FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[View Raw Code]
[Original HTTPS Page]
stackrox/.github/renovate.json5 at master · stackrox/stackrox · GitHub
Uh oh!
There was an error while loading.
Please reload this page
.
stackrox
/
stackrox
Public
Notifications
You must be signed in to change notification settings
Fork
191
Star
1.3k
Code
Issues
54
Pull requests
603
Actions
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Security and quality
Insights
Expand file tree
Breadcrumbs
stackrox
/
.github
/
renovate.json5
Copy path
More file actions
More file actions
Latest commit
History
History
History
88 lines (85 loc) · 3.9 KB
Breadcrumbs
stackrox
/
.github
/
renovate.json5
Copy path
File metadata and controls
88 lines (85 loc) · 3.9 KB
Raw
Copy raw file
Download raw file
Open symbols panel
Edit and raw actions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
{
// This configures Konflux Renovate bot a.k.a. MintMaker, the thing that keeps our pipelines use up-to-date tasks.
// After making changes to this file, you can validate it by running something like this in the root of the repo:
// $ docker run --rm -it --entrypoint=renovate-config-validator -v "$(pwd)":/mnt -w /mnt renovate/renovate --strict
// Note: ignore errors about the config for `rpm-lockfile`. This is to be addressed with https://issues.redhat.com/browse/CWFHEALTH-4117
// There are more validation options, see https://docs.renovatebot.com/config-validation/
"$schema"
:
"https://docs.renovatebot.com/renovate-schema.json"
,
"extends"
:
[
// Note that the base Konflux's MintMaker config gets inherited/included automatically per
// https://redhat-internal.slack.com/archives/C04PZ7H0VA8/p1745492139282819?thread_ts=1745309786.090319&cid=C04PZ7H0VA8
// The config is: https://github.com/konflux-ci/mintmaker/blob/main/config/renovate/renovate.json
// We found out about it here (we may want to check that location if the base config gets suddenly moved):
// https://github.com/enterprise-contract/ec-cli/blob/407847910ad420850385eea1db78e2a2e49c7e25/renovate.json#L1C1-L7C2
// This tells Renovate to combine all updates in one PR so that we have fewer PRs to deal with.
"group:all"
,
]
,
// Don't apply dependency cooldown because via MintMaker we take only Red Hat dependencies.
"minimumReleaseAge"
:
null
,
// The number of PRs that can be open against the repo.
"prConcurrentLimit"
:
20
,
// `null` means the branch limit should be the same as PR limit.
"branchConcurrentLimit"
:
null
,
// The number of PRs MintMaker can open in one hour, effectively in one run.
"prHourlyLimit"
:
4
,
"timezone"
:
"Etc/UTC"
,
"schedule"
:
[
// Allowed syntax: https://docs.renovatebot.com/configuration-options/#schedule
// The time was selected (with the help of https://time.fyi/timezones) so that Renovate isn't active during business
// hours from Germany to US West Coast. This way, after we merge a PR, a new one does not pop up immediately after
// that. Another reason for this schedule is to include at least one 4 hour interval from the moment of scheduled
// MintMaker execution
// Between 0a.m. and 7:59a.m. every day.
"* 0-7 * * *"
,
]
,
// Tell Renovate not to update PRs when outside of schedule.
"updateNotScheduled"
:
false
,
"tekton"
:
{
"schedule"
:
[
// Override Konflux custom schedule for this manager to our intended one.
// Between 0a.m. and 7:59a.m. every day.
"* 0-7 * * *"
,
]
,
"packageRules"
:
[
// Note: the packageRules from the Konflux config (find URL in comments above) get merged with these.
{
"groupName"
:
"StackRox custom Konflux Tasks"
,
"matchPackageNames"
:
[
"/^quay.io/rhacs-eng/konflux-tasks/"
,
]
,
"recreateWhen"
:
"always"
,
"rebaseWhen"
:
"behind-base-branch"
,
}
,
]
,
}
,
"dockerfile"
:
{
"includePaths"
:
[
// Instruct Renovate not try to update Dockerfiles other than konflux.Dockerfile (or konflux.anything.Dockerfile)
// to have less PR noise.
"**/*konflux*.Dockerfile"
,
]
,
"schedule"
:
[
// Override Konflux custom schedule for this manager to our intended one.
// Between 0a.m. and 7:59a.m. every day.
"* 0-7 * * *"
,
]
,
}
,
"rpm-lockfile"
:
{
"schedule"
:
[
// Override Konflux custom schedule for this manager to our intended one.
// Note that MintMaker will create security updates outside of schedule.
// Between 0a.m. and 7:59a.m. every day.
"* 0-7 * * *"
,
]
,
}
,
"enabledManagers"
:
[
// Restrict Renovate focus on Konflux things since we rely on GitHub's dependabot for everything else.
"tekton"
,
"dockerfile"
,
"rpm-lockfile"
,
]
,
"labels"
:
[
// mintmaker-auto-merge label triggers the corresponding workflow.
"mintmaker-auto-merge"
,
]
,
}
Back
|
FazBrowse Home
|
New Git URL