postgres-operator/renovate.json at main · KeiaiLab/postgres-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":semanticCommits",
    ":maintainLockFilesWeekly",
    "group:linters",
    "group:test",
    ":separateMultipleMajorReleases",
    ":enableVulnerabilityAlertsWithLabel(security)"
  ],
  "labels": ["dependencies"],
  "commitMessagePrefix": "deps:",
  "prHourlyLimit": 4,
  "prConcurrentLimit": 6,
  "rangeStrategy": "bump",
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 06:00 on monday"],
    "automerge": false
  },
  "vulnerabilityAlerts": {
    "labels": ["security", "priority:p0"],
    "assignees": ["@keiailab"],
    "minimumReleaseAge": null
  },
  "packageRules": [
    {
      "description": "Go indirect dependencies — minor+patch 자동 PR (audit gate 가 검증).",
      "matchManagers": ["gomod"],
      "matchDepTypes": ["indirect"],
      "matchUpdateTypes": ["minor", "patch"],
      "automerge": false,
      "prPriority": 1
    },
    {
      "description": "Go direct dependencies — major 는 별 PR + manual review.",
      "matchManagers": ["gomod"],
      "matchDepTypes": ["direct"],
      "matchUpdateTypes": ["major"],
      "automerge": false,
      "prPriority": 5,
      "labels": ["dependencies", "major"]
    },
    {
      "description": "k8s.io/* + sigs.k8s.io/* — group 단위로 (이전 마이너 버전 깨짐 방지).",
      "matchPackagePrefixes": ["k8s.io/", "sigs.k8s.io/"],
      "groupName": "kubernetes",
      "schedule": ["before 06:00 on monday"]
    },
    {
      "description": "OpenTelemetry — 같은 vendor group (sdk/trace/metric/api 동시).",
      "matchPackagePrefixes": ["go.opentelemetry.io/"],
      "groupName": "opentelemetry"
    },
    {
      "description": "Go runtime — 별도 PR (Dockerfile FROM golang:N 갱신).",
      "matchManagers": ["dockerfile"],
      "matchDepNames": ["golang"],
      "automerge": false,
      "prPriority": 3
    },
    {
      "description": "distroless base image — pin SHA, weekly check.",
      "matchManagers": ["dockerfile"],
      "matchDepNames": ["gcr.io/distroless/static"],
      "schedule": ["before 06:00 on monday"]
    }
  ],
  "ignorePaths": [
    "**/vendor/**",
    "**/bin/**",
    "**/dist/**",
    "**/charts/*/crds/**"
  ],
  "go": {
    "postUpdateOptions": ["gomodTidy"]
  }
}