Skip to content

ci(renovate): enable held lockfile maintenance; schedule at any time - #138

Merged
github-actions[bot] merged 1 commit into
mainfrom
ci/renovate-lockfile-maintenance
Oct 20, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
ci/renovate-lockfile-maintenance

Conversation

@brujack

@brujack brujack commented Oct 20, 2026

Copy link
Copy Markdown
Owner

Summary

  • Adds lockFileMaintenance: {enabled: true, schedule: ["at any time"]} so transitive lockfile pins get refreshed weekly-or-sooner. Lock PRs are held: no packageRule matches lockFileMaintenance, so no automerge-ok, and the merge job requires it.
  • Moves schedule from before 5am on monday to the canonical at any time: this repo has had 0 Renovate PRs ever under the Monday window. On merge Renovate opens its pending updates; minor/patch auto-merge on green, majors stay held.

Test Plan

  • renovate-config-validator --strict rc=0; ai-config renovate_preset_sync compare: no drift.
  • Hold check: no lockFileMaintenance block or matching rule sets automerge or adds automerge-ok.
  • Phase 3: security, diff-scope, bug-scan (no auto-merge path), pr-review PASS.

Spec alignment

Part of ai-config spec 2026-10-20-fleet-dependabot-remediation (R8, R9); the plan run will record the verdict.

🤖 Generated with Claude Code

https://claude.ai/code/session_019xLzrkRPPytfYRYLUBwAwJ

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019xLzrkRPPytfYRYLUBwAwJ
@github-actions
github-actions Bot merged commit 1fcc7de into main Oct 20, 2026
12 checks passed
@brujack
brujack deleted the ci/renovate-lockfile-maintenance branch October 20, 2026 02:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant