renovate: enable automerge for pin/pinDigest and patch for trusted deps

Signed-off-by: Mahe Tardy <[email protected]>
cilium · Oct 16, 2023 · 60c4b41 · 60c4b41
1 parent 03c1ca9
commit 60c4b41
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/.github/renovate.json5 b/.github/renovate.json5
@@ -66,6 +66,26 @@
   // about packageRules: To enable grouping, you configure the groupName field
   // to something non-null.
   "packageRules": [
+    {
+      "matchPackageNames": [
+        "go", // golang version directive upgrade in go.mod
+      ],
+      "matchPackagePrefixes": [
+        "docker.io/library/", // official Docker images
+        "github.com/golang/", // Golang official org
+        "golang.org/x/", // Golang official experimental org
+        "google.golang.org/", // Google official repo for api/genproto/grpc/protobuf
+        "github.com/google/", // Google official github org
+        "k8s.io/", // Kubernetes official repo
+        "sigs.k8s.io/", // Kubernetes official SIG repo
+      ],
+      "matchUpdateTypes": [
+        "patch",
+        "pin",
+        "pinDigest"
+      ],
+      "automerge": true
+    },
     {
       "groupName": "all github action dependencies",
       "groupSlug": "all-github-action",