.github/renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "docker:pinDigests",
    "group:kubernetes",
    "helpers:pinGitHubActionDigests"
  ],
  "pip_requirements": {
    "fileMatch": ["upper-constraints.txt"]
  },
  "customManagers": [
    {
      "customType": "regex",
      "fileMatch": [
        "roles/defaults/vars/main\\.yml"
      ],
      "datasourceTemplate": "docker",
      "versioningTemplate": "docker",
      "matchStrings": [
        "  \\w+?: (?<depName>[^:\\s]*):(?<currentValue>[^:@\\s]*)@?(?<currentDigest>sha256:[a-f0-9]+)?"
      ]
    }
  ],
  "packageRules": [
    {
      "enabled": false,
      "matchUpdateTypes": ["major", "minor", "patch"],
      "matchPackagePrefixes": [
        "docker.io/bitnami",
        "docker.io/coredns",
        "docker.io/grafana",
        "docker.io/library",
        "docker.io/nginxinc",
        "docker.io/percona",
        "docker.io/prom",
        "docker.io/rabbitmqoperator",
        "docker.io/rabbitmqoperator",
        "docker.io/rancher",
        "docker.io/rook",
        "docker.io/timberio",
        "quay.io/ceph",
        "quay.io/cilium",
        "quay.io/jetstack",
        "quay.io/keycloak",
        "quay.io/kiwigrid",
        "quay.io/prometheus",
        "quay.io/skopeo",
        "registry.k8s.io/"
      ]
    },
    {
      "enabled": false,
      "matchUpdateTypes": ["major"],
      "excludePackageNames": ["cryptography"],
      "matchFileNames": ["images/cloud-archive-builder/**/upper-constraints.txt"]
    },
    {
      "groupName": "upper-constraints",
      "matchFileNames": ["images/cloud-archive-builder/**/upper-constraints.txt"]
    }
  ],
  "regex": {
    "pinDigests": true
  },
  "ignorePaths": [
    "charts/**",
    "molecule/**",
    ".python-version",
    "pyproject.toml",
    "roles/kube_prometheus_stack/files/jsonnet/**",
    "requirements.txt",
    "Dockerfile",
    "galaxy.yml"
  ]
}