cursorrules/renovate.json at main · usrrname/cursorrules · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":semanticCommits",
    ":semanticCommitTypeAll(chore)",
    ":automergePatch",
    ":automergeMinor",
    ":automergeBranch",
    "helpers:pinGitHubActionDigests"
  ],
  "schedule": [
    "before 9am on monday"
  ],
  "timezone": "America/New_York",
  "prConcurrentLimit": 3,
  "prHourlyLimit": 2,
  "stabilityDays": 3,
  "dependencyDashboard": true,
  "dependencyDashboardAutoclose": true,
  "vulnerabilityAlerts": {
    "enabled": true,
    "schedule": ["at any time"]
  },
  "packageRules": [
    {
      "matchUpdateTypes": ["major"],
      "enabled": true,
      "automerge": false,
      "description": "Disable auto-merge for major updates - require manual review"
    },
    {
      "matchDepTypes": ["devDependencies"],
      "automerge": true,
      "description": "Auto-merge dev dependency updates"
    },
    {
      "matchPackageNames": ["node"],
      "enabled": false,
      "description": "Node version updates require manual coordination"
    },
    {
      "matchManagers": ["github-actions"],
      "pinDigests": true,
      "description": "Pin GitHub Actions to commit SHAs for security"
    }
  ],
  "lockFileMaintenance": {
    "enabled": true,
    "automerge": true,
    "schedule": ["before 9am on the first day of the month"]
  }
}