Skip to content

fix(renovate): drop invalid minimumReleaseAge override on automerge rule - #285

Merged
DevSecNinja merged 1 commit into
mainfrom
fix/renovate-drop-invalid-automerge-minreleaseage
Jul 27, 2026
Merged

fix(renovate): drop invalid minimumReleaseAge override on automerge rule#285
DevSecNinja merged 1 commit into
mainfrom
fix/renovate-drop-invalid-automerge-minreleaseage

Conversation

@DevSecNinja

Copy link
Copy Markdown
Owner

Problem

The automerge packageRule in .renovate/autoMerge.json5 sets:

minimumReleaseAge: "null",

This is the string "null", not JSON null. It is not a valid duration, so Renovate silently ignores it. Worse, even if it were real null it would waive the soak — directly contradicting the rule's own comment:

Risk is covered by the global minimumReleaseAge soak time in base.json5 plus required status checks

…and the intent of ADR 0004 (auto-merge non-major updates only after the soak).

Fix

Remove the line so automerge updates inherit the global minimumReleaseAge: "14 days" from base.json5, as the comment and ADR intend.

No behaviour change for container images — packageRules.json5's docker rule already enforces 14 days and is applied later. This just removes dead/misleading config and fixes the latent bug.

Follow-up to #284. Refs DevSecNinja/truenas-apps#115

The automerge packageRule set `minimumReleaseAge: "null"` — the string
"null", not JSON null — which is not a valid duration and is silently
ignored by Renovate. Even as real `null` it would waive the soak, which
directly contradicts the rule's own comment ("Risk is covered by the
global minimumReleaseAge soak time in base.json5") and the intent of
ADR 0004 (automerge non-major only after the soak).

Remove the line so automerge updates correctly inherit the global
14-day `minimumReleaseAge` soak. No behaviour change for container
images (the docker rule in packageRules.json5 already enforces 14 days);
this fixes the latent bug and removes the misleading config.

Refs DevSecNinja/truenas-apps#115

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@DevSecNinja
DevSecNinja merged commit 37b3eb0 into main Jul 27, 2026
16 checks passed
@DevSecNinja
DevSecNinja deleted the fix/renovate-drop-invalid-automerge-minreleaseage branch July 27, 2026 10:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant