Skip to content

chore: base Renovate config on config:recommended, without patch updates #9441

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jun 29, 2024
Merged

chore: base Renovate config on config:recommended, without patch updates #9441

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1ad75b2
chore: base Renovate config on config:recommended, without patch updates
JoshuaKGoldberg Jun 27, 2024
409170c
Remove automerging
JoshuaKGoldberg Jun 29, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
106 changes: 37 additions & 69 deletions .github/renovate.json5
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,94 +1,62 @@
{
$schema: 'https://docs.renovatebot.com/renovate-schema.json',
extends: ['config:recommended', ':approveMajorUpdates'],

dependencyDashboardLabels: ['dependencies', 'repo maintenance'],
enabledManagers: ['github-actions', 'npm'],

ignoreDeps: [
// AJV is out-of-date, but it's intentionally synced with ESLint - https://github.com/eslint/eslint/blob/ad9dd6a933fd098a0d99c6a9aa059850535c23ee/package.json#L70
// AJV is intentionally synced with ESLint.
// https://github.com/eslint/eslint/blob/13dbecdea749abf51951ce61662eec2621a4b9af/package.json#L77
'ajv',
// globby is ESM so we can't go any higher right now
// ESM only so we can't go higher until we natively run ESM internally.
'globby',
// this dep is now ESM only
// Blocked until we enable ESLint v9 locally in our own PR (#9119).
'eslint',
// ESM only so we can't go higher until we natively run ESM internally.
'execa',
// the nx packages get updated using the nx migrate CLI
'@nrwl/cli',
'@nx/cli',
'@nrwl/devkit',
'@nx/devkit',
'@nx/jest',
'@nx/jest',
'@nrwl/nx-cloud',
'nx-cloud',
'@nrwl/tao',
],
ignorePaths: [
// integration test package.json's should never be updated as they're purposely fixed tests
// Integration test package.json's should never be updated as they're purposely fixed tests.
'tests/integration/fixtures',
],
internalChecksFilter: 'strict',

labels: ['dependencies'],
dependencyDashboard: true,
dependencyDashboardLabels: ['dependencies', 'repo maintenance'],
major: {
// most majors will require some manual effort to upgrade to, so we don't want to create
// PRs automatically or else we'll just spam ourselves.
dependencyDashboardApproval: true,
},
// by default renovate will auto-rebase whenever the dep pranch falls behind main.
// this is annoying as it spams notifications and creates unnecessary action runs.
// instead only auto-rebase when conflicted, and we can trigger a manual rebase if required.
rebaseWhen: 'conflicted',
packageRules: [
// automerge everything but major updates
{
matchUpdateTypes: ['minor', 'patch', 'pin', 'digest'],
automerge: true,
automergeStrategy: 'squash',
},

// label PRs appropriately
// Wait well over npm's three day window for any new package as a precaution against malicious publishes.
// https://docs.npmjs.com/policies/unpublish/#packages-published-less-than-72-hours-ago
minimumReleaseAge: '7 days',

packageRules: [
{
matchManagers: ['npm'],
addLabels: ['javascript'],
description: 'Label JS ecosystem PRs appropriately.',
matchManagers: ['npm'],
},
{
matchManagers: ['github-actions'],
addLabels: ['github-actions'],
},

// batch package sets together
{
extends: ['packages:react'],
groupName: 'react',
},
{
extends: ['monorepo:docusaurus'],
groupName: 'docusaurus',
},
{
extends: ['monorepo:nrwl'],
groupName: 'nx',
},
{
matchPackagePrefixes: ['@babel', 'babel-'],
groupName: 'babel',
},
{
matchPackageNames: ['ts-jest', 'pretty-format'],
matchPackagePrefixes: ['@types/jest', 'jest', '@jest'],
groupName: 'jest',
},
{
matchPackageNames: ['eslint'],
matchPackagePrefixes: ['@eslint'],
groupName: 'eslint',
description: 'Label GHA ecosystem PRs appropriately.',
matchManagers: ['github-actions'],
},
{
matchPackageNames: ['stylelint'],
matchPackagePrefixes: ['@stylelint'],
groupName: 'stylelint',
description: 'Ignore Nrwl/Nx packages updated using the nx migrate CLI.',
enabled: false,
packagePatterns: ['^@nrwl/', '^@nx/', 'nx-cloud'],
},
],

// We've found enabling patch updates on all dependencies is a lot of noise.
patch: {
enabled: false,
},

postUpdateOptions: [
// run yarn dedupe to cleanup the lockfile after updates
// Run yarn dedupe to cleanup the lockfile after updates.
'yarnDedupeHighest',
],
stabilityDays: 3,

// By default renovate will auto-rebase whenever the dep pranch falls behind main.
// This is annoying as it spams notifications and creates unnecessary action runs.
// Instead only auto-rebase when conflicted, and we can trigger a manual rebase if required.
rebaseWhen: 'conflicted',
}
Loading