renovate.json5

{
  // JSON5 spec: https://json5.org/
  // Renovate docs: https://docs.renovatebot.com/configuration-options/
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",            // Use recommended settings
    ":enablePreCommit",              // Enable pre-commit hook updates
    ":gitSignOff",                   // Sign off commits
    "helpers:pinGitHubActionDigests" // Pin GitHub action digests
  ],
  "labels": [
    "dependencies"
  ],
  "lockFileMaintenance": {  // Update Gemfile.lock
    "enabled": true
  },
  "packageRules": [
    {
      // Update GH actions in a single PR
      "groupName": "GH actions",
      "matchDepTypes": [
        "action"
      ]
    },
    {
      // Update golang tag in dockerfile & golang version in workflows in a
      // single PR"
      "groupName": "golang version",
      "matchDepNames": [
        "golang",
        "go"
      ]
    },
    {
      // Disable some docker image updates
      "matchDatasources": ["docker"],
      "matchPackageNames": [
        "controller", // Ignore the fake "controller" docker image name
        "quay.io/backube/snapscheduler", // Don't pin our own image
        "quay.io/operator-framework/scorecard-test" // Ignore OSDK scorecard image
      ],
      "enabled": false
    },
    {
      // Renovate's packages update too frequently, so we only schedule updates
      // once a week to keep the noise down
      "matchPackageNames": ["renovatebot/pre-commit-hooks"],
      "schedule": ["before 9am on monday"]
    }
  ],
  "postUpdateOptions": [
    "gomodTidy"   // Run `go mod tidy` after updating dependencies
  ],
  "customManagers": [
    {
      "customType": "regex",
      "description": "controller-tools version updates",
      "fileMatch": [
        "^.github/(?:workflows|actions)/.+\\.ya?ml$",
        "(^|/)Makefile$"
      ],
      "matchStrings": [
        "CONTROLLER_TOOLS_VERSION\\s*:=?\\s*\"?(?<currentValue>.+?)\"?\\n"
      ],
      "depNameTemplate": "kubernetes-sigs/controller-tools",
      "datasourceTemplate": "github-releases"
    },
    {
      "customType": "regex",
      "description": "golang version updates (major/minor only)",
      "fileMatch": [
        "^.github/(?:workflows|actions)/.+\\.ya?ml$",
        "(^|/)Makefile$"
      ],
      "matchStrings": [
        "GO_VERSION\\s*:=?\\s*\"?(?<currentValue>.+?)\"?\\n"
      ],
      "depNameTemplate": "golang",
      "datasourceTemplate": "golang-version",
      "extractVersionTemplate": "^(?<version>.*)\\.\\d+$",
      "versioningTemplate": "loose"
    },
    {
      "customType": "regex",
      "description": "golangci-lint version updates",
      "fileMatch": [
        "^.github/(?:workflows|actions)/.+\\.ya?ml$",
        "(^|/)Makefile$"
      ],
      "matchStrings": [
        "GOLANGCI_VERSION\\s*:=?\\s*\"?(?<currentValue>.+?)\"?\\n"
      ],
      "depNameTemplate": "golangci/golangci-lint",
      "datasourceTemplate": "github-releases"
    },
    {
      "customType": "regex",
      "description": "Helm version updates",
      "fileMatch": [
        "^.github/(?:workflows|actions)/.+\\.ya?ml$",
        "(^|/)Makefile$"
      ],
      "matchStrings": [
        "HELM_VERSION\\s*:=?\\s*\"?(?<currentValue>.+?)\"?\\n"
      ],
      "depNameTemplate": "helm/helm",
      "datasourceTemplate": "github-releases"
    },
    {
      "customType": "regex",
      "description": "Docker image updates in yamls",
      "fileMatch": [
        "^config/.+\\.ya?ml$"
      ],
      "matchStrings": [
        "image:\\s*\"?(?<depName>.*?):(?<currentValue>.*?)(?:@(?<currentDigest>sha256:[a-f0-9]+))?\"?\\s"
      ],
      "datasourceTemplate": "docker"
    },
    {
      "customType": "regex",
      "description": "KinD version updates",
      "fileMatch": [
        "^.github/(?:workflows|actions)/.+\\.ya?ml$",
        "(^|/)Makefile$"
      ],
      "matchStrings": [
        "KIND_VERSION\\s*:=?\\s*\"?(?<currentValue>.+?)\"?\\n"
      ],
      "depNameTemplate": "kubernetes-sigs/kind",
      "datasourceTemplate": "github-releases",
      "extractVersionTemplate": "^v(?<version>.*)$"
    },
    {
      "customType": "regex",
      "description": "kustomize version updates",
      "fileMatch": [
        "^.github/(?:workflows|actions)/.+\\.ya?ml$",
        "(^|/)Makefile$"
      ],
      "matchStrings": [
        "KUSTOMIZE_VERSION\\s*:=?\\s*\"?(?<currentValue>.+?)\"?\\n"
      ],
      "depNameTemplate": "kubernetes-sigs/kustomize",
      "datasourceTemplate": "github-releases",
      "extractVersionTemplate": "^kustomize/(?<version>.*)$"
    },
    {
      "customType": "regex",
      "description": "Kuttl version updates",
      "fileMatch": [
        "^.github/(?:workflows|actions)/.+\\.ya?ml$",
        "(^|/)Makefile$"
      ],
      "matchStrings": [
        "KUTTL_VERSION\\s*:=?\\s*\"?(?<currentValue>.+?)\"?\\n"
      ],
      "depNameTemplate": "kudobuilder/kuttl",
      "datasourceTemplate": "github-releases"
    },
    {
      "customType": "regex",
      "description": "Update tags for repos in hack/setup-kind-cluster.sh",
      "fileMatch": [
        "^hack/setup-kind-cluster.sh$"
      ],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[a-z-.]+?) depName=(?<depName>[^\\s]+?)(?: (?:lookupName|packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[a-z-0-9]+?))?\\s+TAG\\s*=\\s*[\"']?(?<currentValue>.+?)[\"']?\\s"
      ]
    }
  ],
  "schedule": [
    "* 3-6 * * 1-5"  // Run between 3am and 6am on weekdays
  ],
  "semanticCommits": "disabled",
  "timezone": "America/New_York"
}