api/renovate.json at develop · q-asker/api · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":dependencyDashboard",
    ":semanticCommitsDisabled"
  ],
  "baseBranchPatterns": [
    "develop"
  ],
  "timezone": "Asia/Seoul",
  "schedule": ["before 10am on monday"],
  "prHourlyLimit": 0,
  "prConcurrentLimit": 5,
  "labels": ["dependencies", "renovate"],
  "rebaseWhen": "behind-base-branch",
  "commitMessagePrefix": "chore(deps):",
  "separateMajorMinor": true,
  "separateMinorPatch": false,
  "packageRules": [
    {
      "description": "Major updates: 7-day cooldown + label",
      "matchUpdateTypes": ["major"],
      "addLabels": ["major-update"],
      "minimumReleaseAge": "7 days"
    },
    {
      "description": "Minor/patch updates: 3-day cooldown",
      "matchUpdateTypes": ["minor", "patch"],
      "minimumReleaseAge": "3 days"
    },
    {
      "description": "GitHub Actions: pin to SHA digest",
      "groupName": "github-actions",
      "matchManagers": ["github-actions"],
      "pinDigests": true
    },
    {
      "description": "Gradle wrapper",
      "groupName": "gradle-wrapper",
      "matchManagers": ["gradle-wrapper"]
    },
    {
      "description": "Gradle plugins (depType=plugin). Specific groups below override this.",
      "groupName": "gradle-plugins",
      "matchDepTypes": ["plugin"]
    },
    {
      "description": "Spring ecosystem (overrides gradle-plugins for spring-boot plugin)",
      "groupName": "spring",
      "matchPackageNames": [
        "/^org\\.springframework/",
        "/^io\\.spring/"
      ]
    },
    {
      "description": "Google Cloud",
      "groupName": "google-cloud",
      "matchPackageNames": [
        "/^com\\.google\\.cloud/",
        "/^com\\.google\\.api/",
        "/^com\\.google\\.auth/",
        "/^com\\.google\\.protobuf/"
      ]
    },
    {
      "description": "Oracle Cloud SDK",
      "groupName": "oracle-cloud",
      "matchPackageNames": ["/^com\\.oracle\\.oci\\.sdk/"]
    },
    {
      "description": "Observability (Micrometer / Prometheus)",
      "groupName": "observability",
      "matchPackageNames": [
        "/^io\\.micrometer/",
        "/^io\\.prometheus/"
      ]
    },
    {
      "description": "Resilience4j",
      "groupName": "resilience",
      "matchPackageNames": ["/^io\\.github\\.resilience4j/"]
    },
    {
      "description": "Rate limiting (Bucket4j + Caffeine)",
      "groupName": "rate-limit",
      "matchPackageNames": [
        "/^com\\.bucket4j/",
        "/^com\\.github\\.ben-manes\\.caffeine/"
      ]
    },
    {
      "description": "Document processing (PDFBox + JODConverter)",
      "groupName": "document-processing",
      "matchPackageNames": [
        "/^org\\.apache\\.pdfbox/",
        "/^org\\.jodconverter/"
      ]
    },
    {
      "description": "Testing frameworks (JUnit / Mockito / AssertJ)",
      "groupName": "testing",
      "matchPackageNames": [
        "/^org\\.junit/",
        "/^org\\.mockito/",
        "/^org\\.assertj/"
      ]
    },
    {
      "description": "Lombok",
      "groupName": "lombok",
      "matchPackageNames": ["org.projectlombok:lombok"]
    }
  ],
  "vulnerabilityAlerts": {
    "labels": ["security"],
    "minimumReleaseAge": null,
    "schedule": ["at any time"]
  }
}