From 85af3b87b9b1e667be2af196b4dff25ea41e5b08 Mon Sep 17 00:00:00 2001
From: Sergei Poljanski <me@asxp.io>
Date: Fri, 13 Nov 2026 02:20:27 +0400
Subject: [PATCH] Offer only stable nginx releases

nginx's odd minors (1.29, 1.31) are the mainline branch; we run the
stable even minors. Renovate proposed 1.31 for blog; with this it
proposes the next stable line (1.30) instead.

Assisted-by: Claude:opus-5-5
---
 default.json | 60 +++++++++++++++++++++++++++++++++++++++++-----------
 1 file changed, 48 insertions(+), 12 deletions(-)

diff --git a/default.json b/default.json
index 089dc18..b53335e 100644
--- a/default.json
+++ b/default.json
@@ -1,9 +1,14 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "description": "Shared Renovate rules for asxpi/* and czsk/* (extend with local>asxpi/renovate)",
-  "extends": ["config:recommended", ":disableDependencyDashboard"],
+  "extends": [
+    "config:recommended",
+    ":disableDependencyDashboard"
+  ],
   "timezone": "Europe/Helsinki",
-  "labels": ["dependencies"],
+  "labels": [
+    "dependencies"
+  ],
   "prHourlyLimit": 0,
   "prConcurrentLimit": 10,
   "commitMessagePrefix": "deps:",
@@ -13,27 +18,58 @@
   "packageRules": [
     {
       "description": "Keep lock files on the bundler nixpkgs ships (BUNDLED WITH 2.7.2); a newer one makes CI install no gems",
-      "matchManagers": ["bundler"],
-      "matchPackageNames": ["bundler"],
+      "matchManagers": [
+        "bundler"
+      ],
+      "matchPackageNames": [
+        "bundler"
+      ],
       "enabled": false
     },
     {
       "description": "Postgres majors need a dump and restore: open the PR, never let it look routine",
-      "matchPackageNames": ["postgres", "docker.io/library/postgres"],
-      "matchUpdateTypes": ["major"],
-      "labels": ["dependencies", "needs-migration"],
-      "prBodyNotes": ["A Postgres major upgrade needs pg_dumpall + restore into a fresh volume (see storage/README.md). Do not merge as a routine bump."]
+      "matchPackageNames": [
+        "postgres",
+        "docker.io/library/postgres"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "labels": [
+        "dependencies",
+        "needs-migration"
+      ],
+      "prBodyNotes": [
+        "A Postgres major upgrade needs pg_dumpall + restore into a fresh volume (see storage/README.md). Do not merge as a routine bump."
+      ]
+    },
+    {
+      "description": "nginx odd minors (1.29, 1.31) are mainline; stay on the stable even minors",
+      "matchPackageNames": [
+        "nginx",
+        "docker.io/library/nginx"
+      ],
+      "allowedVersions": "/^1\\.\\d*[02468](\\.|-|$)/"
     },
     {
       "description": "Group the patch and minor bumps of a repo's GitHub/Forgejo actions",
-      "matchManagers": ["github-actions"],
-      "matchUpdateTypes": ["minor", "patch"],
+      "matchManagers": [
+        "github-actions"
+      ],
+      "matchUpdateTypes": [
+        "minor",
+        "patch"
+      ],
       "groupName": "CI actions"
     },
     {
       "description": "Renovate itself releases daily; once a month is enough",
-      "matchPackageNames": ["ghcr.io/renovatebot/renovate"],
-      "schedule": ["* * 1 * *"]
+      "matchPackageNames": [
+        "ghcr.io/renovatebot/renovate"
+      ],
+      "schedule": [
+        "* * 1 * *"
+      ]
     }
   ]
 }