From f97f47a67b9113d2ca52813ee9b7778a126d6ef3 Mon Sep 17 00:00:00 2001 From: Alex Waygood Date: Mon, 25 Mar 2024 19:26:57 +0000 Subject: [PATCH] Switch from dependabot to renovate (#2653) --- .github/dependabot.yml | 18 ------------------ .github/renovate.json5 | 39 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 39 insertions(+), 18 deletions(-) delete mode 100644 .github/dependabot.yml create mode 100644 .github/renovate.json5 diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index d4d24d416..000000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,18 +0,0 @@ -version: 2 -updates: - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "weekly" - labels: ["internal"] - groups: - artifacts: - # Group upload/download artifact updates, the versions are dependent - patterns: - - "actions/*-artifact" - - - package-ecosystem: "cargo" - directory: "/" - schedule: - interval: "weekly" - labels: ["internal"] diff --git a/.github/renovate.json5 b/.github/renovate.json5 new file mode 100644 index 000000000..905640561 --- /dev/null +++ b/.github/renovate.json5 @@ -0,0 +1,39 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "dependencyDashboard": true, + "suppressNotifications": ["prEditedNotification"], + "extends": ["config:recommended"], + "labels": ["internal"], + "schedule": ["before 4am on Monday"], + "separateMajorMinor": false, + "enabledManagers": [ + "github-actions", + "pre-commit", + "cargo", + ], + "cargo": { + // See https://docs.renovatebot.com/configuration-options/#rangestrategy + "rangeStrategy": "update-lockfile", + }, + "pre-commit": { + "enabled": true, + }, + "packageRules": [ + { + // Group upload/download artifact updates, the versions are dependent + "groupName": "Artifact GitHub Actions dependencies", + "matchManagers": ["github-actions"], + "matchPackagePatterns": ["actions/.*-artifact"], + "description": "Weekly update of artifact-related GitHub Actions dependencies", + }, + { + "groupName": "pre-commit dependencies", + "matchManagers": ["pre-commit"], + "description": "Weekly update of pre-commit dependencies", + }, + ], + "vulnerabilityAlerts": { + "commitMessageSuffix": "", + "labels": ["internal", "security"], + }, +}