renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:base"],
  "branchPrefix": "renovate-",
  "labels": ["Renovate", "Dependencies"],
  "commitMessageAction": "Renovate update",
  "includeForks": true,
  "lockFileMaintenance": {
    "enabled": false
  },
  "vulnerabilityAlerts": {
    "groupName": "Security Alerts",
    "labels": ["Dependencies", "Renovate", "SecurityAlert"],
    "dependencyDashboardApproval": false,
    "stabilityDays": 0,
    "rangeStrategy": "update-lockfile",
    "commitMessagePrefix": "[SECURITY]",
    "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
    "prCreation": "immediate",
    "prPriority": 5
  },
  "prConcurrentLimit": 1,
  "prHourlyLimit": 1,
  "branchConcurrentLimit": 5,
  "enabledManagers": [
    "dockerfile",
    "docker-compose",
    "npm",
    "composer",
    "github-actions",
    "gomod",
    "terraform",
    "pip_requirements",
    "pip-compile",
    "pipenv",
    "pyenv",
    "setup-cfg",
    "pip_setup"
  ],
  "packageRules": [
    {
      "description": [
        "cypress: bundle updates to package.json and dockerfile",
        "allow major version updates"
      ],
      "labels": ["devDependencies", "Renovate", "Cypress"],
      "groupName": "Cypress",
      "matchUpdateTypes": ["major"],
      "matchManagers": ["dockerfile", "npm"],
      "matchPackagePatterns": ["cypress" , "locust"]
    },
    {
      "description": [
        "dev tools: allow major updates only for dev tools and aws-sdk",
        "note: this may fail if other packages depend on existing versions"
      ],
      "labels": ["devDependencies", "Renovate", "DevTools"],
      "matchUpdateTypes": ["major"],
      "matchManagers": ["composer"],
      "matchPackageNames": ["vimeo/psalm", "phpunit/phpunit", "aws/aws-sdk-php"]
    },
    {
      "description": [
        "Github Actions: bundle all updates together"
      ],
      "labels": ["devDependencies", "Renovate", "GithubActions"],
      "groupName": "Github Actions",
      "automerge": true,
      "schedule": [
        "after 6am and before 9am on Monday"
      ],
      "matchUpdateTypes": ["minor", "patch", "digest"],
      "stabilityDays": 3,
      "matchManagers": ["github-actions"]
    },
    {
      "description": [
        "Terraform: bundle all updates together"
      ],
      "labels": ["devDependencies", "Renovate", "Terraform"],
      "groupName": "Terraform",
      "matchUpdateTypes": ["minor", "patch"],
      "matchManagers": ["terraform"]
    },
    {
      "description": [
        "No updates to postgres, redis, php or python docker images",
        "postgres: keep in sync with live",
        "redis: keep in sync with live",
        "php: 8.2 upgrade needs to be managed manually"
      ],
      "matchUpdateTypes": ["major", "minor", "patch"],
      "matchManagers": ["dockerfile", "docker-compose", "composer"],
      "matchPackageNames": ["postgres", "redis", "php", "python"],
      "enabled": false
    },
    {
      "description": [
        "No updates to PHP PDF libraries (too sensitive and risky)"
      ],
      "matchUpdateTypes": ["major", "minor", "patch"],
      "matchManagers": ["composer"],
      "matchPackageNames": ["tecnickcom/tcpdf", "mikehaertl/php-pdftk"],
      "enabled": false
    },
    {
      "description": [
        "No major version updates except for dev tools"
      ],
      "matchUpdateTypes": ["major"],
      "excludePackageNames": ["vimeo/psalm", "phpunit/phpunit"],
      "excludePackagePatterns": ["cypress" , "locust"],
      "enabled": false
    },
    {
      "description": [
        "admin composer minor and patch updates (PHP 8.2, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "admin minor and patch updates (PHP 8.2)",
      "groupSlug": "admin-minor-patch-updates-php82",
      "labels": ["Dependencies", "Renovate", "PHP 8.2"],
      "matchManagers": ["composer"],
      "matchUpdateTypes": ["minor", "patch"],
      "excludePackageNames": ["php"],
      "matchFiles": [
        "service-admin/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    },
    {
      "description": [
        "front composer minor and patch updates (PHP 8.2, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "front minor and patch updates (PHP 8.2)",
      "groupSlug": "front-minor-patch-updates-php82",
      "labels": ["Dependencies", "Renovate", "PHP 8.2"],
      "matchManagers": ["composer"],
      "matchUpdateTypes": ["minor", "patch"],
      "excludePackageNames": ["php"],
      "matchFiles": [
        "service-front/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    },
    {
      "description": [
        "api composer minor and patch updates (PHP 8.2, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "api minor and patch updates (PHP 8.2)",
      "groupSlug": "api-minor-patch-updates-php82",
      "labels": ["Dependencies", "Renovate", "PHP 8.2"],
      "matchManagers": ["composer"],
      "matchUpdateTypes": ["minor", "patch"],
      "excludePackageNames": ["php"],
      "matchFiles": [
        "service-api/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    },
    {
      "description": [
        "pdf composer minor and patch updates (PHP 8.1, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "pdf minor and patch updates (PHP 8.1)",
      "groupSlug": "pdf-minor-patch-updates-php81",
      "labels": ["Dependencies", "Renovate", "PHP 8.1"],
      "matchManagers": ["composer"],
      "matchUpdateTypes": ["minor", "patch"],
      "excludePackageNames": ["php"],
      "matchFiles": [
        "service-pdf/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    },
    {
      "description": [
        "shared composer minor and patch updates (PHP 8.2, stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "shared minor and patch updates (PHP 8.2)",
      "groupSlug": "shared-minor-patch-updates-php82",
      "labels": ["Dependencies", "Renovate", "PHP 8.2"],
      "matchManagers": ["composer"],
      "matchUpdateTypes": ["minor", "patch"],
      "excludePackageNames": ["php"],
      "matchFiles": [
        "shared/composer.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    },
    {
      "description": [
        "npm minor and patch updates (stable for 3 days)",
        "These might be automerged once we're comfortable with Renovate"
      ],
      "automerge": false,
      "groupName": "minor and patch updates (npm)",
      "groupSlug": "all-minor-patch-updates-npm",
      "labels": ["Dependencies", "Renovate", "nodejs"],
      "matchManagers": ["npm"],
      "matchUpdateTypes": ["minor", "patch"],
      "matchFiles": [
        "package.json",
        "service-front/package.json"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    },
    {
      "description": [
        "python minor and patch updates (stable for 3 days)"
      ],
      "automerge": false,
      "groupName": "minor and patch updates (Python)",
      "groupSlug": "all-minor-patch-updates-python",
      "labels": ["Dependencies", "Renovate"],
      "matchManagers": ["pip_requirements", "pip-compile", "pipenv", "pyenv", "setup-cfg", "pip_setup"],
      "matchUpdateTypes": ["minor", "patch"],
      "prCreation": "immediate",
      "prPriority": 4,
      "stabilityDays": 3
    }
  ],
  "pip-compile": {
    "fileMatch": ["(^|/)requirements\\.in$"]
  }
}