Renovate Configuration

This repository contains shared configuration presets for Renovate, the automated dependency update tool.

Available Configurations

Default Configuration (default.json)

The default configuration provides a comprehensive set of automation features for dependency management. It runs in the Europe/Berlin timezone and automatically migrates deprecated options. Updates are scheduled for early Monday mornings to minimize disruption.

Security is a priority with automatic vulnerability detection via OSV alerts. Docker support is extensive, including Compose files, Dockerfiles, and authentication for multiple registries.

The configuration follows Renovate's best practices, uses semantic commit messages, and automatically merges updates that pass tests. It includes custom regex patterns to detect and update version strings in various file formats including Dockerfiles, Helm charts, and Terraform variables.

Kustomize resources have their digests pinned for stability.

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>PurpleBooth/renovate-config"
  ]
}

App Configuration (app.json)

The app configuration extends the default preset with optimizations for application projects that have direct end-users. It takes a balanced approach to dependency updates that prioritizes stability and includes special handling for production dependencies.

This configuration ensures your application remains stable during updates while maintaining a structured approach to dependency management. It inherits all the security and automation benefits from the default configuration.

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>PurpleBooth/renovate-config:app"
  ]
}

Library Configuration (library.json)

The library configuration extends the default preset with specific optimizations for library projects. It uses a "widen" range strategy for dependencies, which maintains compatibility with existing version ranges - crucial for ensuring libraries remain compatible with their consumers.

This more conservative approach to dependency updates minimizes breaking changes for library consumers while ensuring your library works with a broader range of dependency versions. It inherits all the security and automation benefits from the default configuration.

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>PurpleBooth/renovate-config:library"
  ]
}

Documentation

For more information about Renovate configuration options, see the Renovate documentation.

Key Documentation Links

• Configuration Options
• Presets
• Package Rules
• Scheduling