1 * *"], |
| 33 | + matchPackageNames: ["*"], |
62 | 34 | }, |
63 | 35 | ], |
64 | | - |
65 | | - // Enable security upgrades |
66 | 36 | vulnerabilityAlerts: { |
67 | 37 | enabled: true, |
68 | 38 | }, |
|
0 commit comments