config.js holds the self-hosted Renovate configuration so that Renovate knows what and how it should process.
renovate.json in this repository ensures to receive Renovate updates.
default.json holds the basic config for all repositories. It extends the presets by the renovate project defined in renovate-schema.json.
Each repository can extend/alter this config by adding a renovate.json file to the root of the repository.

Reusable presets

Golang dependency group

What it does:

Groups all Golang dependencies into one PR
- Respects your repository's separateMajorMinor setting¹
Runs go mod tidy before committing to ensure a clean go.sum²

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>nerthus/renovate-config",
+   "local>nerthus/renovate-config:go-deps"
  ]
}

NPM dependency group

What it does:

Groups all NPM dependencies³ into one PR
- Respects your repository's separateMajorMinor setting¹
Groups all NPM dev-dependencies³ into one PR
- Respects your repository's separateMajorMinor setting¹

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>nerthus/renovate-config",
+   "local>nerthus/renovate-config:npm-deps"
  ]
}

Workflow dependency group

What it does:

Groups all workflow dependencies into one PR
- Respects your repository's separateMajorMinor setting¹

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>nerthus/renovate-config",
+   "local>nerthus/renovate-config:workflow-deps"
  ]
}

Security fixes

What it does:

Bumps a dependency to resolve a vulnerability⁴
- Overrules any scheduling and grouping for that vulnerability

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>nerthus/renovate-config",
+   "local>nerthus/renovate-config:security"
  ]
}