Skip to content

renovate config migration remake #2915

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tklauser merged 6 commits into from
Jan 22, 2025
Merged

renovate config migration remake #2915

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
5a5125c
renovate: remove busybox
bimmlerd Jan 22, 2025
f7ee15a
renovate: remove defaults/defaults.go
bimmlerd Jan 22, 2025
bd568f8
renovate: remove old go dependency matchers
bimmlerd Jan 22, 2025
b3d0c9c
renovate: reformat using json5format
bimmlerd Jan 22, 2025
6ee1a0f
renovate: apply migration changes
bimmlerd Jan 22, 2025
db05e76
renovate: convert double quotes to single quotes
bimmlerd Jan 22, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
292 changes: 121 additions & 171 deletions .github/renovate.json5
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,235 +1,185 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [
"config:base",
":gitSignOff",
"helpers:pinGitHubActionDigests"
$schema: 'https://docs.renovatebot.com/renovate-schema.json',
extends: [
'config:recommended',
':gitSignOff',
'helpers:pinGitHubActionDigests',
],

// This ensures that the gitAuthor and gitSignOff fields match
"gitAuthor": "renovate[bot] <[email protected]>",
"includePaths": [
".github/workflows/**",
"action.yaml",
"defaults/defaults.go",
"go.mod",
"go.sum",
"Dockerfile",
"Makefile"
gitAuthor: 'renovate[bot] <[email protected]>',
includePaths: [
'.github/workflows/**',
'action.yaml',
'defaults/defaults.go',
'go.mod',
'go.sum',
'Dockerfile',
'Makefile',
],
postUpdateOptions: [
"gomodTidy"
'gomodTidy',
],
"pinDigests": true,
"ignorePresets": [":prHourlyLimit2"],
"separateMajorMinor": true,
"separateMultipleMajor": true,
"separateMinorPatch": true,
"pruneStaleBranches": true,
"baseBranches": [
"main"
pinDigests: true,
ignorePresets: [
':prHourlyLimit2',
],
"vulnerabilityAlerts": {
"enabled": true
separateMajorMinor: true,
separateMultipleMajor: true,
separateMinorPatch: true,
pruneStaleBranches: true,
baseBranches: [
'main',
],
vulnerabilityAlerts: {
enabled: true,
},
"labels": [
"renovate/stop-updating",
"kind/enhancement",
"priority/release-blocker"
labels: [
'renovate/stop-updating',
'kind/enhancement',
'priority/release-blocker',
],
"stopUpdatingLabel": "renovate/stop-updating",
"packageRules": [
stopUpdatingLabel: 'renovate/stop-updating',
packageRules: [
{
"groupName": "all github action dependencies",
"groupSlug": "all-github-action",
"matchPaths": [
".github/workflows/**",
"action.yaml"
],
"matchUpdateTypes": [
"major",
"minor",
"digest",
"patch",
"pin",
"pinDigest"
]
groupName: 'all github action dependencies',
groupSlug: 'all-github-action',
matchFileNames: [
'.github/workflows/**',
'action.yaml',
],
matchUpdateTypes: [
'major',
'minor',
'digest',
'patch',
'pin',
'pinDigest',
],
},
{
"groupName": "all go dependencies main",
"groupSlug": "all-go-deps-main",
"matchFiles": [
"go.mod",
"go.sum"
groupName: 'all go dependencies main',
groupSlug: 'all-go-deps-main',
matchFiles: [
'go.mod',
'go.sum',
],
"postUpdateOptions": [
postUpdateOptions: [
// update source import paths on major updates
"gomodUpdateImportPaths",
'gomodUpdateImportPaths',
],
"matchUpdateTypes": [
"major",
"minor",
"digest",
"patch",
"pin",
"pinDigest"
matchUpdateTypes: [
'major',
'minor',
'digest',
'patch',
'pin',
'pinDigest',
],
matchBaseBranches: [
"main"
'main',
],
"schedule": [
"on friday"
schedule: [
'on friday',
],
},
{
// Avoid updating patch releases of golang in go.mod
"enabled": "false",
"matchFiles": [
"go.mod",
enabled: 'false',
matchFileNames: [
'go.mod',
],
"matchDepNames": [
"go"
matchDepNames: [
'go',
],
"matchDatasources": [
"golang-version"
matchDatasources: [
'golang-version',
],
"matchUpdateTypes": [
"patch"
matchUpdateTypes: [
'patch',
],
matchBaseBranches: [
"main",
]
},
{
"enabled": false,
"matchPackageNames": [
// All of these packages are maintained on a Cilium fork. Thus, we don't
// want to update them automatically.
"go.universe.tf/metallb",
"github.com/cilium/metallb",
"github.com/miekg/dns",
"github.com/cilium/dns",
"sigs.k8s.io/controller-tools",
"github.com/cilium/controller-tools",
// We update this dependency manually together with envoy proxy updates
"github.com/cilium/proxy",
// We need v1.0.6-0.20210604193023-d5e0c0615ace from pflag, but
// renovate wants to downgrade to 1.0.5. Can be removed if pflag ever
// tags a new release.
"github.com/spf13/pflag",
// v0.0.0-20230801115018-d63ba01acd4b causes this complilation error:
//
// # github.com/cilium/cilium/pkg/hive/cell
// Error: vendor/github.com/cilium/cilium/pkg/hive/cell/health.go:194:23:
// type func(a Status, b Status) bool of func(a, b Status) bool {…} does not match inferred
// type func(a Status, b Status) int for func(a E, b E) int
"golang.org/x/exp",
// This package is not versioned leading to "empty" updates every week.
// Update it manually once newly introduces tetragon CRDs are required.
"github.com/cilium/tetragon/pkg/k8s",
// Do not update GoBGP until https://github.com/osrg/gobgp/issues/2777
// is resolved and a new version is released.
// Ref: https://github.com/cilium/cilium/pull/31123
"github.com/osrg/gobgp/v3",
],
"matchPackagePatterns": [
// k8s dependencies will be updated manually in lockstep.
"k8s.io/*",
"sigs.k8s.io/*"
]
'main',
],
},
{
// Allow github.com/cilium/cilium to upgrade to prerelease versions.
"ignoreUnstable": false,
"matchPackageNames": [
"github.com/cilium/cilium",
ignoreUnstable: false,
matchPackageNames: [
'github.com/cilium/cilium',
],
},
{
// Images that directly use docker.io/library/golang for building.
"groupName": "golang-images",
"matchFiles": [
"Dockerfile",
"Makefile"
]
groupName: 'golang-images',
matchFileNames: [
'Dockerfile',
'Makefile',
],
},
{
"matchPackageNames": [
"docker.io/library/busybox"
groupName: 'Go',
matchDepNames: [
'go',
'docker.io/library/golang',
],
"matchPaths": [
"Dockerfile"
schedule: [
'on friday',
],
},
{
"groupName": "Go",
"matchDepNames": [
"go",
"docker.io/library/golang"
],
"schedule": [
"on friday"
]
},
{
// Group golangci-lint updates to overrule grouping of version updates in the GHA files.
// Without this, golangci-lint updates are not in sync for GHA files and other usages.
"groupName": "golangci-lint",
"matchDepNames": [
"golangci/golangci-lint"
]
groupName: 'golangci-lint',
matchDepNames: [
'golangci/golangci-lint',
],
},
{
// Group cilium updates to overrule grouping of version updates in the GHA files.
// Without this, cilium updates are not in sync for GHA files and other usages.
"groupName": "cilium",
"matchDepNames": [
"cilium/cilium"
]
}
groupName: 'cilium',
matchDepNames: [
'cilium/cilium',
],
},
],
"regexManagers": [
customManagers: [
{
"fileMatch": [
"^\\.github/workflows/[^/]+\\.yaml$",
"^action.yaml$"
customType: 'regex',
fileMatch: [
'^\\.github/workflows/[^/]+\\.yaml$',
'^action.yaml$',
],

