renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:best-practices",
    ":enableVulnerabilityAlerts",
    ":semanticCommitTypeAll(chore)",
    ":separateMultipleMajorReleases",
    "schedule:weekly"
  ],
  "labels": ["dependency"],
  "rangeStrategy": "pin",
  "packageRules": [
    {
      "matchDepTypes": ["engines"],
      "rangeStrategy": "auto"
    },
    {
      "description": "Remove word `dependency` from commit messages and PR titles",
      "matchDatasources": ["npm"],
      "commitMessageTopic": "{{depName}}"
    },
    {
      "description": "Fetch changelog details for twemoji packages",
      "matchPackageNames": ["@discordapp/twemoji"],
      "changelogUrl": "https://github.com/jdjdecked/twemoji"
    },
    {
      "description": "Hold got on the v11 line. The override only exists to satisfy security scanners for dev tooling (@electron/get via electron-builder, react-devtools), which was built against the non-ESM v11 API. v11.8.5+ already includes the security fix, and v12+ is ESM-only.",
      "matchPackageNames": ["got"],
      "allowedVersions": "<12"
    },
    {
      "description": "Group vite-plus with vitest and @vitest/coverage-v8 so their versions always stay in sync. vite-plus bundles vitest as a direct dep; a mismatch causes SnapshotClient errors at runtime.",
      "matchPackageNames": ["vite-plus", "vitest", "@vitest/coverage-v8"],
      "groupName": "vite-plus / vitest"
    },
    {
      "description": "Give updates to core runtime dependencies (Electron shell, tray integration, UI primitives, GitHub API client) a distinct commit scope so release-please can surface them in the changelog instead of hiding them with routine dependency bumps",
      "matchPackageNames": [
        "electron",
        "electron-menubar",
        "electron-updater",
        "@primer/react",
        "@primer/octicons-react",
        "@primer/css",
        "@octokit/**"
      ],
      "semanticCommitScope": "deps-core"
    },
    {
      "description": "electron-menubar is a first-party dependency, so skip the minimum release age gate and weekly schedule applied to other packages",
      "matchPackageNames": ["electron-menubar"],
      "minimumReleaseAge": "0 days",
      "schedule": ["at any time"]
    }
  ],
  "customManagers": [
    {
      "description": "Keep sonar.projectVersion variables in sonar-project.properties in-sync",
      "customType": "regex",
      "datasourceTemplate": "github-tags",
      "depNameTemplate": "gitify-app/gitify",
      "versioningTemplate": "loose",
      "managerFilePatterns": ["/sonar-project.properties/"],
      "matchStrings": ["\\s?sonar.projectVersion=(?<currentValue>.+?)\\s"]
    }
  ]
}