infrastructure/renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    "mergeConfidence:all-badges",
    ":rebaseStalePrs",
    "group:recommended",
    "group:monorepos",
    "group:kubernetesMonorepo"
  ],
  "timezone": "America/Chicago",
  "labels": [],
  "prHourlyLimit": 0,
  "prConcurrentLimit": 0,
  "pinDigests": true,
  "baseBranchPatterns": [
    "main"
  ],
  "customManagers": [
    {
      "description": "Update appVersion in Chart.yaml",
      "customType": "regex",
      "managerFilePatterns": [
        "/(^|/)Chart\\.yaml$/"
      ],
      "matchStrings": [
        "#\\s*renovate:\\s*datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+appVersion:\\s*[\"']?(?<currentValue>[^\"'\\s]+)[\"']?"
      ],
      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver-coerced{{/if}}"
    },
    {
      "description": "Update images in templates",
      "customType": "regex",
      "managerFilePatterns": [
        "/(^|/)templates/.*\\.yaml$/"
      ],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)\\s+tag:\\s*[\"']?(?<currentValue>[^@\"'\\s\n]+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?[\"']?"
      ]
    },
    {
      "description": "Update Helm CLI version in GitHub Actions",
      "customType": "regex",
      "managerFilePatterns": [
        "/^\\.github/workflows/.*\\.ya?ml$/"
      ],
      "matchStrings": [
        "uses: azure/setup-helm@v4[\\s\\S]*?version: (?<currentValue>v?\\d+\\.\\d+\\.\\d+)"
      ],
      "depNameTemplate": "helm/helm",
      "datasourceTemplate": "github-releases",
      "versioningTemplate": "semver"
    },
    {
      "description": "Update Kubeconform version in GitHub Actions env",
      "customType": "regex",
      "managerFilePatterns": [
        "/^\\.github/workflows/.*\\.ya?ml$/"
      ],
      "matchStrings": [
        "KUBECONFORM_VERSION: \"(?<currentValue>v?\\d+\\.\\d+\\.\\d+)\""
      ],
      "depNameTemplate": "yannh/kubeconform",
      "datasourceTemplate": "github-releases",
      "versioningTemplate": "semver"
    }
  ],
  "packageRules": [
    {
      "description": "Disable updates to digests",
      "matchUpdateTypes": [
        "digest"
      ],
      "enabled": false
    },
    {
      "description": "Label by datasource",
      "matchDatasources": [
        "helm",
        "docker",
        "github-actions"
      ],
      "addLabels": [
        "{{{datasource}}}"
      ],
      "automerge": false
    },
    {
      "description": "Automerge helm chart lock files",
      "matchManagers": [
        "helm"
      ],
      "lockFileMaintenance": {
        "enabled": true
      },
      "addLabels": [
        "automerge"
      ],
      "automerge": true,
      "automergeType": "branch"
    },
    {
      "description": "Automerge patches",
      "matchUpdateTypes": [
        "patch",
        "pinDigest"
      ],
      "matchDatasources": [
        "helm",
        "docker",
        "github-actions"
      ],
      "addLabels": [
        "automerge"
      ],
      "automerge": true,
      "minimumReleaseAge": "1 days"
    },
    {
      "description": "Label appVersion and images, grouped",
      "matchManagers": [
        "custom.regex",
        "helm-values"
      ],
      "groupName": "{{#if packageName}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' packageName)}}}{{else}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' depName)}}}{{/if}}",
      "groupSlug": "unified-{{{groupName}}}",
      "addLabels": [
        "image"
      ],
      "automerge": false
    },
    {
      "description": "Automerge appVersion and images, grouped",
      "matchUpdateTypes": [
        "patch",
        "pinDigest"
      ],
      "matchManagers": [
        "custom.regex",
        "helm-values"
      ],
      "groupName": "{{#if packageName}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' packageName)}}}{{else}}{{{replace 'ghcr.io/' '' (replace 'docker.io/' '' depName)}}}{{/if}}",
      "groupSlug": "unified-{{{groupName}}}",
      "addLabels": [
        "automerge"
      ],
      "automerge": true,
      "minimumReleaseAge": "1 days"
    },
    {
      "description": "Group apps by their keyword",
      "groupName": "{{{replace '^.*(dawarich|komodo|immich|home-assistant|element-web|cilium).*$' '$1' depName}}}",
      "groupSlug": "unified-{{{groupName}}}",
      "matchPackageNames": [
        "/(^|/)(?<appName>dawarich|komodo|immich|home-assistant|element-web|cilium)/"
      ]
    },
    {
      "description": "Group Rook-Ceph dependencies",
      "groupName": "rook-ceph",
      "groupSlug": "unified-rook-ceph",
      "matchPackageNames": [
        "/^rook(-ceph|\\/rook|\\/ceph)/"
      ]
    },
    {
      "description": "Automerge digest updates, specific packages",
      "matchUpdateTypes": [
        "digest"
      ],
      "matchDatasources": [
        "docker"
      ],
      "matchPackageNames": [
        "searxng/searxng"
      ],
      "addLabels": [
        "automerge"
      ],
      "enabled": true,
      "automerge": true
    },
    {
      "description": "Automerge images, specific packages",
      "matchUpdateTypes": [
        "patch",
        "minor"
      ],
      "matchDatasources": [
        "docker"
      ],
      "matchPackageNames": [
        "ghcr.io/renovatebot/renovate",
        "ghcr.io/prometheus-community/charts/kube-prometheus-stack"
      ],
      "addLabels": [
        "automerge"
      ],
      "automerge": true
    }
  ]
}