Skip to content

Conversation

alessfg
Copy link
Member

@alessfg alessfg commented Aug 28, 2025

Proposed changes

This PR enables Renovatebot for managing dependency updates on this repo and only on this repo. When using this repo as a template, a script is run that removes the Renovatebot config and enables Dependabot. This is done to account for the fact that Dependabot works out of the box on GitHub, and Renovatebot requires some level of manual configuration to enable. By defaulting to Dependabot, we always ensure there will be some level of dependency management in place.

Checklist

Before creating a PR, run through this checklist and mark each as complete:

@Copilot Copilot AI review requested due to automatic review settings August 28, 2025 21:44
@alessfg alessfg self-assigned this Aug 28, 2025
@alessfg alessfg added the enhancement New feature or request label Aug 28, 2025
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR replaces Dependabot with Renovatebot for automated dependency management. The change switches from GitHub's native Dependabot service to Renovate, which offers more advanced configuration options and dependency update strategies.

Key Changes

  • Removes existing Dependabot configuration
  • Adds comprehensive Renovate configuration with GitHub Actions support
  • Implements automerge policies and scheduling controls

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
.github/dependabot.yml Removes Dependabot configuration for GitHub Actions updates
.github/renovate.json Adds Renovate configuration with GitHub Actions grouping, automerge rules, and scheduling

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@alessfg alessfg force-pushed the replace-dependabot-renovatebot branch from e7b5ee0 to 709b18f Compare August 28, 2025 21:48
Copy link
Member

@TasoOneAsia TasoOneAsia left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM but did not run the script locally (commands are simple enough to not be warranted)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants