fix(renovate): explicitly enable minor and patch updates

[willporter-workos]

Summary

The shared workos/renovate-config preset now explicitly disables major and minor updates for non-github-actions managers to enforce a patch-only policy on the monorepo.

Renovate applies packageRules in order — preset rules first, then repo rules on top. Because the shared preset sets enabled: false for minor updates, and this repo's rule sets automerge: true but not enabled: true, minor updates would silently stop getting PRs.

Fix

Add "enabled": true to the existing minor/patch rule so it explicitly re-enables minor updates after the shared preset disables them.

🤖 Generated with Claude Code

[greptile-apps]

Greptile Summary

This PR replaces the full custom renovate.json configuration with a single reference to the workos/renovate-config:public shared preset. Despite the PR description framing this as a targeted fix (adding "enabled": true to the minor/patch rule), the actual change is a complete removal of all repo-level overrides including the monthly schedule, rebaseWhen, dependencyDashboard, and all packageRules.

• Preset switch: Changes from github>workos/renovate-config to github>workos/renovate-config:public — a different named config file in the same repo.
• Removed settings: The custom monthly schedule, pinDigests: true for github-actions, automerge rules for minor/patch/major/digest, and all groupName groupings are now entirely controlled by the shared preset.
• Risk: Any gaps between the old local config and the new shared preset (e.g. digest pinning for actions, update schedule cadence) will silently change behavior.

Confidence Score: 4/5

Safe to merge if the shared workos/renovate-config:public preset is known to cover all previously local settings, particularly the github-actions digest-pinning and update schedule.

The change delegates all Renovate behavior to a shared preset, which is a reasonable consolidation. The only concern is whether the shared preset fully replaces the removed local settings — especially pinDigests: true for github-actions and the monthly schedule. If those gaps exist in the shared preset, update frequency and action security posture would silently change. The PR description also mischaracterizes what the change actually does, which makes it harder to verify intent.

The content of workos/renovate-config:public (in the external repo) is worth verifying to confirm it covers the github-actions pinDigests and scheduling settings that were removed here.

Important Files Changed

Filename	Overview
renovate.json	All repo-specific Renovate configuration removed; now delegates entirely to the workos/renovate-config:public shared preset. Also switches from the plain workos/renovate-config preset to the public variant. The PR description is inaccurate about the scope of the change.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Renovate runs] --> B{Extends preset}
    B -->|Before: github>workos/renovate-config| C[Shared base rules]
    B -->|After: github>workos/renovate-config:public| D[Shared public rules]
    C --> E[Local overrides applied on top]
    D --> F[No local overrides - fully inherited]
    E --> G[Custom schedule: 15th of month\npinDigests for actions\nAutomerge minor+patch\nDashboard disabled]
    F --> H[All behavior from shared preset\nSchedule, pinDigests, automerge\nall delegated]

Loading

_{Reviews (2): Last reviewed commit: "Update Renovate configuration to use pub..." | Re-trigger Greptile}