mirror of
https://github.com/slsa-framework/slsa-verifier.git
synced 2026-05-16 21:46:40 +00:00
87b5bae6d4
# Summary Updates renovate config to use the [`config:best-practices`](https://docs.renovatebot.com/presets-config/#configbest-practices) preset rather than the `config:base` preset since `config:base` seems to be deprecated. Also updates the `schedule` config to use the [`schedule:monthly`](https://docs.renovatebot.com/presets-schedule/#schedulemonthly) preset. Also adds a pre-submit to run the [`renovate-config-validator`](https://docs.renovatebot.com/config-validation/) to ensure that renovate config is valid. This pre-submit will need to be made required in the repository branch protection rule for `main` in the repository settings after this PR is merged. --------- Signed-off-by: Ian Lewis <ianmlewis@gmail.com> Signed-off-by: Ian Lewis <ianlewis@google.com> Co-authored-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
32 lines
799 B
JSON
32 lines
799 B
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": ["config:best-practices", "schedule:monthly"],
|
|
"vulnerabilityAlerts": {
|
|
"schedule": "before 4am"
|
|
},
|
|
"postUpdateOptions": ["gomodTidy", "gomodUpdateImportPaths"],
|
|
"packageRules": [
|
|
{
|
|
"matchManagers": ["github-actions"],
|
|
"groupName": "github-actions"
|
|
},
|
|
{
|
|
"matchManagers": ["gomod"],
|
|
"excludePackageNames": ["go"],
|
|
"matchUpdateTypes": ["minor", "patch"],
|
|
"groupName": "go"
|
|
},
|
|
{
|
|
"matchManagers": ["npm"],
|
|
"matchDepTypes": ["dependencies"],
|
|
"matchUpdateTypes": ["minor", "patch"],
|
|
"groupName": "npm"
|
|
},
|
|
{
|
|
"matchManagers": ["npm"],
|
|
"matchDepTypes": ["devDependencies"],
|
|
"groupName": "npm dev"
|
|
}
|
|
]
|
|
}
|