default.json5

{
  // Default configuration for managed Renovate
  $schema: "https://docs.renovatebot.com/renovate-schema.json",
  extends: [ // default presets see https://docs.renovatebot.com/presets-default/
    "config:recommended",
    "helpers:pinGitHubActionDigestsToSemver",
    "security:openssf-scorecard",
    ":enableVulnerabilityAlertsWithLabel(security)",
    // use chore for test-only Gradle dependencies (Gradle manager does not make a distinction based on configurations)
    ":pathSemanticCommitType(gradle/test-libs.versions.toml,chore)",
    // fix URLs for some packages
    "github>wetransform/renovate-config:url-overrides.json5",
  ],
  labels: [
    "renovate",
    "renovate/{{updateType}}",
  ],
  ignorePaths: [
    // Prevent running for terraform managed workflows
    ".github/workflows/tf-*.yml", ".github/workflows/tf-*.yaml"
  ],
  packageRules: [
    {
      description: "Update renovatebot/github-action minor/patch updates on Sundays",
      matchPackageNames: ["renovatebot/github-action"],
      matchUpdateTypes: ["minor", "patch"],
      schedule: ["* * * * 0"],
    },
    // Disable for eclipseconfig Gradle plugin (because latest version is not published to Plugin Portal)
    {
      matchPackageNames: ["org.standardout.eclipseconfig"],
      enabled: false,
    },
    // group logback related dependencies
    {
      "groupName": "logback dependencies",
      "groupSlug": "logback-deps",
      "matchPackagePrefixes": ["ch.qos.logback:"]
    },
    // group wetransform logging utils
    {
      "groupName": "wetransform logging dependencies",
      "groupSlug": "wetf-logging-deps",
      "matchPackagePrefixes": ["to.wetransform.logging:"]
    },
    // group wetransform convention plugins
    {
      "groupName": "wetransform Gradle conventions",
      "groupSlug": "wetf-gradle-conventions",
      "matchDatasources": ["maven"],
      "matchDepNames": ["/^to\.wetransform\.(settings|conventions).*$/"]
    },
    // group Java dependencies
    {
      "groupName": "Java",
      "groupSlug": "java",
      "matchDatasources": [
        "docker",
        "java-version"
      ],
      "matchPackageNames": [
        "eclipse-temurin",
        "amazoncorretto",
        "adoptopenjdk",
        "openjdk",
        "java",
        "java-jre",
        "sapmachine",
        "/^azul/zulu-openjdk/",
        "/^bellsoft/liberica-openj(dk|re)-/",
        "/^cimg/openjdk/"
      ],
    },
    // work around Maven repos not being detected properly when using Gradle conventions plugin
    {
      "matchDatasources": ["maven"],
      "matchPackageNames": ["/^to.wetransform/"],
      "registryUrls": ["https://artifactory.wetransform.to/artifactory/local", "https://artifactory.wetransform.to/artifactory/private", "https://plugins.gradle.org/m2/"]
    },
    {
      "matchDatasources": ["maven"],
      "matchPackageNames": ["/^eu.esdihumboldt/", "/^com.github.wetransform-os/", "/^com.haleconnect/"],
      "registryUrls": ["https://artifactory.wetransform.to/artifactory/local"]
    },
    {
      "matchDatasources": ["maven"],
      "matchPackageNames": ["/^org.deegree/"],
      "registryUrls": ["https://artifactory.wetransform.to/artifactory/private", "https://repo.deegree.org/content/groups/public/", "https://artifactory.wetransform.to/artifactory/deegree"]
    },
    { // it seems matching depNames is required in addition to package names (see also https://docs.renovatebot.com/presets-workarounds/#workaroundsjavaltsversions)
      "groupName": "Java",
      "groupSlug": "java",
      "matchDatasources": [
        "docker",
        "java-version"
      ],
      "matchDepNames": [
        "eclipse-temurin",
        "amazoncorretto",
        "adoptopenjdk",
        "openjdk",
        "java",
        "java-jre",
        "sapmachine"
      ],
    },
    {
      description: "Update aws sdk minor/patch updates on Sundays",
      matchPackagePrefixes: ["software.amazon.awssdk:"],
      matchUpdateTypes: ["minor", "patch"],
      schedule: ["* * * * 0"],
    },
    { // wetransform/pycsw Docker image custom versioning with build date
      "matchDatasources": ["docker"],
      "matchPackageNames": ["wetransform/pycsw"],
      "versioning": "regex:^(?<major>\\d+)(\\.(?<minor>\\d+))?(\\.(?<patch>\\d+))?(-(?<build>.*))?$",
      // ignore old date based tags
      "allowedVersions": "< 20000000",
    },
  ],
  customManagers: [
    {
      description: "Update semantic-release in GitHub Action workflows",
      customType: "regex",
      fileMatch: ["(^workflow-templates|\\.github/(actions|workflows))\\/.+\\.ya?ml$"],
      matchStrings: [
        "\
semantic_version\\s*:\\s*(\"|')?(?<currentValue>.+)(\"|')?\
(\\s+|\\s+.*)"
      ],
      datasourceTemplate: "npm",
      depNameTemplate: "semantic-release"
    },
    {
      description: "Any other workflows related file with dependencies",
      customType: "regex",
      fileMatch: [
        "(^workflow-templates|\\.github/workflows)/[^/]+\\.ya?ml$",
      ],
      matchStrings: [
        "\
.*renovate:\
\\sdatasource=(?<datasource>.*?)\
\\sdepName=(?<depName>.*?)\
(\\sversioning=(?<versioning>.*?))?\
\n.*(version|Version|VERSION)\\s*(:=|=|:)\\s*\"?(?<currentValue>.*?)\
(@(?<currentDigest>sha256:[a-f0-9]+))?\"?\
(\\s+|\\s+.*)"
      ],
      versioningTemplate: "\
{{#if versioning}}\
{{{versioning}}}\
{{else}}\
semver-coerced\
{{/if}}"
    },
    {
      "fileMatch": ["build\\.gradle$"],
      "matchStrings": [
        "baseImage\\s*=\\s*'(?<depName>[^:]+):(?<currentValue>[^']+)'",
        "baseImage\\s*=\\s*\"(?<depName>[^:]+):(?<currentValue>[^']+)\""
      ],
      "datasourceTemplate": "docker"
    },
    {
      description: "Versions of hk-config in hk.pkl files",
      customType: "regex",
      managerFilePatterns: ["hk.pkl"],
      matchStrings: [
        '(amends|import)\\s+"https://raw.githubusercontent.com/wetransform/hk-config/refs/tags/v(?<currentValue>\\d+\\.\\d+\\.\\d+)/',
      ],
      depNameTemplate: "wetransform/hk-config",
      datasourceTemplate: "github-tags",
      extractVersionTemplate: "^v?(?<version>.*)$",
    },
  ],
  separateMinorPatch: false,
}