If you think you've found a security issue, please do not mention it in this repository. Instead, email [email protected] with as much details as possible so that it can be handled confidentially.
If you have a configuration question, please create an issue in https://github.com/renovatebot/config-help
If you've found a bug or have a feature request then please create an issue in this repository (but search first in case a similar issue already exists).
If you would like to fix a bug or implement a feature, please fork the repository and create a Pull Request. More information on getting set up locally can be found in docs/development/local-development.md.
Before you start any Pull Request, it's recommended that you create an issue to discuss first if you have any doubts about requirement or implementation. That way you can be sure that the maintainer(s) agree on what to change and how, and you can hopefully get a quick merge afterwards. Also, let the maintainers know that you plan to work on a particular issue so that no one else starts any duplicate work.
Pull Requests can only be merged once all status checks are green, which means yarn test passes, and coverage is 100%.
Please do not force push to your PR's branch after you have created your PR, as doing so makes it harder for us to review your work. PRs will always be squashed by us when we merge your work. Commit as many times as you need in your pull request branch.
Please do not ping your reviewer(s) by mentioning them in a new comment. Instead, use the re-request review functionality. Read more about this in the GitHub docs, Re-requesting a review.
Sometimes the codebase can be a challenge to navigate, especially for a first-time contributor. We don't want you spending an hour trying to work out something that would take us only a minute to explain.
For that reason, we have a Slack channel dedicated to helping anyone who's working on Pull Requests for Renovate. Please email [email protected] and simply mention that you need an invitation to the channel.
Pull Request authors must sign the Renovate CLA.
If you cannot or do not want to sign this CLA (e.g. your employment contract for your employer may not allow this), you should not submit a PR. Open an issue and someone else can do the work.