kube-audit-mcp

{
  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
  extends: [
    'config:recommended',
    ':gitSignOff',
    'helpers:pinGitHubActionDigests',
  ],
  gitAuthor: 'renovate[bot] <bot@renovateapp.com>',
  includePaths: [
    '.github/workflows/**',
    '.github/**',
    '.github/build.Dockerfile',
    'go.mod',
    'go.sum',
    'Dockerfile',
  ],
  postUpdateOptions: [
    'gomodTidy',
  ],
  pinDigests: true,
  ignorePresets: [
    ':prHourlyLimit2',
  ],
  ignoreDeps: [
    'github.com/mozillazg/ebpf',
    'github.com/mozillazg/gopacket',
    'github.com/mozillazg/pktdump',
    'github.com/mozillazg/cri-api',
    'github.com/mozillazg/cri-client',
    'github.com/containerd/errdefs',
    'github.com/mandiant/GoReSym',
  ],
  separateMajorMinor: true,
  separateMultipleMajor: true,
  separateMinorPatch: true,
  pruneStaleBranches: true,
  baseBranchPatterns: [
    'master',
  ],
  vulnerabilityAlerts: {
    enabled: true,
  },
  labels: [
    'dependencies',
    'renovate/stop-updating',
  ],
  stopUpdatingLabel: 'renovate/stop-updating',
  packageRules: [
    {
      enabled: false,
      matchPackageNames: [
        'quay.io/lvh-images/kernel-images',
      ],
      matchUpdateTypes: [
        'major',
        'minor',
      ],
    },
    {
      groupName: 'all github action dependencies',
      groupSlug: 'all-github-action',
      extends: [
        'schedule:weekly',
      ],
      matchFileNames: [
        '.github/workflows/**',
      ],
      matchUpdateTypes: [
        'major',
        'minor',
        'digest',
        'patch',
        'pin',
        'pinDigest',
      ],
    },
    {
      groupName: 'all go dependencies master',
      groupSlug: 'all-go-deps-master',
      extends: [
        'schedule:weekly',
      ],
      matchFileNames: [
        'go.mod',
        'go.sum',
      ],
      postUpdateOptions: [
        'gomodUpdateImportPaths',
      ],
      matchUpdateTypes: [
        'major',
        'minor',
        'digest',
        'patch',
        'pin',
        'pinDigest',
      ],
      matchBaseBranches: [
        'master',
      ],
    },
    {
      groupName: 'Go',
      extends: [
        'schedule:weekly',
      ],
      matchDepNames: [
        'go',
        'docker.io/library/golang',
      ],
    },
    {
      enabled: false,
      matchFileNames: [
        'go.mod',
      ],
      matchDepNames: [
        'go',
      ],
      matchDatasources: [
        'golang-version',
      ],
      matchUpdateTypes: [
        'patch',
      ],
      matchBaseBranches: [
        'master',
      ],
    },
    {
      matchDepNames: [
        'quay.io/lvh-images/kernel-images',
      ],
      versioning: 'regex:^((?<compatibility>[a-z0-9-]+)|((?<major>\\d+)\\.(?<minor>\\d+)))\\-(?<patch>\\d+)\\.(?<build>\\d+)(@(?<currentDigest>sha256:[a-f0-9]+))?$',
    },
    {
      groupName: 'all lvh-images main',
      groupSlug: 'all-lvh-images-main',
      matchPackageNames: [
        'quay.io/lvh-images/kernel-images',
      ],
      matchUpdateTypes: [
        'digest',
        'patch',
        'pin',
        'pinDigest',
      ],
    },
  ],
  customManagers: [
    {
      customType: 'regex',
      managerFilePatterns: [
        '/^\\.github/workflows/[^/]+\\.ya?ml$/',
      ],
      matchStrings: [
        '# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+version: (?<currentValue>.*)',
        '# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+.+ [\'"]?(?<currentValue>[^\'"\\s]*)',
      ],
    },
  ],
}