renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "automergeType": "pr",
  "configMigration": true,
  "dependencyDashboardOSVVulnerabilitySummary": "all",
  "digest": {
    "automerge": true
  },
  "docker-compose": {
    "enabled": true
  },
  "dockerfile": {
    "enabled": true
  },
  "extends": [
    "config:recommended",
    "docker:pinDigests",
    "helpers:pinGitHubActionDigests",
    ":pinDevDependencies"
  ],
  "gomod": {
    "enabled": true
  },
  "lockFileMaintenance": {
    "automerge": true
  },
  "minor": {
    "automerge": true
  },
  "osvVulnerabilityAlerts": true,
  "packageRules": [
    {
      "dependencyDashboardApproval": true,
      "matchUpdateTypes": [
        "major"
      ]
    },
    {
      "matchDepTypes": [
        "action"
      ],
      "matchSourceUrlPrefixes": [
        "https://github.com/"
      ],
      "pinDigests": true,
      "prBodyColumns": [
        "Package",
        "Type",
        "Update",
        "Change",
        "Pending",
        "OpenSSF"
      ],
      "prBodyDefinitions": {
        "OpenSSF": "[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/{{sourceRepo}}/badge)](https://securityscorecards.dev/viewer/?uri=github.com/{{sourceRepo}})"
      }
    }
  ],
  "patch": {
    "automerge": true
  },
  "pin": {
    "automerge": true
  },
  "pre-commit": {
    "enabled": true
  },
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": [
      "vulnerability"
    ]
  }
}