13fa39879f
* chore: update renovate for github-action to weekly * add anchore/sbom-action to ignore list
75 lines
1.9 KiB
Text
75 lines
1.9 KiB
Text
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": [
|
|
"config:best-practices"
|
|
],
|
|
|
|
"baseBranchPatterns": ["main", "stable-f44"],
|
|
|
|
// Do not rebase when the default branch is updated
|
|
"rebaseWhen": "never",
|
|
customManagers: [
|
|
{
|
|
customType: 'regex',
|
|
managerFilePatterns: [
|
|
'/^Justfile$/',
|
|
],
|
|
matchStrings: [
|
|
'(?<justName>.+?)\\s:=\\s"(?<packageName>\\S+):(?<currentValue>\\S+)@(?<currentDigest>sha256:[a-f0-9]+?)"',
|
|
],
|
|
datasourceTemplate: 'docker',
|
|
},
|
|
],
|
|
|
|
"packageRules": [
|
|
{
|
|
"automerge": true,
|
|
"matchUpdateTypes": ["pin", "pinDigest"]
|
|
},
|
|
{
|
|
"automerge": true,
|
|
"matchManagers": ["dockerfile"],
|
|
"matchUpdateTypes": ["digest"]
|
|
},
|
|
{
|
|
// We always want to trigger a fresh build when we have a new base image on every branch
|
|
// so we get package and security updates
|
|
"matchDepNames": ["quay.io/fedora-ostree-desktops/kinoite"],
|
|
"automerge": true,
|
|
"matchUpdateTypes": ["digest"]
|
|
},
|
|
{
|
|
"matchDepNames": ["quay.io/fedora-ostree-desktops/kinoite"],
|
|
"matchUpdateTypes": ["major"],
|
|
"enabled": false
|
|
},
|
|
{
|
|
"matchDepNames": [
|
|
"ghcr.io/ublue-os/brew",
|
|
"ghcr.io/get-aurora-dev/common"
|
|
],
|
|
"matchBaseBranches": ["main"],
|
|
"automerge": true,
|
|
"matchUpdateTypes": ["digest"]
|
|
},
|
|
{
|
|
"matchDepNames": [
|
|
"ghcr.io/ublue-os/brew",
|
|
"ghcr.io/get-aurora-dev/common"
|
|
],
|
|
// Brew and common are not "security updates", they have to go through :testing/main first
|
|
// to reach a stable release
|
|
"matchBaseBranches": ["stable-f44"],
|
|
"enabled": false
|
|
},
|
|
{
|
|
"matchManagers": ["github-actions"],
|
|
"matchDepNames": [
|
|
"!oras-project/setup-oras",
|
|
"!sigstore/cosign-installer",
|
|
"!anchore/sbom-action"
|
|
],
|
|
"schedule": ["on sunday"]
|
|
}
|
|
]
|
|
}
|