privilegedescalation-engineer[bot]
cd55d1bbba
The org renovate-config.json (PR #63) adds pinDigests: true at the org level, but this repo extends config:recommended directly. Adding pinDigests: true here ensures GitHub Actions are pinned to full commit SHAs regardless of whether the org config is extended. Related: privilegedescalation/.github#63, PRI-757
22 lines
527 B
JSON
22 lines
527 B
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": ["config:recommended"],
|
|
"baseBranches": ["main"],
|
|
"schedule": ["every weekend"],
|
|
"prConcurrentLimit": 10,
|
|
"pinDigests": true,
|
|
"packageRules": [
|
|
{
|
|
"matchManagers": ["npm"],
|
|
"matchUpdateTypes": ["minor", "patch"],
|
|
"groupName": "npm minor and patch"
|
|
},
|
|
{
|
|
"matchManagers": ["github-actions"],
|
|
"matchUpdateTypes": ["minor", "patch"],
|
|
"groupName": "github-actions minor and patch"
|
|
}
|
|
]
|
|
}
|
|
|