{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "enabledManagers": ["npm", "custom.regex", "terraform", "github-actions"],
  "schedule": ["before 6am every weekday"],
  "minimumReleaseAge": "3 days",
  "internalChecksFilter": "strict",
  "customManagers": [
    {
      "customType": "regex",
      "description": "Playwright image tag in CI must match @playwright/test",
      "managerFilePatterns": ["/^\\.github/workflows/ci\\.ya?ml$/"],
      "matchStrings": [
        "mcr\\.microsoft\\.com/playwright:v(?<currentValue>\\d+\\.\\d+\\.\\d+)-noble"
      ],
      "datasourceTemplate": "npm",
      "depNameTemplate": "@playwright/test",
      "versioningTemplate": "npm"
    },
    {
      "customType": "regex",
      "description": [
        "actionlint release installed by the governance job; its SHA256 pin must be updated by hand, so this only surfaces the update on the dashboard"
      ],
      "managerFilePatterns": ["/^\\.github/workflows/ci\\.ya?ml$/"],
      "matchStrings": ["ACTIONLINT_VERSION: \"(?<currentValue>\\d+\\.\\d+\\.\\d+)\""],
      "datasourceTemplate": "github-releases",
      "depNameTemplate": "rhysd/actionlint",
      "extractVersionTemplate": "^v(?<version>.*)$"
    }
  ],
  "packageRules": [
    {
      "description": ["Group non-major Terraform provider updates"],
      "matchManagers": ["terraform"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "terraform minor and patch"
    },
    {
      "description": ["Do not open major or replacement PRs until approved on the dashboard"],
      "matchUpdateTypes": ["major", "replacement"],
      "dependencyDashboardApproval": true
    },
    {
      "description": [
        "Do not open Playwright PRs until approved; image and upload-artifact share a Node runtime"
      ],
      "matchPackageNames": ["@playwright/test"],
      "dependencyDashboardApproval": true,
      "groupName": "playwright"
    },
    {
      "description": [
        "Do not open actionlint PRs until approved; the SHA256 pin in ci.yaml has to change with the version"
      ],
      "matchPackageNames": ["rhysd/actionlint"],
      "dependencyDashboardApproval": true
    },
    {
      "description": ["Keep MUI packages together"],
      "matchPackageNames": ["@mui/**"],
      "matchUpdateTypes": ["major"],
      "groupName": "mui"
    },
    {
      "description": ["Keep React and its type packages together"],
      "matchPackageNames": ["react", "react-dom", "@types/react", "@types/react-dom"],
      "matchUpdateTypes": ["major"],
      "groupName": "react"
    },
    {
      "description": ["Keep FullCalendar packages together"],
      "matchPackageNames": ["@fullcalendar/**"],
      "matchUpdateTypes": ["major"],
      "groupName": "fullcalendar"
    },
    {
      "description": ["Do not bump package.json engines"],
      "matchDepTypes": ["engines"],
      "enabled": false
    },
    {
      "description": ["Do not bump packageManager"],
      "matchDepTypes": ["packageManager"],
      "enabled": false
    },
    {
      "description": ["Keep TanStack Query packages on one version"],
      "matchPackageNames": ["@tanstack/**"],
      "groupName": "tanstack query"
    }
  ]
}