infrastructure/renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    "mergeConfidence:all-badges",
    ":rebaseStalePrs",
    "group:recommended",
    "group:monorepos",
    "group:kubernetesMonorepo"
  ],
  "timezone": "America/Chicago",
  "labels": [],
  "prHourlyLimit": 0,
  "prConcurrentLimit": 0,
  "pinDigests": true,
  "minimumReleaseAgeBehaviour": "timestamp-optional",
  "baseBranchPatterns": [
    "main"
  ],
  "customManagers": [
    {
      "description": "Generic Renovate tag matcher for Helm",
      "customType": "regex",
      "managerFilePatterns": [
        "(^|/)Chart\\.yaml$",
        "(^|/)values\\.yaml$",
        "(^|/)templates/.*\\.yaml$"
      ],
      "matchStrings": [
        "#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)(?:\\s+versioning=(?<versioning>[^\\s]+))?\\s*[a-zA-Z0-9_-]+:\\s*[\"']?(?<currentValue>[^\"'\\s]+(?:@sha256:[a-f0-9]+)?)[\"']?"
      ],
      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver-coerced{{/if}}"
    },
    {
      "description": "Update Helm CLI version in GitHub Actions",
      "customType": "regex",
      "managerFilePatterns": [
        "/^\\.github/workflows/.*\\.ya?ml$/"
      ],
      "matchStrings": [
        "uses: azure/setup-helm@v4[\\s\\S]*?version: (?<currentValue>v?\\d+\\.\\d+\\.\\d+)"
      ],
      "depNameTemplate": "helm/helm",
      "datasourceTemplate": "github-releases",
      "versioningTemplate": "semver"
    },
    {
      "description": "Update Kubeconform version in GitHub Actions env",
      "customType": "regex",
      "managerFilePatterns": [
        "/^\\.github/workflows/.*\\.ya?ml$/"
      ],
      "matchStrings": [
        "KUBECONFORM_VERSION: \"(?<currentValue>v?\\d+\\.\\d+\\.\\d+)\""
      ],
      "depNameTemplate": "yannh/kubeconform",
      "datasourceTemplate": "github-releases",
      "versioningTemplate": "semver"
    }
  ],
  "packageRules": [
    {
      "description": "Disable updates to digests",
      "matchUpdateTypes": [
        "digest"
      ],
      "enabled": false
    },
    {
      "description": "Universal dynamic labeling by datasource",
      "matchPackageNames": [
        "*"
      ],
      "addLabels": [
        "{{{datasource}}}"
      ]
    },
    {
      "description": "Versioning for LinuxServer images",
      "versioning": "regex:^v?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-ls(?<revision>\\d+)$",
      "matchPackageNames": [
        "/^linuxserver\\//",
        "/^ghcr\\.io/linuxserver\\//",
        "/^lscr\\.io/linuxserver\\//"
      ]
    },
    {
      "description": "Group packages together by stripping all registry/namespace prefixes",
      "matchManagers": [
        "*"
      ],
      "groupName": "{{#if packageName}}{{{replace '^.*?/(.*)$' '$1' packageName}}}{{else}}{{{replace '^.*?/(.*)$' '$1' depName}}}{{/if}}",
      "groupSlug": "unified-{{{groupName}}}"
    },
    {
      "description": "Group for specific apps",
      "matchPackageNames": [
        "/(^|/)(argo-cd|bazarr|cilium|code-server|dawarich|element-web|home-assistant|immich|komodo|rook-ceph|tdarr|traefik)/",
        "/^rook(-ceph|\\/rook|\\/ceph)/"
      ],
      "groupName": "{{{replace '^.*(argo-cd|bazarr|cilium|code-server|dawarich|element-web|home-assistant|immich|komodo|rook-ceph|tdarr|traefik).*$' '$1' depName}}}",
      "groupSlug": "unified-{{{groupName}}}"
    },
    {
      "description": "Automerge helm chart lock files",
      "matchManagers": [
        "helm"
      ],
      "lockFileMaintenance": {
        "enabled": true
      },
      "addLabels": [
        "{{{datasource}}}",
        "automerge"
      ],
      "automerge": true,
      "automergeType": "branch"
    },
    {
      "description": "Open for digest updates, specific packages",
      "matchUpdateTypes": [
        "digest"
      ],
      "matchPackageNames": [
        "excalidraw/excalidraw"
      ],
      "enabled": true
    },
    {
      "description": "Automerge digest updates, specific packages",
      "matchUpdateTypes": [
        "digest"
      ],
      "matchPackageNames": [
        "searxng/searxng"
      ],
      "addLabels": [
        "{{{datasource}}}",
        "automerge"
      ],
      "enabled": true,
      "automerge": true
    },
    {
      "description": "Automerge patches",
      "matchUpdateTypes": [
        "patch",
        "pinDigest"
      ],
      "matchDatasources": [
        "*"
      ],
      "addLabels": [
        "{{{datasource}}}",
        "automerge"
      ],
      "automerge": true,
      "minimumReleaseAge": "3 days"
    },
    {
      "description": "Automerge images, specific packages",
      "matchUpdateTypes": [
        "minor",
        "patch",
        "pinDigest"
      ],
      "matchPackageNames": [
        "ghcr.io/renovatebot/renovate",
        "ghcr.io/prometheus-community/charts/kube-prometheus-stack"
      ],
      "addLabels": [
        "{{{datasource}}}",
        "automerge"
      ],
      "automerge": true,
      "minimumReleaseAge": "3 days"
    }
  ]
}