|
1 | 1 | {
|
2 |
| - "$schema": "https://docs.renovatebot.com/renovate-schema.json", |
3 |
| - "extends": [ |
4 |
| - "config:base", |
5 |
| - ":gitSignOff", |
6 |
| - "helpers:pinGitHubActionDigests" |
| 2 | + $schema: 'https://docs.renovatebot.com/renovate-schema.json', |
| 3 | + extends: [ |
| 4 | + 'config:recommended', |
| 5 | + ':gitSignOff', |
| 6 | + 'helpers:pinGitHubActionDigests', |
7 | 7 | ],
|
8 |
| - // This ensures that the gitAuthor and gitSignOff fields match |
9 |
| - "gitAuthor": "renovate[bot] <bot@renovateapp.com>", |
10 |
| - "includePaths": [ |
11 |
| - ".github/workflows/**", |
12 |
| - "action.yaml", |
13 |
| - "defaults/defaults.go", |
14 |
| - "go.mod", |
15 |
| - "go.sum", |
16 |
| - "Dockerfile", |
17 |
| - "Makefile" |
| 8 | + gitAuthor: 'renovate[bot] <bot@renovateapp.com>', |
| 9 | + includePaths: [ |
| 10 | + '.github/workflows/**', |
| 11 | + 'action.yaml', |
| 12 | + 'defaults/defaults.go', |
| 13 | + 'go.mod', |
| 14 | + 'go.sum', |
| 15 | + 'Dockerfile', |
| 16 | + 'Makefile', |
18 | 17 | ],
|
19 | 18 | postUpdateOptions: [
|
20 |
| - "gomodTidy" |
| 19 | + 'gomodTidy', |
21 | 20 | ],
|
22 |
| - "pinDigests": true, |
23 |
| - "ignorePresets": [":prHourlyLimit2"], |
24 |
| - "separateMajorMinor": true, |
25 |
| - "separateMultipleMajor": true, |
26 |
| - "separateMinorPatch": true, |
27 |
| - "pruneStaleBranches": true, |
28 |
| - "baseBranches": [ |
29 |
| - "main" |
| 21 | + pinDigests: true, |
| 22 | + ignorePresets: [ |
| 23 | + ':prHourlyLimit2', |
30 | 24 | ],
|
31 |
| - "vulnerabilityAlerts": { |
32 |
| - "enabled": true |
| 25 | + separateMajorMinor: true, |
| 26 | + separateMultipleMajor: true, |
| 27 | + separateMinorPatch: true, |
| 28 | + pruneStaleBranches: true, |
| 29 | + baseBranches: [ |
| 30 | + 'main', |
| 31 | + ], |
| 32 | + vulnerabilityAlerts: { |
| 33 | + enabled: true, |
33 | 34 | },
|
34 |
| - "labels": [ |
35 |
| - "renovate/stop-updating", |
36 |
| - "kind/enhancement", |
37 |
| - "priority/release-blocker" |
| 35 | + labels: [ |
| 36 | + 'renovate/stop-updating', |
| 37 | + 'kind/enhancement', |
| 38 | + 'priority/release-blocker', |
38 | 39 | ],
|
39 |
| - "stopUpdatingLabel": "renovate/stop-updating", |
40 |
| - "packageRules": [ |
| 40 | + stopUpdatingLabel: 'renovate/stop-updating', |
| 41 | + packageRules: [ |
41 | 42 | {
|
42 |
| - "groupName": "all github action dependencies", |
43 |
| - "groupSlug": "all-github-action", |
44 |
| - "matchPaths": [ |
45 |
| - ".github/workflows/**", |
46 |
| - "action.yaml" |
47 |
| - ], |
48 |
| - "matchUpdateTypes": [ |
49 |
| - "major", |
50 |
| - "minor", |
51 |
| - "digest", |
52 |
| - "patch", |
53 |
| - "pin", |
54 |
| - "pinDigest" |
55 |
| - ] |
| 43 | + groupName: 'all github action dependencies', |
| 44 | + groupSlug: 'all-github-action', |
| 45 | + matchFileNames: [ |
| 46 | + '.github/workflows/**', |
| 47 | + 'action.yaml', |
| 48 | + ], |
| 49 | + matchUpdateTypes: [ |
| 50 | + 'major', |
| 51 | + 'minor', |
| 52 | + 'digest', |
| 53 | + 'patch', |
| 54 | + 'pin', |
| 55 | + 'pinDigest', |
| 56 | + ], |
56 | 57 | },
|
57 | 58 | {
|
58 |
| - "groupName": "all go dependencies main", |
59 |
| - "groupSlug": "all-go-deps-main", |
60 |
| - "matchFiles": [ |
61 |
| - "go.mod", |
62 |
| - "go.sum" |
