This repository contains the centralized Renovate configuration for Brave projects. It provides a standardized approach to dependency updates across our codebase.
Renovate is an automated dependency update tool that helps keep your dependencies up-to-date. This configuration repository serves as the source of truth for Renovate settings across Brave projects.
- Standardized dependency update policies
- Automated GitHub Actions updates
- Controlled major version updates
- Weekly update schedule
- Concurrent PR limit management
- Custom package rules for different update types
The default configuration (default.json):
- Extends recommended Renovate configuration
- Pins GitHub Action digests to semantic versions
- Pins dev dependencies
- Updates minor and patch versions on Tuesday-Thursday
- Requires dashboard approval for major version updates
- Enables GitHub Actions updates with auto-approval and auto-merge
- Limits concurrent PRs to 1
- Disables vulnerability alerts
To use this configuration in your repository, add a renovate.json file with:
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [
"local>brave/renovate-config"
]
}- Node.js
- npm
-
Clone the repository:
git clone https://github.com/brave/renovate-config.git
-
Install dependencies:
npm install
Run the configuration validator:
npm test- Fork the repository
- Create your feature branch
- Make your changes
- Run tests
- Submit a pull request
- GitHub Issues: https://github.com/brave/renovate-config/issues