renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:best-practices",
    "schedule:nonOfficeHours",
    ":maintainLockFilesWeekly",
    "npm:unpublishSafe"
  ],
  "postUpdateOptions": ["yarnDedupeHighest"],
  "labels": ["dependencies"],
  "baseBranches": ["main", "develop"],
  "packageRules": [
    {
      "matchBaseBranches": ["main"],
      "lockFileMaintenance": {
        "enabled": false
      }
    },
    {
      "matchBaseBranches": ["main"],
      "enabled": false,
      "matchPackageNames": ["*"]
    },
    {
      "matchManagers": ["dockerfile"],
      "matchBaseBranches": ["main"],
      "enabled": true
    },
    {
      "matchManagers": ["github-actions"],
      "matchBaseBranches": ["main"],
      "enabled": true
    },
    {
      "matchBaseBranches": ["main"],
      "vulnerabilityAlerts": {
        "enabled": true
      }
    }
  ],
  "lockFileMaintenance": {
    "enabled": true,
    "reviewers": ["@joshuadkitenge", "@joelvdavies"],
    "assignees": ["@joshuadkitenge", "@joelvdavies"],
    "prBodyNotes": ["- Please ensure that `yarn dev` works correctly."]
  },
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": ["security", "dependencies"],
    "reviewers": ["@joshuadkitenge", "@joelvdavies"],
    "assignees": ["@joshuadkitenge", "@joelvdavies"],
    "baseBranches": ["main", "develop"],
    "prBodyNotes": [
      "<ul><li>Please ensure that `yarn dev` works correctly.</li><li>Once this PR has been merged, please follow the release process instructions here: https://github.com/ral-facilities/inventory-management-system/wiki/Release-Process.</li></ul><br>Additionally, please verify if this PR can be grouped with others before being released."
    ]
  }
}