Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
53 changes: 22 additions & 31 deletions renovate-presets/automerge.json5
Original file line number Diff line number Diff line change
Expand Up @@ -6,37 +6,28 @@ Prerequisites for this preset:
- CI workflow trigger on `merge_group:` event or on push to temporary merge queue branches *(Only if Merge Queue enabled)*
*/
{
"timezone": "Europe/Berlin",
"packageRules": [
{
"matchUpdateTypes": [
"minor",
"patch",
"digest",
"lockFileMaintenance"
],
// Create PRs only during working hours
// This controls the update window for scenarios using platform automerge
// when renovate loses control over the merge schedule
"schedule": [
"* 9-13 * * 1-5"
],
/* Maintain backwards compatibility for repositories
timezone: "Europe/Berlin",
packageRules: [
{
matchUpdateTypes: ["minor", "patch", "digest", "lockFileMaintenance"],
// Create PRs only during working hours
// This controls the update window for scenarios using platform automerge
// when renovate loses control over the merge schedule
schedule: ["* 9-13 * * 1-5"],
/* Maintain backwards compatibility for repositories
that do not require a merge queue and thus control
automerges in renovate still */
"automergeSchedule": [
"* 9-13 * * 1-5"
],
"automerge": true,
"automergeType": "pr",
"automergeStrategy": "auto",
// Enable Github automerge (renovate loses control over the merge schedule)
"platformAutomerge": true,
// Create PRs only if the stability days check has passed
// This prevents premature PR merges
"prCreation": "not-pending",
"internalChecksFilter": "strict",
"rebaseWhen": "conflicted"
}
]
automergeSchedule: ["* 9-13 * * 1-5"],
automerge: true,
automergeType: "pr",
automergeStrategy: "auto",
// Enable Github automerge (renovate loses control over the merge schedule)
platformAutomerge: true,
// Create PRs only if the stability days check has passed
// This prevents premature PR merges
prCreation: "not-pending",
internalChecksFilter: "strict",
rebaseWhen: "conflicted",
},
],
}
24 changes: 9 additions & 15 deletions renovate-presets/branch-merge.json
Original file line number Diff line number Diff line change
@@ -1,17 +1,11 @@
{
"timezone": "Europe/Berlin",
"packageRules": [
{
"matchUpdateTypes": [
"minor",
"patch",
"digest"
],
"automergeSchedule": [
"* 9-13 * * 1-5"
],
"automerge": true,
"automergeType": "branch"
}
]
"timezone": "Europe/Berlin",
"packageRules": [
{
"matchUpdateTypes": ["minor", "patch", "digest"],
"automergeSchedule": ["* 9-13 * * 1-5"],
"automerge": true,
"automergeType": "branch"
}
]
}
44 changes: 22 additions & 22 deletions renovate-presets/security.json5
Original file line number Diff line number Diff line change
@@ -1,23 +1,23 @@
{
// Display OSV vulnerability alerts in the dependency dashboard
"dependencyDashboardOSVVulnerabilitySummary": "all",
// Enable OSV vulnerability alerts for all repositories (experimental feature)
"osvVulnerabilityAlerts": true,
// Configuration for Security updates
"vulnerabilityAlerts": {
// no grouping
"groupName": null,
// may be created at any time
"schedule": [],
// no dashboard apporval required
"dependencyDashboardApproval": false,
// specific minimum release age for security updates
"minimumReleaseAge": "5 days",
// add label indicating sverity of CVEs
"addLabels": ["SEVERITY:{{vulnerabilitySeverity}}"],
// add commitMessageSuffix indicating sverity of CVEs
"commitMessageSuffix": "[SECURITY] [SEVERITY: {{vulnerabilitySeverity}}{{#if (or (equals vulnerabilitySeverity 'MEDIUM') (equals vulnerabilitySeverity 'MODERATE'))}} 🟡{{else if (or (equals vulnerabilitySeverity 'HIGH') (equals vulnerabilitySeverity 'CRITICAL'))}} 🔴{{/if}}]",
// use the lowest possible version that fixes the vulnerability
"vulnerabilityFixStrategy": "lowest"
}
}
// Display OSV vulnerability alerts in the dependency dashboard
dependencyDashboardOSVVulnerabilitySummary: "all",
// Enable OSV vulnerability alerts for all repositories (experimental feature)
osvVulnerabilityAlerts: true,
// Configuration for Security updates
vulnerabilityAlerts: {
// no grouping
groupName: null,
// may be created at any time
schedule: [],
// no dashboard approval required
dependencyDashboardApproval: false,
// specific minimum release age for security updates
minimumReleaseAge: "5 days",
// add label indicating severity of CVEs
addLabels: ["SEVERITY:{{vulnerabilitySeverity}}"],
// add commitMessageSuffix indicating severity of CVEs
commitMessageSuffix: "[SECURITY] [SEVERITY: {{vulnerabilitySeverity}}{{#if (or (equals vulnerabilitySeverity 'MEDIUM') (equals vulnerabilitySeverity 'MODERATE'))}} 🟡{{else if (or (equals vulnerabilitySeverity 'HIGH') (equals vulnerabilitySeverity 'CRITICAL'))}} 🔴{{/if}}]",
// use the lowest possible version that fixes the vulnerability
vulnerabilityFixStrategy: "lowest",
},
}