ci: Make renovate schedule monthly (#3019)

Makes renovate create PRs for dependency updates monthly rather than weekly. https://docs.renovatebot.com/presets-schedule/#schedulemonthly Also sets vulnerability PRs to be scheduled daily. https://docs.renovatebot.com/configuration-options/#vulnerabilityalerts Signed-off-by: Ian Lewis <[email protected]> Co-authored-by: laurentsimon <[email protected]>
slsa-framework · Dec 5, 2023 · b2d883d · b2d883d
1 parent e092404
commit b2d883d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/renovate.json b/renovate.json
@@ -1,7 +1,10 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": ["config:base", ":gitSignOff"],
-  "schedule": ["every weekend"],
+  "schedule": ["before 4 am on the first day of the month"],
+  "vulnerabilityAlerts": {
+    "schedule": "before 4am"
+  },
   "postUpdateOptions": ["gomodTidy", "gomodUpdateImportPaths"],
   "packageRules": [
     {