crossplane

1
{
2
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
3
  "extends": [
4
    "config:recommended",
5
    "helpers:pinGitHubActionDigests",
6
    ":semanticCommits"
7
  ],
8
// We only want renovate to rebase PRs when they have conflicts,
9
// default "auto" mode is not required.
10
  "rebaseWhen": "conflicted",
11
// The maximum number of PRs to be created in parallel
12
  "prConcurrentLimit": 5,
13
// The branches renovate should target
14
// PLEASE UPDATE THIS WHEN RELEASING.
15
  "baseBranches": ["master","release-1.13","release-1.14","release-1.15"],
16
  "ignorePaths": [
17
    "design/**",
18
    // We test upgrades, so leave it on an older version on purpose.
19
    "test/e2e/manifests/pkg/provider/provider-initial.yaml",
20
  ],
21
  "postUpdateOptions": ["gomodTidy"],
22
// All PRs should have a label
23
  "labels": ["automated"],
24
  "customManagers": [
25
    {
26
      "customType": "regex",
27
      "description": "Bump Go version used in workflows",
28
      "fileMatch": ["^\\.github\\/workflows\\/[^/]+\\.ya?ml$"],
29
      "matchStrings": [
30
        "GO_VERSION: '(?<currentValue>.*?)'\\n"
31
      ],
32
      "datasourceTemplate": "golang-version",
33
      "depNameTemplate": "golang"
34
    }, {
35
      "customType": "regex",
36
      "description": "Bump golangci-lint version in workflows and the Makefile",
37
      "fileMatch": ["^\\.github\\/workflows\\/[^/]+\\.ya?ml$","^Makefile$"],
38
      "matchStrings": [
39
        "GOLANGCI_VERSION: 'v(?<currentValue>.*?)'\\n",
40
        "GOLANGCILINT_VERSION = (?<currentValue>.*?)\\n"
41
      ],
42
      "datasourceTemplate": "github-tags",
43
      "depNameTemplate": "golangci/golangci-lint",
44
      "extractVersionTemplate": "^v(?<version>.*)$"
45
    }, {
46
      "customType": "regex",
47
      "description": "Bump helm version in the Makefile",
48
      "fileMatch": ["^Makefile$"],
49
      "matchStrings": [
50
        "HELM3_VERSION = (?<currentValue>.*?)\\n"
51
      ],
52
      "datasourceTemplate": "github-tags",
53
      "depNameTemplate": "helm/helm",
54
    }, {
55
      "customType": "regex",
56
      "description": "Bump kind version in the Makefile",
57
      "fileMatch": ["^Makefile$"],
58
      "matchStrings": [
59
        "KIND_VERSION = (?<currentValue>.*?)\\n"
60
      ],
61
      "datasourceTemplate": "github-tags",
62
      "depNameTemplate": "kubernetes-sigs/kind",
63
    }
64
  ],
65
  "crossplane": {
66
    "fileMatch": ["(^|/)test/e2e/.*\\.ya?ml$"]
67
  },
68
// PackageRules disabled below should be enabled in case of vulnerabilities
69
  "vulnerabilityAlerts": {
70
    "enabled": true
71
  },
72
  "osvVulnerabilityAlerts": true,
73
// Renovate evaluates all packageRules in order, so low priority rules should
74
// be at the beginning, high priority at the end
75
  "packageRules": [
76
    {
77
      "matchManagers": ["crossplane"],
78
      "matchFileNames": ["test/e2e/**"],
79
      "groupName": "e2e-manifests",
80
    }, {
81
      "description": "Ignore non-security related updates to release branches",
82
      matchBaseBranches: [ "/^release-.*/"],
83
      enabled: false,
84
    }, {
85
      "description": "Still update Docker images on release branches though",
86
      "matchDatasources": ["docker"],
87
      matchBaseBranches: [ "/^release-.*/"],
88
      enabled: true,
89
    }, {
90
      "description": "Only get Docker image updates every 2 weeks to reduce noise",
91
      "matchDatasources": ["docker"],
92
      "schedule": ["every 2 week on monday"],
93
      enabled: true,
94
    }, {
95
      "description": "Ignore k8s.io/client-go older versions, they switched to semantic version and old tags are still available in the repo",
96
      "matchDatasources": [
97
        "go"
98
      ],
99
      "matchDepNames": [
100
        "k8s.io/client-go"
101
      ],
102
      "allowedVersions": "<1.0",
103
    }, {
104
      "description": "Ignore k8s dependencies, should be updated on crossplane-runtime",
105
      "matchDatasources": [
106
        "go"
107
      ],
108
      "matchPackagePrefixes": [
109
        "k8s.io",
110
        "sigs.k8s.io"
111
      ],
112
      "enabled": false,
113
    },{
114
      "description": "Only get dependency digest updates every month to reduce noise, except crossplane-runtime",
115
      "excludePackageNames": ["github.com/crossplane/crossplane-runtime"],
116
      "matchDatasources": [
117
        "go"
118
      ],
119
      "matchUpdateTypes": [
120
        "digest",
121
      ],
122
      "extends": ["schedule:monthly"],
123
    }, {
124
      "description": "Ignore oss-fuzz, it's not using tags, we'll stick to master",
125
      "matchDepTypes": [
126
        "action"
127
      ],
128
      "matchDepNames": [
129
        "google/oss-fuzz"
130
      ],
131
      "enabled": false
132
    }
133
  ]
134
}
135