renovate-presets/docker.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "description": ["Preset for use with all of thegeeklab/* docker images"],
  "extends": ["github>thegeeklab/renovate-presets:base"],
  "packageRules": [
    {
      "description": "Automerge digest updates (usually security patches)",
      "groupName": "docker digests",
      "matchDatasources": ["docker"],
      "matchPackagePatterns": [
        "^((amd64|arm32v7|arm64v8)/)?(python|alpine|node|docker)",
        "^thegeeklab/(alpine|nginx)"
      ],
      "matchUpdateTypes": ["pin", "digest"],
      "automerge": true
    },
    {
      "description": "Disable digest pinning for Docker Compose (development only)",
      "matchManagers": ["docker-compose"],
      "matchUpdateTypes": ["pin", "digest"],
      "enabled": false
    }
  ],
  "regexManagers": [
    {
      "fileMatch": ["Dockerfile"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+)( versioning=(?<versioning>.*?))?\\nENV .*?_VERSION=\"\\${.*:-(?<currentValue>.*)}\"\\s"
      ]
    }
  ]
}