{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["config:recommended"],
"labels": ["dependencies"],
"schedule": ["before 5am every weekday"],
"prConcurrentLimit": 3,
"semanticCommits": "enabled",
"commitMessagePrefix": "fix(deps):",
"commitMessageAction": "update",
"commitMessageTopic": "{{depName}}",
"semanticCommitType": "fix",
"semanticCommitScope": "deps",
"golang": {
"postUpdateOptions": ["gomodTidy"]
},
"packageRules": [
{
"description": "Hold every update for 7 days so a malicious or yanked release is caught before it lands",
"matchPackageNames": ["*"],
"minimumReleaseAge": "7 days"
},
{
"description": "Release runs on the better-semantic-release fork — never let an update swap it back to upstream python-semantic-release",
"matchManagers": ["github-actions"],
"matchPackageNames": ["python-semantic-release/python-semantic-release"],
"minimumReleaseAge": "7 days",
"enabled": false
}
]
}