Add on-demand GH action to handle Renovate for managing 3rd party dependencies

2 files changed, 122 insertions, 0 deletions

diff --git a/.github/config.js b/.github/config.js
new file mode 100644
index 00000000000..d28a383d31b
--- /dev/null
+++ b/.github/config.js
@@ -0,0 +1,14 @@
+module.exports = {
+    onboardingConfig: {
+      extends: ["config:base"],
+    },
+    platform: "github",
+    onboarding: false,
+    includeForks: false,
+    branchPrefix: "renovate/",
+    gitAuthor: "sonarqubetech-sonarenterprise",
+    baseBranches: ["master"],
+    repositories: [
+      "SonarSource/sonar-enterprise",
+    ],
+  };
diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 00000000000..1701ede8b39
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,108 @@
+{
+  "extends": [
+    "config:base",
+    ":preserveSemverRanges"
+  ],
+  "branchConcurrentLimit": 0,
+  "prConcurrentLimit": 0,
+  "prHourlyLimit": 0,
+  "separateMinorPatch": false,
+  "separateMajorMinor": false,
+  "ignoreDeps": [
+    "com.sonarsource.abap:sonar-abap-plugin",
+    "com.sonarsource.cobol:sonar-cobol-plugin",
+    "com.sonarsource.cpp:sonar-cfamily-plugin",
+    "com.sonarsource.pli:sonar-pli-plugin",
+    "com.sonarsource.plsql:sonar-plsql-plugin",
+    "com.sonarsource.plugins.vb:sonar-vb-plugin",
+    "com.sonarsource.rpg:sonar-rpg-plugin",
+    "com.sonarsource.security:sonar-security-csharp-frontend-plugin",
+    "com.sonarsource.security:sonar-security-java-frontend-plugin",
+    "com.sonarsource.security:sonar-security-php-frontend-plugin",
+    "com.sonarsource.security:sonar-security-plugin",
+    "com.sonarsource.security:sonar-security-python-frontend-plugin",
+    "com.sonarsource.security:sonar-security-js-frontend-plugin",
+    "com.sonarsource.slang:sonar-apex-plugin",
+    "com.sonarsource.swift:sonar-swift-plugin",
+    "com.sonarsource.tsql:sonar-tsql-plugin",
+    "org.sonarsource.config:sonar-config-plugin",
+    "org.sonarsource.dotnet:sonar-csharp-plugin",
+    "org.sonarsource.dotnet:sonar-vbnet-plugin",
+    "org.sonarsource.flex:sonar-flex-plugin",
+    "org.sonarsource.html:sonar-html-plugin",
+    "org.sonarsource.jacoco:sonar-jacoco-plugin",
+    "org.sonarsource.java:sonar-java-plugin",
+    "org.sonarsource.javascript:sonar-javascript-plugin",
+    "org.sonarsource.php:sonar-php-plugin",
+    "org.sonarsource.python:sonar-python-plugin",
+    "org.sonarsource.slang:sonar-go-plugin",
+    "org.sonarsource.kotlin:sonar-kotlin-plugin",
+    "org.sonarsource.slang:sonar-ruby-plugin",
+    "org.sonarsource.slang:sonar-scala-plugin",
+    "org.sonarsource.xml:sonar-xml-plugin",
+    "org.sonarsource.iac:sonar-iac-plugin"
+  ],
+  "labels": ["dependencies"],
+  "packageRules": [
+    {
+      "matchManagers": "maven",
+      "enabled": false
+    },
+    {
+      "matchManagers": "github-actions",
+      "enabled": false
+    },
+    {
+      "matchManagers": "dockerfile",
+      "enabled": false
+    },
+    {
+      "matchManagers": "gradle-wrapper",
+      "enabled": false
+    },
+    {
+      "matchManagers": "gradle",
+      "matchUpdateTypes": [
+        "patch",
+        "minor"
+      ],
+      "enabled": true,
+      "groupName": "Minor Backend Dependencies updates"
+    },
+    {
+      "matchManagers": "gradle",
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "enabled": true,
+      "groupName": "Major Backend Dependencies updates"
+    },
+    {
+      "matchManagers": "npm",
+      "matchUpdateTypes": [
+        "patch",
+        "minor"
+      ],
+      "enabled": true,
+      "groupName": "Minor Frontend Dependencies updates"
+    },
+    {
+      "matchManagers": "npm",
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "enabled": true,
+      "groupName": "Major Frontend Dependencies updates"
+    },
+    {
+      "matchManagers": "terraform",
+      "matchUpdateTypes": [
+        "major",
+        "patch",
+        "minor"
+      ],
+      "enabled": true,
+      "groupName": "Terraform Dependencies updates"
+    }
+  ]
+}