diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 37bac91..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,28 +0,0 @@ -version: 2 -updates: - - package-ecosystem: uv - target-branch: 'main' - directory: / - schedule: - interval: daily - time: '22:00' - cooldown: - default-days: 5 - open-pull-requests-limit: 10 - commit-message: - prefix: 'chore(deps)' - - - package-ecosystem: github-actions - target-branch: 'main' - directory: / - schedule: - interval: daily - time: '22:00' - cooldown: - default-days: 5 - commit-message: - prefix: 'chore(deps)' - groups: - codeql: - patterns: - - 'github/codeql-action/*' diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..03b5d5c --- /dev/null +++ b/renovate.json @@ -0,0 +1,39 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "config:best-practices", + "security:openssf-scorecard", + ":semanticCommits", + ":semanticCommitTypeAll(chore)", + ":pinOnlyDevDependencies", + ":enableVulnerabilityAlerts", + ":automergeMinor" + ], + "ignorePresets": [ + ":dependencyDashboard", + ":semanticPrefixFixDepsChoreOthers" + ], + "minimumReleaseAge": "4 days", + "timezone": "Europe/Berlin", + "packageRules": [ + { + "matchManagers": ["github-actions", "custom.regex"], + "schedule": ["every weekend"] + }, + { + "matchPackageNames": ["sap/ai-sdk-python", "sap/ai-sdk-python/**"], + "groupName": "sap-ai-sdk", + "minimumReleaseAge": null, + "pinDigests": false + }, + { + "matchPackageNames": ["langchain", "langchain/**"], + "groupName": "langchain" + }, + { + "description": "Group CodeQL actions into a single PR", + "matchPackagePatterns": ["github/codeql-action/*"], + "groupName": "codeql" + } + ] +} \ No newline at end of file