renovate-config

Shareable Renovate config presets for singularIT.

Usage

Default preset

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "github>singularit-de/renovate-config#0.0.10"
  ]
}

GitLab (self-hosted) preset

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "github>singularit-de/renovate-config:gitlab#0.0.10"
  ]
}

Docker preset

Includes all Docker sub-presets (base + versions).

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "github>singularit-de/renovate-config:docker#0.0.10"
  ]
}

Sub-presets can also be used individually:

• :docker/base — digest pinning and major updates
• :docker/envVersions — detects _VERSION variables in Dockerfiles via # renovate: comments

Example Dockerfile usage for docker/envVersions:

# renovate: datasource=docker depName=node versioning=docker
ENV NODE_VERSION=18.17.0

# renovate: datasource=docker depName=php versioning=docker
ARG PHP_VERSION=8.2

Warning

Do not use # renovate: comments for variables that are used in a FROM directive. Renovate has native support for detecting and updating Docker image references in FROM lines. Adding a # renovate: comment in this case will override the native handling and disable digest pinning for that image.

# Bad – unnecessary, Renovate already handles this natively
# renovate: datasource=docker depName=node versioning=docker
ARG NODE_VERSION=18.17.0
FROM node:${NODE_VERSION}

# Good – Renovate updates the FROM reference automatically
ARG NODE_VERSION=18.17.0
FROM node:${NODE_VERSION}

GitLab preset

Enables OSV vulnerability alerts and detects _VERSION variables in GitLab CI pipelines via # renovate: comments. This is needed because Renovate's native gitlabci manager does not resolve variables used in image: directives.

Example .gitlab-ci.yml usage:

variables:
  # renovate: datasource=docker depName=node versioning=docker
  NODE_VERSION: "18.17.0"
  # renovate: datasource=docker depName=python versioning=docker
  PYTHON_VERSION: "3.12.0"

build:
  image: node:$NODE_VERSION
  script:
    - npm ci && npm run build

Presets

Preset	Description
default	Combines base, docker, python, and gitlab presets
base	Extends config:best-practices, :rebaseStalePrs, and mergeConfidence:all-badges with assignees from code owners
docker	Combines docker/base and docker/envVersions
docker/base	Enables docker:pinDigests and docker:enableMajor
docker/envVersions	Detects and updates _VERSION variables (ENV/ARG) in Dockerfiles via # renovate: comments
python	Configures pip_requirements file matching
gitlab	Enables OSV vulnerability alerts and detects _VERSION variables in GitLab CI pipelines via # renovate: comments
node	Sets rangeStrategy to bump for Node.js projects

Releasing

npm run release

Uses bumpp to interactively bump the version, create a git tag, and push to origin. A GitHub Actions workflow then creates a GitHub Release.

Version pins in transitive config references (e.g. github>singularit-de/renovate-config:base#0.0.10 in default.json`) are automatically updated to the new version during the bump.