63 |
| - ], |
64 |
| - "postUpdateOptions": [ |
65 |
| - // update source import paths on major updates |
66 |
| - "gomodUpdateImportPaths", |
67 |
| - ], |
68 |
| - "matchUpdateTypes": [ |
69 |
| - "major", |
70 |
| - "minor", |
71 |
| - "digest", |
72 |
| - "patch", |
73 |
| - "pin", |
74 |
| - "pinDigest" |
| 59 | + groupName: 'all go dependencies main', |
| 60 | + groupSlug: 'all-go-deps-main', |
| 61 | + matchFileNames: [ |
| 62 | + 'go.mod', |
| 63 | + 'go.sum', |
| 64 | + ], |
| 65 | + postUpdateOptions: [ |
| 66 | + 'gomodUpdateImportPaths', |
| 67 | + ], |
| 68 | + matchUpdateTypes: [ |
| 69 | + 'major', |
| 70 | + 'minor', |
| 71 | + 'digest', |
| 72 | + 'patch', |
| 73 | + 'pin', |
| 74 | + 'pinDigest', |
75 | 75 | ],
|
76 | 76 | matchBaseBranches: [
|
77 |
| - "main" |
| 77 | + 'main', |
78 | 78 | ],
|
79 |
| - "schedule": [ |
80 |
| - "on friday" |
| 79 | + schedule: [ |
| 80 | + 'on friday', |
81 | 81 | ],
|
82 | 82 | },
|
83 | 83 | {
|
84 |
| - // Avoid updating patch releases of golang in go.mod |
85 |
| - "enabled": "false", |
86 |
| - "matchFiles": [ |
87 |
| - "go.mod", |
| 84 | + enabled: false, |
| 85 | + matchFileNames: [ |
| 86 | + 'go.mod', |
88 | 87 | ],
|
89 |
| - "matchDepNames": [ |
90 |
| - "go" |
| 88 | + matchDepNames: [ |
| 89 | + 'go', |
91 | 90 | ],
|
92 |
| - "matchDatasources": [ |
93 |
| - "golang-version" |
| 91 | + matchDatasources: [ |
| 92 | + 'golang-version', |
94 | 93 | ],
|
95 |
| - "matchUpdateTypes": [ |
96 |
| - "patch" |
| 94 | + matchUpdateTypes: [ |
| 95 | + 'patch', |
97 | 96 | ],
|
98 | 97 | matchBaseBranches: [
|
99 |
| - "main", |
100 |
| - ] |
| 98 | + 'main', |
| 99 | + ], |
101 | 100 | },
|
102 | 101 | {
|
103 |
| - "enabled": false, |
104 |
| - "matchPackageNames": [ |
105 |
| - // All of these packages are maintained on a Cilium fork. Thus, we don't |
106 |
| - // want to update them automatically. |
107 |
| - "go.universe.tf/metallb", |
108 |
| - "github.com/cilium/metallb", |
109 |
| - "github.com/miekg/dns", |
110 |
| - "github.com/cilium/dns", |
111 |
| - "sigs.k8s.io/controller-tools", |
112 |
| - "github.com/cilium/controller-tools", |
113 |
| - // We update this dependency manually together with envoy proxy updates |
114 |
| - "github.com/cilium/proxy", |
115 |
| - // We need v1.0.6-0.20210604193023-d5e0c0615ace from pflag, but |
116 |
| - // renovate wants to downgrade to 1.0.5. Can be removed if pflag ever |
117 |
| - // tags a new release. |
118 |
| - "github.com/spf13/pflag", |
119 |
| - // v0.0.0-20230801115018-d63ba01acd4b causes this complilation error: |
120 |
| - // |
121 |
| - // # github.com/cilium/cilium/pkg/hive/cell |
122 |
| - // Error: vendor/github.com/cilium/cilium/pkg/hive/cell/health.go:194:23: |
123 |
| - // type func(a Status, b Status) bool of func(a, b Status) bool {…} does not match inferred |
124 |
| - // type func(a Status, b Status) int for func(a E, b E) int |
125 |
| - "golang.org/x/exp", |
126 |
| - // This package is not versioned leading to "empty" updates every week. |
127 |
| - // Update it manually once newly introduces tetragon CRDs are required. |
128 |
| - "github.com/cilium/tetragon/pkg/k8s", |
129 |
| - // Do not update GoBGP until https://github.com/osrg/gobgp/issues/2777 |
130 |
| - // is resolved and a new version is released. |
