From 3c469ede888ba30edb7648f917c931a2de50ef53 Mon Sep 17 00:00:00 2001 From: Martin Costello Date: Mon, 16 Jun 2025 09:02:28 +0100 Subject: [PATCH 1/3] Update Renovate configuration - Move to `.github`. - Use various built-in presets. - Match labels to dependabot. - Add custom manager to update OATS in `.sh` and `.ps1` files. --- .github/renovate.json | 58 +++++++++++++++++++++++++++++++++++++++++++ renovate.json | 35 -------------------------- 2 files changed, 58 insertions(+), 35 deletions(-) create mode 100644 .github/renovate.json delete mode 100644 renovate.json diff --git a/.github/renovate.json b/.github/renovate.json new file mode 100644 index 00000000..5818d9e1 --- /dev/null +++ b/.github/renovate.json @@ -0,0 +1,58 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "config:best-practices", + "customManagers:dockerfileVersions", + "customManagers:githubActionsVersions", + ":disableRateLimiting", + ":enableVulnerabilityAlerts", + ":gitSignOff", + ":ignoreUnstable", + ":timezone(Europe/UTC)" + ], + "automerge": true, + "customManagers": [ + { + "customType": "regex", + "description": "Update _VERSION variables in scripts", + "managerFilePatterns": ["*.ps1", "*.sh"], + "matchStrings": ["# renovate: datasource=(?[a-z-]+?)(?: depName=(?.+?))?(?: packageName=(?.+?))?(?: versioning=(?[a-z-]+?))?\\s.+?_version=(?.+?)\\s"], + } + ], + "labels": [ + "dependencies" + ], + "packageRules": [ + { + "matchManagers": ["dockerfile"], + "addLabels": ["docker"] + }, + { + "matchManagers": ["github-actions"], + "addLabels": ["github_actions"] + }, + { + "matchManagers": ["nuget"], + "addLabels": [".NET"] + }, + { + "extends": ["monorepo:dotnet"], + "description": "Disable major version updates for .NET", + "matchUpdateTypes": ["major"], + "enabled": false + }, + { + "extends": ["monorepo:opentelemetry-dotnet"], + "description": "Disable version updates for opentelemetry-dotnet", + "enabled": false + }, + { + "extends": ["monorepo:opentelemetry-dotnet-contrib"], + "description": "Disable version updates for opentelemetry-dotnet-contrib", + "enabled": false + } + ], + "vulnerabilityAlerts": { + "addLabels": ["security"] + } +} diff --git a/renovate.json b/renovate.json deleted file mode 100644 index 2df254a4..00000000 --- a/renovate.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "$schema": "https://docs.renovatebot.com/renovate-schema.json", - "automerge": true, - "extends": [ - "config:recommended" - ], - "ignoreUnstable": true, - "labels": [ - "dependencies", - "{{{manager}}}" - ], - "packageRules": [ - { - "extends": ["monorepo:dotnet"], - "description": "Disable major version updates for .NET", - "matchUpdateTypes": ["major"], - "enabled": false - }, - { - "extends": ["monorepo:opentelemetry-dotnet"], - "description": "Disable version updates for opentelemetry-dotnet", - "enabled": false - }, - { - "extends": ["monorepo:opentelemetry-dotnet-contrib"], - "description": "Disable version updates for opentelemetry-dotnet-contrib", - "enabled": false - } - ], - "prConcurrentLimit": 10, - "vulnerabilityAlerts": { - "enabled": true, - "labels": ["security"] - } -} From 5b800ca53177237da78f4a6eb241b4cbc5a67130 Mon Sep 17 00:00:00 2001 From: Martin Costello Date: Wed, 18 Jun 2025 08:44:14 +0100 Subject: [PATCH 2/3] Skip pinned NuGet packages This lets us use `Version="[1.2.3,)"` syntax which is equivalent to `Version="1.2.3"` to tell Renovate to not update a specific dependency. --- .github/renovate.json | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/renovate.json b/.github/renovate.json index 5818d9e1..206ebdda 100644 --- a/.github/renovate.json +++ b/.github/renovate.json @@ -35,6 +35,12 @@ "matchManagers": ["nuget"], "addLabels": [".NET"] }, + { + "description": ["Skip pinned NuGet package versions"], + "matchManagers": ["nuget"], + "matchCurrentValue": "^\\[[^,]+,\\)$", + "enabled": false + }, { "extends": ["monorepo:dotnet"], "description": "Disable major version updates for .NET", From 6ddf365bd267affcf599fb16e89bc7a79693209e Mon Sep 17 00:00:00 2001 From: Martin Costello Date: Wed, 18 Jun 2025 08:45:41 +0100 Subject: [PATCH 3/3] Enable commit body table Gives us machine-readable metadata of what was updated. --- .github/renovate.json | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/renovate.json b/.github/renovate.json index 206ebdda..4283e5f5 100644 --- a/.github/renovate.json +++ b/.github/renovate.json @@ -11,6 +11,7 @@ ":timezone(Europe/UTC)" ], "automerge": true, + "commitBodyTable": true, "customManagers": [ { "customType": "regex",