Overrides are not reflected in deps.json causing renovate trying to update those

Currently there’s 3 overrides in our constructs:

  "overrides": {
    "@types/responselike": "1.0.0",
    "got": "12.3.1",
    "@types/prettier": "2.6.0"
  },

When renovate runs, it tries to offer updated for those, which causes failure as projen run would revert versions (and we check in pipeline that code is not mutated).

upgrade task seems to be ignoring overrides, but Renovate doesn’t.

Not sure which one works incorrectly, as at least in Renovate support to overrides was explicitly added: https://github.com/renovatebot/renovate/issues/15278.

Expected result

Renovate should ignore overrides, or at least offer flag to ignore those.

As versions are not in .projen/deps.json, some additional logic is needed.

[Hi-Fi]

Those overrides are on normal CDK construct, so something that’s not explicitly added. Those are also internal, so CIs are not on GitHub that would be easy option for Projen project. That’s also one reason why Renovate is in use. Other is that same mechanism for dependency maintenance is used on applications and constructs.

Renovate is quite similar to dependabot, but offers some nice additions to it like grouping of dependencies to same PR.

Handling of those overrides was added to Renovate last May, so I doubt that handling of those is not going to be removed.

So for the options I don’t see any of those work, and actually started to check the projen code how those overrides could be got to renovate’s ignore list like now packages with defined versions (by projen) are.

[mrgrain]

My bad @Hi-Fi I wasn’t aware Renovate Bot is supported in projen 🤯

Thanks for finding this and for working on the PR!