feat(renovate): update to shared renovate config's

[Sarah4VT]

Summary

Migrates the repository to use the commercetools shared renovate configuration while maintaining repository-specific overrides for uncovered dependencies and avoiding circular dependency issues.

Changes

Configuration Structure

Before:

• Simple extends: config:base, :pinOnlyDevDependencies, schedule:monthly
• Manual application-kit grouping
• Generic minor/patch grouping rule
• Lock file maintenance disabled

After:

• Extends 12 individual library and platform configurations from github>commercetools/renovate-config
• Inherits sophisticated grouping and scheduling from shared config
• Custom package rules for dependencies not covered by shared config
• Lock file maintenance enabled (inherited from shared config)

Libraries Extended

The following shared configurations are now included:

• default.json - Base configuration with best practices
• libraries/application-kit.json - Application Kit packages
• libraries/babel.json - Babel packages
• libraries/git-workflow.json - Git workflow tools (commitlint, husky, lint-staged)
• libraries/graphql-codegen.json - GraphQL Code Generator packages
• libraries/linting.json - Linting packages (ESLint, Prettier)
• libraries/typescript.json - TypeScript packages
• composite/testing.json - Testing packages (Jest, etc.)
• platforms/nodejs.json - Node.js platform
• platforms/pnpm.json - pnpm package manager

Note: Explicitly excludes libraries/test-data.json to prevent circular dependency (this repository IS the test-data package).

Repository-Specific Package Rules

Added custom grouping for dependencies not covered by the shared config:

1. changesets: @changesets/changelog-github, @changesets/cli
2. monorepo tools: @manypkg/cli, @manypkg/find-root, @preconstruct/cli
3. build and dev tools: babel-plugin-module-resolver, cross-env, dotenv, find-up, tsc-files

Expected Behavior Changes

Schedule

• Before: Monthly updates
• After: Weekly updates during non-office hours

Lock File Maintenance

• Before: Disabled
• After: Enabled (automated pnpm-lock.yaml updates)

Dependency Grouping

PRs will be grouped by ecosystem:

• All application-kit packages (one PR)
• All babel packages (one PR)
• All git workflow tools (one PR)
• All graphql-codegen packages (one PR)
• All Jest/testing packages (one PR)
• All linting packages (one PR)
• All TypeScript packages (one PR)
• All Node.js updates (one PR)
• pnpm updates (one PR)
• changesets (one PR - custom)
• monorepo tools (one PR - custom)
• build and dev tools (one PR - custom)

Additional Inherited Settings

• Git author: "Merchant Center Automation merchant.center.automation+renovate@commercetools.com"
• Rebase strategy: Only when conflicted
• Stop updating label: "🖐 Status: On Hold"
• Peer dependencies: Widen range strategy
• Security minimum release age for npm packages

Validation

✅ Configuration validated successfully using renovate-config-validator
✅ No circular dependency detected
✅ All repository-specific dependencies accounted for

References

[changeset-bot]

⚠️ No Changeset found

Latest commit: 4fb3558

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR