mirror of
https://github.com/streamyfin/streamyfin.git
synced 2026-06-10 07:50:30 +01:00
expo, react, react-native and Expo-managed modules (expo-*, @expo/*) are pinned by the Expo SDK and must be upgraded together via `expo install --fix`. Individual Renovate update PRs for them risk broken builds, so group them as "Expo SDK" and require manual dashboard approval.
86 lines
2.9 KiB
JSON
86 lines
2.9 KiB
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"description": "Renovate configuration for Streamyfin - Expo React Native Jellyfin client",
|
|
"extends": [
|
|
"config:best-practices",
|
|
":dependencyDashboard",
|
|
":enableVulnerabilityAlertsWithLabel(security)",
|
|
":semanticCommits",
|
|
":timezone(Etc/UTC)",
|
|
"group:testNonMajor",
|
|
"group:monorepos",
|
|
"helpers:pinGitHubActionDigests",
|
|
"customManagers:biomeVersions",
|
|
":automergeBranch",
|
|
":automergeRequireAllStatusChecks"
|
|
],
|
|
"addLabels": ["dependencies"],
|
|
"rebaseWhen": "conflicted",
|
|
"ignorePaths": ["**/node_modules/**"],
|
|
"ignoreUnstable": true,
|
|
"minimumReleaseAge": "3 days",
|
|
"schedule": ["before 6am on Sunday"],
|
|
"branchPrefix": "renovate/",
|
|
"commitMessagePrefix": "chore(deps):",
|
|
"osvVulnerabilityAlerts": true,
|
|
"configMigration": true,
|
|
"separateMinorPatch": true,
|
|
"customManagers": [
|
|
{
|
|
"customType": "regex",
|
|
"managerFilePatterns": ["/\\.ya?ml$/"],
|
|
"matchStrings": [
|
|
"# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)(?: versioning=(?<versioning>\\S+))?\\s+xcode-version:\\s*[\"']?(?<currentValue>[^\"'\\s]+)"
|
|
],
|
|
"versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}loose{{/if}}"
|
|
}
|
|
],
|
|
"customDatasources": {
|
|
"xcode": {
|
|
"defaultRegistryUrlTemplate": "https://xcodereleases.com/data.json",
|
|
"format": "json",
|
|
"transformTemplates": [
|
|
"{ \"releases\": [$[version.release.release=true].{\"version\": version.number}] }"
|
|
]
|
|
}
|
|
},
|
|
"vulnerabilityAlerts": {
|
|
"enabled": true,
|
|
"addLabels": ["security", "vulnerability"],
|
|
"assigneesFromCodeOwners": true,
|
|
"commitMessageSuffix": " [SECURITY]"
|
|
},
|
|
"packageRules": [
|
|
{
|
|
"description": "Expo SDK coherence: expo, react, react-native and Expo-managed modules are pinned by the Expo SDK and must move together (via `expo install --fix`), so do not raise individual update PRs — group them and require manual approval from the Dependency Dashboard",
|
|
"matchPackageNames": [
|
|
"expo",
|
|
"react",
|
|
"react-dom",
|
|
"react-native",
|
|
"react-native-web",
|
|
"expo-*",
|
|
"@expo/*"
|
|
],
|
|
"groupName": "Expo SDK",
|
|
"dependencyDashboardApproval": true
|
|
},
|
|
{
|
|
"description": "Group minor and patch GitHub Action updates into a single PR",
|
|
"matchManagers": ["github-actions"],
|
|
"groupName": "CI dependencies",
|
|
"groupSlug": "ci-deps",
|
|
"matchUpdateTypes": ["minor", "patch", "digest", "pin"],
|
|
"automerge": true
|
|
},
|
|
{
|
|
"description": "androidx and other Google-hosted Maven packages resolve from Google's Maven repository (not Maven Central)",
|
|
"matchDatasources": ["maven"],
|
|
"registryUrls": [
|
|
"https://dl.google.com/dl/android/maven2/",
|
|
"https://repo.maven.apache.org/maven2/"
|
|
]
|
|
}
|
|
]
|
|
}
|