rules-java.json5

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  // Group Java dependencies for unified update PRs and easier management
  "packageRules": [
    // Pin Java dependencies for security
    {
      "description": "Pin Java dependencies: Pin all digests/SHAs for supply chain security. This ensures reproducible builds and prevents dependency substitution attacks.",
      "matchManagers": [
        "maven",
        "gradle"
      ],
      "pinDigests": true
    },
    // Example: Group all springframework dependencies
    {
      "description": "Group springframework",
      "groupName": "springframework",
      "matchPackageNames": ["/^org\\.springframework/", "/^spring-/"]
    },
    // Group all non-major Maven dependencies
    {
      "groupName": "maven all non-major dependencies",
      "groupSlug": "maven all-minor-patch",
      "matchManagers": [
        "maven"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "minimumReleaseAge": "7 days"
    },
    {
      "description": "Group Java ecosystem: Combine Maven and Gradle updates into single PRs. Java dependencies should be updated together to maintain compatibility and avoid version conflicts.",
      "matchManagers": [
        "maven",
        "gradle"
      ],
      "matchUpdateTypes": [
        "minor",
        "patch"
      ],
      "groupName": "java dependencies",
      "groupSlug": "java"
    }
    // Add more grouping rules as needed for your Java ecosystem
  ]
}