renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:best-practices"
  ],
  "dependencyDashboard": true,
  "timezone": "Europe/Paris",
  "osvVulnerabilityAlerts": true,
  "customManagers": [
    {
      // https://docs.renovatebot.com/modules/manager/regex/
      "customType": "regex",
      "managerFilePatterns": ["update.sh"],
      "matchStrings": [
        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\sversions=\\([0-9\\. ]+?(?<currentValue>\\S+)\\)"
      ]
    }
  ],
  "packageRules": [
    {
      "matchPackageNames": ["php"],
      "matchDatasources": ["docker"],
      // Override helpers:pinGitHubActionDigests from config:best-practices since we explicitely
      // want the latest PHP patch version and not a pinned Docker image
      "pinDigests": false,
      "prBodyNotes": [
        "**Do NOT merge this PR as-is!**",
        "",
        "This PR is only a reminder that a new PHP version is available, however Renovate doesn't allow us to do everything we need to do.",
        "You need to _add_ the new PHP version to the `versions` array in `update.sh` instead of replacing the last.",
        "You also need to update the `README.md` to list supported versions."
      ]
    }
  ]
}