renovate.json5

{
  $schema: "https://docs.renovatebot.com/renovate-schema.json",
  extends: [
    "config:recommended",
    ":semanticCommits",
    ":semanticCommitTypeAll(fix)",
    ":enableVulnerabilityAlertsWithLabel(SECURITY)",
  ],
  npm: {
    minimumReleaseAge: "3 days",
  },
  customManagers: [
    {
      customType: "regex",
      description: "Update _VERSION variables in Dockerfiles, shell scripts",
      fileMatch: [
        "(^|/|\\.)([Dd]ocker|[Cc]ontainer)file$",
        "(^|/)([Dd]ocker|[Cc]ontainer)file[^/]*$",
        "(^|/).*\\.sh$",
      ],
      matchStrings: [
        '# renovate: datasource=(?<datasource>[a-z-]+?)(?: depName=(?<depName>.+?))? packageName=(?<packageName>.+?)(?: versioning=(?<versioning>[a-z-]+?))?\\s(?:ENV|ARG)?\\s*.+?_VERSION="?(?<currentValue>.+?)"?\\s',
      ],
    },
  ],
  packageRules: [
    {
      description: "Do not create PRs for nodejs/npm engine updates",
      matchPackageNames: ["node", "npm"],
      matchDepTypes: ["engines"],
      dependencyDashboardApproval: true,
      groupName: "npm-engine-versions",
    },
    {
      description: "Group updates for all NPM packages",
      matchDatasources: ["npm"],
      groupName: "npm-packages",
      matchPackageNames: ["!npm", "!node"],
    },
    {
      matchDatasources: ["terraform-module", "terraform-provider"],
      groupName: "terraform",
    },
    {
      matchDatasources: ["docker"],
      groupName: "docker-containers",
    },
  ],
  rangeStrategy: "bump",
}