Merge pull request #3395 from shajmakh/rmp-auto-bump-preference

infra: configure mintmaker to automerge RPM security updates

Author: openshift-merge-bot[bot]

renovate.json

@@ -14,12 +14,17 @@
         "platformAutomerge": true,
         "schedule": [
             "at any time"
-        ]
+        ],
+        "postUpgradeTasks": {
+           "commands": ["rpm-lockfile-prototype rpms.in.yaml"],
+           "fileFilters": ["rpms.lock.yaml"]
+        }
     },
     "gomod": {
         "enabled": false
     },
     "pruneBranchAfterAutomerge": true,
+    "rpmVulnerabilityAutomerge": "ALL",
     "tekton": {
         "enabled": true,
         "fileMatch": [
@@ -66,5 +71,12 @@
                 "additionalBranchPrefix": "cnf-tests/submodules-"
             }
         ]
-    }
+    },
+    "packageRules": [
+        {
+            "matchManagers": ["rpm", "dockerfile"],
+            "groupName": "RPM and container image updates",
+            "schedule": ["before 3am on Monday"]
+        }
+    ]
 }