From ff82994abda92e985da7ae4fc1538ce6709c702a Mon Sep 17 00:00:00 2001
From: Joshua Sing <joshua@joshuasing.dev>
Date: Mon, 13 Apr 2026 03:47:41 +1000
Subject: ci: add renovate-bot config

---
 .github/renovate.json5 | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 .github/renovate.json5

(limited to '.github')

diff --git a/.github/renovate.json5 b/.github/renovate.json5
new file mode 100644
index 0000000..cf31aad
--- /dev/null
+++ b/.github/renovate.json5
@@ -0,0 +1,32 @@
+{
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: [
+    'config:best-practices',
+    ':configMigration',
+    ':pinVersions',
+    ':rebaseStalePrs',
+    'schedule:weekends',
+    'customManagers:githubActionsVersions',
+    'helpers:pinGitHubActionDigests',
+  ],
+  commitMessagePrefix: 'ci:',
+  commitMessageAction: 'update',
+  commitMessageTopic: '{{depName}}',
+  labels: [
+    'dependencies',
+  ],
+  minimumReleaseAge: '3 days',
+  packageRules: [
+    {
+      matchUpdateTypes: ['pin', 'pinDigest'],
+      commitMessageAction: 'pin',
+    },
+  ],
+  osvVulnerabilityAlerts: true,
+  vulnerabilityAlerts: {
+    enabled: true,
+    addLabels: [
+      'security',
+    ],
+  },
+}
-- 
cgit v1.2.3-55-g6feb