renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>Altinn/renovate-config",
    ":prHourlyLimit4",
    "helpers:pinGitHubActionDigestsToSemver"
  ],
  "customManagers": [
    {
      "customType": "regex",
      "managerFilePatterns": [
        "//\\.github/workflows/app-frontend-k6-browser\\.yml$//"
      ],
      "matchStrings": ["grafana/k6:(?<currentValue>[\\w.-]+)-with-browser"],
      "datasourceTemplate": "docker",
      "depNameTemplate": "grafana/k6",
      "versioningTemplate": "docker",
      "autoReplaceStringTemplate": "grafana/k6:{{{newValue}}}-with-browser"
    }
  ],
  "separateMultipleMajor": true,
  "postUpdateOptions": ["gomodTidy"],
  "vulnerabilityAlerts": {
    "enabled": false
  },
  "packageRules": [
    {
      "matchManagers": ["gomod", "pep621"],
      "groupName": "{{manager}} non-major dependencies",
      "matchPackageNames": ["*"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupSlug": "{{manager}}-minor-patch"
    },
    {
      "description": "Require explicit approval for Helm Go dependency updates because even patch releases can change Kubernetes client minor versions",
      "matchManagers": ["gomod"],
      "matchPackageNames": ["helm.sh/helm/v3"],
      "dependencyDashboardApproval": true
    },
    {
      "description": "Group Kubernetes, Flux, and cluster tooling Go dependency patches so related release trains move together",
      "matchManagers": ["gomod"],
      "matchPackageNames": [
        "/^k8s\\.io\\//",
        "/^sigs\\.k8s\\.io\\/(controller-runtime|gateway-api|kind)$/",
        "/^sigs\\.k8s\\.io\\/(kustomize|structured-merge-diff)\\//",
        "/^github\\.com\\/fluxcd\\/(flux2\\/v2|.*-controller\\/api|pkg\\/.*)$/"
      ],
      "matchUpdateTypes": ["patch"],
      "groupName": "Kubernetes, Flux, and cluster tooling Go dependency patches",
      "groupSlug": "k8s-flux-runtime-go-patches"
    },
    {
      "description": "Require explicit approval for Kubernetes, Flux, and cluster tooling Go dependency minor/major updates after checking target cluster compatibility",
      "matchManagers": ["gomod"],
      "matchPackageNames": [
        "/^k8s\\.io\\//",
        "/^sigs\\.k8s\\.io\\/(controller-runtime|gateway-api|kind)$/",
        "/^sigs\\.k8s\\.io\\/(kustomize|structured-merge-diff)\\//",
        "/^github\\.com\\/fluxcd\\/(flux2\\/v2|.*-controller\\/api|pkg\\/.*)$/"
      ],
      "matchUpdateTypes": ["minor", "major"],
      "dependencyDashboardApproval": true
    },
    {
      "groupName": "LibGit2Sharp dependency",
      "groupSlug": "LibGit2Sharp",
      "matchPackageNames": ["LibGit2Sharp"]
    },
    {
      "groupName": "gitea dependency",
      "groupSlug": "gitea",
      "matchPackageNames": ["gitea/gitea"]
    },
    {
      "description": "Only update nginx Docker images to stable release lines because installed nginx.org modules come from the stable package repository",
      "matchManagers": ["dockerfile"],
      "matchPackageNames": ["nginx"],
      "allowedVersions": "/^\\d+\\.(?:\\d*[02468])\\./"
    },
    {
      "matchFileNames": ["frontend/testing/cypress/**"],
      "ignoreDeps": ["yarn"]
    },
    {
      "matchFileNames": ["src/Designer/**"],
      "matchPackageNames": ["/^@digdir\\/designsystemet-/"],
      "groupName": "Design system in Designer"
    },
    {
      "matchFileNames": ["src/App/**", "app-libs/**"],
      "additionalBranchPrefix": "app/",
      "commitMessageSuffix": " (app)",
      "separateMinorPatch": true
    },
    {
