Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[IDP-1037] Add spectral and oasdiff to our renovate monitoring #71

Merged
merged 2 commits into from
Aug 14, 2024
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
115 changes: 70 additions & 45 deletions renovate.json
Original file line number Diff line number Diff line change
@@ -1,47 +1,72 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"platform": "github",
"labels": ["renovate"],
"extends": [
"config:base",
":rebaseStalePrs"
],
"enabledManagers": [
"github-actions",
"nuget"
],
"stabilityDays": 3,
"prHourlyLimit": 0,
"prConcurrentLimit": 0,
"branchConcurrentLimit": 0,
"dependencyDashboard": false,
"gitAuthor": "Renovate Bot <bot@renovateapp.com>",
"packageRules": [
{
"matchManagers": ["nuget"],
"excludePackagePatterns": ["^Microsoft\\.Extensions\\.", "^System\\.", "^dotnet-sdk$", "^Microsoft\\.CodeAnalysis\\.CSharp\\."],
"groupName": "NuGet dependencies"
},
{
"matchManagers": ["nuget"],
"matchPackagePatterns": ["^Microsoft\\.(Extensions|AspNetCore|SourceLink)\\.", "^System\\.", "^Microsoft\\.CodeAnalysis\\.CSharp\\."],
"groupName": "Ignored NuGet dependencies",
"description": "These packages are usually set to a user-defined minimal supported version such as 6.0.0 for .NET 6, and they are overriden by consuming applications",
"enabled": false
},
{
"matchPackageNames": ["dotnet-sdk"],
"groupName": "Dotnet SDK",
"description": "Only update patch and minor for the dotnet SDK version within the global.json",
"extends": [":disableMajorUpdates"]
},
{
"matchManagers": ["github-actions"],
"groupName": "Pipeline dependencies"
}
],
"vulnerabilityAlerts": {
"enabled": true,
"labels": ["security"]
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"platform": "github",
"labels": ["renovate"],
"extends": [
heqianwang marked this conversation as resolved.
Show resolved Hide resolved
"config:base",
":rebaseStalePrs"
],
"enabledManagers": [
"github-actions",
"nuget",
"custom.regex"
],
"stabilityDays": 3,
"prHourlyLimit": 0,
"prConcurrentLimit": 0,
"branchConcurrentLimit": 0,
"dependencyDashboard": false,
"gitAuthor": "Renovate Bot <bot@renovateapp.com>",
"packageRules": [
{
"matchManagers": ["nuget"],
"excludePackagePatterns": ["^Microsoft\\.Extensions\\.", "^System\\.", "^dotnet-sdk$", "^Microsoft\\.CodeAnalysis\\.CSharp\\."],
"groupName": "NuGet dependencies"
},
{
"matchManagers": ["nuget"],
"matchPackagePatterns": ["^Microsoft\\.(Extensions|AspNetCore|SourceLink)\\.", "^System\\.", "^Microsoft\\.CodeAnalysis\\.CSharp\\."],
heqianwang marked this conversation as resolved.
Show resolved Hide resolved
"groupName": "Ignored NuGet dependencies",
"description": "These packages are usually set to a user-defined minimal supported version such as 6.0.0 for .NET 6, and they are overriden by consuming applications",
"enabled": false
},
{
"matchPackageNames": ["dotnet-sdk"],
"groupName": "Dotnet SDK",
"description": "Only update patch and minor for the dotnet SDK version within the global.json",
"extends": [":disableMajorUpdates"]
},
{
"matchManagers": ["github-actions"],
"groupName": "Pipeline dependencies"
}
}
],
"customManagers": [
{
"description": "Custom manager for renovating spectral version listed in .cs files",
"customType": "regex",
"fileMatch": ["\\.cs$"],
"matchStringsStrategy": "any",
"matchStrings": [
"private const string SpectralVersion = \"(?<currentValue>[^\"]+)\";"
heqianwang marked this conversation as resolved.
Show resolved Hide resolved
],
"datasourceTemplate": "github-tags",
"depNameTemplate": "stoplightio/spectral"
},
{
"description": "Custom manager for renovating oasdiff version listed in .cs files",
"customType": "regex",
"fileMatch": ["\\.cs$"],
"matchStringsStrategy": "any",
"matchStrings": [
"private const string OasdiffVersion = \"(?<currentValue>[^\"]+)\";"
],
"datasourceTemplate": "github-tags",
"depNameTemplate": "Tufin/oasdiff"
}
],
"vulnerabilityAlerts": {
"enabled": true,
"labels": ["security"]
}
}