131 |
| - // Ref: https://github.com/cilium/cilium/pull/31123 |
132 |
| - "github.com/osrg/gobgp/v3", |
133 |
| - ], |
134 |
| - "matchPackagePatterns": [ |
135 |
| - // k8s dependencies will be updated manually in lockstep. |
136 |
| - "k8s.io/*", |
137 |
| - "sigs.k8s.io/*" |
138 |
| - ] |
| 102 | + enabled: false, |
| 103 | + matchPackageNames: [ |
| 104 | + 'go.universe.tf/metallb', |
| 105 | + 'github.com/cilium/metallb', |
| 106 | + 'github.com/miekg/dns', |
| 107 | + 'github.com/cilium/dns', |
| 108 | + 'sigs.k8s.io/controller-tools', |
| 109 | + 'github.com/cilium/controller-tools', |
| 110 | + 'github.com/cilium/proxy', |
| 111 | + 'github.com/spf13/pflag', |
| 112 | + 'golang.org/x/exp', |
| 113 | + 'github.com/cilium/tetragon/pkg/k8s', |
| 114 | + 'github.com/osrg/gobgp/v3', |
| 115 | + '/k8s.io/*/', |
| 116 | + '/sigs.k8s.io/*/', |
| 117 | + ], |
139 | 118 | },
|
140 | 119 | {
|
141 |
| - // Allow github.com/cilium/cilium to upgrade to prerelease versions. |
142 |
| - "ignoreUnstable": false, |
143 |
| - "matchPackageNames": [ |
144 |
| - "github.com/cilium/cilium", |
| 120 | + ignoreUnstable: false, |
| 121 | + matchPackageNames: [ |
| 122 | + 'github.com/cilium/cilium', |
145 | 123 | ],
|
146 | 124 | },
|
147 | 125 | {
|
148 |
| - // Images that directly use docker.io/library/golang for building. |
149 |
| - "groupName": "golang-images", |
150 |
| - "matchFiles": [ |
151 |
| - "Dockerfile", |
152 |
| - "Makefile" |
153 |
| - ] |
| 126 | + groupName: 'golang-images', |
| 127 | + matchFileNames: [ |
| 128 | + 'Dockerfile', |
| 129 | + 'Makefile', |
| 130 | + ], |
154 | 131 | },
|
155 | 132 | {
|
156 |
| - "matchPackageNames": [ |
157 |
| - "docker.io/library/busybox" |
| 133 | + matchPackageNames: [ |
| 134 | + 'docker.io/library/busybox', |
158 | 135 | ],
|
159 |
| - "matchPaths": [ |
160 |
| - "Dockerfile" |
| 136 | + matchFileNames: [ |
| 137 | + 'Dockerfile', |
161 | 138 | ],
|
162 | 139 | },
|
163 | 140 | {
|
164 |
| - "groupName": "Go", |
165 |
| - "matchDepNames": [ |
166 |
| - "go", |
167 |
| - "docker.io/library/golang" |
168 |
| - ], |
169 |
| - "schedule": [ |
170 |
| - "on friday" |
171 |
| - ] |
| 141 | + groupName: 'Go', |
| 142 | + matchDepNames: [ |
| 143 | + 'go', |
| 144 | + 'docker.io/library/golang', |
| 145 | + ], |
| 146 | + schedule: [ |
| 147 | + 'on friday', |
| 148 | + ], |
172 | 149 | },
|
173 | 150 | {
|
174 |
| - // Group golangci-lint updates to overrule grouping of version updates in the GHA files. |
175 |
| - // Without this, golangci-lint updates are not in sync for GHA files and other usages. |
176 |
| - "groupName": "golangci-lint", |
177 |
| - "matchDepNames": [ |
178 |
| - "golangci/golangci-lint" |
179 |
| - ] |
| 151 | + groupName: 'golangci-lint', |
| 152 | + matchDepNames: [ |
| 153 | + 'golangci/golangci-lint', |
| 154 | + ], |
180 | 155 | },
|
181 | 156 | {
|
182 |
| - // Group cilium updates to overrule grouping of version updates in the GHA files. |
183 |
| - // Without this, cilium updates are not in sync for GHA files and other usages. |
184 |
| - "groupName": "cilium", |
185 |
| - "matchDepNames": [ |
186 |
| - "cilium/cilium" |
187 |
| - ] |
188 |
| - } |
| 157 | + groupName: 'cilium', |
| 158 | + matchDepNames: [ |
| 159 | + 'cilium/cilium', |
