cmdr/renovate.json at main · vdavid/cmdr · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended"],
  "schedule": ["before 6am on monday"],
  "timezone": "Europe/Budapest",
  "automerge": true,
  "platformAutomerge": true,
  "minimumReleaseAge": "14 days",
  "packageRules": [
    {
      "description": "Group all non-major updates into one weekly PR",
      "groupName": "all non-major updates",
      "matchUpdateTypes": ["patch", "minor", "pin", "digest"],
      "automerge": true
    },
    {
      "description": "Group all major updates into one monthly PR",
      "groupName": "all major updates",
      "matchUpdateTypes": ["major"],
      "schedule": ["before 6am on the first day of the month"],
      "automerge": false
    },
    {
      "description": "Security patches get immediate PRs, auto-merge",
      "matchCategories": ["security"],
      "schedule": ["at any time"],
      "automerge": true,
      "groupName": null
    },
    {
      "description": "First-party crates (David's own). Stricter pre-release gate than the 14-day window protects against; bypass so cmdr pulls fixes immediately.",
      "matchPackageNames": ["smb2", "mtp-rs"],
      "minimumReleaseAge": "0 days",
      "schedule": ["at any time"],
      "automerge": true,
      "groupName": null
    }
  ],
  "cargo": {
    "enabled": true
  },
  "gomod": {
    "enabled": true
  },
  "vulnerabilityAlerts": {
    "enabled": true,
    "schedule": ["at any time"],
    "automerge": true,
    "minimumReleaseAge": "3 days"
  }
}