default.json5

{
    // As a GitHub organization admin, you can access the Renovate dashboard at
    // https://developer.mend.io/github/Lombiq and manage the GitHub app (including enabling it for new repos) at
    // https://github.com/organizations/Lombiq/settings/installations/58718719.
    // Git submodule updates (https://docs.renovatebot.com/modules/manager/git-submodules/) are not enabled because that
    // seems to update submodules to random old commits.
    $schema: 'https://docs.renovatebot.com/renovate-schema.json',
    description: 'Default Lombiq Renovate configuration.',
    extends: [
        'config:recommended',
        ':enableVulnerabilityAlerts',
        'docker:pinDigests',
        'helpers:pinGitHubActionDigests',
        ':pinDevDependencies'
    ],
    addLabels: ['dependencies'],
    // See https://docs.renovatebot.com/configuration-options/#configmigration. This always uses single quotes, so we
    // use those too.
    configMigration: true,
    dependencyDashboard: false,
    packageRules: [
        {
            groupName: 'Lombiq packages',
            matchPackageNames: [
                'Lombiq.*',
            ],
            allowedVersions: '!/.*-alpha.*/'
        },
    ],
    // With GitHub Actions, concurrency is not really an issue.
    prHourlyLimit: 0,
    // We only need updates once a week.
    schedule: [
        'before 3am on Sunday',
    ],
}