shoc-frontend-new/.github/renovate.json
Adam Moussa 08da408a13
ci(governance): wire Terraform and CDK gates and isolate Terraform PRs
Governance now runs the import-plan checker tests, Terraform fmt and
validate for terraform/live/dev, the isolation gate tests, and the CDK
build, tests, and synth in both modes. A new terraform-isolation
workflow fails PRs that change terraform/** together with application
code; the terraform-isolation-override label is the reviewed exception.
Renovate gains the terraform manager.
2026-09-10 19:15:13 -04:00

73 lines
2.3 KiB
JSON

{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"enabledManagers": ["npm", "custom.regex", "terraform"],
"minimumReleaseAge": "3 days",
"internalChecksFilter": "strict",
"customManagers": [
{
"customType": "regex",
"description": "Playwright image tag in CI must match @playwright/test",
"managerFilePatterns": ["/^\\.github/workflows/ci\\.ya?ml$/"],
"matchStrings": [
"mcr\\.microsoft\\.com/playwright:v(?<currentValue>\\d+\\.\\d+\\.\\d+)-noble"
],
"datasourceTemplate": "npm",
"depNameTemplate": "@playwright/test",
"versioningTemplate": "npm"
}
],
"packageRules": [
{
"description": ["Group non-major Terraform provider updates"],
"matchManagers": ["terraform"],
"matchUpdateTypes": ["minor", "patch"],
"groupName": "terraform minor and patch"
},
{
"description": ["Do not open major or replacement PRs until approved on the dashboard"],
"matchUpdateTypes": ["major", "replacement"],
"dependencyDashboardApproval": true
},
{
"description": [
"Do not open Playwright PRs until approved; image and upload-artifact share a Node runtime"
],
"matchPackageNames": ["@playwright/test"],
"dependencyDashboardApproval": true,
"groupName": "playwright"
},
{
"description": ["Keep MUI packages together"],
"matchPackageNames": ["@mui/**"],
"matchUpdateTypes": ["major"],
"groupName": "mui"
},
{
"description": ["Keep React and its type packages together"],
"matchPackageNames": ["react", "react-dom", "@types/react", "@types/react-dom"],
"matchUpdateTypes": ["major"],
"groupName": "react"
},
{
"description": ["Keep FullCalendar packages together"],
"matchPackageNames": ["@fullcalendar/**"],
"matchUpdateTypes": ["major"],
"groupName": "fullcalendar"
},
{
"description": ["Do not bump package.json engines"],
"matchDepTypes": ["engines"],
"enabled": false
},
{
"description": ["Do not bump packageManager"],
"matchDepTypes": ["packageManager"],
"enabled": false
},
{
"description": ["Keep TanStack Query packages on one version"],
"matchPackageNames": ["@tanstack/**"],
"groupName": "tanstack query"
}
]
}