argo-workflows/renovate.json at main · argoproj/argo-workflows · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "dependencyDashboard": true,
  "labels": [
    "type/dependencies"
  ],
  "baseBranchPatterns": [
    "main",
    "release-3.7",
    "release-4.0"
  ],
  "nix": {
    "enabled": true
  },
  "packageRules": [
    {
      "description": "Disable argo updates (maintained separately)",
      "matchPackageNames": [
        "argoproj/argo-ui",
        "argoproj/argosay",
        "github.com/argoproj/pkg"
      ],
      "enabled": false
    },
    {
      "description": "Only allow patch updates on release branches",
      "matchBaseBranches": [
        "release-3.7",
        "release-4.0"
      ],
      "matchUpdateTypes": [
        "major",
        "minor"
      ],
      "enabled": false
    },
    {
      "description": "Use conservative lock file updates on release branches",
      "matchBaseBranches": [
        "release-3.7",
        "release-4.0"
      ],
      "rangeStrategy": "in-range-only"
    },
    {
      "description": "Automerge patch updates on main",
      "matchBaseBranches": [
        "main"
      ],
      "matchUpdateTypes": [
        "patch"
      ],
      "automerge": true
    },
    {
      "description": "Group and automerge distroless base image digest updates",
      "matchDatasources": ["docker"],
      "matchPackageNames": ["gcr.io/distroless/static-debian13"],
      "groupName": "distroless base image",
      "matchUpdateTypes": ["digest"],
      "automerge": true
    },
    {
      "description": "Disable lock file maintenance on release branches",
      "matchBaseBranches": [
        "release-3.7",
        "release-4.0"
      ],
      "matchUpdateTypes": [
        "lockFileMaintenance"
      ],
      "enabled": false
    }
  ],
  "platformAutomerge": true,
  "lockFileMaintenance": {
    "enabled": true
  },
  "postUpdateOptions": [
    "yarnDedupeFewer",
    "gomodTidy",
    "gomodUpdateImportPaths"
  ],
  "osvVulnerabilityAlerts": true,
  "vulnerabilityAlerts": {
    "enabled": true
  }
}