From 4ebe6de60b12213e500e308f244a60fc63d6736d Mon Sep 17 00:00:00 2001
From: h <h@kotikot.com>
Date: Thu, 10 Sep 2026 15:03:44 +0000
Subject: [PATCH] chore(renovate): add Renovate config

---
 renovate.jsonc | 144 +++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 144 insertions(+)
 create mode 100644 renovate.jsonc

diff --git a/renovate.jsonc b/renovate.jsonc
new file mode 100644
index 0000000..d9b78d2
--- /dev/null
+++ b/renovate.jsonc
@@ -0,0 +1,144 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    ":dependencyDashboard"
+  ],
+  "timezone": "Europe/Warsaw",
+  "enabledManagers": [
+    "docker-compose",
+    "dockerfile",
+    "npm",
+    "bun",
+    "pep621",
+    "pip_requirements",
+    "gomod",
+    "github-actions"
+  ],
+  "ignorePaths": [
+    "**/caddy/**",
+    "_legacy/**",
+    "**/docker-compose.worktree.yml"
+  ],
+  "pinDigests": true,
+  "minimumReleaseAge": "3 days",
+  "minimumReleaseAgeBehaviour": "timestamp-required",
+  "internalChecksFilter": "strict",
+  "labels": [
+    "renovate"
+  ],
+  "rebaseWhen": "behind-base-branch",
+  "platformAutomerge": true,
+  "automergeStrategy": "squash",
+  "prHourlyLimit": 8,
+  "prConcurrentLimit": 25,
+  "packageRules": [
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "patch",
+        "minor",
+        "digest",
+        "pinDigest"
+      ],
+      "automerge": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "pin",
+        "pinDigest"
+      ],
+      "groupName": null,
+      "automerge": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    },
+    {
+      "matchPackageNames": [
+        "postgres",
+        "docker.io/library/postgres",
+        "postgis/postgis",
+        "redis",
+        "docker.io/library/redis",
+        "mongo",
+        "docker.io/library/mongo",
+        "mariadb",
+        "docker.io/library/mariadb",
+        "timescale/timescaledb"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "ghcr.io/**",
+        "lscr.io/**",
+        "quay.io/**",
+        "public.ecr.aws/**",
+        "docker.elastic.co/**"
+      ],
+      "minimumReleaseAgeBehaviour": "timestamp-optional",
+      "automerge": false,
+      "addLabels": [
+        "wait-3d"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchCurrentValue": "/^(latest|stable|main|edge|main-stable|latest-full|s6|dind)$/",
+      "minimumReleaseAgeBehaviour": "timestamp-optional",
+      "automerge": false,
+      "addLabels": [
+        "wait-3d"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "!docker"
+      ],
+      "matchUpdateTypes": [
+        "pin",
+        "patch",
+        "minor",
+        "digest",
+        "pinDigest"
+      ],
+      "groupName": "code dependencies",
+      "automerge": false,
+      "addLabels": [
+        "deps-code"
+      ]
+    },
+    {
+      "matchDatasources": [
+        "!docker"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    }
+  ]
+}