renovate.json5

{
  extends: [
    'config:best-practices',
    ':rebaseStalePrs',
    'customManagers:dockerfileVersions',
  ],
  ignorePaths: [
    "**/node_modules/**",
    "**/bower_components/**",
    "**/vendor/**",
    "**/__tests__/**",
    "**/tests/**",
    "**/__fixtures__/**"
  ],
  packageRules: [
    {
      matchUpdateTypes: [
        'minor',
        'patch',
        'digest',
      ],
      groupName: 'all non-major dependencies',
      schedule: [
        'after 10pm on Friday',
      ],
      matchPackageNames: [
        '*',
      ],
    },
    {
      matchUpdateTypes: [
        'major',
      ],
      groupName: 'all major updates',
      schedule: [
        'after 10pm on the first day of the month',
      ],
      matchPackageNames: [
        '*',
      ],
    },
    {
      description: "Don't pin scyllaridae image SHAs",
      matchPackageNames: [
        'lehighlts/scyllaridae*',
      ],
      pinDigests: false,
    },
  ],
  labels: [
    'dependencies',
  ],
  osvVulnerabilityAlerts: true,
  dependencyDashboardOSVVulnerabilitySummary: 'unresolved',
  vulnerabilityAlerts: {
    enabled: true,
  },
}