| 160 | + ], |
| 161 | + }, |
189 | 162 | ],
|
190 |
| - "regexManagers": [ |
| 163 | + customManagers: [ |
191 | 164 | {
|
192 |
| - "fileMatch": [ |
193 |
| - "^\\.github/workflows/[^/]+\\.yaml$", |
194 |
| - "^action.yaml$" |
195 |
| - ], |
196 |
| - // This regex manages version strings in GitHub actions workflow files, |
197 |
| - // similar to the examples shown here: |
198 |
| - // https://docs.renovatebot.com/modules/manager/regex/#advanced-capture |
199 |
| - "matchStrings": [ |
200 |
| - "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+version: (?<currentValue>.*)" |
201 |
| - ] |
| 165 | + customType: 'regex', |
| 166 | + fileMatch: [ |
| 167 | + '^\\.github/workflows/[^/]+\\.yaml$', |
| 168 | + '^action.yaml$', |
| 169 | + ], |
| 170 | + matchStrings: [ |
| 171 | + '# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+version: (?<currentValue>.*)', |
| 172 | + ], |
202 | 173 | },
|
203 | 174 | {
|
204 |
| - "fileMatch": [ |
205 |
| - "^Makefile$" |
206 |
| - ], |
207 |
| - // This regex manages version strings in the Makefile, |
208 |
| - // similar to the examples shown here: |
209 |
| - // https://docs.renovatebot.com/modules/manager/regex/#advanced-capture |
210 |
| - "matchStrings": [ |
211 |
| - "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+_VERSION = (?<currentValue>.*)\\s+.+_SHA = (?<currentDigest>sha256:[a-f0-9]+)" |
212 |
| - ] |
| 175 | + customType: 'regex', |
| 176 | + fileMatch: [ |
| 177 | + '^Makefile$', |
| 178 | + ], |
| 179 | + matchStrings: [ |
| 180 | + '# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+_VERSION = (?<currentValue>.*)\\s+.+_SHA = (?<currentDigest>sha256:[a-f0-9]+)', |
| 181 | + ], |
213 | 182 | },
|
214 | 183 | {
|
215 |
| - "fileMatch": [ |
216 |
| - "^defaults/defaults.go$" |
217 |
| - ], |
218 |
| - // This regex manages image version strings in defaults/defaults.go |
219 |
| - // similar to the examples shown here: |
220 |
| - // https://docs.renovatebot.com/modules/manager/regex/#advanced-capture |
221 |
| - "matchStrings": [ |
222 |
| - "\/\/ renovate: datasource=(?<datasource>.*?)\\s+.+Image = \"(?<depName>.*):(?<currentValue>.*)@(?<currentDigest>sha256:[a-f0-9]+)\"", |
223 |
| - "\/\/ renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+Version = \"(?<currentValue>.*)\"" |
224 |
| - ] |
| 184 | + customType: 'regex', |
| 185 | + fileMatch: [ |
| 186 | + '^defaults/defaults.go$', |
| 187 | + ], |
| 188 | + matchStrings: [ |
| 189 | + '// renovate: datasource=(?<datasource>.*?)\\s+.+Image = "(?<depName>.*):(?<currentValue>.*)@(?<currentDigest>sha256:[a-f0-9]+)"', |
| 190 | + '// renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+Version = "(?<currentValue>.*)"', |
| 191 | + ], |
225 | 192 | },
|
226 | 193 | {
|
227 |
| - "fileMatch": [ |
228 |
| - "^go\\.mod$" |
| 194 | + customType: 'regex', |
| 195 | + fileMatch: [ |
| 196 | + '^go\\.mod$', |
| 197 | + ], |
| 198 | + matchStrings: [ |
| 199 | + '// renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+go (?<currentValue>.*)', |
229 | 200 | ],
|
230 |
| - "matchStrings": [ |
231 |
| - "// renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+go (?<currentValue>.*)" |
232 |
| - ] |
233 | 201 | },
|
234 |
| - ] |
| 202 | + ], |
235 | 203 | }
|
0 commit comments