{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended"
  ],
  "enabledManagers": [
    "custom.regex",
    "kubernetes",
    "kustomize",
    "terraform",
    "terraform-version"
  ],
  "customManagers": [
    {
      "customType": "regex",
      "managerFilePatterns": [
        "/^platform/control-plane/argocd/application-sets/platform-addons\\.yaml$/"
      ],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>\\S+) depName=(?<depName>\\S+) registryUrl=(?<registryUrl>\\S+)\\s+revision: (?<currentValue>\\S+)"
      ]
    },
    {
      "customType": "regex",
      "datasourceTemplate": "docker",
      "managerFilePatterns": [
        "/^platform/control-plane/argocd/application-sets/platform-addons\\.yaml$/"
      ],
      "matchStrings": [
        "# renovate: datasource=docker depName=(?<depName>\\S+)\\s+repository: \\S+\\s+tag: \"(?<currentValue>[^@\"]+)@(?<currentDigest>sha256:[a-f0-9]{64})\""
      ]
    }
  ],
  "dependencyDashboard": true,
  "pinDigests": true,
  "packageRules": [
    {
      "description": "First-party GHCR images are promoted only by the verified digest workflow",
      "matchDatasources": [
        "docker"
      ],
      "matchPackageNames": [
        "ghcr.io/donghyeonka/project-auth-server",
        "ghcr.io/donghyeonka/project-api-server"
      ],
      "enabled": false
    },
    {
      "description": "Require review for cluster controllers and stateful platform components",
      "matchFileNames": [
        "platform/control-plane/**",
        "clusters/dev-k3s/overlays/platform/**",
        "clusters/dev-k3s/overlays/systems/**",
        "platform/**",
        "systems/**",
        "iac/**"
      ],
      "automerge": false
    },
    {
      "description": "Group non-major Terraform provider updates",
      "matchManagers": [
        "terraform"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch",
        "digest"
      ],
      "groupName": "terraform dependencies"
    }
  ]
}