From 0d3ec183e4a3417d94de268fab0a2f70bb5ae9cc Mon Sep 17 00:00:00 2001
From: Tom Cobb <tom.cobb@diamond.ac.uk>
Date: Fri, 26 Jun 2026 08:45:32 +0000
Subject: [PATCH] ci: add Renovate config to keep actions + npm deps current
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Adapted from DiamondLightSource/python-copier-template's renovate.json, minus
the "managed by python-copier-template" disable rules (the pyenv version pin and
the github-actions ignore list) — this repo isn't derived from that template, so
we WANT Renovate to bump the pinned actions (e.g. softprops/action-gh-release,
which is on a buggy v2.4.1) and the npm deps. Keeps config:recommended, groups
non-major GitHub Actions bumps into one PR, enables pre-commit + npm lockfile
maintenance.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 renovate.json | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..9bfb02d
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,27 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "lockFileMaintenance": {
+    "description": "Keep the npm lockfile up to date, merging if tests pass",
+    "enabled": true,
+    "automerge": true
+  },
+  "pre-commit": {
+    "enabled": true
+  },
+  "packageRules": [
+    {
+      "description": "Group non-major GitHub Actions updates into a single PR",
+      "groupName": "GitHub Actions",
+      "matchManagers": [
+        "github-actions"
+      ],
+      "matchUpdateTypes": [
+        "patch",
+        "minor"
+      ]
+    }
+  ]
+}