{ "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ "security:only-security-updates", ":semanticCommitTypeAll(deps)" ], "gitIgnoredAuthors": ["flagsmith-engineering[bot]@users.noreply.github.com"], "constraints": { "npm": "^11.10.0" }, "lockFileMaintenance": { "enabled": true, "schedule": ["before 9am on monday"] }, "pep621": { "lockFileMaintenance": { "description": "Not needed for uv, as Renovate remediates vulnerable transitive uv.lock dependencies directly", "enabled": false } }, "packageRules": [ { "matchManagers": ["pep621"], "matchFileNames": ["api/**"], "addLabels": ["api", "dependencies"], "semanticCommitScope": "API" }, { "matchManagers": ["pep621"], "matchFileNames": ["mcp/**"], "addLabels": ["mcp", "dependencies"], "semanticCommitScope": "MCP" }, { "matchManagers": ["npm"], "matchFileNames": ["frontend/**"], "addLabels": ["front-end", "dependencies"], "semanticCommitScope": "Frontend" }, { "matchManagers": ["npm"], "matchFileNames": ["docs/**"], "addLabels": ["docs", "dependencies"], "semanticCommitScope": "Docs" }, { "matchManagers": ["github-actions"], "matchFileNames": [".github/**"], "addLabels": ["ci", "dependencies"], "semanticCommitScope": "CI" }, { "description": "Eagerly bump internal Flagsmith packages on every release", "matchPackageNames": ["flagsmith-common", "flagsmith-private"], "enabled": true, "rangeStrategy": "bump" }, { "description": "Re-enable lock file maintenance for npm, which security:only-security-updates disables. Keep last with an empty scope to ensure commit scope is applied correctly.", "matchManagers": ["npm"], "matchUpdateTypes": ["lockFileMaintenance"], "enabled": true, "semanticCommitScope": "" } ], "semanticCommitScope": "" }