From 01fb1ae854b825ac3680031368536dab0eb2f3e3 Mon Sep 17 00:00:00 2001 From: Brad Keryan Date: Fri, 20 Jun 2025 18:23:20 -0500 Subject: [PATCH] github: Group+schedule GHA and Python updates and disable automerge --- .github/renovate.json5 | 33 ++++++++++++++++++++++++++------- 1 file changed, 26 insertions(+), 7 deletions(-) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index 4077f7d..1276a22 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -1,21 +1,40 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "branchPrefix": "users/renovate/", + "timezone": "US/Central", "extends": [ "config:recommended", - ":maintainLockFilesWeekly", - ":automergePatch", - "schedule:automergeDaily", "helpers:pinGitHubActionDigestsToSemver", ":enableVulnerabilityAlerts" ], "packageRules": [ { - // Do not update Python packages when new versions are released. Instead, - // let lock file maintenance update them once a week. - "enabled": false, - "matchCategories": ["python"] + // Update GitHub Actions on weekends. + "matchCategories": ["github-actions"], + "groupName": "GitHub Actions", + "groupSlug": "github", + "schedule": [ + "* * * * 0,6" + ] + }, + { + // Update Python packages on weekends. + "matchCategories": ["python"], + "groupName": "Python packages", + "groupSlug": "python", + "schedule": [ + "* * * * 0,6" + ] } ], + "lockFileMaintenance": { + // Maintain lock files on early Tuesday mornings. This is primarily to + // update indirect dependencies that aren't handled by the Python packages + // group. + "enabled": true, + "schedule": [ + "* 0-3 * * 2" + ] + }, "osvVulnerabilityAlerts": true } \ No newline at end of file