From e36214a18100ededa3b7ea08d3493f2d8a4c10f4 Mon Sep 17 00:00:00 2001
From: christopherkindl <53372002+christopherkindl@users.noreply.github.com>
Date: Tue, 21 Jul 2026 12:18:41 +0200
Subject: [PATCH 1/2] Enable Renovate for @vercel/geistdocs updates

---
 renovate.json | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 00000000..6730927e
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,4 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["github>vercel/geistdocs//renovate/consumer"]
+}

From d20d7a1786abc33e0574cd5ad47014f5726d77fb Mon Sep 17 00:00:00 2001
From: christopherkindl <53372002+christopherkindl@users.noreply.github.com>
Date: Tue, 21 Jul 2026 17:57:48 +0200
Subject: [PATCH 2/2] Switch to self-hosted Renovate (workflow + inline config)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The Renovate SaaS app isn't approved for org use; run Renovate
self-hosted via renovatebot/github-action, mirroring vercel/agents.
geistdocs is private, so the shared preset can't be fetched with this
repo's scoped token — the policy is inlined in .github/renovate.js
(keep in sync with vercel/geistdocs//renovate/consumer).

Replaces the earlier extends-based renovate.json.
---
 .github/renovate.js            | 42 +++++++++++++++++++
 .github/workflows/renovate.yml | 77 ++++++++++++++++++++++++++++++++++
 renovate.json                  |  4 --
 3 files changed, 119 insertions(+), 4 deletions(-)
 create mode 100644 .github/renovate.js
 create mode 100644 .github/workflows/renovate.yml
 delete mode 100644 renovate.json

diff --git a/.github/renovate.js b/.github/renovate.js
new file mode 100644
index 00000000..a1a846bb
--- /dev/null
+++ b/.github/renovate.js
@@ -0,0 +1,42 @@
+// Self-hosted Renovate config for keeping @vercel/geistdocs current.
+// Policy mirrors vercel/geistdocs//renovate/consumer (the canonical source);
+// it's inlined here because geistdocs is private and this repo's scoped CI
+// token can't read a cross-repo preset. Keep in sync with that preset.
+module.exports = {
+  onboarding: false,
+  requireConfig: "optional",
+  repositories: ["vercel/streamdown"],
+  enabledManagers: ["npm"],
+  dependencyDashboard: true,
+
+  packageRules: [
+    // Manage only @vercel/geistdocs; leave every other dependency alone.
+    {
+      matchPackageNames: ["!@vercel/geistdocs"],
+      enabled: false,
+    },
+    {
+      matchPackageNames: ["@vercel/geistdocs"],
+      groupName: "geistdocs",
+      // Batch overnight to avoid mid-day churn.
+      schedule: ["after 1am and before 6am"],
+    },
+    // Auto-merge patch once required CI is green (nothing merges on red);
+    // minor and major open a review PR.
+    {
+      matchPackageNames: ["@vercel/geistdocs"],
+      matchUpdateTypes: ["patch"],
+      automerge: true,
+      automergeType: "pr",
+      platformAutomerge: true,
+    },
+  ],
+
+  hostRules: [
+    {
+      hostType: "npm",
+      matchHost: "registry.npmjs.org",
+      token: process.env.RENOVATE_NPM_TOKEN,
+    },
+  ],
+};
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
new file mode 100644
index 00000000..a45f9093
--- /dev/null
+++ b/.github/workflows/renovate.yml
@@ -0,0 +1,77 @@
+name: Renovate
+
+on:
+  # Daily within the overnight window used by the packageRules schedule.
+  schedule:
+    - cron: "0 2 * * *"
+  workflow_dispatch:
+    inputs:
+      repoCache:
+        description: "Reset or disable the cache?"
+        type: choice
+        default: enabled
+        options:
+          - enabled
+          - disabled
+          - reset
+
+env:
+  cache_dir: /tmp/renovate/cache/renovate/repository
+  cache_key: renovate-cache
+
+permissions:
+  contents: read
+  id-token: write
+
+concurrency:
+  group: ${{ github.workflow }}
+
+jobs:
+  renovate:
+    name: Renovate
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        with:
+          persist-credentials: false
+
+      - name: Restore Renovate cache
+        id: cache-restore
+        if: github.event.inputs.repoCache != 'disabled' && github.event.inputs.repoCache != 'reset'
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: ${{ env.cache_dir }}
+          key: ${{ env.cache_key }}-${{ github.run_id }}-${{ github.run_attempt }}
+          restore-keys: |
+            ${{ env.cache_key }}-
+
+      - name: Fix restored cache ownership
+        if: steps.cache-restore.outputs.cache-matched-key != ''
+        run: |
+          sudo chown -R 12021:0 /tmp/renovate/
+          ls -R $cache_dir
+
+      - name: Generate scoped GitHub token
+        id: github-sts
+        uses: vercel/gh-sts-action@56f891d4076b9f908ce459eb475d4c1884f75ada
+        with:
+          repos: vercel/streamdown
+          permissions: '{"contents":"write","issues":"write","pull_requests":"write","statuses":"write"}'
+
+      - name: Renovate
+        uses: renovatebot/github-action@22e0a16091fc706b04affe6ae53d5e3358ac4023 # v46.1.19
+        with:
+          configurationFile: .github/renovate.js
+          token: ${{ steps.github-sts.outputs.token }}
+        env:
+          RENOVATE_NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          RENOVATE_REPOSITORY_CACHE: ${{ github.event.inputs.repoCache || 'enabled' }}
+          LOG_LEVEL: debug
+
+      - name: Save Renovate cache
+        if: github.event.inputs.repoCache != 'disabled' && steps.cache-restore.outputs.cache-hit != 'true'
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: ${{ env.cache_dir }}
+          key: ${{ env.cache_key }}-${{ github.run_id }}-${{ github.run_attempt }}
diff --git a/renovate.json b/renovate.json
deleted file mode 100644
index 6730927e..00000000
--- a/renovate.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["github>vercel/geistdocs//renovate/consumer"]
-}