feat: add Renovate for automated dependency updates#16
Open
nbrieussel wants to merge 1 commit intomainfrom
Open
feat: add Renovate for automated dependency updates#16nbrieussel wants to merge 1 commit intomainfrom
nbrieussel wants to merge 1 commit intomainfrom
Conversation
- regexManagers: tracks SAFE_SETTINGS_VERSION in workflow files (Dependabot can't detect env-block versions) - safe-settings: automerge off, 7-day minimum release age - prettier: automerge on branch (low risk, no functional impact) Closes #6. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
a6da086 to
4c7c784
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #6
What this adds
renovate.jsonat repo root — picked up automatically by the Renovate GitHub App (already installed on the org).What Renovate will manage
SAFE_SETTINGS_VERSIONin workflowsgithub-tagsvia regexManagerprettier(npm)package.jsonWhy regexManager for safe-settings
SAFE_SETTINGS_VERSION: 2.1.17lives in a workflowenv:block. Dependabot ignores it. Renovate'sregexManagersextracts the version string and maps it to thegithub/safe-settingstag datasource.Dry-run checklist