Skip to content

Add renovate configuration#7

Merged
stevendborrelli merged 7 commits intocrossplane:mainfrom
stevendborrelli:renovate
Feb 24, 2026
Merged

Add renovate configuration#7
stevendborrelli merged 7 commits intocrossplane:mainfrom
stevendborrelli:renovate

Conversation

@stevendborrelli
Copy link
Member

@stevendborrelli stevendborrelli commented Feb 24, 2026

Description of your changes

Includes an initial renovate configuration for the project.

Fixes #

I have:

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds an initial Renovate configuration to automate dependency updates for the Crossplane Function SDK for TypeScript project. The configuration is designed to group related packages, automerge non-major updates after a stabilization period, and handle security vulnerabilities automatically.

Changes:

  • Added renovate.json with automated dependency update configuration including grouping rules for TypeScript, ESLint, testing, gRPC, and protobuf packages
  • Configured automerge for non-major updates with a 14-day minimum release age
  • Set up weekly scheduling and PR rate limits to avoid overwhelming the project

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +23 to +33
{
"description": "Automerge non-major updates",
"matchUpdateTypes": [
"minor",
"patch",
"pin",
"digest"
],
"automerge": true,
"minimumReleaseAge": "14 days"
},
Copy link

Copilot AI Feb 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The automerge configuration for non-major updates doesn't explicitly require status checks to pass before merging. This means renovate could merge updates even if CI tests fail. Consider adding "platformAutomerge": true along with branch protection rules that require status checks, or add explicit configuration like "automergeType": "pr" with "automergeStrategy": "squash" and ensure your repository has branch protection rules requiring CI to pass.

Copilot uses AI. Check for mistakes.
stevendborrelli and others added 6 commits February 24, 2026 14:50
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Borrelli <steve@borrelli.org>
Signed-off-by: Steven Borrelli <steve@borrelli.org>
@stevendborrelli stevendborrelli merged commit cabdc5c into crossplane:main Feb 24, 2026
7 checks passed
@stevendborrelli stevendborrelli deleted the renovate branch February 24, 2026 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants