renovate.json5

{
    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
    "extends": [
      "config:base"
    ],
    "baseBranches": ["main", "release-2.13", "release-2.12"],
    "postUpdateOptions": [
      "gomodTidy",
      "gomodUpdateImportPaths"
    ],
    "schedule": ["before 9am on Monday"],
    "packageRules": [
      {
        "matchBaseBranches": ["release-2.13", "release-2.12"],
        "packagePatterns": ["*"],
        "enabled": false
      },
      {
        "matchPackageNames": [
          "github.com/grafana/mimir-prometheus",
          "github.com/grafana/memberlist",
          "github.com/grafana/regexp",
          "github.com/colega/go-yaml-yaml",
          "github.com/grafana/goautoneg",
          "github.com/grafana/opentracing-contrib-go-stdlib",
          "github.com/charleskorn/go-grpc"
        ],
        "enabled": false
      },
      // Pin Go at the current version, since we want to upgrade it manually.
      // Remember to keep this in sync when upgrading our Go version!
      {
        "matchDatasources": ["docker", "golang-version"],
        "matchPackageNames": ["go", "golang"],
        "allowedVersions": "<=1.22.5"
      }
    ],
    "branchPrefix": "deps-update/",
    "vulnerabilityAlerts": {
      "enabled": true,
      "labels": ["security-update"]
    },
    "osvVulnerabilityAlerts": true
}