chore(renovate): update renovate config (janus-idp#1512)

* chore(renovate): update renovate config Signed-off-by: Kim Tsao <[email protected]> * chore(renovate): add dev dependencies rule Signed-off-by: Kim Tsao <[email protected]> * chore(renovate): address review comments Signed-off-by: Kim Tsao <[email protected]> * Update .github/renovate.json * add renovate.json to .prettierignore since the formatting that renovate wants != the prettier rules Signed-off-by: Nick Boldt <[email protected]> --------- Signed-off-by: Kim Tsao <[email protected]> Signed-off-by: Nick Boldt <[email protected]> Co-authored-by: Nick Boldt <[email protected]>
ciiay · Apr 22, 2024 · 2a567f0 · 2a567f0
1 parent 397fb8e
commit 2a567f0
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 30 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
diff --git a/.github/renovate.json b/.github/renovate.json
@@ -10,6 +10,10 @@
     ":pinOnlyDevDependencies"
   ],
   "labels": ["kind/dependency upgrade"],
+  "baseBranches": [
+    "main",
+    "/^1\\..*\\.x/"
+  ],
   "npm": {
     "minimumReleaseAge": "1 day"
   },
@@ -18,6 +22,12 @@
       "matchManagers": ["github-actions"],
       "groupName": "GitHub Actions"
     },
+    {
+      "matchDepTypes": ["devDependencies"],
+      "matchUpdateTypes": ["patch", "minor"],
+      "groupName": ["DevDependencies (non-major)"],
+      "automerge": true
+    },    
     {
       "matchPackagePatterns": ["^@backstage/"],
       "groupName": "Core Backstage packages"
@@ -29,8 +39,25 @@
         "^multi-semantic-release$"
       ],
       "groupName": "semantic-release monorepo"
-    }
+    },
+    {
+      "description": "disable updates to the keycloak admin client - see https://github.com/janus-idp/backstage-plugins/issues/47 https://github.com/janus-idp/backstage-plugins/issues/1046", 
+      "matchPackageName": ["@keycloak/keycloak-admin-client"],
+      "groupName": "Keycloak dependency",
+      "enabled": "false"
+    },
+    {
+      "description": "ignore updates to the axios to version that keycloak 18 needs", 
+      "matchCurrentVersion": "0.26.1",
+      "matchPackageName": ["axios"],
+      "enabled": "false",
+      "groupName": "Keycloak dependency"
+    }    
   ],
   "ignorePaths": ["**/dist-dynamic/**"],
-  "ignoreDeps": ["@roadiehq/backstage-plugin-argo-cd"]
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "addLabels": ["kind/security"]
+  },
+  "osvVulnerabilityAlerts": true  
 }
diff --git a/.prettierignore b/.prettierignore
@@ -6,3 +6,4 @@ CHANGELOG.md
 generated
 templates
 *.hbs
+renovate.json