renovate-presets/docker.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "description": ["Preset for use with all of thegeeklab/* docker images"],
  "extends": ["github>thegeeklab/renovate-presets:base"],
  "packageRules": [
    {
      "description": "Set semantic commit scope for Docker digests",
      "groupName": "docker digests",
      "matchDatasources": ["docker"],
      "matchUpdateTypes": ["pin", "digest"],
      "semanticCommitScope": "docker"
    },
    {
      "description": "Automerge digest updates (usually security patches)",
      "groupName": "docker digests",
      "matchDatasources": ["docker"],
      "matchPackagePatterns": [
        "^((amd64|arm32v7|arm64v8)/)?(python|alpine|node|docker|rockylinux|centos|debian)",
        "^thegeeklab/(alpine|nginx)"
      ],
      "matchUpdateTypes": ["pin", "digest"],
      "automerge": true
    },
    {
      "description": "Helper tools for docker base images",
      "groupName": "docker helper tools",
      "matchDatasources": ["github-releases"],
      "matchPaths": ["Dockerfile"],
      "matchPackagePatterns": ["^hairyhenderson", "^aptible", "^thegeeklab"],
      "matchUpdateTypes": ["minor", "patch"],
      "automerge": true
    },
    {
      "description": "Disable digest pinning for Compose (development only)",
      "matchManagers": ["docker-compose"],
      "pinDigests": false
    }
  ],
  "regexManagers": [
    {
      "fileMatch": ["Dockerfile"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)( versioning=(?<versioning>.*?))?\\nENV .*?_VERSION=\"\\${.*:-(?<currentValue>.*)}\"\\s"
      ]
    }
  ]
}