renovate.json5

{
  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
  extends: [
    'config:recommended',
    'customManagers:dockerfileVersions',
    ':maintainLockFilesWeekly',
    ':separateMultipleMajorReleases',
    ':semanticCommits',
    ':label(dependencies)',
    ':configMigration',
    ':combinePatchMinorReleases',
    'npm:unpublishSafe',
    'preview:dockerVersions',
    'schedule:daily',
    'group:unitTestNonMajor',
    ':enableVulnerabilityAlerts',
  ],
  vulnerabilityAlerts: {
    enabled: true,
  },
  osvVulnerabilityAlerts: true,
  packageRules: [
    {
      matchPackageNames: [
        'uv',
        'ghcr.io/astral-sh/uv',
      ],
      schedule: [
        'before 4am on Wednesday',
      ],
    },
    {
      groupName: 'Roslynator',
      matchSourceUrls: [
        'https://github.com/dotnet/roslynator',
      ],
      matchUpdateTypes: [
        'digest',
        'patch',
        'minor',
        'major',
      ],
    },
    {
      groupName: 'Salesforce packages',
      matchPackageNames: [
        '@salesforce/**',
      ],
      schedule: [
        'before 4am every 4 day',
      ],
      matchUpdateTypes: [
        'digest',
        'patch',
        'minor',
        'major',
      ],
    },
  ],
  customManagers: [
    {
      customType: 'regex',
      description: 'Update dockerfile sections in .megalinter-descriptor.yml files',
      fileMatch: [
        '(^|/).*\\.megalinter-descriptor.ya?ml$',
      ],
      matchStrings: [
        '# renovate: datasource=(?<datasource>[a-z-.]+?) depName=(?<depName>[^\\s]+?)(?: (lookupName|packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?(?: extractVersion=(?<extractVersion>[^\\s]+?))?(?: registryUrl=(?<registryUrl>[^\\s]+?))?\\s(?:ENV|ARG)\\s+[A-Za-z0-9_]+?_VERSION[ =]["\']?(?<currentValue>.+?)["\']?\\s',
        '# renovate: datasource=(?<datasource>[a-z-.]+?) depName=(?<depName>[^\\s]+?)(?: (lookupName|packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?(?: extractVersion=(?<extractVersion>[^\\s]+?))?(?: registryUrl=(?<registryUrl>[^\\s]+?))?\\s+(?:ENV|ARG)\\s+[A-Za-z0-9_]+?_VERSION[ =]["\']?(?<currentValue>.+?)["\']?\\s',
      ],
    },
  ],
}