gander-settings/renovate
Shareable Renovate presets. Pick the ones you need and list them in extends.
Goal
Automate as much routine dependency maintenance as possible, while keeping a quality gate:
- Patch updates wait for a short release age, pass CI and merge themselves.
- Minor and major updates wait longer and always stay open for review.
- Vulnerability fixes skip the release age and merge as soon as CI is green.
- Lock file maintenance is off by default, because a full lock refresh would bypass both the release age and the minor/major automerge block.
See How updates flow for the details and the reason behind each option.
Quick start
Add a renovate.json to your repo:
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["github>gander-settings/renovate"]
}
github>gander-settings/renovate loads default: the base config plus the automerge rules. It is the usual choice for every repo.
Base and modifiers
Only github>gander-settings/renovate (and base) carry the base config. Every other preset is a modifier: it changes a few options and does not extend the base, so the base is loaded once however many presets you list.
Always start extends with github>gander-settings/renovate and list modifiers after it. A modifier on its own gives you almost nothing.
| Preset | Kind | What it does |
|---|---|---|
| (no name) | base | base plus automerge. Start every extends with it |
base | base | Base config without automerge |
automerge | modifier | Automerges patches, GitHub Actions pins and digests, and vulnerability fixes |
approval | modifier | Holds every update in the Dependency Dashboard until you approve it |
disabled | modifier | Turns Renovate off, keeping the config |
lockfile | modifier | Lock file maintenance on demand, from the Dependency Dashboard |
legacy | modifier | One PR per package with its newest minor |
pin | modifier | Keeps a tool on one version line, e.g. PHP 7.4.x |
before | modifier | Keeps a package below a given version |
vue | modifier | Keeps TypeScript below 7 for vue-tsc |
docker | modifier | Pins Docker image tags to digests |
forks | modifier | Runs Renovate in forks too |
defaults | deprecated | Alias of base |
For AI assistants
A machine-readable index of this documentation is published at llms.txt, following the llms.txt format.