Madison Grubb
d771c4c97f
Prioritize vulnerability fix PRs, pin Renovate via package-lock for reproducible runs, and drop the hourly schedule to every 6 hours.
34 lines
983 B
JSON
34 lines
983 B
JSON
{
|
|
"extends": [
|
|
"config:recommended",
|
|
":configMigration",
|
|
"group:allNonMajor",
|
|
":disableDependencyDashboard",
|
|
"abandonments:recommended"
|
|
],
|
|
"gitAuthor": "Renovate Bot <renovate@keligrubb.com>",
|
|
"semanticCommits": "enabled",
|
|
"semanticCommitType": "chore",
|
|
"semanticCommitScope": "deps",
|
|
"prBodyTemplate": "{{{header}}}{{{table}}}{{{warnings}}}{{{notes}}}{{{changelogs}}}{{{controls}}}",
|
|
"minimumReleaseAge": "3 days",
|
|
"rangeStrategy": "auto",
|
|
"labels": ["dependencies"],
|
|
"osvVulnerabilityAlerts": true,
|
|
"vulnerabilityAlerts": {
|
|
"enabled": true,
|
|
"labels": ["security", "dependencies"],
|
|
"minimumReleaseAge": "0 days"
|
|
},
|
|
"prConcurrentLimit": 5,
|
|
"prHourlyLimit": 5,
|
|
"dockerfile": {
|
|
"digest": { "enabled": false }
|
|
},
|
|
"packageRules": [
|
|
{ "matchDatasources": ["docker"], "pinDigests": false },
|
|
{ "matchManagers": ["dockerfile"], "pinDigests": false },
|
|
{ "matchUpdateTypes": ["pin"], "enabled": false }
|
|
]
|
|
}
|