diff --git a/.github/renovate.json b/.github/renovate.json new file mode 100644 index 0000000..2df794d --- /dev/null +++ b/.github/renovate.json @@ -0,0 +1,32 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": ["config:best-practices", ":prHourlyLimitNone"], + "labels": ["dependencies"], + "packageRules": [ + { + "description": "Auto-merge non-breaking SemVer updates (minor and patch) for stable (>= 1.0.0) dependencies", + "matchUpdateTypes": ["minor", "patch"], + "matchCurrentVersion": "!/^0/", + "automerge": true + }, + { + "description": "Enforce a 14-day minimumReleaseAge for all update types, overriding any inherited preset configuration", + "matchUpdateTypes": [ + "major", + "minor", + "patch", + "pin", + "pinDigest", + "digest" + ], + "minimumReleaseAge": "14 days" + } + ], + "rebaseWhen": "behind-base-branch", + "vulnerabilityAlerts": { + "labels": ["security"] + }, + "minimumReleaseAge": "14 days", + "prCreation": "not-pending", + "dependencyDashboard": true +}