.renovaterc.json5

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "security:only-security-updates",
    "helpers:pinGitHubActionDigests"
  ],
  // Avoid adopting compromised packages by waiting for a cooldown period
  // after each release before updating.
  "minimumReleaseAge": "3 days",
  "packageRules": [
    {
      "description": "Internal Go modules are released together from this repository.",
      "matchManagers": ["gomod"],
      "matchPackageNames": [
        "github.com/ewhauser/gbash",
        "github.com/ewhauser/gbash/**"
      ],
      "enabled": false
    },
    {
      "description": "The workspace package is versioned by this repository's release flow.",
      "matchManagers": ["npm"],
      "matchPackageNames": ["@ewhauser/gbash*"],
      "enabled": false
    },
    {
      "description": "Keep GitHub Action updates together so digest refreshes stay readable.",
      "matchManagers": ["github-actions"],
      "groupName": "github actions"
    }
  ]
}