Skip to content

Comments

feat: add Renovate automation with daily dependency scanning#9

Merged
mvgadagi merged 1 commit intomainfrom
feature/add-renovate-automation
Dec 3, 2025
Merged

feat: add Renovate automation with daily dependency scanning#9
mvgadagi merged 1 commit intomainfrom
feature/add-renovate-automation

Conversation

@sufiyan-ahmed
Copy link
Contributor

  • Add GitHub Actions workflow for daily Renovate runs at 6 AM UTC
  • Enable manual workflow dispatch with configurable log levels
  • Enhance renovate.json with intelligent package grouping and auto-merge policies
  • Add comprehensive setup documentation in RENOVATE_SETUP.md

Features:

  • Smart grouping for Angular, NestJS, Nx, and TypeScript ESLint packages
  • Auto-merge for safe patch updates (prod) and patch+minor updates (dev)
  • Vulnerability alerts and dependency dashboard
  • Rate limiting: 5 concurrent PRs, 2 PRs per hour, 3-day stability period
  • Semantic commits for clear PR history

Setup required: Add RENOVATE_TOKEN secret with GitHub PAT

Before submitting the PR, please make sure you do the following:

  • Read the Contributing Guidelines
  • Reference your PR to an issue that was discussed ahead of time
  • The PR should contain a clear description of the problem it solves
  • Ideally, include a test that fails without this PR but passes with it.

Tests and linting

  • Run the unit tests with pnpm test
  • Run the linting with pnpm lint
  • Run the build with pnpm build

Thank you for contributing to Renovate Playground!

- Add daily workflow at 6 AM UTC with manual trigger support
- Configure intelligent package grouping (Angular, NestJS, Nx, TypeScript ESLint)
- Enable auto-merge for safe patch updates and vulnerability alerts
- Set rate limiting: 5 concurrent PRs, 2 PRs per hour, 3-day stability period

Requires RENOVATE_TOKEN secret with GitHub PAT for repository access.
@sufiyan-ahmed sufiyan-ahmed force-pushed the feature/add-renovate-automation branch from a75fa40 to 3b33f84 Compare December 3, 2025 04:27
cancel-in-progress: false

permissions:
contents: read
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need write as Renovate needs to push the branch

@mvgadagi mvgadagi merged commit 363c03f into main Dec 3, 2025
3 checks passed
@github-actions
Copy link
Contributor

github-actions bot commented Dec 3, 2025

🎉 This PR is included in version 1.1.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@mvgadagi mvgadagi deleted the feature/add-renovate-automation branch December 5, 2025 03:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants