feat(config/presets): add security-only preset (#28320)

Co-authored-by: Sebastian Poxhofer <secustor@users.noreply.github.com>
renovatebot · Apr 11, 2024 · da6056c · da6056c
1 parent a1c8a93
commit da6056c
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/docs/usage/configuration-options.md b/docs/usage/configuration-options.md
@@ -4004,3 +4004,7 @@ To disable the vulnerability alerts feature, set `enabled=false` in a `vulnerabi
   }
 }
 ```
+
+<!-- prettier-ignore -->
+!!! note
+    If you want to raise only vulnerability fix PRs, you may use the `security:only-security-updates` preset.
diff --git a/lib/config/presets/internal/security.ts b/lib/config/presets/internal/security.ts
@@ -21,4 +21,19 @@ export const presets: Record<string, Preset> = {
       },
     ],
   },
+  'only-security-updates': {
+    description:
+      'Only update dependencies if vulnerabilities have been detected.',
+    extends: ['config:recommended'],
+    packageRules: [
+      {
+        enabled: false,
+        matchPackageNames: ['*'],
+      },
+    ],
+    vulnerabilityAlerts: {
+      enabled: true,
+    },
+    osvVulnerabilityAlerts: true,
+  },
 };