// This regex manages version strings in GitHub actions workflow files,
// similar to the examples shown here:
// https://docs.renovatebot.com/modules/manager/regex/#advanced-capture
"matchStrings": [
"# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+version: (?<currentValue>.*)"
]
matchStrings: [
'# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+version: (?<currentValue>.*)',
],
},
{
"fileMatch": [
"^Makefile$"
customType: 'regex',
fileMatch: [
'^Makefile$',
],

// This regex manages version strings in the Makefile,
// similar to the examples shown here:
// https://docs.renovatebot.com/modules/manager/regex/#advanced-capture
"matchStrings": [
"# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+_VERSION = (?<currentValue>.*)\\s+.+_SHA = (?<currentDigest>sha256:[a-f0-9]+)"
]
},
{
"fileMatch": [
"^defaults/defaults.go$"
matchStrings: [
'# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+_VERSION = (?<currentValue>.*)\\s+.+_SHA = (?<currentDigest>sha256:[a-f0-9]+)',
],
// This regex manages image version strings in defaults/defaults.go
// similar to the examples shown here:
// https://docs.renovatebot.com/modules/manager/regex/#advanced-capture
"matchStrings": [
"\/\/ renovate: datasource=(?<datasource>.*?)\\s+.+Image = \"(?<depName>.*):(?<currentValue>.*)@(?<currentDigest>sha256:[a-f0-9]+)\"",
"\/\/ renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+Version = \"(?<currentValue>.*)\""
]
},
{
"fileMatch": [
"^go\\.mod$"
customType: 'regex',
fileMatch: [
'^go\\.mod$',
],
matchStrings: [
'// renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+go (?<currentValue>.*)',
],
"matchStrings": [
"// renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+go (?<currentValue>.*)"
]
},
]
],
}
Loading