renovate-config

This repository contains common configuration for renovate. You can use this common configuration by specifying this repository as extends in your renovate.json.

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "github>kitsuyui/renovate-config"
  ]
}

Policy

I recommend to configure renovate in each project. This repository will contain common configuration for renovate. For example, the following things.

In Rust's cargo, update serde and serde_derive at the same time.
In Node.js's npm, update eslint and eslint-plugin-xxx at the same time.
...

If you configure these things in each project, you will have to configure the same thing in multiple projects.

Auto merge policy

I only enable auto merge for the following rules.

I am the author of the package.
The package is an official package of the language, framework or service.
The package health is good enough.

Security ... Snyk score, number of vulnerabilities.
Popularity ... Linus's Law (given enough eyeballs, all bugs are shallow), number of downloads, Big tech's usage, etc.
Maintenance ... Update frequency, number of open issues, etc.
Community ... Code of conducts, number of maintainers, number of contributors, code review, code coverage, etc.
Documentation ... README, CONTRIBUTING, etc.

License

I don't think that there is any right in this repository because this repository contains only configuration for Renovate application. However, I will license this repository under MIT License for formal reasons.