From 4c7c78474e3ecd740db86102b9c69ef7a77e81c6 Mon Sep 17 00:00:00 2001
From: Nicolas Brieussel <nicolasbrieussel@MBP-de-Nicolas.lan>
Date: Tue, 14 Apr 2026 14:00:28 +0200
Subject: [PATCH] feat: add Renovate config for automated dependency updates

- regexManagers: tracks SAFE_SETTINGS_VERSION in workflow files
  (Dependabot can't detect env-block versions)
- safe-settings: automerge off, 7-day minimum release age
- prettier: automerge on branch (low risk, no functional impact)

Closes #6.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 renovate.json | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..9a9cb2b
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,26 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "regexManagers": [
+    {
+      "fileMatch": ["^\\.github/workflows/.+\\.yml$"],
+      "matchStrings": ["SAFE_SETTINGS_VERSION: (?<currentValue>[^\\s]+)"],
+      "datasourceTemplate": "github-tags",
+      "depNameTemplate": "github/safe-settings",
+      "versioningTemplate": "semver"
+    }
+  ],
+  "packageRules": [
+    {
+      "matchDepNames": ["github/safe-settings"],
+      "automerge": false,
+      "minimumReleaseAge": "7 days",
+      "labels": ["renovate"]
+    },
+    {
+      "matchPackageNames": ["prettier"],
+      "automerge": true,
+      "automergeType": "branch"
+    }
+  ]
+}