We are not using that right now in Justfiles, we should be using
image-versions.yaml from the org-renovate config [1]
[1] 915bbf3a9a/org-inherited-config.json
68 lines
1.9 KiB
Text
68 lines
1.9 KiB
Text
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": [
|
|
"config:best-practices"
|
|
],
|
|
|
|
"baseBranchPatterns": ["main", "/^stable-f[0-9][0-9]$/"],
|
|
|
|
// Do not rebase when the default branch is updated
|
|
"rebaseWhen": "never",
|
|
|
|
"packageRules": [
|
|
{
|
|
"description": "Use merge commits when automerging into stable branches to match branch ruleset restrictions",
|
|
"matchBaseBranches": ["/^stable-f[0-9][0-9]$/"],
|
|
"automergeStrategy": "merge-commit"
|
|
},
|
|
{
|
|
"automerge": true,
|
|
"matchUpdateTypes": ["pin", "pinDigest"]
|
|
},
|
|
{
|
|
"automerge": true,
|
|
"matchManagers": ["dockerfile"],
|
|
"matchUpdateTypes": ["digest"]
|
|
},
|
|
{
|
|
// We always want to trigger a fresh build when we have a new base image on every branch
|
|
// so we get package and security updates
|
|
"matchDepNames": ["quay.io/fedora-ostree-desktops/kinoite"],
|
|
"automerge": true,
|
|
"matchUpdateTypes": ["digest"]
|
|
},
|
|
{
|
|
"matchDepNames": ["quay.io/fedora-ostree-desktops/kinoite"],
|
|
"matchUpdateTypes": ["major"],
|
|
"enabled": false
|
|
},
|
|
{
|
|
"matchDepNames": [
|
|
"ghcr.io/ublue-os/brew",
|
|
"ghcr.io/get-aurora-dev/common"
|
|
],
|
|
"matchBaseBranches": ["main"],
|
|
"automerge": true,
|
|
"matchUpdateTypes": ["digest"]
|
|
},
|
|
{
|
|
"matchDepNames": [
|
|
"ghcr.io/ublue-os/brew",
|
|
"ghcr.io/get-aurora-dev/common"
|
|
],
|
|
// Brew and common are not "security updates", they have to go through :testing/main first
|
|
// to reach a stable release
|
|
"matchBaseBranches": ["/^stable-f[0-9][0-9]$/"],
|
|
"enabled": false
|
|
},
|
|
{
|
|
"matchManagers": ["github-actions"],
|
|
"matchDepNames": [
|
|
"!oras-project/setup-oras",
|
|
"!sigstore/cosign-installer",
|
|
"!anchore/sbom-action"
|
|
],
|
|
"schedule": ["on sunday"]
|
|
}
|
|
]
|
|
}
|