.github/default.json at main · fro-bot/.github · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "github>bfra-me/renovate-config#5.3.1",
    "github>bfra-me/renovate-config:fro-bot.json5#5.3.1",
    "github>sanity-io/renovate-config:semantic-commit-type",
    "github>sanity-io/renovate-config:security",
    "github>sanity-io/renovate-config:lock-file-maintenance",
    ":assignAndReview(fro-bot)",
    ":updateNotScheduled"
  ],
  "lockFileMaintenance": {
    "dependencyDashboardApproval": false
  },
  "packageRules": [
    {
      "matchPackageNames": ["python"],
      "allowedVersions": "<=3.13"
    },
    {
      "description": [
        "Never treat a fro-bot/agent harness release as an action version.",
        "fro-bot/agent is both a GitHub Action and the publishing home for @fro.bot/harness binaries.",
        "Harness releases tagged before 2026-08-29 use SemVer build metadata (1.18.21+harness.<sha>);",
        "build metadata is ignored for precedence, so the github-tags datasource reads them as stable",
        "1.18.x and ranks them above the real v0.x action line. Newer harness tags use a prerelease",
        "identifier (-harness.<sha>) that ignoreUnstable already excludes, but the older tags stay",
        "stable-shaped permanently: deleting them would 404 the asset URLs that shipped action versions",
        "build from their own bundled code.",
        "This excludes every harness tag by shape rather than capping the version line, so it needs no",
        "maintenance when the action reaches 1.0 and cannot fail silently by holding a stale ceiling.",
        "The pattern is deliberately unanchored: it must match the harness marker anywhere in the tag,",
        "including any future suffix shape. Do not anchor it to the version prefix.",
        "Both depTypes are listed: renovate#45443 (44.46.0) splits reusable-workflow uses: into",
        "depType 'workflow', and consumers may wire in via fro-bot/agent/.github/workflows/fro-bot.yaml."
      ],
      "matchDepTypes": ["action", "workflow"],
      "matchPackageNames": ["fro-bot/agent"],
      "allowedVersions": "!/harness\\./"
    },
    {
      "description": "Group GitHub actions except for @bfra-me.",
      "matchDepTypes": ["action", "workflow"],
      "matchPackageNames": ["!bfra-me/{/,}**"],
      "groupName": "GitHub Actions"
    },
    {
      "description": "Update my project dependencies without a minimum release age.",
      "matchPackageNames": [
        "@bfra.me/{/,}**",
        "bfra-me/{/,}**",
        "/^@?fro.bot/",
        "fro-bot/{/,}**",
        "pro-actions/{/,}**"
      ],
      "minimumReleaseAge": null,
      "prCreation": "immediate"
    },
    {
      "description": "Update my project dependencies without a minimum release age.",
      "matchSourceUrls": ["https://github.com/bfra-me{/,}**", "https://github.com/fro-bot{/,}**"],
      "minimumReleaseAge": null,
      "prCreation": "immediate"
    },
    {
      "description": [
        "Automerge `minor` and `patch` update types of @bfra-me and @fro-bot packages (disable dashboard approval)."
      ],
      "matchPackageNames": ["@bfra.me/**", "bfra-me/**", "@fro-bot/**", "@fro.bot/wiki-write-core", "fro-bot/**"],
      "matchUpdateTypes": ["minor", "patch"],
      "addLabels": ["automerge"],
      "dependencyDashboardApproval": false,
      "automerge": true,
      "platformAutomerge": true,
      "prCreation": "immediate",
      "rebaseWhen": "behind-base-branch"
    }
  ],
  "rebaseWhen": "behind-base-branch",
  "schedule": ["at any time"]
}