diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 37bac912..00000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,28 +0,0 @@ -version: 2 -updates: - - package-ecosystem: uv - target-branch: 'main' - directory: / - schedule: - interval: daily - time: '22:00' - cooldown: - default-days: 5 - open-pull-requests-limit: 10 - commit-message: - prefix: 'chore(deps)' - - - package-ecosystem: github-actions - target-branch: 'main' - directory: / - schedule: - interval: daily - time: '22:00' - cooldown: - default-days: 5 - commit-message: - prefix: 'chore(deps)' - groups: - codeql: - patterns: - - 'github/codeql-action/*' diff --git a/renovate.json b/renovate.json new file mode 100644 index 00000000..824c7b59 --- /dev/null +++ b/renovate.json @@ -0,0 +1,24 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "config:best-practices", + "security:openssf-scorecard", + ":semanticCommits", + ":semanticCommitTypeAll(chore)", + ":pinOnlyDevDependencies", + ":enableVulnerabilityAlerts", + ":automergeMinor" + ], + "ignorePresets": [ + ":dependencyDashboard", + ":semanticPrefixFixDepsChoreOthers" + ], + "minimumReleaseAge": "4 days", + "timezone": "Europe/Berlin", + "packageRules": [ + { + "matchManagers": ["github-actions", "custom.regex"], + "schedule": ["every weekend"] + } + ] +} \ No newline at end of file