streamyfin/.github/renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "description": "Renovate configuration for Streamyfin - Expo React Native Jellyfin client",
  "extends": [
    "config:best-practices",
    ":dependencyDashboard",
    ":enableVulnerabilityAlertsWithLabel(security)",
    ":semanticCommits",
    ":timezone(Etc/UTC)",
    "group:testNonMajor",
    "group:monorepos",
    "helpers:pinGitHubActionDigests",
    "customManagers:biomeVersions",
    ":automergeBranch",
    ":automergeRequireAllStatusChecks"
  ],
  "addLabels": ["dependencies"],
  "rebaseWhen": "conflicted",
  "ignorePaths": ["**/node_modules/**"],
  "ignoreUnstable": true,
  "minimumReleaseAge": "3 days",
  "schedule": ["before 6am on Sunday"],
  "branchPrefix": "renovate/",
  "commitMessagePrefix": "chore(deps):",
  "osvVulnerabilityAlerts": true,
  "configMigration": true,
  "separateMinorPatch": true,
  "customManagers": [
    {
      "customType": "regex",
      "managerFilePatterns": ["/\\.ya?ml$/"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)(?: versioning=(?<versioning>\\S+))?\\s+xcode-version:\\s*[\"']?(?<currentValue>[^\"'\\s]+)"
      ],
      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}loose{{/if}}"
    }
  ],
  "customDatasources": {
    "xcode": {
      "defaultRegistryUrlTemplate": "https://xcodereleases.com/data.json",
      "format": "json",
      "transformTemplates": [
        "{ \"releases\": [$[version.release.release=true].{\"version\": version.number}] }"
      ]
    }
  },
  "vulnerabilityAlerts": {
    "enabled": true,
    "addLabels": ["security", "vulnerability"],
    "assigneesFromCodeOwners": true,
    "commitMessageSuffix": " [SECURITY]"
  },
  "packageRules": [
    {
      "description": "Expo SDK coherence: expo, react, react-native and Expo-managed modules are pinned by the Expo SDK and must move together (via `expo install --fix`), so do not raise individual update PRs — group them and require manual approval from the Dependency Dashboard",
      "matchPackageNames": [
        "expo",
        "react",
        "react-dom",
        "react-native",
        "react-native-web",
        "expo-*",
        "@expo/*"
      ],
      "groupName": "Expo SDK",
      "dependencyDashboardApproval": true
    },
    {
      "description": "Group minor and patch GitHub Action updates into a single PR",
      "matchManagers": ["github-actions"],
      "groupName": "CI dependencies",
      "groupSlug": "ci-deps",
      "matchUpdateTypes": ["minor", "patch", "digest", "pin"],
      "automerge": true
    },
    {
      "description": "androidx and other Google-hosted Maven packages resolve from Google's Maven repository (not Maven Central)",
      "matchDatasources": ["maven"],
      "registryUrls": [
        "https://dl.google.com/dl/android/maven2/",
        "https://repo.maven.apache.org/maven2/"
      ]
    }
  ]
}