{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":dependencyDashboard",
    ":enableVulnerabilityAlertsWithLabel('security')",
    ":preserveSemverRanges",
    ":rebaseStalePrs",
    "group:recommended"
  ],
  "labels": [
    "renovate"
  ],
  "ignorePaths": [],
  "useBaseBranchConfig": "merge",
  "packageRules": [
    {
      "groupName": "devDependencies (non-major)",
      "matchDepTypes": [
        "devDependencies",
        "require-dev"
      ],
      "matchUpdateTypes": [
        "digest",
        "minor",
        "patch"
      ]
    },
    {
      "description": "Update MariaDB or MySQL on a patch level only, bumps to major and minor versions might break compatibilty with an application",
      "enabled": false,
      "matchManagers": [
        "custom.regex"
      ],
      "matchUpdateTypes": [
        "major",
        "minor"
      ],
      "matchPackageNames": [
        "/^([^/]+\\/)*(mariadb|mysql)(:.+)?$/"
      ]
    },
    {
      "description": "Update PostgreSQL on a minor version or patch level only, bumps to major versions might break compatibilty with an application",
      "enabled": false,
      "matchManagers": [
        "custom.regex"
      ],
      "matchUpdateTypes": [
        "major"
      ],
      "matchPackageNames": [
        "/^([^/]+\\/)*postgres(:.+)?$/"
      ]
    },
    {
      "description": "Update MariaDB or PostgreSQL to the most recent release if they are standalone and not part of an application stack",
      "enabled": true,
      "matchManagers": [
        "custom.regex"
      ],
      "matchFileNames": [
        "library/compose/mariadb/**",
        "library/compose/postgres/**"
      ],
      "matchUpdateTypes": [
        "major",
        "minor",
        "patch"
      ],
      "matchPackageNames": [
        "/^([^/]+\\/)*(mariadb|postgres)(:.+)?$/"
      ]
    },
    {
      "description": "Do not match Canonical's Ubuntu version suffix as a compatibility hint",
      "matchManagers": [
        "custom.regex"
      ],
      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)(\\.(?<patch>\\d+))?(?:-\\d+(?:\\.\\d+)+_edge)?$",
      "matchPackageNames": [
        "/^([^/]+\\/)*ubuntu/bind9(:.+)?$/"
      ]
    },
    {
      "description": "Catch a potential `security` suffix as part of the patch release as Grafana does not follow semver for security releases",
      "matchManagers": [
        "custom.regex"
      ],
      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+(?:-security-\\d+)?)$",
      "matchPackageNames": [
        "/^([^/]+\\/)*grafana/grafana-oss(:.+)?$/"
      ]
    },
    {
      "description": "Over time Heimdall changed its versioning schema several times, ensure we only consider the current style",
      "matchManagers": [
        "custom.regex"
      ],
      "versioning": "regex:^(?<major>\\d{1,2})\\.(?<minor>\\d+)(\\.(?<patch>\\d+))?$",
      "matchPackageNames": [
        "/^([^/]+\\/)*heimdall(:.+)?$/"
      ]
    },
    {
      "description": "Track stable releases of Nginx only",
      "matchManagers": [
        "custom.regex"
      ],
      "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d*[02468])(\\.(?<patch>\\d+))?(?:-(?<compatibility>.*))?$",
      "matchPackageNames": [
        "/^([^/]+\\/)*nginx(:.+)?$/"
      ]
    },
    {
      "description": "Ignore erroneous version tags of Semaphore",
      "matchManagers": [
        "custom.regex"
      ],
      "allowedVersions": "!/^v?2\\.19\\.10$/",
      "matchPackageNames": [
        "/^([^/]+\\/)*semaphore(:.+)?$/"
      ]
    }
  ],
  "customManagers": [
    {
      "customType": "regex",
      "description": "Update Docker images in Jinja2 compose templates",
      "managerFilePatterns": [
        "/library/compose/.+\\.j2$/"
      ],
      "matchStrings": [
        "image:\\s*(?<depName>[^:\\s]+):(?<currentValue>[^\\s\\n{]+)"
      ],
      "datasourceTemplate": "docker"
    },
    {
      "customType": "regex",
      "description": "Update Docker images in Helm values.yaml (repository + tag pattern)",
      "managerFilePatterns": [
        "/library/kubernetes/.+/helm/values\\.ya?ml$/",
        "/library/kubernetes/.+\\.j2$/"
      ],
      "matchStrings": [
        "repository:\\s*[\"']?(?<depName>[^:\\s\"']+)[\"']?\\s*\\n\\s*tag:\\s*[\"']?(?<currentValue>[^\\s\"']+)[\"']?"
      ],
      "datasourceTemplate": "docker"
    },
    {
      "customType": "regex",
      "description": "Update Terraform/OpenTofu providers and modules in templates",
      "managerFilePatterns": [
        "/library/terraform/.+\\.tf$/",
        "/library/terraform/.+\\.j2$/"
      ],
      "matchStrings": [
        "(?:source|module)\\s*=\\s*[\"'](?<depName>[^\"']+)[\"'](?:[\\s\\S]*?)version\\s*=\\s*[\"'](?<currentValue>[^\"']+)[\"']"
      ],
      "datasourceTemplate": "terraform-provider"
    }
  ],
  "prConcurrentLimit": 30,
  "prHourlyLimit": 5,
  "separateMinorPatch": true,
  "stopUpdatingLabel": "renovate/stop_updating"
}