Add a docker hostRule so Renovate can read/update digests for private images (dlr, docs-site) pinned in the Terraform repo. Token via RENOVATE_REGISTRY_TOKEN env.
48 lines
1.6 KiB
JavaScript
48 lines
1.6 KiB
JavaScript
module.exports = {
|
|
"endpoint": "https://code.emmathe.dev/api/v1",
|
|
"gitAuthor": "Renovate Bot <renovate-bot@iam.emmathe.dev>",
|
|
"platform": "gitea",
|
|
"onboardingConfigFileName": ".renovaterc.json",
|
|
"autodiscover": true,
|
|
"optimizeForDisabled": true,
|
|
"extends": ["config:best-practices"],
|
|
"schedule": ["* * * * 1-5"],
|
|
"timezone": "Europe/London",
|
|
"minimumReleaseAge": "3 days",
|
|
"labels": ["dependencies"],
|
|
"reviewers": ["lyrathorpe"],
|
|
"hostRules": [
|
|
{
|
|
// Authenticate to the code.emmathe.dev container registry so Renovate can read and
|
|
// update digests for private images (e.g. code.emmathe.dev/lyrathorpe/whyisthedlrshut.today
|
|
// and .../docs-site, pinned in the Terraform repo). Token = a Gitea PAT with read:package;
|
|
// supplied via the RENOVATE_REGISTRY_TOKEN environment variable on the bot.
|
|
"matchHost": "code.emmathe.dev",
|
|
"hostType": "docker",
|
|
"username": "renovate-bot",
|
|
"password": process.env.RENOVATE_REGISTRY_TOKEN
|
|
}
|
|
],
|
|
"prHourlyLimit": 10,
|
|
"prConcurrentLimit": 10,
|
|
"branchConcurrentLimit": 10,
|
|
"packageRules": [
|
|
{
|
|
"matchUpdateTypes": ["minor", "patch", "pin", "digest"],
|
|
"automerge": true
|
|
},
|
|
{
|
|
"matchUpdateTypes": ["major"],
|
|
"automerge": false
|
|
}
|
|
],
|
|
"lockFileMaintenance": {
|
|
"enabled": true,
|
|
"schedule": ["before 4am on monday"]
|
|
},
|
|
"vulnerabilityAlerts": {
|
|
"enabled": true,
|
|
"schedule": ["at any time"]
|
|
}
|
|
};
|