Skip to content

Conversation

@martincostello
Copy link
Member

Changes

  • Move to .github.
  • Use various built-in presets.
  • Match labels to dependabot.
  • Add custom manager to update OATS in .sh and .ps1 files.

Merge requirement checklist

  • Unit tests added/updated
  • CHANGELOG.md file updated for non-trivial changes
  • Changes in public API reviewed (if applicable)

- Move to `.github`.
- Use various built-in presets.
- Match labels to dependabot.
- Add custom manager to update OATS in `.sh` and `.ps1` files.
Copilot AI review requested due to automatic review settings June 16, 2025 08:03
@martincostello martincostello requested a review from a team as a code owner June 16, 2025 08:03
@martincostello martincostello enabled auto-merge (squash) June 16, 2025 08:03
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR relocates the Renovate configuration to the .github directory, adopts a set of built-in presets, and refines labeling and custom manager rules.

  • Moved renovate.json from the repository root into .github/renovate.json and removed the old file.
  • Updated extends presets (config:best-practices, vulnerability alerts, sign-off, etc.) and aligned labels with Dependabot conventions.
  • Added a custom regex manager to update _VERSION variables in PowerShell and shell scripts, and refined packageRules for Docker, GitHub Actions, and NuGet.

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
renovate.json Removed legacy Renovate config from the repository root.
.github/renovate.json Added new Renovate config: built-in presets, custom managers, labels, and packageRules.
Comments suppressed due to low confidence (3)

.github/renovate.json:22

  • [nitpick] The configuration no longer includes a manager placeholder label ({{{manager}}}), which could reduce PR visibility by manager type. Consider re-adding "{{{manager}}}" to ensure updates remain categorized per manager.
"labels": ["dependencies"]

.github/renovate.json:36

  • [nitpick] The label .NET mixes punctuation and casing; consider using a consistent lowercase label such as dotnet to align with other labels (docker, github_actions).
"addLabels": [".NET"]

.github/renovate.json:56

  • The vulnerabilityAlerts block expects a labels field rather than addLabels. Using labels will correctly apply the security label to vulnerability PRs.
"addLabels": ["security"]

This lets us use `Version="[1.2.3,)"` syntax which is equivalent to `Version="1.2.3"` to tell Renovate to not update a specific dependency.
Gives us machine-readable metadata of what was updated.
@martincostello martincostello merged commit 3a94f22 into main Jun 18, 2025
12 checks passed
@martincostello martincostello deleted the renovate-tweaks branch June 18, 2025 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants