mimir/renovate.json5 at main · NGDATA/mimir · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
{
  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
  extends: [
    'config:recommended',
  ],
  baseBranchPatterns: [
    'main',
    'release-2.17',
    'release-2.16',
  ],
  postUpdateOptions: [
    'gomodTidy',
    'gomodUpdateImportPaths',
  ],
  schedule: [
    'before 9am on Monday',
  ],
  packageRules: [
    {
      matchBaseBranches: [
        'release-2.17',
        'release-2.16',
      ],
      enabled: false,
      matchPackageNames: [
        '*',
      ],
    },
    {
      // Don't update replace directives.
      matchPackageNames: [
        'github.com/grafana/mimir-prometheus',
        'github.com/grafana/memberlist',
        'github.com/grafana/regexp',
        'github.com/colega/go-yaml-yaml',
        'github.com/grafana/goautoneg',
        'github.com/grafana/opentracing-contrib-go-stdlib',
        'github.com/charleskorn/go-grpc',
        'github.com/grafana/mimir-otlptranslator',
      ],
      enabled: false,
    },
    {
      // Update Go version everywhere at once: build image, go.mod and GitHub Actions workflows.
      matchDatasources: [
        'docker',
        'golang-version',
        'github-releases',
      ],
      matchPackageNames: [
        'go',
        'golang',
        'actions/go-versions',
      ],
      groupName: 'Go',
    },
    {
      description: 'Enable updating Node.js dependencies in operations/mimir-mixin-tools/screenshots',
      matchFileNames: [
        'operations/mimir-mixin-tools/screenshots/**',
      ],
      matchManagers: [
        'npm',
      ],
      enabled: true,
    },
    {
      description: 'Pin jaegertracing/all-in-one Docker image, since newer versions lack the agent we depend on',
      matchPackageNames: [
        'jaegertracing/all-in-one',
      ],
      matchDatasources: [
        'docker',
      ],
      enabled: false,
    },
  ],
  branchPrefix: 'deps-update/',
  labels: [
    'dependency-update',
  ],
  vulnerabilityAlerts: {
    enabled: true,
    labels: [
      'security-update',
    ],
  },
  osvVulnerabilityAlerts: true,
  dependencyDashboard: false,
}