chore(deps): set Renovate release age, PR limit and update groups (WealthLedger/main#6) #50

2026-11-03T12:59:49+03:00

codex-bot commented

2026-11-03 12:59:49 +03:00

Summary

Shared Renovate rules for the five independent repos (root coordinator PR). Each repo gets its own copy of renovate.json; no shared preset.

Linked Issue

Closes WealthLedger/main#6

Related PRs (same change, per-repo copy): WealthLedger/backend, WealthLedger/frontend, WealthLedger/docs, WealthLedger/specs — branch chore/6-renovate-policy.

Changes

security:minimumReleaseAgeNpm: npm updates wait 3 days after publication.
prConcurrentLimit: 5.
lockFileMaintenance enabled, once a month.
Separate non-major groups for github-actions and docker-compose/dockerfile; npm non-major group kept.
Major updates still need Dependency Dashboard approval; automerge stays off; rangeStrategy: pin kept.
No schedule (releases are not calendar-bound) — owner decision.
.ai/conventions/dependencies.md: documents the rule; notes that OpenSpec is not in any manifest (CI installs latest), so Renovate does not touch it (specs#6 closed as obsolete).

Verification

renovate-config-validator --strict (renovate 44.83.0, the version that created the current PRs): Config validated successfully.
git diff --check: clean.
Not verified: the real Renovate run on the Gitea host (applies only after merge to develop); that security:minimumReleaseAgeNpm is resolved by the host's Renovate version.

Breaking Changes

None. No API contract changes.

## Summary Shared Renovate rules for the five independent repos (root coordinator PR). Each repo gets its own copy of `renovate.json`; no shared preset. ## Linked Issue Closes WealthLedger/main#6 Related PRs (same change, per-repo copy): WealthLedger/backend, WealthLedger/frontend, WealthLedger/docs, WealthLedger/specs — branch `chore/6-renovate-policy`. ## Changes - `security:minimumReleaseAgeNpm`: npm updates wait 3 days after publication. - `prConcurrentLimit: 5`. - `lockFileMaintenance` enabled, once a month. - Separate non-major groups for `github-actions` and `docker-compose`/`dockerfile`; npm non-major group kept. - Major updates still need Dependency Dashboard approval; automerge stays off; `rangeStrategy: pin` kept. - No schedule (releases are not calendar-bound) — owner decision. - `.ai/conventions/dependencies.md`: documents the rule; notes that OpenSpec is not in any manifest (CI installs latest), so Renovate does not touch it (specs#6 closed as obsolete). ## Verification - `renovate-config-validator --strict` (renovate 44.83.0, the version that created the current PRs): `Config validated successfully`. - `git diff --check`: clean. - Not verified: the real Renovate run on the Gitea host (applies only after merge to `develop`); that `security:minimumReleaseAgeNpm` is resolved by the host's Renovate version. ## Breaking Changes None. No API contract changes.

codex-bot added 1 commit 2026-11-03 12:59:49 +03:00

chore(deps): set Renovate release age, PR limit and update groups (WealthLedger/main#6 )

Conventional commits / commits (pull_request) Successful in 10s

Details

6ee99d047a

codex-bot merged commit 9c251b933d into develop

2026-11-03 14:07:43 +03:00

codex-bot deleted branch chore/6-renovate-policy

2026-11-03 14:07:44 +03:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: WealthLedger/main#50