{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":dependencyDashboard"
  ],
  "dependencyDashboardApproval": true,
  "automerge": false,
  "labels": ["dependencies"],
  "prConcurrentLimit": 3,
  "prHourlyLimit": 1,
  "rangeStrategy": "pin",
  "customManagers": [
    {
      "customType": "regex",
      "description": "Refresh commit digests tracking an annotated Git branch",
      "managerFilePatterns": [
        "/(^|/|\\.)Dockerfile$/",
        "/(^|/)Dockerfile\\.[^/]*$/"
      ],
      "matchStrings": [
        "# renovate: datasource=git-refs packageName=(?<packageName>\\S+) currentValue=(?<currentValue>\\S+)\\s+ARG [A-Z0-9_]+=(?<currentDigest>[a-f0-9]{40})",
        "# renovate: datasource=git-refs packageName=(?<packageName>\\S+) currentValue=(?<currentValue>\\S+)\\s+RUN[^\\n]*\\n\\s*[^\\n]*@(?<currentDigest>[a-f0-9]{40})"
      ],
      "datasourceTemplate": "git-refs"
    }
  ],
  "packageRules": [
    {
      "description": "Dependabot owns GitHub Actions and container updates",
      "matchManagers": ["github-actions", "dockerfile", "docker-compose"],
      "enabled": false
    },
    {
      "description": "Group tracked Git branch digest refreshes",
      "matchDatasources": ["git-refs"],
      "groupName": "upstream source commits"
    },
    {
      "description": "Group CI workflow dependency updates",
      "matchManagers": ["github-actions", "woodpecker"],
      "groupName": "CI dependencies"
    }
  ]
}