renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended"
  ],
  "labels": [
    "dependencies"
  ],
  "schedule": [
    "every 3 weeks on Monday"
  ],
  "vulnerabilityAlerts": {
    "description": "Security updates bypass the packageRules grouping below (Renovate resets their groupName), so apply the same groupId grouping to them here.",
    "groupName": "{{{replace ':.*' '' depName}}} security"
  },
  "packageRules": [
    {
      "description": "Group every Maven update by its groupId by default. The more specific rules below run later and override this where a group must span several groupIds, pin a version, or stay disabled.",
      "matchDatasources": [
        "maven"
      ],
      "groupName": "{{{replace ':.*' '' depName}}}"
    },
    {
      "groupName": "com.github.vlsi",
      "matchPackageNames": [
        "com.github.vlsi{/,}**"
      ]
    },
    {
      "groupName": "com.google.errorprone",
      "matchPackageNames": [
        "com.google.errorprone{/,}**",
        "net.ltgt.errorprone{/,}**"
      ]
    },
    {
      "matchPackageNames": [
        "com.google.guava:guava"
      ],
      "groupName": "guava",
      "matchCurrentVersion": "0",
      "enabled": false
    },
    {
      "groupName": "com.gradle",
      "description": "Develocity and related Gradle Inc. plugins are released together",
      "matchPackageNames": [
        "com.gradle{/,}**"
      ]
    },
    {
      "groupName": "com.helger",
      "matchPackageNames": [
        "com.helger{/,}**"
      ]
    },
    {
      "groupName": "github official actions",
      "description": "actions/* and github/* are maintained by GitHub/Microsoft and can be updated together",
      "matchManagers": [
        "github-actions"
      ],
      "matchPackageNames": [
        "actions/**",
        "github/**"
      ]
    },
    {
      "groupName": "commons-* (classic)",
      "description": "Classic Apache Commons artifacts where groupId == artifactId",
      "matchPackageNames": [
        "commons-codec{/,}**",
        "commons-collections{/,}**",
        "commons-io{/,}**",
        "commons-lang{/,}**",
        "commons-logging{/,}**",
        "commons-net{/,}**"
      ]
    },
    {
      "groupName": "org.jetbrains.kotlin",
      "description": "Kotlin compiler plugins (jvm, kapt, serialization, ...) share a version",
      "matchPackageNames": [
        "org.jetbrains.kotlin{/,}**"
      ]
    },
    {
      "groupName": "org.slf4j",
      "allowedVersions": "< 2.0.0",
      "matchPackageNames": [
        "org.slf4j{/,}**"
      ]
    },
    {
      "groupName": "xalan/xerces",
      "description": "Legacy Apache XML stack, rarely updated and goes together",
      "matchPackageNames": [
        "xalan{/,}**",
        "xerces{/,}**"
      ]
    },
    {
      "groupName": "xml-apis:xml-apis",
      "allowedVersions": "< 2.0.0",
      "matchPackageNames": [
        "xml-apis:xml-apis{/,}**"
      ]
    },
    {
      "enabled": false,
      "matchPackageNames": [
        "/^src:protocol/"
      ]
    }
  ]
}