{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":dependencyDashboard",
    ":enableVulnerabilityAlertsWithLabel('security')",
    ":preserveSemverRanges",
    ":rebaseStalePrs",
    "group:recommended"
  ],
  "labels": [
    "renovate"
  ],
  "ignorePaths": [],
  "useBaseBranchConfig": "merge",
  "packageRules": [
    {
      "groupName": "devDependencies (non-major)",
      "matchDepTypes": [
        "devDependencies",
        "require-dev"
      ],
      "matchUpdateTypes": [
        "digest",
        "minor",
        "patch"
      ]
    },
    {
      "description": "Update MariaDB or MySQL on a patch level only, bumps to major and minor versions might break compatibility with an application",
      "enabled": false,
      "matchManagers": [
        "custom.regex"
      ],
      "matchUpdateTypes": [
        "major",
        "minor"
      ],
      "matchPackageNames": [
        "/^([^/]+\\/)*(mariadb|mysql)(:.+)?$/"
      ]
    },
    {
      "description": "Update PostgreSQL on a minor version or patch level only, bumps to major versions might break compatibility with an application",
      "enabled": false,
      "matchManagers": [
        "custom.regex"
      ],
      "matchUpdateTypes": [
        "major"
      ],
      "matchPackageNames": [
        "/^([^/]+\\/)*postgres(:.+)?$/"
      ]
    },
    {
      "description": "Update MariaDB or PostgreSQL to the most recent release if they are standalone and not part of an application stack",
      "enabled": true,
      "matchManagers": [
        "custom.regex"
      ],
      "matchFileNames": [
        "compose/mariadb/**",
        "compose/postgres/**",
        "swarm/postgres/**"
      ],
      "matchUpdateTypes": [
        "major",
        "minor",
        "patch"
      ],
      "matchPackageNames": [
        "/^([^/]+\\/)*(mariadb|postgres)(:.+)?$/"
      ]
    },
    {
      "description": "Split Compose template updates into their own Renovate branches",
      "matchManagers": [
        "custom.regex"
      ],
      "matchFileNames": [
        "compose/**"
      ],
      "additionalBranchPrefix": "compose-"
    },
    {
      "description": "Split Swarm template updates into their own Renovate branches",
      "matchManagers": [
        "custom.regex"
      ],
      "matchFileNames": [
        "swarm/**"
      ],
      "additionalBranchPrefix": "swarm-"
    },
    {
      "description": "Split Helm template updates into their own Renovate branches",
      "matchManagers": [
        "custom.regex"
      ],
      "matchFileNames": [
        "helm/**"
      ],
      "additionalBranchPrefix": "helm-"
    },
    {
      "description": "Split Kubernetes template updates into their own Renovate branches",
      "matchManagers": [
        "custom.regex"
      ],
      "matchFileNames": [
        "kubernetes/**"
      ],
      "additionalBranchPrefix": "kubernetes-"
    },
    {
      "description": "Do not match Canonical's Ubuntu version suffix as a compatibility hint",
      "matchManagers": [
        "custom.regex"
      ],
      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)(\\.(?<patch>\\d+))?(?:-\\d+(?:\\.\\d+)+_edge)?$",
      "matchPackageNames": [
        "/^([^/]+\\/)*ubuntu\/bind9(:.+)?$/"
      ]
    },
    {
      "description": "Catch a potential `security` suffix as part of the patch release as Grafana does not follow semver for security releases",
      "matchManagers": [
        "custom.regex"
      ],
      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+(?:-security-\\d+)?)$",
      "matchPackageNames": [
        "/^([^/]+\\/)*grafana\/grafana(:.+)?$/"
      ]
    },
    {
      "description": "Over time Heimdall changed its versioning schema several times, ensure we only consider the current style",
      "matchManagers": [
        "custom.regex"
      ],
      "versioning": "regex:^(?<major>\\d{1,2})\\.(?<minor>\\d+)(\\.(?<patch>\\d+))?$",
      "matchPackageNames": [
        "/^([^/]+\\/)*heimdall(:.+)?$/"
      ]
    },
    {
      "description": "Track stable releases of Nginx only",
      "matchManagers": [
        "custom.regex"
      ],
      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d*[02468])(\\.(?<patch>\\d+))?(?:-(?<compatibility>.*))?$",
      "matchPackageNames": [
        "/^([^/]+\\/)*nginx(:.+)?$/"
      ]
    },
    {
      "description": "Ignore erroneous version tags of Semaphore",
      "matchManagers": [
        "custom.regex"
      ],
      "allowedVersions": "!/^v?2\\.19\\.10$/",
      "matchPackageNames": [
        "/^([^/]+\\/)*semaphore(:.+)?$/"
      ]
    }
  ],
  "customManagers": [
    {
      "customType": "regex",
      "description": "Update Docker images in Compose and Swarm templates",
      "fileMatch": [
        "^(compose|swarm)\/.+\/files\/.+\\.ya?ml$"
      ],
      "matchStrings": [
        "image:\\s*(?<depName>[^:\\s]+):(?<currentValue>[^\\s\\n<]+)"
      ],
      "datasourceTemplate": "docker"
    },
    {
      "customType": "regex",
      "description": "Update Docker images in Helm and Kubernetes repository/tag templates",
      "fileMatch": [
        "^helm\/.+\/files\/values\\.ya?ml$",
        "^kubernetes\/.+\/files\/.+\\.ya?ml$"
      ],
      "matchStrings": [
        "repository:\\s*[\"']?(?<depName>[^:\\s\"']+)[\"']?\\s*\\n\\s*tag:\\s*[\"']?(?<currentValue>[^\\s\"']+)[\"']?"
      ],
      "datasourceTemplate": "docker"
    },
    {
      "customType": "regex",
      "description": "Update Terraform/OpenTofu providers and modules in templates",
      "fileMatch": [
        "^terraform\/.+\/files\/.+\\.tf$"
      ],
      "matchStrings": [
        "(?:source|module)\\s*=\\s*[\"'](?<depName>[^\"']+)[\"'](?:[\\s\\S]*?)version\\s*=\\s*[\"'](?<currentValue>[^\"']+)[\"']"
      ],
      "datasourceTemplate": "terraform-provider"
    }
  ],
  "gitAuthor": "github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
  "separateMinorPatch": true,
  "stopUpdatingLabel": "renovate/stop_updating"
}