From 23a55bd62ab9b7cc1e03d1e2295cfd0147442452 Mon Sep 17 00:00:00 2001 From: Kurt von Laven Date: Thu, 30 Nov 2023 01:19:31 -0800 Subject: [PATCH] fix(Renovate): Adopt `config:best-practices` The `config:base` preset was renamed to `config:recommended` in Renovate v36.0.0. `config:best-practices` was added in v36.104.0 to formalize Renovate's guidance. `config:best-practices` increases security by pinning digests for Docker images and GitHub Actions. It also pins dev dependencies, but we already pin all dependencies. --- default.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/default.json b/default.json index 3dca6ea..a460f22 100644 --- a/default.json +++ b/default.json @@ -2,7 +2,7 @@ "$schema": "https://docs.renovatebot.com/renovate-schema.json", "description": "Renovate config for ScribeMD in the style of Dependabot", "extends": [ - "config:base", + "config:best-practices", ":assignee(Kurt-von-Laven)", ":reviewer(team:dependency-management)", "helpers:disableTypesNodeMajor",