diff --git a/.github/renovate.json5 b/.github/renovate.json5 index e4eb94887e..37f54997c6 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -2,14 +2,23 @@ $schema: 'https://docs.renovatebot.com/renovate-schema.json', labels: ['dependencies'], extends: ['config:best-practices', ':gitSignOff'], + // do not pin dev dependencies, which are part of the best-practices preset ignorePresets: [':pinDevDependencies', ':pinDigest', 'docker:pinDigests'], constraints: { + // TODO(freben): Remove this later; it addresses a temporary issue in corepack + // https://github.com/nodejs/corepack/issues/379 + // https://github.com/renovatebot/renovate/discussions/27465 corepack: '0.24.1', }, + // the default limit is 10 PRs prConcurrentLimit: 20, postUpdateOptions: ['yarnDedupeHighest'], rangeStrategy: 'update-lockfile', - ignoreDeps: ['@elastic/elasticsearch', 'event-source-polyfill'], + ignoreDeps: [ + // ignored due to licensing issues. See #10992 + '@elastic/elasticsearch', + 'event-source-polyfill', + ], packageRules: [ { groupName: 'Spotify web-scripts monorepo packages', @@ -26,10 +35,12 @@ rangeStrategy: 'replace', matchSourceUrls: ['https://github.com/gregberge/svgr{/,}**'], }, + // We update yarn packages manually as it's gzip'd and we don't want to pollute the repository too much. { matchSourceUrls: ['https://github.com/yarnpkg/berry'], enabled: false, }, + // ESM only majors, that we're not ready for yet { matchPackageNames: ['node-fetch'], allowedVersions: '<3.0.0',