mirror of
https://github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin.git
synced 2026-07-19 18:52:20 +02:00
be13c49144
The 2026-07-03 runs surfaced two config problems: - The grouped "renovate/all" branch made Renovate fetch and hold the changelog of every upgrade instance separately (Traefik v3.0.0->v3.7.6 was fetched ~10x, once per compose file), which blew the default 4GB V8 heap: "FATAL ERROR: ... JavaScript heap out of memory" (exit 134), killing the run after the branch was pushed but before the PR was opened. Disable changelog fetching (release notes were truncated in the grouped PR body anyway) and raise the Node heap to 8GB as a safety net. - No gitAuthor was set, so commits were authored as Mend's renovate@whitesourcesoftware.com, which GitHub flags "Unverified" (Vigilant Mode) and Renovate warns about on every run. Use the token owner's noreply address instead. Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
78 lines
3.1 KiB
JSON
78 lines
3.1 KiB
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": ["config:recommended"],
|
|
"gitAuthor": "Renovate Bot <22881669+maxlerebourg@users.noreply.github.com>",
|
|
"fetchChangeLogs": "off",
|
|
"labels": ["dependencies"],
|
|
"ignorePaths": ["**/vendor/**", "**/node_modules/**"],
|
|
"rangeStrategy": "bump",
|
|
"prConcurrentLimit": 1,
|
|
"branchPrefix": "renovate/",
|
|
"commitMessagePrefix": "⬆️ renovate: ",
|
|
"groupName": "all",
|
|
"dependencyDashboard": false,
|
|
"packageRules": [
|
|
{
|
|
"description": "Cap the Go version at what yaegi supports. The plugin is interpreted by yaegi (bundled in Traefik), and even Traefik v3.7.1 ships yaegi v0.16.1 = Go 1.22. A newer Go would break the plugin on every current Traefik. Raise this only once Traefik ships a yaegi supporting a newer Go.",
|
|
"matchManagers": ["gomod"],
|
|
"matchDepNames": ["go", "toolchain"],
|
|
"allowedVersions": "<1.23"
|
|
},
|
|
{
|
|
"description": "whoami is a throwaway demo backend; leave it on latest",
|
|
"matchPackageNames": ["traefik/whoami"],
|
|
"enabled": false
|
|
}
|
|
],
|
|
"customManagers": [
|
|
{
|
|
"description": "Plugin self-pin in docker-compose CLI args (--experimental.plugins.bouncer.version=vX)",
|
|
"customType": "regex",
|
|
"managerFilePatterns": ["/(^|/)docker-compose[^/]*\\.ya?ml$/"],
|
|
"matchStrings": [
|
|
"experimental\\.plugins\\.bouncer\\.version=(?<currentValue>v[0-9]+\\.[0-9]+\\.[0-9]+)"
|
|
],
|
|
"depNameTemplate": "maxlerebourg/crowdsec-bouncer-traefik-plugin",
|
|
"datasourceTemplate": "github-tags"
|
|
},
|
|
{
|
|
"description": "Plugin self-pin in the Traefik Helm values (version: \"vX\")",
|
|
"customType": "regex",
|
|
"managerFilePatterns": ["/^examples/kubernetes/traefik/values\\.ya?ml$/"],
|
|
"matchStrings": [
|
|
"version:\\s*\"(?<currentValue>v[0-9]+\\.[0-9]+\\.[0-9]+)\""
|
|
],
|
|
"depNameTemplate": "maxlerebourg/crowdsec-bouncer-traefik-plugin",
|
|
"datasourceTemplate": "github-tags"
|
|
},
|
|
{
|
|
"description": "Traefik image tag in the Traefik Helm values (no repository key, so match by file)",
|
|
"customType": "regex",
|
|
"managerFilePatterns": ["/^examples/kubernetes/traefik/values\\.ya?ml$/"],
|
|
"matchStrings": ["tag:\\s*(?<currentValue>v[0-9]+\\.[0-9]+\\.[0-9]+)"],
|
|
"depNameTemplate": "traefik",
|
|
"datasourceTemplate": "docker"
|
|
},
|
|
{
|
|
"description": "Crowdsec image tag in the Crowdsec Helm values (no repository key, so match by file)",
|
|
"customType": "regex",
|
|
"managerFilePatterns": [
|
|
"/^examples/kubernetes/crowdsec/values\\.ya?ml$/"
|
|
],
|
|
"matchStrings": ["tag:\\s*(?<currentValue>v[0-9]+\\.[0-9]+\\.[0-9]+)"],
|
|
"depNameTemplate": "crowdsecurity/crowdsec",
|
|
"datasourceTemplate": "docker"
|
|
},
|
|
{
|
|
"description": "Pinned Traefik binary in the e2e mock suite (TRAEFIK_VERSION:-vX in common.sh)",
|
|
"customType": "regex",
|
|
"managerFilePatterns": ["/^tests/e2e/mock/lib/common\\.sh$/"],
|
|
"matchStrings": [
|
|
"TRAEFIK_VERSION:-(?<currentValue>v[0-9]+\\.[0-9]+\\.[0-9]+)"
|
|
],
|
|
"depNameTemplate": "traefik/traefik",
|
|
"datasourceTemplate": "github-releases"
|
|
}
|
|
]
|
|
}
|