To host the renovate config.
Go to file
justusbunsi ebe621b11c
Introduce security preset
Signed-off-by: justusbunsi <sk.bunsenbrenner@gmail.com>
2023-12-21 17:00:52 +01:00
.gitea/workflows chore(deps): update ghcr.io/renovatebot/renovate docker tag to v37.105.1 (#96) 2023-12-21 01:31:46 +00:00
config.js Enable autodiscover for giteaorg (#3) 2023-09-05 20:32:25 +00:00
default.json Update automergeStrategy to "auto" (#15) 2023-09-22 19:16:34 +00:00
go-deps.json Introduce go-deps preset 2023-12-21 14:59:33 +01:00
LICENSE Initial commit 2023-08-30 07:53:40 +00:00
npm-deps.json Introduce npm-deps preset 2023-12-21 15:16:58 +01:00
README.md Introduce security preset 2023-12-21 17:00:52 +01:00
renovate.json More automerge tries (#13) 2023-09-14 10:50:47 +00:00
security.json Introduce security preset 2023-12-21 17:00:52 +01:00
workflow-deps.json Introduce workflow-deps preset 2023-12-21 15:39:31 +01:00

renovate-config

To host the renovate config.

  • config.js holds the self-hosted Renovate configuration so that Renovate knows what and how it should process.
  • renovate.json in this repository ensures to receive Renovate updates.
  • default.json holds the basic config for all repositories. It extends the presets by the renovate project defined in renovate-schema.json.
  • Each repository can extend/alter this config by adding a renovate.json file to the root of the repository.

Reusable presets

Golang dependency group

What it does:

  • Groups all Golang dependencies into one PR
    • Respects your repository's separateMajorMinor setting1
  • Runs go mod tidy before committing to ensure a clean go.sum2

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>gitea/renovate-config",
+   "local>gitea/renovate-config:go-deps"
  ]
}

NPM dependency group

What it does:

  • Groups all NPM dependencies3 into one PR
    • Respects your repository's separateMajorMinor setting1
  • Groups all NPM dev-dependencies3 into one PR
    • Respects your repository's separateMajorMinor setting1

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>gitea/renovate-config",
+   "local>gitea/renovate-config:npm-deps"
  ]
}

Workflow dependency group

What it does:

  • Groups all workflow dependencies into one PR
    • Respects your repository's separateMajorMinor setting1

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>gitea/renovate-config",
+   "local>gitea/renovate-config:workflow-deps"
  ]
}

Security fixes

What it does:

  • Bumps a dependency to resolve a vulnerability4
    • Overrules any scheduling and grouping for that vulnerability

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>gitea/renovate-config",
+   "local>gitea/renovate-config:security"
  ]
}