# gander-settings/renovate

> Shareable Renovate presets that automate routine dependency updates behind a quality gate: patch updates wait 3 days and automerge once CI is green, minor (5 days) and major (7 days) updates always stay as PRs for review, vulnerability fixes skip the release age, and lock file maintenance is off unless requested.

Usage rules:

- Start `extends` with `github>gander-settings/renovate` (loads `default.json` = `base` + `automerge`). Only `default` and `base` carry the base config; every other preset is a modifier that must be listed after it.
- Reference presets as `github>gander-settings/renovate:<name>`. Parameterised presets: `pin(<dependency>,<version>)`, `before(<package>,<version>)`; parameters are unquoted and comma-separated.
- Presets merge first to last, later ones win; `packageRules` are concatenated. Putting `:disabled` before the base preset does not disable Renovate, because `base` sets `enabled: true`.
- Minimal config: `{"$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": ["github>gander-settings/renovate"]}`
- Human-readable docs: https://gander-settings.github.io/renovate/

## Docs

- [Overview](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/index.md): goal, quick start, base vs modifier presets, preset table
- [How updates flow](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/how-it-works.md): release age, automerge per update type, Merge Confidence, PR layout, and why each option is set
- [Combining presets](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/combining.md): merge order, parameters, base without automerge
- [PR table columns](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/pr-columns.md): `prBodyColumns` trial set and Merge Confidence badges

## Presets

- [default](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/default.md): `github>gander-settings/renovate`, base + automerge, the usual choice
- [base](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/base.md): base config without automerge, option by option
- [automerge](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/automerge.md): automerge patches, GitHub Actions pins/digests and vulnerability fixes; never minor/major
- [approval](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/approval.md): hold every update in the Dependency Dashboard until approved
- [disabled](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/disabled.md): turn Renovate off, keep the config
- [lockfile](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/lockfile.md): lock file maintenance on demand via the Dependency Dashboard, never automerged
- [legacy](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/legacy.md): one PR per package with its newest minor
- [pin](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/pin.md): `pin(<dependency>,<version>)`, stay on one version line
- [before](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/before.md): `before(<package>,<version>)`, stay below a version
- [vue](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/vue.md): keep TypeScript below 7 for vue-tsc
- [docker](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/docker.md): pin Docker image tags to digests
- [forks](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/forks.md): run Renovate in forks

## Preset sources

- [default.json](https://raw.githubusercontent.com/gander-settings/renovate/main/default.json)
- [base.json](https://raw.githubusercontent.com/gander-settings/renovate/main/base.json)
- [automerge.json](https://raw.githubusercontent.com/gander-settings/renovate/main/automerge.json)
- [approval.json](https://raw.githubusercontent.com/gander-settings/renovate/main/approval.json)
- [disabled.json](https://raw.githubusercontent.com/gander-settings/renovate/main/disabled.json)
- [lockfile.json](https://raw.githubusercontent.com/gander-settings/renovate/main/lockfile.json)
- [legacy.json](https://raw.githubusercontent.com/gander-settings/renovate/main/legacy.json)
- [pin.json](https://raw.githubusercontent.com/gander-settings/renovate/main/pin.json)
- [before.json](https://raw.githubusercontent.com/gander-settings/renovate/main/before.json)
- [vue.json](https://raw.githubusercontent.com/gander-settings/renovate/main/vue.json)
- [docker.json](https://raw.githubusercontent.com/gander-settings/renovate/main/docker.json)
- [forks.json](https://raw.githubusercontent.com/gander-settings/renovate/main/forks.json)

## Optional

- [defaults (deprecated)](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/presets/defaults.md): alias of base, kept for old configs
- [Changing the presets](https://raw.githubusercontent.com/gander-settings/renovate/main/docs/contributing.md): validation command and rules for new presets
- [Renovate configuration options](https://docs.renovatebot.com/configuration-options/): upstream reference