renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    "schedule:earlyMondays"
  ],
  "branchPrefix": "renovate-",
  "commitMessageAction": "Renovate Update",
  "labels": [
    "Dependencies",
    "Renovate"
  ],
  "customManagers": [
    {
      "customType": "regex",
      "fileMatch": [
        "^Dockerfile$"
      ],
      "matchStrings": [
        "FROM (?<depName>.*):alpine(?<currentValue>.*)-slim"
      ],
      "datasourceTemplate": "docker"
    }
  ],
  "packageRules": [
    {
      "groupName": "Patch & Minor Updates",
      "groupSlug": "all-minor-patch-updates",
      "labels": [
        "Dependencies",
        "Renovate"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "prPriority": 0,
      "schedule": [
        "after 6am and before 9am on Monday"
      ],
      "minimumReleaseAge": "3 days",
      "matchPackageNames": [
        "*"
      ]
    },
    {
      "description": "Docker file updates",
      "automerge": false,
      "groupName": "minor and patch updates (Docker)",
      "groupSlug": "all-minor-patch-updates-docker",
      "labels": [
        "Dependencies",
        "Renovate"
      ],
      "matchManagers": [
        "dockerfile"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "prCreation": "immediate",
      "prPriority": 4,
      "minimumReleaseAge": "3 days"
    }
  ],
  "major": {
    "labels": [
      "Dependencies",
      "Renovate"
    ],
    "prCreation": "immediate",
    "rangeStrategy": "pin",
    "prPriority": 1,
    "schedule": [
      "after 6am and before 9am on Monday"
    ]
  },
  "vulnerabilityAlerts": {
    "groupName": "Security Alerts",
    "labels": [
      "Dependencies",
      "Renovate"
    ],
    "schedule": [
      "after 6am and before 9am every weekday"
    ],
    "dependencyDashboardApproval": false,
    "minimumReleaseAge": null,
    "rangeStrategy": "pin",
    "commitMessagePrefix": "[SECURITY]",
    "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability",
    "prCreation": "immediate",
    "prPriority": 5
  },
  "prConcurrentLimit": 1
}