Skip to content

ci: add Renovate config - #17

Merged
coretl merged 1 commit into
mainfrom
add-renovate-config
Jun 26, 2026
Merged

coretl merged 1 commit into
mainfrom
add-renovate-config

Conversation

@coretl

@coretl coretl commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

What

Adds a root renovate.json so Renovate keeps the pinned GitHub Actions and npm deps current.

Adapted from DiamondLightSource/python-copier-template's renovate.json, with the "managed by python-copier-template" disable rules dropped — this repo isn't generated from that template, so:

  • removed the rule disabling pyenv (Python version) updates — we have no template-managed .python-version;
  • removed the rule disabling updates for actions/checkout, astral-sh/setup-uv, actions/upload-artifact, actions/download-artifact, softprops/action-gh-release, etc. — here we want those bumped (they're flagged Node-20-deprecated, and action-gh-release is on the buggy v2.4.1 that fails the release job on UI-published tags).

Kept: config:recommended, grouping non-major GitHub Actions bumps into one PR, pre-commit (we use it), and npm lockFileMaintenance (automerge if tests pass).

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended"],
  "lockFileMaintenance": { "description": "Keep the npm lockfile up to date, merging if tests pass", "enabled": true, "automerge": true },
  "pre-commit": { "enabled": true },
  "packageRules": [
    { "description": "Group non-major GitHub Actions updates into a single PR", "groupName": "GitHub Actions", "matchManagers": ["github-actions"], "matchUpdateTypes": ["patch", "minor"] }
  ]
}

Note

The config only takes effect once the Renovate GitHub App is enabled for this repo (org/admin action). Once it is, Renovate will open the action/dep bump PRs — including softprops/action-gh-release → v3.0.1 (the fix for the release-job "Too many retries" failure) and the Node-20→24 action refresh.

🤖 Generated with Claude Code

Adapted from DiamondLightSource/python-copier-template's renovate.json, minus
the "managed by python-copier-template" disable rules (the pyenv version pin and
the github-actions ignore list) — this repo isn't derived from that template, so
we WANT Renovate to bump the pinned actions (e.g. softprops/action-gh-release,
which is on a buggy v2.4.1) and the npm deps. Keeps config:recommended, groups
non-major GitHub Actions bumps into one PR, enables pre-commit + npm lockfile
maintenance.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@coretl
coretl merged commit 5935f25 into main Jun 26, 2026
6 checks passed

This branch was previously deployed

1 inactive deployment
github-pages — 0d3ec183 Deployed Jun 26, 2026 by coretl via publish / publish #65
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant