Add renovate configuration#7
Conversation
There was a problem hiding this comment.
Pull request overview
This PR adds an initial Renovate configuration to automate dependency updates for the Crossplane Function SDK for TypeScript project. The configuration is designed to group related packages, automerge non-major updates after a stabilization period, and handle security vulnerabilities automatically.
Changes:
- Added renovate.json with automated dependency update configuration including grouping rules for TypeScript, ESLint, testing, gRPC, and protobuf packages
- Configured automerge for non-major updates with a 14-day minimum release age
- Set up weekly scheduling and PR rate limits to avoid overwhelming the project
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| { | ||
| "description": "Automerge non-major updates", | ||
| "matchUpdateTypes": [ | ||
| "minor", | ||
| "patch", | ||
| "pin", | ||
| "digest" | ||
| ], | ||
| "automerge": true, | ||
| "minimumReleaseAge": "14 days" | ||
| }, |
There was a problem hiding this comment.
The automerge configuration for non-major updates doesn't explicitly require status checks to pass before merging. This means renovate could merge updates even if CI tests fail. Consider adding "platformAutomerge": true along with branch protection rules that require status checks, or add explicit configuration like "automergeType": "pr" with "automergeStrategy": "squash" and ensure your repository has branch protection rules requiring CI to pass.
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Steven Borrelli <steve@borrelli.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Steven Borrelli <steve@borrelli.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Steven Borrelli <steve@borrelli.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Steven Borrelli <steve@borrelli.org>
76cf047 to
f6d2977
Compare
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Description of your changes
Includes an initial renovate configuration for the project.
Fixes #
I have: