renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended", "helpers:pinGitHubActionDigests", "docker:pinDigests"],
  "minimumReleaseAge": "1 day",
  "osvVulnerabilityAlerts": true,
  "vulnerabilityAlerts": {
    "minimumReleaseAge": "0"
  },
  "nix": {
    "enabled": true
  },
  "postUpdateOptions": ["gomodTidy"],
  "packageRules": [
    {
      "matchManagers": ["gomod"],
      "matchDepTypes": ["golang"],
      "rangeStrategy": "bump"
    },
    {
      "matchDatasources": ["docker", "golang-version"],
      "matchPackageNames": ["go", "golang"],
      "groupName": "golang version sync",
      "groupSlug": "go-version"
    },
    {
      "matchPackageNames": [
        "golangci/golangci-lint",
        "github.com/golangci/golangci-lint/v2/cmd/golangci-lint"
      ],
      "groupName": "golangci-lint"
    }
  ],
  "customManagers": [
    {
      "customType": "regex",
      "managerFilePatterns": ["/^\\.github/workflows/.+\\.ya?ml$/"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)\\s+version: (?<currentValue>\\S+)"
      ],
      "versioningTemplate": "semver"
    },
    {
      "customType": "regex",
      "managerFilePatterns": ["/(^|/)flake\\.nix$/"],
      "matchStrings": [
        "goVersion\\s*=\\s*\"(?<currentValue>\\d+\\.\\d+\\.\\d+)\""
      ],
      "depNameTemplate": "go",
      "datasourceTemplate": "golang-version"
    },
    {
      "customType": "regex",
      "managerFilePatterns": [
        "Makefile"
      ],
      "matchStrings": [
        "DEV_KIT_VERSION := (?<currentValue>v[0-9]+\\.[0-9]+\\.[0-9]+)"
      ],
      "datasourceTemplate": "github-releases",
      "depNameTemplate": "opendefensecloud/dev-kit",
      "versioningTemplate": "semver"
    },
    {
      "customType": "regex",
      "managerFilePatterns": [
        "tools.lock"
      ],
      "matchStrings": [
        "(?<depName>[^\\s]+) (?<packageName>[^@]+)@(?<currentValue>v?[^\\s]+)"
      ],
      "versioningTemplate": "semver",
      "datasourceTemplate": "go"
    }
  ]
}