-
Notifications
You must be signed in to change notification settings - Fork 176
Expand file tree
/
Copy pathrenovate.json5
More file actions
75 lines (72 loc) · 3.32 KB
/
renovate.json5
File metadata and controls
75 lines (72 loc) · 3.32 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
{
// This configures Konflux Renovate bot a.k.a. MintMaker, the thing that keeps our pipelines use up-to-date tasks.
// After making changes to this file, you can validate it by running something like this in the root of the repo:
// $ docker run --rm -it --entrypoint=renovate-config-validator -v "$(pwd)":/mnt -w /mnt renovate/renovate --strict
// Note: ignore errors about the config for `rpm-lockfile`. This is to be addressed with https://issues.redhat.com/browse/CWFHEALTH-4117
// There are more validation options, see https://docs.renovatebot.com/config-validation/
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [
// Note that the base Konflux's MintMaker config gets inherited/included automatically per
// https://redhat-internal.slack.com/archives/C04PZ7H0VA8/p1745492139282819?thread_ts=1745309786.090319&cid=C04PZ7H0VA8
// The config is: https://github.com/konflux-ci/mintmaker/blob/main/config/renovate/renovate.json
// We found out about it here (we may want to check that location if the base config gets suddenly moved):
// https://github.com/enterprise-contract/ec-cli/blob/407847910ad420850385eea1db78e2a2e49c7e25/renovate.json#L1C1-L7C2
// This tells Renovate to combine all updates in one PR so that we have fewer PRs to deal with.
"group:all",
],
// The number of PRs that can be open against the repo.
"prConcurrentLimit": 20,
// `null` means the branch limit should be the same as PR limit.
"branchConcurrentLimit": null,
// The number of PRs MintMaker can open in one hour, effectively in one run.
"prHourlyLimit": 4,
"timezone": "Etc/UTC",
"schedule": [
// Allowed syntax: https://docs.renovatebot.com/configuration-options/#schedule
// The time was selected (with the help of https://time.fyi/timezones) so that Renovate isn't active during business
// hours from Germany to US West Coast. This way, after we merge a PR, a new one does not pop up immediately after
// that.
"after 3am and before 7am",
],
// Tell Renovate not to update PRs when outside of schedule.
"updateNotScheduled": false,
"tekton": {
"schedule": [
// Override Konflux custom schedule for this manager to our intended one.
"after 3am and before 7am",
],
"packageRules": [
// Note: the packageRules from the Konflux config (find URL in comments above) get merged with these.
{
"groupName": "StackRox custom Konflux Tasks",
"matchPackageNames": [
"/^quay.io/rhacs-eng/konflux-tasks/",
],
},
],
},
"dockerfile": {
"includePaths": [
// Instruct Renovate not try to update Dockerfiles other than konflux.Dockerfile (or konflux.anything.Dockerfile)
// to have less PR noise.
"**/*konflux*.Dockerfile",
],
"schedule": [
// Override Konflux custom schedule for this manager to our intended one.
"after 3am and before 7am",
],
},
"rpm-lockfile": {
"schedule": [
// Override Konflux custom schedule for this manager to our intended one.
// Note that MintMaker will create security updates outside of schedule.
"after 3am and before 7am",
],
},
"enabledManagers": [
// Restrict Renovate focus on Konflux things since we rely on GitHub's dependabot for everything else.
"tekton",
"dockerfile",
"rpm-lockfile",
],
}