FilesExpand file tree

sonar/S1874

/

renovate.json

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

71 lines (71 loc) · 2.97 KB

sonar/S1874

/

renovate.json

Copy path

Top

File metadata and controls

• Code
• Blame

71 lines (71 loc) · 2.97 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

{

"$schema": "https://docs.renovatebot.com/renovate-schema.json",

"extends": [

"config:best-practices",

":enableVulnerabilityAlerts",

":semanticCommitTypeAll(chore)",

":separateMultipleMajorReleases",

"schedule:weekly",

"group:vitePlus"

],

"labels": ["dependency"],

"rangeStrategy": "pin",

"packageRules": [

{

"matchDepTypes": ["engines"],

"rangeStrategy": "auto"

},

{

"description": "Remove word `dependency` from commit messages and PR titles",

"matchDatasources": ["npm"],

"commitMessageTopic": "{{depName}}"

},

{

"description": "Fetch changelog details for twemoji packages",

"matchPackageNames": ["@discordapp/twemoji"],

"changelogUrl": "https://github.com/jdjdecked/twemoji"

},

{

"description": "Hold got on the v11 line. The override only exists to satisfy security scanners for dev tooling (@electron/get via electron-builder, react-devtools), which was built against the non-ESM v11 API. v11.8.5+ already includes the security fix, and v12+ is ESM-only.",

"matchPackageNames": ["got"],

"allowedVersions": "<12"

},

{

"description": "Group the playwright package with the Playwright container image that the visual regression job runs in. The image ships the browser build that exact release expects, so a mismatch fails to launch Chromium and would strand the committed screenshot baselines. config:best-practices only ages npm (3 days); apply the same wait to this group so the Docker tag cannot become eligible first and open an image-only PR.",

"matchPackageNames": ["playwright", "mcr.microsoft.com/playwright"],

"groupName": "playwright",

"minimumReleaseAge": "3 days",

"internalChecksFilter": "strict"

},

{

"description": "Give updates to core runtime dependencies (Electron shell, tray integration, UI primitives, GitHub API client) a distinct commit scope so release-please can surface them in the changelog instead of hiding them with routine dependency bumps",

"matchPackageNames": [

"electron",

"electron-menubar",

"electron-updater",

"@primer/react",

"@primer/octicons-react",

"@primer/css",

"@octokit/**"

],

"semanticCommitScope": "deps-core"

},

{

"description": "electron-menubar is a first-party dependency, so skip the minimum release age gate and weekly schedule applied to other packages",

"matchPackageNames": ["electron-menubar"],

"minimumReleaseAge": "0 days",

"schedule": ["at any time"]

}

],

"customManagers": [

{

"description": "Keep sonar.projectVersion variables in sonar-project.properties in-sync",

"customType": "regex",

"datasourceTemplate": "github-tags",

"depNameTemplate": "gitify-app/gitify",

"versioningTemplate": "loose",

"managerFilePatterns": ["/sonar-project.properties/"],

"matchStrings": ["\\s?sonar.projectVersion=(?<currentValue>.+?)\\s"]

}

]

}