Read-only mirrors. Development, issues and pull requests are on GitHub.

summaryrefslogtreecommitdiffhomepage
path: root/.github/renovate.json5
blob: 32b5608b2f516a6bfd4193f4fb59c2668710c50f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
// SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
// SPDX-License-Identifier: MPL-2.0 WITH AdditionRef-Progmasoft-Exception-2.0

// Renovate proposes the version updates of this repository. Dependabot keeps
// its alerts and its security updates; its version updates are off, so that
// two bots do not open the same pull request.
{
  $schema: "https://docs.renovatebot.com/renovate-schema.json",
  extends: ["config:recommended", "helpers:pinGitHubActionDigests"],

  timezone: "Europe/Istanbul",
  // Once a week, before the working day.
  schedule: ["before 6am on monday"],

  // A release is taken a week after it is published: one that turns out to
  // be broken or malicious is usually withdrawn within days.
  minimumReleaseAge: "7 days",

  rebaseWhen: "conflicted",
  prConcurrentLimit: 2,
  prHourlyLimit: 2,
  dependencyDashboard: true,
  vulnerabilityAlerts: { enabled: false },

  enabledManagers: ["github-actions", "gradle", "gradle-wrapper"],

  packageRules: [
    { matchManagers: ["github-actions"], groupName: "GitHub Actions" },
    { matchManagers: ["gradle", "gradle-wrapper"], groupName: "Gradle plugins and libraries" },
  ],
}