renovate-config

To host the renovate config.

• config.js holds the self-hosted Renovate configuration so that Renovate knows what and how it should process.
• renovate.json in this repository ensures to receive Renovate updates.
• default.json holds the basic config for all repositories. It extends the presets by the renovate project defined in renovate-schema.json.
• Each repository can extend/alter this config by adding a renovate.json file to the root of the repository.

Reusable presets

Golang dependency group

What it does:

• Groups all Golang dependencies into one PR
  • Respects your repository's separateMajorMinor setting¹
• Runs go mod tidy before committing to ensure a clean go.sum²

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>daanselen/renovate-config",
+   "local>daanselen/renovate-config:go-deps"
  ]
}

NPM dependency group

What it does:

• Groups all NPM dependencies³ into one PR
  • Respects your repository's separateMajorMinor setting¹
• Groups all NPM dev-dependencies³ into one PR
  • Respects your repository's separateMajorMinor setting¹

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>daanselen/renovate-config",
+   "local>daanselen/renovate-config:npm-deps"
  ]
}

Workflow dependency group

What it does:

• Groups all workflow dependencies into one PR
  • Respects your repository's separateMajorMinor setting¹

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>daanselen/renovate-config",
+   "local>daanselen/renovate-config:workflow-deps"
  ]
}

Security fixes

What it does:

• Bumps a dependency to resolve a vulnerability⁴
  • Overrules any scheduling and grouping for that vulnerability

Usage:

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "local>daanselen/renovate-config",
+   "local>daanselen/renovate-config:security"
  ]
}

---

1. Renovate Docs: separateMajorMinor ↩︎

2. Renovate Docs: postUpdateOptions ↩︎

3. Renovate Docs: npm dependency types ↩︎

4. Renovate Docs: osv vulnerabilities and Renovate Docs: vulnerabilityAlerts ↩︎