renovate.json5

{
  extends: [
    ":separateMajorReleases",
    ":combinePatchMinorReleases",
    ":ignoreUnstable",
    ":prImmediately",
    ":semanticPrefixFixDepsChoreOthers",
    ":updateNotScheduled",
    ":automergeDisabled",
    ":disablePeerDependencies",
    ":maintainLockFilesDisabled",
    ":disableRateLimiting",
  ],
  includePaths: ["package.json", "packages/**", "starters/**", "examples/**"],
  ignorePaths: [
    "**/node_modules/**",
    "**/bower_components/**",
    "**/vendor/**",
    "**/__tests__/**",
    "**/test/**",
    "**/tests/**",
    "**/__fixtures__/**",
  ],
  major: {
    dependencyDashboardApproval: true,
  },
  dependencyDashboard: true,
  ignoreDeps: ["react", "react-dom"],
  rangeStrategy: "bump",
  bumpVersion: null,
  semanticCommitScope: null,
  prHourlyLimit: 0,
  // Wait for 3 days to update a package so we can check if it's stable
  stabilityDays: 3,
  packageRules: [
    // these rules define group names
    {
      groupName: "packages",
      paths: ["package.json", "packages/**"],
    },
    {
      groupName: "starters and examples",
      paths: ["starters/**", "examples/**"],
    },
    {
      groupName: "babel monorepo",
      sourceUrlPrefixes: "https://github.com/babel/babel",
    },
    {
      groupName: "dev dependencies",
      depTypeList: ["devDependencies"],
    },
    // these rules define dependencies that we have special handling for
    {
      updateTypes: ["minor"],
      excludePackageNames: [
        // below is list of packages that use 0.X version range, any minor bump there can contain breaking changes, so we just ignore minor bumps for those packages and will need to bump them manually
        "@reach/skip-nav",
        "@theme-ui/prism",
        "@theme-ui/typography",
        "axios",
        "babel-preset-gatsby",
        "sharp",
        "express-graphql",
        "gatsby-plugin-theme-ui",
        "graphiql-explorer",
        "guess-webpack",
        "jest-silent-reporter",
        "js-combinatorics",
        "jscodeshift",
        "mini-css-extract-plugin",
        "react-refresh",
        "scroll-behavior",
        "theme-ui",
        "webpack-stats-plugin",
        "xlsx",
        "zipkin",
        "zipkin-transport-http",
        // below is list of packages that we use alpha/beta/next/canary, where it's not really safe to bump automatically and need extra caution
        "react-docgen",
        // prettier updates can break CI per discussion in https://github.com/gatsbyjs/gatsby/pull/26686
        "prettier",
      ],
    },
    // we need to replicate this so that it goes to a separate group
    {
      // minor updates in packages <1.0.0 - need master issue approval
      // not grouped
      groupName: "packages (<1.0.0 minor)",
      paths: ["package.json", "packages/**"],
      dependencyDashboardApproval: true,
      updateTypes: ["minor"],
      packageNames: [
        // below is list of packages that use 0.X version range, any minor bump there can contain breaking changes, so we just ignore minor bumps for those packages and will need to bump them manually
        "@reach/skip-nav",
        "@theme-ui/prism",
        "@theme-ui/typography",
        "axios",
        "babel-preset-gatsby",
        "sharp",
        "express-graphql",
        "gatsby-plugin-theme-ui",
        "graphiql-explorer",
        "guess-webpack",
        "jest-silent-reporter",
        "js-combinatorics",
        "jscodeshift",
        "mini-css-extract-plugin",
        "react-refresh",
        "scroll-behavior",
        "theme-ui",
        "webpack-stats-plugin",
        "xlsx",
        "zipkin",
        "zipkin-transport-http",
        // below is list of packages that we use alpha/beta/next/canary, where it's not really safe to bump automatically and need extra caution
        "react-docgen",
        // prettier updates can break CI per discussion in https://github.com/gatsbyjs/gatsby/pull/26686
        "prettier",
      ],
    },
    {
      // minor updates in packages <1.0.0 - need master issue approval
      // not grouped
      groupName: "starters and examples (<1.0.0 minor)",
      paths: ["starters/**", "examples/**"],
      dependencyDashboardApproval: true,
      updateTypes: ["minor"],
      packageNames: [
        // below is list of packages that use 0.X version range, any minor bump there can contain breaking changes, so we just ignore minor bumps for those packages and will need to bump them manually
        "@reach/skip-nav",
        "@theme-ui/prism",
        "@theme-ui/typography",
        "axios",
        "babel-preset-gatsby",
        "sharp",
        "express-graphql",
        "gatsby-plugin-theme-ui",
        "graphiql-explorer",
        "guess-webpack",
        "jest-silent-reporter",
        "js-combinatorics",
        "jscodeshift",
        "mini-css-extract-plugin",
        "react-refresh",
        "scroll-behavior",
        "theme-ui",
        "webpack-stats-plugin",
        "xlsx",
        "zipkin",
        "zipkin-transport-http",
        // below is list of packages that we use alpha/beta/next/canary, where it's not really safe to bump automatically and need extra caution
        "react-docgen",
      ],
    },
    {
      depTypeList: ["engines"],
      enabled: false,
    },
    {
      groupName: "types",
      packagePatterns: ["^@types"],
      // only upgrade types with approval as they can break transitives
      dependencyDashboardApproval: true,
    },
  ],
  timezone: "GMT",
  schedule: "after 10am on Monday",
}