{
  extends: [
    'config:best-practices',
    ':separateMultipleMajorReleases',
    'schedule:daily',
    'security:openssf-scorecard',
  ],
  commitMessageSuffix: ' in {{packageFile}}',
  dependencyDashboardAutoclose: true,
  automerge: true,
  baseBranches: [
    'main',
    '/^release-.*/',
  ],
  platformAutomerge: true,
  labels: [
    'dependencies',
  ],
  postUpdateOptions: [
    'gomodTidy',
    'gomodUpdateImportPaths',
    'npmDedupe',
  ],
  prHourlyLimit: 1,
  minimumReleaseAge: '5 days',
  osvVulnerabilityAlerts: true,
  vulnerabilityAlerts: {
    enabled: true,
    labels: [
      'security',
    ],
  },
  packageRules: [
    {
      matchBaseBranches: ['main'],
      matchFileNames: [
        'package.json',
        'package-lock.json',
      ],
    },
    {
      matchFileNames: [
        'testing/**',
      ],
      additionalBranchPrefix: '{{packageFileDir}}-',
      groupName: 'conftest-testing',
      matchPackageNames: [
        '/conftest/',
      ],
    },
    {
      ignorePaths: [
        'testing/**',
      ],
      groupName: 'github-',
      matchPackageNames: [
        '/github-actions/',
      ],
    },
    {
      ignorePaths: [
        'server/controllers/events/testdata/**/*.tf',
      ],
      matchDatasources: [
        'terraform',
      ],
    },
    {
      matchDatasources: [
        'docker',
      ],
      matchPackageNames: [
        'node',
        'cimg/node',
      ],
      versioning: 'node',
    },
    {
      matchPackageNames: [
        'go',
        'golang',
      ],
      versioning: 'go',
      groupName: 'go',
    },
  ],
  customManagers: [
    {
      customType: 'regex',
      fileMatch: [
        '(^|/)Dockerfile$',
        '(^|/)Dockerfile\\.[^/]*$',
      ],
      matchStrings: [
        // example:
        // # renovate: datasource=github-releases depName=hashicorp/terraform versioning=hashicorp
        // ENV DEFAULT_TERRAFORM_VERSION=x.x.x
        // # renovate: datasource=github-releases depName=open-policy-agent/conftest
        // ARG DEFAULT_CONFTEST_VERSION=x.x.x
        'renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s(ARG|ENV) .*?_VERSION=(?<currentValue>.*)\\s',
      ],
      versioningTemplate: '{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}',
      extractVersionTemplate: '^v(?<version>\\d+\\.\\d+\\.\\d+)',
    },
    {
      customType: 'regex',
      fileMatch: [
        '.*go$',
      ],
      matchStrings: [
        '\\sconst .*Version = "(?<currentValue>.*)"\\s// renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s',
      ],
      versioningTemplate: '{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}',
      extractVersionTemplate: '^v(?<version>\\d+\\.\\d+\\.\\d+)',
    },
    {
      customType: 'regex',
      fileMatch: [
        '^\\.github/workflows/[^/]+\\.ya?ml$',
        'Makefile$',
      ],
      matchStrings: [
        'renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)( versioning=(?<versioning>.*?))?\\s.*?_VERSION: (?<currentValue>.*)\\s',
      ],
      versioningTemplate: '{{#if versioning}}{{{versioning}}}{{else}}semver{{/if}}',
      extractVersionTemplate: '^v(?<version>\\d+\\.\\d+\\.\\d+)',
    },
  ],
}