Skip to content
This repository was archived by the owner on Dec 10, 2025. It is now read-only.

Commit 6add9e8

Browse files
chore(config): migrate config renovate.json5
1 parent 68141db commit 6add9e8

File tree

1 file changed

+69
-62
lines changed

1 file changed

+69
-62
lines changed

renovate.json5

Lines changed: 69 additions & 62 deletions
Original file line numberDiff line numberDiff line change
@@ -1,75 +1,82 @@
11
{
2-
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
3-
"assigneesFromCodeOwners": true,
4-
"extends": [
5-
// Custom Manager Presets (https://docs.renovatebot.com/presets-customManagers/)
6-
"customManagers:dockerfileVersions", // manages _VERSION variables in Dockerfile
7-
"customManagers:githubActionsVersions", // manages _VERSION variables in GitHub Action workflows
8-
"customManagers:mavenPropertyVersions", // updates versions defined in maven properties ending with .version
9-
10-
// Default Presets (https://docs.renovatebot.com/presets-default/)
11-
":approveMajorUpdates", // major dependency updates need to be approved via dashboard before PR is created
12-
":disableRateLimiting", // allows unlimited creation of PRs
13-
":docker", // updating Dockerfile and docker-compose files
14-
":label(Type: Dependency)", // custom label for PRs created by Renovatebot
15-
":enableVulnerabilityAlertsWithLabel(Type: Security)", // custom label for security PRs created by Renovatebot
16-
":npm", // updating package.json and package-lock.json
17-
":pinAllExceptPeerDependencies", // do version pinning except for peer dependencies
18-
":rebaseStalePrs", // rebase Renovate PR branched when base branch is updated
19-
":semanticCommits", // enabled semantic commits in PR titles
20-
":separateMultipleMajorReleases", // separate major updates of dependencies into separate PRs
21-
":timezone(Europe/Berlin)", // sets correct timezone for schedule based operations
22-
23-
// Docker Presets (https://docs.renovatebot.com/presets-docker/)
24-
"docker:enableMajor", // enables updading of major versions for docker images
25-
26-
// Full Config Presets (https://docs.renovatebot.com/presets-config/)
27-
"config:best-practices", // enables best practices by the Renovate team
28-
29-
// Helper Presets (https://docs.renovatebot.com/presets-helpers/)
30-
"helpers:pinGitHubActionDigestsToSemver", // enabled pinning the action digest with a semantic version comment
31-
32-
// npm Presets (https://docs.renovatebot.com/presets-npm/)
33-
"npm:unpublishSafe", // used to make sure updates are only done after the npm package is "stable" (at least for 3 days)
34-
35-
// Schedule presets (https://docs.renovatebot.com/presets-schedule/)
36-
"schedule:weekly", // renovatebot will search weekly for available dependency updates
37-
38-
// Security presets (https://docs.renovatebot.com/presets-security/)
39-
"security:openssf-scorecard", // showw OpenSSF badge on pull requests to evaluate security health metrics for dependencies
2+
$schema: 'https://docs.renovatebot.com/renovate-schema.json',
3+
assigneesFromCodeOwners: true,
4+
extends: [
5+
'customManagers:dockerfileVersions',
6+
'customManagers:githubActionsVersions',
7+
'customManagers:mavenPropertyVersions',
8+
':approveMajorUpdates',
9+
':disableRateLimiting',
10+
':docker',
11+
':label(Type: Dependency)',
12+
':enableVulnerabilityAlertsWithLabel(Type: Security)',
13+
':npm',
14+
':pinAllExceptPeerDependencies',
15+
':rebaseStalePrs',
16+
':semanticCommits',
17+
':separateMultipleMajorReleases',
18+
':timezone(Europe/Berlin)',
19+
'docker:enableMajor',
20+
'config:best-practices',
21+
'helpers:pinGitHubActionDigestsToSemver',
22+
'security:minimumReleaseAgeNpm',
23+
'schedule:weekly',
24+
'security:openssf-scorecard',
4025
],
41-
"packageRules": [
26+
packageRules: [
4227
{
43-
"description": "Ignore spring-boot-parent updates in EAI template because Camel version specifies compatible Spring version",
44-
"matchDatasources": ["maven"],
45-
"matchPackageNames": ["org.springframework.boot:spring-boot-starter-parent"],
46-
"matchFileNames": ["refarch-eai/pom.xml"],
47-
"enabled": false
28+
description: 'Ignore spring-boot-parent updates in EAI template because Camel version specifies compatible Spring version',
29+
matchDatasources: [
30+
'maven',
31+
],
32+
matchPackageNames: [
33+
'org.springframework.boot:spring-boot-starter-parent',
34+
],
35+
matchFileNames: [
36+
'refarch-eai/pom.xml',
37+
],
38+
enabled: false,
4839
},
4940
{
50-
"description": "Limit Camel updates to current LTS version (needs to be updated manually when new LTS release is out)",
51-
"matchDatasources": ["maven"],
52-
"matchPackageNames": ["org.apache.camel.springboot:camel-spring-boot-dependencies"],
53-
"allowedVersions": "<=4.8"
41+
description: 'Limit Camel updates to current LTS version (needs to be updated manually when new LTS release is out)',
42+
matchDatasources: [
43+
'maven',
44+
],
45+
matchPackageNames: [
46+
'org.apache.camel.springboot:camel-spring-boot-dependencies',
47+
],
48+
allowedVersions: '<=4.8',
5449
},
5550
{
56-
"description": "Limit dependencies directly related to Node to versions on company machines (needs to be updated manually when new versions are rolled out)",
57-
"matchDatasources": ["npm"],
58-
"matchPackageNames": ["@types/node"],
59-
"allowedVersions": "<=20.14.0"
51+
description: 'Limit dependencies directly related to Node to versions on company machines (needs to be updated manually when new versions are rolled out)',
52+
matchDatasources: [
53+
'npm',
54+
],
55+
matchPackageNames: [
56+
'@types/node',
57+
],
58+
allowedVersions: '<=20.14.0',
6059
},
6160
{
62-
"description": "Limit Keycloak version in docker stack to versions in company infrastructure, might slighty differ due to some RedHat KeyCloak versions not available as Docker image (needs to be updated manually when new versions are rolled out)",
63-
"matchDatasources": ["docker"],
64-
"matchPackageNames": ["quay.io/keycloak/keycloak"],
65-
"allowedVersions": "<=20.0.5"
61+
description: 'Limit Keycloak version in docker stack to versions in company infrastructure, might slighty differ due to some RedHat KeyCloak versions not available as Docker image (needs to be updated manually when new versions are rolled out)',
62+
matchDatasources: [
63+
'docker',
64+
],
65+
matchPackageNames: [
66+
'quay.io/keycloak/keycloak',
67+
],
68+
allowedVersions: '<=20.0.5',
6669
},
6770
{
68-
"description": "Limit Postgres version in docker stack to versions in company infrastructure (needs to be updated manually when new versions are rolled out)",
69-
"matchDatasources": ["docker"],
70-
"matchPackageNames": ["postgres"],
71-
"allowedVersions": "<=16.4"
72-
}
71+
description: 'Limit Postgres version in docker stack to versions in company infrastructure (needs to be updated manually when new versions are rolled out)',
72+
matchDatasources: [
73+
'docker',
74+
],
75+
matchPackageNames: [
76+
'postgres',
77+
],
78+
allowedVersions: '<=16.4',
79+
},
7380
],
74-
"additionalBranchPrefix": "{{parentDir}}-"
81+
additionalBranchPrefix: '{{parentDir}}-',
7582
}

0 commit comments

Comments
 (0)