From 58a32ed5d9b5db82cfcd9787c3539f2366b3696f Mon Sep 17 00:00:00 2001 From: Yamac Ay Date: Thu, 13 Aug 2026 11:15:47 +0300 Subject: [PATCH 1/5] chore: switch from dependabot to renovate pt1 --- renovate.json | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 renovate.json diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..6900035 --- /dev/null +++ b/renovate.json @@ -0,0 +1,20 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": ["config:recommended"], + "baseBranches": ["main"], + "schedule": ["after 10pm"], + "prConcurrentLimit": 10, + "commitMessagePrefix": "chore(deps):", + "packageRules": [ + { + "description": "Group CodeQL actions", + "matchPackagePatterns": ["github/codeql-action/*"], + "groupName": "codeql" + }, + { + "description": "Wait 5 days after release before opening a PR", + "matchUpdateTypes": ["minor", "patch"], + "minimumReleaseAge": "5 days" + } + ] +} From 3f73a01257e4844e134f0c53c787a9d95e9a91d6 Mon Sep 17 00:00:00 2001 From: Yamac Ay Date: Thu, 13 Aug 2026 12:01:18 +0300 Subject: [PATCH 2/5] renovate bot decrease freq --- renovate.json | 10 +--------- 1 file changed, 1 insertion(+), 9 deletions(-) diff --git a/renovate.json b/renovate.json index 6900035..211142d 100644 --- a/renovate.json +++ b/renovate.json @@ -1,20 +1,12 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": ["config:recommended"], - "baseBranches": ["main"], - "schedule": ["after 10pm"], - "prConcurrentLimit": 10, "commitMessagePrefix": "chore(deps):", "packageRules": [ { - "description": "Group CodeQL actions", + "description": "Group CodeQL actions into a single PR", "matchPackagePatterns": ["github/codeql-action/*"], "groupName": "codeql" - }, - { - "description": "Wait 5 days after release before opening a PR", - "matchUpdateTypes": ["minor", "patch"], - "minimumReleaseAge": "5 days" } ] } From 33d3ba82397119f53261c64a109d2d10ecc880f8 Mon Sep 17 00:00:00 2001 From: Yamac Ay Date: Thu, 13 Aug 2026 12:02:04 +0300 Subject: [PATCH 3/5] remove dependabot --- .github/dependabot.yml | 28 ---------------------------- 1 file changed, 28 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 37bac91..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,28 +0,0 @@ -version: 2 -updates: - - package-ecosystem: uv - target-branch: 'main' - directory: / - schedule: - interval: daily - time: '22:00' - cooldown: - default-days: 5 - open-pull-requests-limit: 10 - commit-message: - prefix: 'chore(deps)' - - - package-ecosystem: github-actions - target-branch: 'main' - directory: / - schedule: - interval: daily - time: '22:00' - cooldown: - default-days: 5 - commit-message: - prefix: 'chore(deps)' - groups: - codeql: - patterns: - - 'github/codeql-action/*' From 05fd3f469f83c02f5ee42e7960d561257fc206fd Mon Sep 17 00:00:00 2001 From: Yamac Ay Date: Thu, 13 Aug 2026 14:26:32 +0300 Subject: [PATCH 4/5] update to renovate.jsonc --- renovate.json | 12 ------------ renovate.jsonc | 41 +++++++++++++++++++++++++++++++++++++++++ 2 files changed, 41 insertions(+), 12 deletions(-) delete mode 100644 renovate.json create mode 100644 renovate.jsonc diff --git a/renovate.json b/renovate.json deleted file mode 100644 index 211142d..0000000 --- a/renovate.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "$schema": "https://docs.renovatebot.com/renovate-schema.json", - "extends": ["config:recommended"], - "commitMessagePrefix": "chore(deps):", - "packageRules": [ - { - "description": "Group CodeQL actions into a single PR", - "matchPackagePatterns": ["github/codeql-action/*"], - "groupName": "codeql" - } - ] -} diff --git a/renovate.jsonc b/renovate.jsonc new file mode 100644 index 0000000..c7ca199 --- /dev/null +++ b/renovate.jsonc @@ -0,0 +1,41 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "config:best-practices", + "security:openssf-scorecard", + ":semanticCommits", + ":semanticCommitTypeAll(chore)", + ":pinOnlyDevDependencies", + ":enableVulnerabilityAlerts", // Handle vulnerability alerts from dependabot + ":automergeMinor" + ], + "ignorePresets": [ + // not needed + ":dependencyDashboard", + // chore is configured above + ":semanticPrefixFixDepsChoreOthers" + ], + "minimumReleaseAge": "4 days", + "timezone": "Europe/Berlin", + "packageRules": [ + { + "matchManagers": ["github-actions", "custom.regex"], + "schedule": ["every weekend"] + }, + { + "matchPackageNames": ["sap/ai-sdk-python", "sap/ai-sdk-python/**"], + "groupName": "sap-ai-sdk", + "minimumReleaseAge": null, + "pinDigests": false + }, + { + "matchPackageNames": ["langchain", "langchain/**"], + "groupName": "langchain" + }, + { + "description": "Group CodeQL actions into a single PR", + "matchPackagePatterns": ["github/codeql-action/*"], + "groupName": "codeql" + } + ] +} \ No newline at end of file From 62d86ffdb268c9115ede0b60483a69f4d2753509 Mon Sep 17 00:00:00 2001 From: Yamac Ay Date: Thu, 13 Aug 2026 14:39:52 +0300 Subject: [PATCH 5/5] renovate.jsonc is not recognized, use json --- renovate.jsonc => renovate.json | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) rename renovate.jsonc => renovate.json (88%) diff --git a/renovate.jsonc b/renovate.json similarity index 88% rename from renovate.jsonc rename to renovate.json index c7ca199..03b5d5c 100644 --- a/renovate.jsonc +++ b/renovate.json @@ -6,13 +6,11 @@ ":semanticCommits", ":semanticCommitTypeAll(chore)", ":pinOnlyDevDependencies", - ":enableVulnerabilityAlerts", // Handle vulnerability alerts from dependabot + ":enableVulnerabilityAlerts", ":automergeMinor" ], "ignorePresets": [ - // not needed ":dependencyDashboard", - // chore is configured above ":semanticPrefixFixDepsChoreOthers" ], "minimumReleaseAge": "4 days",