chore: Repo-level Renovate configuration - #2145
Open
NickJosevski wants to merge 1 commit into
Open
NickJosevski wants to merge 1 commit into
NickJosevski wants to merge 1 commit into
Conversation
NickJosevski
force-pushed
the
nj/renovate-repo-config
branch
from
September 17, 2026 06:38
a0158de to
0303123
Compare
renovate.json held only a schema reference before this change. Group the SDK families and the test dependencies. Each group lands as one PR. Advisories run on their own schedule with a security label. Majors queue on the dependency dashboard for approval. Targets main only. The scheduled trigger in renovate-dependencies.yml stays commented out. Nothing runs yet. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
NickJosevski
force-pushed
the
nj/renovate-repo-config
branch
from
September 17, 2026 06:43
0303123 to
10da593
Compare
NickJosevski
marked this pull request as ready for review
September 17, 2026 08:10
NickJosevski
changed the title
NickJosevski
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Background
Renovate has been installed since January with no configuration.
renovate.jsonholds only a schema reference. The schedule inrenovate-dependencies.ymlstays commented out. Every dependency bump in the history was written by hand, including the ones that closed advisories.This PR adds the configuration. Turning the schedule on is a separate decision.
Results
securitylabel.osvVulnerabilityAlertsadds the OSV database on top of GitHub's alerts.publishoutput are ignored. No automerge.Validated with
renovate-config-validator.How to review this PR
General quality. The grouping is the one judgment call: fewer PRs, coarser review granularity.
Reducing risk
RENOVATE_GITHUB_TOKENbelongs to an org member before turning the schedule on. TeamCity filters PR builds toMEMBER. The 12 Dependabot PRs have never built for that reason.global.jsonand the release branches are out of scope.🤖 Generated with Claude Code