mirror of
https://github.com/block/buzz.git
synced 2026-10-27 12:40:30 +00:00
3ee465e12b
Configure Renovate to wait three days before proposing newly released dependencies. The policy requires a registry publication timestamp and suppresses branches until the release ages past the window. Renovate security-alert updates continue to bypass minimum-release-age checks, so known fixes are not delayed. Checked with `renovate-config-validator --strict --no-global renovate.json`, `jq`, and `git diff --check`. Signed-off-by: Jordan Mecom <jm@squareup.com>
44 lines
1.6 KiB
JSON
44 lines
1.6 KiB
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": ["config:recommended", "helpers:pinGitHubActionDigests"],
|
|
"minimumReleaseAge": "3 days",
|
|
"minimumReleaseAgeBehaviour": "timestamp-required",
|
|
"internalChecksFilter": "strict",
|
|
"prCreation": "immediate",
|
|
"automerge": true,
|
|
"rebaseWhen": "conflicted",
|
|
"recreateWhen": "always",
|
|
"separateMinorPatch": true,
|
|
"postUpdateOptions": ["cargo:updateLockfile"],
|
|
"packageRules": [
|
|
{
|
|
"description": "Major version bumps often require code changes — require human review.",
|
|
"matchUpdateTypes": ["major"],
|
|
"automerge": false
|
|
},
|
|
{
|
|
"description": "Keep Rust crate updates isolated because 0.x minor releases often contain breaking changes. Group all minor updates per crate (don't split by individual version).",
|
|
"matchManagers": ["cargo"],
|
|
"groupName": null,
|
|
"separateMinorPatch": true,
|
|
"separateMultipleMinor": false
|
|
},
|
|
{
|
|
"description": "evalexpr v13 relicensed from MIT to AGPL-3.0 — pin below v13 until migrated to an MIT alternative.",
|
|
"matchPackageNames": ["evalexpr"],
|
|
"allowedVersions": "<13"
|
|
},
|
|
{
|
|
"description": "deadpool-redis re-exports redis types — version mismatch causes trait incompatibility.",
|
|
"matchPackageNames": ["redis", "deadpool-redis"],
|
|
"matchManagers": ["cargo"],
|
|
"groupName": "redis"
|
|
},
|
|
{
|
|
"description": "tiptap 3.23.x breaks editor lifecycle under real relay latency — pin until upstream stabilizes.",
|
|
"matchPackageNames": ["@tiptap/{/,}**"],
|
|
"allowedVersions": "<3.23.0"
|
|
}
|
|
]
|
|
}
|