chore: Extend the shared dependency update policy - #133
Merged
Merged
Conversation
Renovate opens pull requests here on its own schedule. None are open today, so this is the last repository in the sweep rather than a queue to clear, and it stops one forming. This replaces the stock recommendation with a reference to the organization's shared policy. Updates are listed on this repository's dependency dashboard and open only when someone asks for one, and security fixes stay exempt and open on their own. What survives here is GitHub Action and Docker digest pinning. An audit of every repository carrying its own config found the label rules and the security priority rule in this file repeated across five repositories. They now live in the shared preset. The priority rule matched nothing in any of them, because Renovate's categories are the fixed manager set and security is not one, so it is dropped rather than carried forward. Related to datum-cloud/infra#4926 Claude-Session: https://claude.ai/code/session_0196U66w5xh9yRsAosKcA3if
ecv
enabled auto-merge
September 9, 2026 20:57
kevwilliams
approved these changes
Sep 9, 2026
kevwilliams
left a comment
kevwilliams
left a comment
There was a problem hiding this comment.
Config swap looks correct: replaces the stock preset with the shared org policy, JSON is valid, and GitHub Action/Docker digest pinning is preserved as described. Consistent with the same change already approved across other repos.
Contributor
🧪 Test Summary
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Renovate opens pull requests here on its own schedule, and none are open today, so this stops a queue forming rather than clearing one.
This points the repository at the organization's shared update policy, so updates are listed on the dependency dashboard and open only when someone asks for one, while security fixes stay exempt and open on their own.
What survives from the local config is GitHub Action and Docker digest pinning. The label and priority rules move to the shared preset, where an audit found five repositories each keeping their own copy.
Test plan
Related to datum-cloud/infra#4926
https://claude.ai/code/session_0196U66w5xh9yRsAosKcA3if