renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended", ":dependencyDashboard"],
  "timezone": "Europe/Zurich",
  "schedule": ["before 6am on monday"],
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 6am on monday"]
  },
  "customManagers": [
    {
      "customType": "regex",
      "description": "RKE2 version pinned in Terraform variable defaults",
      "managerFilePatterns": ["/\\.tf$/"],
      "matchStrings": [
        "rke2_version[\\s\\S]*?default\\s*=\\s*\"(?<currentValue>v[0-9.]+\\+rke2r[0-9]+)\""
      ],
      "depNameTemplate": "rancher/rke2",
      "datasourceTemplate": "github-releases",
      "versioningTemplate": "regex:^v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)\\+rke2r(?<build>\\d+)$"
    },
    {
      "customType": "regex",
      "description": "Helm chart versions inside RKE2 HelmChart manifests (repo/chart/version triplet)",
      "managerFilePatterns": ["/\\.tftpl$/", "/\\.ya?ml$/"],
      "matchStrings": [
        "repo:\\s*(?<registryUrl>\\S+)\\s+chart:\\s*(?<depName>\\S+)\\s+version:\\s*(?<currentValue>\\S+)"
      ],
      "datasourceTemplate": "helm"
    },
    {
      "customType": "regex",
      "description": "Container image tags flagged with a renovate hint comment",
      "managerFilePatterns": ["/\\.tftpl$/", "/\\.ya?ml$/"],
      "matchStrings": [
        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)\\s*\\n\\s*image:\\s*\\S+:(?<currentValue>[\\w][\\w.-]*)"
      ]
    }
  ],
  "packageRules": [
    {
      "matchManagers": ["terraform"],
      "matchDepTypes": ["provider", "required_provider"],
      "groupName": "terraform providers"
    },
    {
      "matchManagers": ["terraform"],
      "matchDepTypes": ["module"],
      "groupName": "terraform modules"
    },
    {
      "description": "Group the Kubernetes add-on chart + RKE2 bumps together",
      "matchDatasources": ["helm", "github-releases"],
      "groupName": "kubernetes add-ons"
    },
    {
      "matchManagers": ["github-actions"],
      "groupName": "github actions",
      "pinDigests": true
    },
    {
      "description": "Auto-merge low-risk updates; hold majors for review",
      "matchUpdateTypes": ["minor", "patch", "digest"],
      "automerge": true
    },
    {
      "matchUpdateTypes": ["major"],
      "automerge": false,
      "addLabels": ["major-update"]
    }
  ]
}