renovate-config/config.js

module.exports = {
    "endpoint": "https://code.emmathe.dev/api/v1",
    "gitAuthor": "Renovate Bot <renovate-bot@iam.emmathe.dev>",
    "platform": "gitea",
    "onboardingConfigFileName": ".renovaterc.json",
    "autodiscover": true,
    "optimizeForDisabled": true,
    "extends": ["config:best-practices"],
    "schedule": ["* * * * 1-5"],
    "timezone": "Europe/London",
    "minimumReleaseAge": "3 days",
    "labels": ["dependencies"],
    "reviewers": ["lyrathorpe"],
    "hostRules": [
        {
            // Authenticate to the code.emmathe.dev container registry so Renovate can read and
            // update digests for private images (e.g. code.emmathe.dev/lyrathorpe/whyisthedlrshut.today
            // and .../docs-site, pinned in the Terraform repo). Token = a Gitea PAT with read:package;
            // supplied via the RENOVATE_REGISTRY_TOKEN environment variable on the bot (a PAT for
            // the "lyrathorpe" account with read:package is sufficient; the registry images are its own).
            "matchHost": "code.emmathe.dev",
            "hostType": "docker",
            "username": "lyrathorpe",
            "password": process.env.RENOVATE_REGISTRY_TOKEN
        }
    ],
    "prHourlyLimit": 10,
    "prConcurrentLimit": 10,
    "branchConcurrentLimit": 10,
    "packageRules": [
        {
            "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
            "automerge": true
        },
        {
            "matchUpdateTypes": ["major"],
            "automerge": false
        }
    ],
    "lockFileMaintenance": {
        "enabled": true,
        "schedule": ["before 4am on monday"]
    },
    "vulnerabilityAlerts": {
        "enabled": true,
        "schedule": ["at any time"]
    }
};