Skip to content

feat: add Renovate for automated dependency updates#16

Open
nbrieussel wants to merge 1 commit intomainfrom
feat/renovate
Open

feat: add Renovate for automated dependency updates#16
nbrieussel wants to merge 1 commit intomainfrom
feat/renovate

Conversation

@nbrieussel
Copy link
Copy Markdown

Closes #6

What this adds

renovate.json at repo root — picked up automatically by the Renovate GitHub App (already installed on the org).

What Renovate will manage

Dependency Source Automerge Notes
SAFE_SETTINGS_VERSION in workflows github-tags via regexManager No 7-day minimum release age — requires human review
prettier (npm) package.json Yes (branch) Low-risk formatter update

Why regexManager for safe-settings

SAFE_SETTINGS_VERSION: 2.1.17 lives in a workflow env: block. Dependabot ignores it. Renovate's regexManagers extracts the version string and maps it to the github/safe-settings tag datasource.

Dry-run checklist

  • No workflow changes — safe-settings not involved, no dry-run needed

- regexManagers: tracks SAFE_SETTINGS_VERSION in workflow files
  (Dependabot can't detect env-block versions)
- safe-settings: automerge off, 7-day minimum release age
- prettier: automerge on branch (low risk, no functional impact)

Closes #6.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[P2] Add Renovate for automated dependency updates

1 participant