renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:best-practices"],
  "dependencyDashboardTitle": "Renovate Dashboard",
  "dependencyDashboardApproval": true,
  "rebaseWhen": "behind-base-branch",
  "timezone": "UTC",
  "enabledManagers": ["dockerfile", "github-actions", "custom.regex"],
  "dockerfile": {
    "managerFilePatterns": ["/^[Dd]ocker[Ff]ile[^/]*$/"]
  },
  "github-actions": {
    "managerFilePatterns": ["/^\\.github/(?:workflows|actions)/.+\\.ya?ml$/"]
  },
  "packageRules": [
    {
      "description": "Group all dependency updates into one PR",
      "matchPackageNames": ["*"],
      "groupName": "all dependencies",
      "groupSlug": "all-deps"
    },
    {
      "matchPackageNames": ["@anthropic-ai/claude-code"],
      "minimumReleaseAge": "0 days"
    }
  ],
  "customManagers": [
    {
      "customType": "regex",
      "description": "Dockerfile ARG version pins with renovate annotations",
      "managerFilePatterns": ["/^[Dd]ocker[Ff]ile[^/]*$/"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)(?: versioning=(?<versioning>\\S+))?\\nARG [A-Z_]+=(?<currentValue>\\S+)"
      ]
    },
    {
      "customType": "regex",
      "description": "Dockerfile ARG commit hash pins (git-refs)",
      "managerFilePatterns": ["/^[Dd]ocker[Ff]ile[^/]*$/"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>\\S+) packageName=(?<packageName>\\S+)(?: currentValue=(?<currentValue>\\S+))?\\nARG [A-Z_]+=(?<currentDigest>[a-f0-9]{40})"
      ],
      "currentValueTemplate": "main",
      "versioningTemplate": "git"
    }
  ]
}