silverwind 302378139e port generic Renovate options from gitea's renovate.json5 (#545)
Ports repo-agnostic options from gitea/gitea's `renovate.json5`:

- `default.json`: `minimumReleaseAge: "5 days"`, `configMigration: true`
- `go-deps.json`: `gomodUpdateImportPaths` postUpdateOption + immediate Go toolchain bumps (opt-in preset, no-op without `go.mod`)
- `npm-deps.json`: `pnpmDedupe` postUpdateOption (no-op for non-pnpm repos)

Reviewed-on: https://gitea.com/gitea/renovate-config/pulls/545
Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>
Co-authored-by: silverwind <me@silverwind.io>
Co-committed-by: silverwind <me@silverwind.io>
2026-05-22 20:23:45 +00:00
2023-08-30 07:53:40 +00:00
2023-09-14 10:50:47 +00:00

renovate-config

To host the renovate config.

  • config.js holds the self-hosted Renovate configuration so that Renovate knows what and how it should process.
  • renovate.json in this repository ensures to receive Renovate updates.
  • default.json holds the basic config for all repositories. It extends the presets by the renovate project defined in renovate-schema.json.
  • Each repository can extend/alter this config by adding a renovate.json file to the root of the repository.

Reusable presets

Golang dependency group

What it does:

  • Groups all Golang dependencies into one PR
    • Respects your repository's separateMajorMinor setting1
  • Runs go mod tidy before committing to ensure a clean go.sum2

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>gitea/renovate-config",
+   "local>gitea/renovate-config:go-deps"
  ]
}

NPM dependency group

What it does:

  • Groups all NPM dependencies3 into one PR
    • Respects your repository's separateMajorMinor setting1
  • Groups all NPM dev-dependencies3 into one PR
    • Respects your repository's separateMajorMinor setting1

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>gitea/renovate-config",
+   "local>gitea/renovate-config:npm-deps"
  ]
}

Workflow dependency group

What it does:

  • Groups all workflow dependencies into one PR
    • Respects your repository's separateMajorMinor setting1

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>gitea/renovate-config",
+   "local>gitea/renovate-config:workflow-deps"
  ]
}

Security fixes

What it does:

  • Bumps a dependency to resolve a vulnerability4
    • Overrules any scheduling and grouping for that vulnerability

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>gitea/renovate-config",
+   "local>gitea/renovate-config:security"
  ]
}
S
Description
No description provided
Readme MIT 330 KiB
Languages
JavaScript 100%