renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    "helpers:pinGitHubActionDigests",
    ":rebaseStalePrs",
    "group:all"
  ],
  "reviewers": ["martinfrancois"],
  "labels": ["dependencies"],
  "rangeStrategy": "replace",
  "minimumReleaseAge": "7 days",
  "minimumReleaseAgeBehaviour": "timestamp-required",
  "internalChecksFilter": "strict",
  "automerge": false,
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": ["security"]
  },
  "customManagers": [
    {
      "customType": "regex",
      "managerFilePatterns": [
        "/^\\.github/workflows/(?:commitlint|release-please)\\.yml$/",
        "/^scripts/(?:commitlint_release_pr|install_commitlint)\\.sh$/"
      ],
      "matchStrings": [
        "(?:\\s+)(?<depName>@commitlint/(?:cli|config-conventional))@(?<currentValue>\\d+\\.\\d+\\.\\d+)"
      ],
      "datasourceTemplate": "npm",
      "versioningTemplate": "semver"
    },
    {
      "customType": "regex",
      "managerFilePatterns": [
        "/^\\.github/workflows/(?:ci|commitlint|publish-tessl|release-please|skill-review)\\.yml$/"
      ],
      "matchStrings": [
        "version:\\s*[\"']?(?<currentValue>\\d+\\.\\d+\\.\\d+)[\"']?"
      ],
      "depNameTemplate": "tessl-cli",
      "datasourceTemplate": "npm",
      "packageNameTemplate": "tessl",
      "versioningTemplate": "semver"
    }
  ],
  "packageRules": [
    {
      "description": "Require review for GitHub Actions and pinned action digest updates",
      "matchManagers": ["github-actions"],
      "automerge": false
    },
    {
      "description": "Require review for workflow-managed tooling such as Tessl CLI and commitlint",
      "matchManagers": ["custom.regex"],
      "automerge": false
    },
    {
      "matchUpdateTypes": ["major"],
      "automerge": false,
      "dependencyDashboardApproval": true,
      "addLabels": ["major-update"]
    }
  ]
}