renovate.json5

{
  $schema: "https://docs.renovatebot.com/renovate-schema.json",
  extends: [
    ":preserveSemverRanges",
    ":semanticCommitsDisabled",
    ":separateMajorReleases",
    "config:recommended",
    "helpers:pinGitHubActionDigests",
  ],
  commitMessagePrefix: "deps:",
  commitMessageAction: "update",
  addLabels: [ "dependencies" ],
  postUpdateOptions: [
    "gomodTidy",
    "gomodUpdateImportPaths",
  ],
  prConcurrentLimit: 1,
  nix: { enabled: true },
  lockFileMaintenance: {
    enabled: true,
    commitMessageAction: "flake.lock: Update",
    commitMessagePrefix: null,
    schedule: [ "before 4am" ],
  },
  packageRules: [
    {
      matchManagers: [ "gomod" ],
      matchDepTypes: [ "indirect" ],
      enabled: true,
    },
    {
      groupName: "Go indirect dependencies",
      matchManagers: [ "gomod" ],
      matchDepTypes: [ "indirect" ],
      prPriority: -30,
    },
    {
      groupName: "Go dependencies",
      matchManagers: [ "gomod" ],
      matchDepTypes: [ "require" ],
      matchUpdateTypes: [
        "bump",
        "digest",
        "lockFileMaintenance",
        "minor",
        "patch",
        "pin",
        "pinDigest",
        "rollback",
      ],
    },
    {
      matchManagers: [ "github-actions" ],
      groupName: "GitHub action dependencies",
      matchUpdateTypes: [
        "bump",
        "digest",
        "lockFileMaintenance",
        "minor",
        "patch",
        "pin",
        "pinDigest",
        "rollback",
      ],
    },
  ],
}