frontend/renovate.json at main · Zenith-options/frontend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended", ":semanticCommits", ":pinDevDependencies", "helpers:pinGitHubActionDigests"],
  "labels": ["dependencies"],
  "timezone": "UTC",
  "schedule": ["before 6am on monday"],
  "prConcurrentLimit": 5,
  "rangeStrategy": "pin",
  "minimumReleaseAge": "3 days",
  "internalChecksFilter": "strict",
  "osvVulnerabilityAlerts": true,
  "vulnerabilityAlerts": {
    "labels": ["security"],
    "minimumReleaseAge": null,
    "schedule": ["at any time"]
  },
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 6am on the first day of the month"],
    "labels": ["dependencies", "lockfile-only-change"],
    "automerge": false
  },
  "packageRules": [
    {
      "description": "Default: every update needs human review.",
      "matchPackagePatterns": ["*"],
      "automerge": false
    },
    {
      "description": "Only dev-dependency patch updates auto-merge, and only with green CI (Renovate waits for required checks).",
      "matchDepTypes": ["devDependencies"],
      "matchUpdateTypes": ["patch"],
      "automerge": true,
      "automergeType": "pr",
      "platformAutomerge": true
    },
    {
      "description": "Wallet / signing / chain SDKs are security critical: never auto-merge, always labeled.",
      "matchPackagePatterns": ["^@stellar/", "^@creit\\.tech/", "^@lavamoat/", "freighter", "ledger", "walletconnect", "^@reown/"],
      "automerge": false,
      "labels": ["dependencies", "security-critical"],
      "reviewers": ["team:security"]
    },
    {
      "groupName": "Next.js + React",
      "matchPackageNames": ["next", "eslint-config-next", "react", "react-dom", "@types/react", "@types/react-dom"]
    },
    {
      "groupName": "Stellar",
      "matchPackagePatterns": ["^@stellar/", "^@creit\\.tech/"]
    },
    {
      "groupName": "Testing",
      "matchPackagePatterns": ["^jest", "^@jest/", "^@testing-library/", "^babel-jest$", "^ts-jest$", "^msw$", "^fast-check$"]
    },
    {
      "groupName": "Babel",
      "matchPackagePatterns": ["^@babel/"]
    },
    {
      "groupName": "Markdown / sanitization",
      "matchPackageNames": ["react-markdown", "rehype-sanitize"],
      "automerge": false,
      "labels": ["dependencies", "security-critical"]
    },
    {
      "groupName": "GitHub Actions",
      "matchManagers": ["github-actions"]
    }
  ]
}