      "description": "Keep App Designsystemet updates together and separate from other dependency updates",
      "matchManagers": ["npm"],
      "matchFileNames": ["src/App/frontend/**", "app-libs/**"],
      "matchPackageNames": ["/^@digdir\\/designsystemet-/"],
      "groupName": "Design system in App"
    },
    {
      "description": "Skip @percy/cypress 3.1.9: it depends on a beta @percy/sdk-utils (1.32.3-beta.1) whose waitForReady DOM-readiness step hangs, timing out all Cypress Percy snapshots. Allow again once a fixed release (>3.1.9) ships.",
      "matchManagers": ["npm"],
      "matchPackageNames": ["@percy/cypress"],
      "allowedVersions": "!=3.1.9"
    },
    {
      "description": "Automerge non-major Altinn app template package updates (v8)",
      "matchManagers": ["nuget"],
      "matchFileNames": ["src/App/template/v8/src/App/App.csproj"],
      "matchPackageNames": ["Altinn.App.Api", "Altinn.App.Core"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "Altinn app template NuGet packages (v8)",
      "groupSlug": "app-template-nuget-v8",
      "addLabels": ["approve"],
      "automerge": true
    },
    {
      "description": "Automerge non-major Altinn app template package updates (v9). Separate from v8 so the two templates never share a PR.",
      "matchManagers": ["nuget"],
      "matchFileNames": ["src/App/template/v9/src/App/App.csproj"],
      "matchPackageNames": ["Altinn.App.Api", "Altinn.App.Core"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "Altinn app template NuGet packages (v9)",
      "groupSlug": "app-template-nuget-v9",
      "addLabels": ["approve"],
      "automerge": true
    },
    {
      "matchFileNames": ["src/Runtime/localtest/**"],
      "additionalBranchPrefix": "localtest/",
      "commitMessageSuffix": " (localtest)"
    },
    {
      "description": "Keep Go module updates in repository-wide groups",
      "matchManagers": ["gomod"],
      "additionalBranchPrefix": "",
      "commitMessageSuffix": ""
    },
    {
      "matchFileNames": ["src/App/**"],
      "matchPackageNames": [
        "/dotnet(-|\\/)sdk/",
        "/^Microsoft\\.AspNetCore/",
        "/^Microsoft\\.Extensions/",
        "!Microsoft.Extensions.Caching.Hybrid"
      ],
      "allowedVersions": "<=8"
    },
    {
      "matchFileNames": ["src/App/**"],
      "matchPackageNames": [
        "/^Microsoft\\.CodeAnalysis/",
        "/^Microsoft\\.Build/"
      ],
      "dependencyDashboardApproval": true
    },
    {
      "matchFileNames": [
        "src/App/codelists/**",
        "src/App/fileanalyzers/**",
        "src/App/Designer/**"
      ],
      "ignoreDeps": ["Altinn.App.Core"]
    },
    {
      "matchFileNames": ["src/App/Designer/**"],
      "ignoreDeps": [
        "Moq",
        "Basic.Reference.Assemblies",
        "Microsoft.CodeAnalysis.CSharp",
        "Microsoft.CodeAnalysis.Common"
      ]
    },
    {
      "matchFileNames": [
        "src/Altinn.Platform/**",
        "src/test/**",
        "src/Runtime/localtest/**",
        "src/App/backend/**",
        "src/App/fileanalyzers/**",
        "src/App/codelists/**"
      ],
      "dependencyDashboardApproval": true
    },
    {
      "description": "Upgrade React consistently across the entire repository",
      "matchManagers": ["npm"],
      "matchPackageNames": [
        "react",
        "react-dom",
        "@types/react",
        "@types/react-dom"
      ],
      "groupName": "React ecosystem",
      "groupSlug": "react-ecosystem",
      "additionalBranchPrefix": "",
      "commitMessageSuffix": ""
    }
  ],
  "schedule": []
}