renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended"],
  "timezone": "Australia/Sydney",
  "schedule": ["before 6am on monday"],
  "labels": ["dependencies"],
  "postUpdateOptions": ["gomodTidy"],
  "osvVulnerabilityAlerts": true,
  "lockFileMaintenance": {
    "enabled": true
  },
  "packageRules": [
    {
      "matchUpdateTypes": ["major"],
      "groupName": "Major Updates"
    },
    {
      "matchCategories": ["golang"],
      "groupName": "osv-scanner minor"
    },
    {
      "matchFileNames": [".github/**"],
      "groupName": "workflows"
    },
    {
      "matchPackageNames": ["github.com/google/osv-scalibr"],
      "groupName": "osv-scalibr",
      "enabled": false
    }
  ],
  "ignorePaths": ["**/testdata/**"],
  "ignoreDeps": ["golang.org/x/vuln"]
}