Customize renovate.json

pom.xml

@@ -58,7 +58,6 @@
     <version.slf4j>2.0.12</version.slf4j>
     <version.solr>9.7.0</version.solr>
     <version.lucene>9.11.1</version.lucene>
-    <!-- DO NOT UPDATE THIS, this is the latest version that works with Java 8 -->
     <version.fmt-maven-plugin>2.9.1</version.fmt-maven-plugin>
     <version.maven-gpg-plugin>3.2.0</version.maven-gpg-plugin>
     <version.maven-javadoc-plugin>3.8.0</version.maven-javadoc-plugin>
@@ -97,7 +96,7 @@
     <dependency>
       <groupId>com.fasterxml.woodstox</groupId>
       <artifactId>woodstox-core</artifactId>
-      <version>6.6.0</version>
+      <version>6.7.0</version>
     </dependency>
     <dependency>
       <groupId>com.google.guava</groupId>
@@ -209,7 +208,6 @@
               <include>de.digitalcollections:solr-ocrhighlighting</include>
               <include>org.apache.commons:commons-text</include>
               <include>commons-io:commons-io</include>
-              <include>com.fasterxml.woodstox:woodstox-core</include>
               <include>com.google.guava:guava</include>
             </includes>
           </artifactSet>

renovate.json5

@@ -0,0 +1,44 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "ignorePaths": ["example/frontend/**", "example/iiif-prezi/**"],
+  "groupName": "all dependencies",
+  "groupSlug": "all",
+  "lockFileMaintenance": {
+    "enabled": false
+  },
+  "packageRules": [
+    {
+      "groupName": "all dependencies",
+      "groupSlug": "all",
+      "matchPackageNames": [
+        "*"
+      ]
+    },
+    {
+      // Solr is checked for daily, we want to track upstream versions very closely
+      "matchPackagePrefixes": ["org.apache.solr"],
+      "extends": ["schedule:daily"]
+    },
+    {
+      // Our Lucene version should track the one used by the currently used solr-core
+      // version. Unfortunately this can't be done automatically by renovate, so we
+      // have to exclude these dependencies from the renovate process and maintain them
+      // manually to be in sync with Solr
+      "matchPackagePrefixes": ["org.apache.lucene"],
+      "enabled": false
+    },
+    {
+      // Same thing as for Lucene, woodstox version should track the one used by solr
+      // and needs to be manually kept in sync
+      "matchPackagePrefixes": ["com.fasterxml.woodstox"],
+      "enabled": false
+    }
+  ],
+  "schedule": [
+    "every weekend"
+  ],
+  "separateMajorMinor": false
+}