From 97cceb6b046b47db99cfcff134a717debc8f7b2b Mon Sep 17 00:00:00 2001 From: RB <7775707+nitrocode@users.noreply.github.com> Date: Thu, 26 Jun 2025 16:35:54 -0400 Subject: [PATCH] ci: release branches for security updates only (#5584) Signed-off-by: RB <7775707+nitrocode@users.noreply.github.com> Signed-off-by: Rui Chen Co-authored-by: Rui Chen --- .github/renovate.json5 | 11 +++++++++++ .github/workflows/renovate-config.yml | 2 +- 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index 3a94e7d89..6a3a67b63 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -31,6 +31,17 @@ ], }, packageRules: [ + // enable release branches for security updates + { + matchBaseBranches: ['/^release-.*/'], + matchUpdateTypes: ['security'], + enabled: true + }, + // disable release branches for anything else + { + matchBaseBranches: ['/^release-.*/'], + enabled: false + }, { matchBaseBranches: [ 'main', diff --git a/.github/workflows/renovate-config.yml b/.github/workflows/renovate-config.yml index 37f90674b..67200e5cd 100644 --- a/.github/workflows/renovate-config.yml +++ b/.github/workflows/renovate-config.yml @@ -26,4 +26,4 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4 - - run: npx --package renovate -c 'renovate-config-validator' + - run: npx --package=renovate@latest -c renovate-config-validator