renovate-config/rules-javascript.json5 at main · bcgov/renovate-config · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
// WARNING: This file is deprecated. It has been consolidated into default.json.
// It is preserved here strictly for legacy repositories pinned to older config releases (like v2026.7.0).
// DO NOT revise or maintain this file. Any rule updates should be made directly in default.json.
//
{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  // Renovate packageRules for JavaScript/TypeScript dependencies.
  // This file is intended to be referenced by downstream repositories for consistent update grouping and digest handling.
  "packageRules": [
    // Pin JavaScript/TypeScript dependencies for security
    {
      "description": "Pin JavaScript/TypeScript dependencies: Pin all digests/SHAs for supply chain security. This ensures reproducible builds and prevents dependency substitution attacks.",
      "matchManagers": [
        "npm",
        "yarn",
        "pnpm",
        "bun"
      ],
      "pinDigests": true
    },
    {
      "description": "Group Node.js ecosystem: Combine updates from all JavaScript managers (npm, yarn, pnpm, bun) into single PRs. JavaScript/TypeScript dependencies should be updated together to maintain compatibility.",
      "matchManagers": [
        "npm",
        "yarn",
        "pnpm",
        "bun"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "groupName": "node dependencies",
      "groupSlug": "node"
    },
    // Group vite dependencies
    {
      "description": "Group vite",
      "groupName": "vite",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/^vite$/", "/^@vitejs\\//"]
    },
    // Group linters
    {
      "description": "Group linters",
      "groupName": "linters",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/eslint/", "/^@prettier\\//", "/^prettier-plugin-/"]
    },
    // Group @angular dependencies
    {
      "description": "Group @angular",
      "groupName": "angular",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/^@angular\\//", "/^@angular-/"]
    },
    // Group aws-amplify dependencies
    {
      "description": "Group aws-amplify",
      "groupName": "aws-amplify",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/^@aws-amplify\\//", "/^aws-amplify/"]
    },
    // Group @testing-library dependencies
    {
      "description": "Group @testing-library",
      "groupName": "testing-library",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/^@testing-library\\//"]
    },
    // Group @nestjs dependencies
    {
      "description": "Group @nestjs",
      "groupName": "nestjs",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": [
        "/^@nestjs\\//",
        "/^@swc\\//",
        "/nestjs-/",
        "/nest-winston/",
        "/reflect-metadata/"
      ]
    },
    // Group lodash (frequent CVEs)
    {
      "description": "Group lodash",
      "groupName": "lodash",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/^lodash$/"]
    },
    // Group nodemailer (common SMTP vulnerabilities)
    {
      "description": "Group nodemailer",
      "groupName": "nodemailer",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/^nodemailer$/", "/^mailparser$/"]
    },
    // Group @mui dependencies
    {
      "description": "Group @mui",
      "groupName": "mui",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/^@mui\\//"]
    },
    // Group react-jsonschema-form (@rjsf) dependencies
    {
      "description": "Group react-jsonschema-form (@rjsf) dependencies to ensure core, utils, validator, and theme packages are updated together.",
      "groupName": "react-jsonschema-form",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": ["/^@rjsf\\//"]
    },
    // Group redux dependencies
    {
      "description": "Group redux",
      "groupName": "redux",
      "matchManagers": ["npm", "yarn", "pnpm", "bun"],
      "matchPackageNames": [
        "/^@redux-devtools\\//",
        "/redux/",
        "/react-redux/",
        "/redux-thunk/"
      ]
    },
    {
      "description": "Group Playwright packages, docker images, and GitHub Actions into a single PR",
      "matchPackageNames": [
        "/^playwright/",
        "/^@playwright\\//",
        "/^mcr\\.microsoft\\.com\\/playwright/",
        "/^microsoft\\/playwright-github-action/"
      ],
      "groupName": "playwright"
    }
    // Add additional rules below as needed
  ]
}