renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended"
  ],
  "timezone": "Etc/UTC",
  "schedule": [
    "before 6am on monday"
  ],
  "labels": [
    "dependencies"
  ],
  "minimumReleaseAge": "3 days",
  "dockerfile": {
    "description": "Superseded by the customManager below: this manager cannot rewrite FROM lines whose tag only partially comes from an ARG (ghcr.io/php/pie:${PIE_VERSION}-bin), and emits updates whose replaceString is absent from the file",
    "enabled": false
  },
  "customManagers": [
    {
      "customType": "regex",
      "description": "Version pins declared as ARG defaults in the Dockerfiles",
      "managerFilePatterns": [
        "/(^|/)[\\w.-]*Dockerfile$/"
      ],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+) versioning=(?<versioning>\\S+)\\s*\\nARG \\w+=\"(?<currentValue>[^\"]+)\""
      ]
    }
  ],
  "packageRules": [
    {
      "description": "Group all GitHub Actions bumps into a single PR",
      "matchManagers": [
        "github-actions"
      ],
      "groupName": "actions",
      "addLabels": [
        "github-actions"
      ]
    },
    {
      "description": "PIE, FrankenPHP and Composer images are tracked via their GitHub releases: GHCR exposes no tag timestamps and Docker Hub resets them on every rebuild, so minimumReleaseAge would stay pending forever. We pin FrankenPHP to a minor version, so only consider vX.Y.0 releases, giving each minor the timestamp of its first release",
      "matchDatasources": [
        "github-releases"
      ],
      "matchPackageNames": [
        "php/frankenphp"
      ],
      "extractVersion": "^v(?<version>\\d+\\.\\d+)\\.0$"
    }
  ]
}