Skip to content

feat: configure renovate for dependency management - #422

Draft
mvgadagi wants to merge 3 commits into
AmadeusITGroup:mainfrom
mvgadagi:feat/renovate-dependency-updates
Draft

feat: configure renovate for dependency management#422
mvgadagi wants to merge 3 commits into
AmadeusITGroup:mainfrom
mvgadagi:feat/renovate-dependency-updates

Conversation

@mvgadagi

@mvgadagi mvgadagi commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Description

Adds a renovate.json configuration to automate dependency update PRs via Renovate. This replaces manual dependency tracking with an opinionated, low-noise setup tailored to the monorepo structure.

Type of Change

  • 🔧 Configuration/build changes

Changes Made

Renovate configuration (renovate.json)

  • Base presets: extends config:recommended, :dependencyDashboard, and :semanticCommits for sensible defaults and conventional commit messages.
  • Lock file maintenance: scheduled weekly (Monday before 5am) to keep pnpm-lock.yaml fresh.
  • Custom manager: regex-based manager to track NODE_VERSION in GitHub Actions workflow YAML files alongside package.json engine constraints.

Grouping strategy

  • Patch updates: grouped and auto-merged — low risk, high volume.
  • Minor updates: grouped into a single PR for manual review.
  • Major updates: individual PRs across all managers (npm, GitHub Actions, Docker, custom regex) to allow careful review of breaking changes.

Isolated packages (individual PRs)

Package Reason
@types/vscode Delayed 8 months to stay aligned with the VS Code engine target
axios History of breaking changes across majors
eslint Config breakage risk
typescript-eslint Rule changes need separate review
@o3r/* (Otter) Grouped together — shared release cadence
pnpm Package manager updates need workspace compatibility validation
node Grouped across package.json and CI workflows via custom regex manager

Workspace labeling

PRs are auto-labeled by monorepo area (workspace:packages, workspace:apps, workspace:github-actions, workspace:lib, workspace:website) for easy filtering.

.gitignore update

Added !renovate.json exception so the config is tracked (the repo ignores /*.json by default).

Testing

Test Coverage

  • Manual testing completed
  • All existing tests pass

Manual Testing Steps

  1. Validated JSON schema against https://docs.renovatebot.com/renovate-schema.json
  2. Verified the .gitignore exception correctly tracks renovate.json
  3. Reviewed package rules against the current dependency landscape

Checklist

  • My code follows the project's style guidelines
  • I have performed a self-review of my code
  • My changes generate no new warnings or errors
  • No documentation changes needed

Reviewer Guidelines

Please pay special attention to:

  • Whether the @types/vscode 8-month delay aligns with the current VS Code engine target policy
  • Whether any additional packages should be isolated or grouped differently
  • Whether auto-merge on patch updates is acceptable for the CI/review workflow

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache License 2.0.

- Remove concurrent and hourly PR limits to allow Renovate flexibility in scheduling
- Change default label from "dependencies" to "renovate" for better categorization
- Enhance package rule descriptions with clearer rationales for isolation and grouping strategies
- Remove package.json from Node.js version custom manager patterns (handled by npm manager)
- Simplify NODE_VERSION regex pattern in custom manager configuration
- Format all array values across package rules with proper indentation for consistency
- Add npm manager to Node.js runtime rule to ensure version alignment across both package.json and CI workflows
- Improve workspace labels descriptions for packages/, apps/, github-actions/, lib/, and website/ directories
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Backlog

Development

Successfully merging this pull request may close these issues.

1 participant