Merge pull request #107 from ministryofjustice/UML-3356

UML-3356: Configure renovate

renovate.json

@@ -0,0 +1,84 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+      "config:base"
+    ],
+    "branchPrefix": "renovate-",
+    "commitMessageAction": "Renovate Update",
+    "labels": [
+      "Dependencies",
+      "Renovate"
+    ],
+    "packageRules": [
+      {
+        "description": "Terraform: bundle all updates together",
+        "labels": ["devDependencies", "Renovate", "Terraform"],
+        "groupName": "Terraform",
+        "matchUpdateTypes": ["minor", "patch"],
+        "matchManagers": ["terraform"]
+      },
+      {
+        "groupName": "Patch & Minor Updates",
+        "groupSlug": "all-minor-patch-updates",
+        "labels": [
+          "Dependencies",
+          "Renovate"
+        ],
+        "matchPackagePatterns": [
+          "*"
+        ],
+        "matchUpdateTypes": [
+          "minor",
+          "patch"
+        ],
+        "prCreation": "immediate",
+        "prPriority": 0,
+        "stabilityDays": 3
+      },
+      {
+        "groupName": "GitHub Actions",
+        "matchPackagePatterns": [
+          "actions/*"
+        ],
+        "automerge": true,
+        "dependencyDashboardApproval": true,
+        "labels": [
+          "Dependencies",
+          "Renovate"
+        ],
+        "prTitle": "chore(deps): update GitHub Actions",
+        "prBody": "Updates the following GitHub Actions dependencies:\n\n{{#each dependencies}}- {{this.name}}\n{{/each}}",
+        "prCreation": "immediate",
+        "schedule": [
+          "after 6am and before 9am on Monday"
+        ],
+        "stabilityDays": 3
+      }
+    ],
+    "major": {
+      "labels": [
+          "Dependencies",
+          "Renovate"
+      ],
+      "prCreation": "immediate",
+      "rangeStrategy": "pin",
+      "prPriority": 1
+    },
+    "branchConcurrentLimit": 5,
+    "prConcurrentLimit": 3,
+    "prHourlyLimit": 1,
+    "vulnerabilityAlerts": {
+      "groupName": "Security Alerts",
+      "labels": [
+        "Dependencies",
+        "Renovate"
+      ],
+      "dependencyDashboardApproval": false,
+      "stabilityDays": 0,
+      "rangeStrategy": "pin",
+      "commitMessagePrefix": "[SECURITY]",
+      "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
+      "prCreation": "immediate",
+      "prPriority": 5
+    }
+  }