ci: require manual approval for NPM updates on non-main branches

Previously, NPM updates were entirely disabled on branches other than main. This change modifies the Renovate configuration to require manual approval for these updates instead of disabling them. This allows for important bug fixes to be manually selected while preventing automatic updates.

Additionally, the rule that groups all non-major dependencies for updates has been updated to explicitly apply only to the main branch.

Author: alan-agius4

CHANGELOG.md

@@ -14,20 +14,20 @@ appearance, race, religion, or sexual identity and orientation.
 Examples of behavior that contributes to creating a positive environment
 include:
 
-* Use welcoming and inclusive language
-* Respect each other
-* Provide and gracefully accept constructive criticism
-* Show empathy towards other community members
+- Use welcoming and inclusive language
+- Respect each other
+- Provide and gracefully accept constructive criticism
+- Show empathy towards other community members
 
 Examples of unacceptable behavior by participants include:
 
-* Trolling, insulting/derogatory comments, and personal or political attacks
-* Public or private harassment
-* Publishing others' private information, such as a physical or electronic
+- Trolling, insulting/derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or electronic
   address, without explicit permission
-* The use of sexualized language or imagery
-* Unwelcome sexual attention or advances
-* Other conduct which could reasonably be considered inappropriate in a
+- The use of sexualized language or imagery
+- Unwelcome sexual attention or advances
+- Other conduct which could reasonably be considered inappropriate in a
   professional setting
 
 ## Our Responsibilities
@@ -69,9 +69,9 @@ members of the project's leadership.
 
 If you are banned you may contest the decision. To do so email [email protected] with the subject line "Repeal Ban for {{your name here}}" and body with the responses to the following:
 
-* Why do you believe you did not violate the Code of Conduct?
-* Were other factors involved in this situation the leadership team may have been unaware of?
-* Why do you wish to be a part of the Angular community?
+- Why do you believe you did not violate the Code of Conduct?
+- Were other factors involved in this situation the leadership team may have been unaware of?
+- Why do you wish to be a part of the Angular community?
 
 ## Attribution
 

CHANGELOG_ARCHIVE.md

@@ -1,2 +1,3 @@
 # dev-infra
+
 Angular Development Infrastructure

CODE_OF_CONDUCT.md

@@ -13,4 +13,4 @@ docker tag angular-devinfra-rbe-image:latest \
   us-west2-docker.pkg.dev/internal-200822/remote-execution-images/angular-devinfra-rbe-image:2025-10
 
 docker push us-west2-docker.pkg.dev/internal-200822/remote-execution-images/angular-devinfra-rbe-image:2025-10
-````
+```

README.md

@@ -1,6 +1,6 @@
 # Organization File Sync
 
-This directory contains an action which can be executed in the `.github` repository.  Based on the
+This directory contains an action which can be executed in the `.github` repository. Based on the
 configured list of files and repositories, the action will ensure the all of the provided files in
 the provided repositories are kept in sync with the `.github` repository.
 

bazel/remote-execution/README.md

@@ -25,7 +25,11 @@ export class Prettier extends Formatter {
     '**/*.{js,cjs,mjs}',
     '**/*.{ts,cts,mts}',
     '**/*.{json,json5}',
+    '**/*.md',
     '**/*.{yml,yaml}',
+
+    // Ignore goldens MD files
+    '!**/goldens/**/*.api.md',
   ];
 
   /**

github-actions/org-file-sync/README.md

@@ -56,13 +56,15 @@
       matchManagers: ['bazel', 'bazel-module', 'bazelisk'],
     },
 
-    // Rule to disable NPM updates on branches other than 'main'.
-    // But allow updating engines and packageManagers.
+    // Rule to require manual approval for NPM updates on branches other than 'main'.
+    // This is to prevent auto updates to branches that are not the main branch.
+    // But, still allows the updates to be manually selected in case of an important bug fix.
+    // Engines and packageManagers are excluded from this rule.
     {
-      enabled: false,
       matchBaseBranches: ['!main'],
-      matchDepNames: ['!node', '!pnpm', '!npm', '!yarn'],
+      matchDepNames: ['*', '!node', '!pnpm', '!npm', '!yarn'],
       matchManagers: ['npm'],
+      dependencyDashboardApproval: true,
     },
 
     // Group all non-major dependencies together for updates.
@@ -71,6 +73,7 @@
       matchDepNames: ['*', '!node', '!pnpm', '!npm', '!yarn'],
       matchUpdateTypes: ['digest', 'patch', 'minor'],
       matchManagers: ['npm'],
+      matchBaseBranches: ['main'],
     },
 
     // ============================================================================