Skip to content

Commit a221b58

Browse files
committed
DEVX-299 - feat: adopt leanix renovate preset
**WHY** This configures renovate to automatilly pin all dependencies as suggested to do by InfoSec in context of the latest npm supply chain attack. The preset applies dependency management best practices to the repository. Additionally it enables us to adjust renovate's core config consistently and much faster in the future. **WHAT** Adopt the [LeanIX renovate preset](https://github.com/leanix/.github/blob/main/default.json). **WHAT TO EXPECT?** Once this change has been merged renovate will monitor the repository's dependencies. It will create a change request pinning dependencies to fixed versions. The preset aims to control central configuration parameters. You might extend the configuration to custimze the behavior. Customizations that would be generally beneficial may be proposed for adoption in the [preset](https://github.com/leanix/.github/blob/main/default.json) itself.
1 parent c4fe312 commit a221b58

File tree

1 file changed

+13
-4
lines changed

1 file changed

+13
-4
lines changed

.github/renovate.json

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,24 @@
11
{
22
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
3-
"extends": ["config:recommended"],
3+
"extends": [
4+
"github>leanix/.github"
5+
],
46
"automerge": false,
57
"prConcurrentLimit": 1,
68
"packageRules": [
79
{
8-
"matchPackagePatterns": ["*"],
9-
"matchUpdateTypes": ["patch", "minor"],
10+
"matchPackagePatterns": [
11+
"*"
12+
],
13+
"matchUpdateTypes": [
14+
"patch",
15+
"minor"
16+
],
1017
"groupName": "all dependencies"
1118
}
1219
],
13-
"schedule": ["* 0-3 * * *"],
20+
"schedule": [
21+
"* 0-3 * * *"
22+
],
1423
"timezone": "Europe/Berlin"
1524
}

0 commit comments

Comments
 (0)