{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    "helpers:pinGitHubActionDigests",
    ":enablePreCommit"
  ],
  "minimumReleaseAge": "3 days",
  "customManagers": [
    {
      "customType": "regex",
      "description": "actions/runner version",
      "managerFilePatterns": ["/^Dockerfile$/"],
      "matchStrings": ["ARG GH_RUNNER_VERSION=\"(?<currentValue>[^\"]+)\""],
      "datasourceTemplate": "github-releases",
      "depNameTemplate": "actions/runner",
      "extractVersionTemplate": "^v(?<version>.+)$"
    },
    {
      "customType": "regex",
      "description": "goss version in workflows",
      "managerFilePatterns": ["/^\\.github/workflows/.+\\.ya?ml$/"],
      "matchStrings": ["VERSION=\"(?<currentValue>v[^\"]+)\""],
      "datasourceTemplate": "github-releases",
      "depNameTemplate": "goss-org/goss"
    },
    {
      "customType": "regex",
      "description": "binfmt image used by setup-qemu-action",
      "managerFilePatterns": ["/^\\.github/workflows/.+\\.ya?ml$/"],
      "matchStrings": ["image: (?<depName>tonistiigi/binfmt):(?<currentValue>qemu-v\\S+)"],
      "datasourceTemplate": "docker",
      "versioningTemplate": "regex:^qemu-v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$"
    },
    {
      "customType": "regex",
      "description": "Tool versions marked with # renovate: comments in build/",
      "managerFilePatterns": ["/^build/.+\\.sh$/"],
      "matchStrings": ["# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)\\s+\\w+_VERSION=\"(?<currentValue>[^\"]+)\""],
      "extractVersionTemplate": "^v?(?<version>.+)$"
    }
  ],
  "packageRules": [
    {
      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
      "automerge": true
    },
    {
      "description": "One PR for the docker/* actions, which usually release together",
      "matchManagers": ["github-actions"],
      "matchPackageNames": ["docker/**"],
      "groupName": "docker actions"
    },
    {
      "description": "Moving latest to a new Ubuntu release is a release decision, not a routine bump",
      "matchFileNames": ["Dockerfile.base"],
      "matchPackageNames": ["ubuntu"],
      "matchUpdateTypes": ["major"],
      "dependencyDashboardApproval": true,
      "addLabels": ["os-major"],
      "prBodyNotes": [
        ":warning: This moves `latest` and the plain version tags to a new Ubuntu release.",
        "- [ ] Move the `latest` and plain-tag text in `README.md` to the new release's row",
        "- [ ] Confirm the new codename is in the `base.yml`, `deploy.yml`, `test.yml` and `trivy.yml` matrices",
        "- [ ] Smoke-test the `ubuntu-<new>` image on an older host (see #219 for the jammy precedent)",
        "- [ ] Add a release note that says to pin `ubuntu-<old>` to stay on the old release"
      ]
    }
  ],
  "platformAutomerge": true
}