retort/renovate.json at dev · phoenixvc/retort · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended", ":semanticCommits", ":dependencyDashboard"],
  "schedule": ["before 9am on monday"],
  "automerge": true,
  "automergeType": "pr",
  "platformAutomerge": true,
  "labels": ["dependencies"],
  "prHourlyLimit": 3,
  "prConcurrentLimit": 5,
  "rangeStrategy": "pin",
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 6am on monday"]
  },
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": ["security", "dependencies"],
    "automerge": false
  },
  "dependencyDashboardApproval": true,
  "packageRules": [
    {
      "description": "Auto-merge minor and patch updates",
      "matchUpdateTypes": ["minor", "patch"],
      "automerge": true,
      "automergeType": "pr"
    },
    {
      "description": "Require manual review for major updates",
      "matchUpdateTypes": ["major"],
      "automerge": false,
      "labels": ["dependencies", "breaking-change"]
    },
    {
      "description": "Retort engine dependencies — require maintainer review",
      "matchFileNames": [".agentkit/package.json"],
      "labels": ["dependencies", "forge-source-change"],
      "automerge": false
    },
    {
      "description": "Pin GitHub Actions to full SHA for supply chain security",
      "matchManagers": ["github-actions"],
      "pinDigests": true,
      "automerge": false
    }
  ],
  "ignorePaths": [
    ".agentkit/templates/**",
    ".agentkit/spec/**",
    ".agentkit/engines/**",
    ".agentkit/overlays/**",
    ".agentkit/bin/**"
  ]
}