From 3b9ad1f7b4afdc5dfb936099b1b0a7ecb159991d Mon Sep 17 00:00:00 2001 From: Tim Diekmann Date: Mon, 23 Mar 2026 13:31:06 +0100 Subject: [PATCH 1/2] SRE-603: Apply minimumReleaseAge globally instead of npm-only Move `minimumReleaseAge: 3 days` from npm-specific to top-level config so all managers (mise, cargo, terraform, github-actions, docker, etc.) wait 3 days before proposing dependency bumps. --- renovate-config.json | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/renovate-config.json b/renovate-config.json index 64b124e..35a184d 100644 --- a/renovate-config.json +++ b/renovate-config.json @@ -21,9 +21,7 @@ "dependencyDashboard": true, "dependencyDashboardApproval": true, "dependencyDashboardTitle": "🚀 Dependency Updates", - "npm": { - "minimumReleaseAge": "3 days" - }, + "minimumReleaseAge": "3 days", "postUpdateOptions": ["yarnDedupeHighest"], "rebaseWhen": "conflicted", "semanticCommits": "disabled", From 63d16fa8eb7b5a652c479b074154ed28da3474b3 Mon Sep 17 00:00:00 2001 From: Tim Diekmann Date: Mon, 23 Mar 2026 13:46:39 +0100 Subject: [PATCH 2/2] Remove bleeding-edge overrides for LLM SDK packages MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Remove `minimumReleaseAge: 0 days` and `schedule: after 1am` from LLM SDK package rule. Global 3-day grace period now applies — no reason to pull SDK updates on day 0. --- renovate-config.json | 2 -- 1 file changed, 2 deletions(-) diff --git a/renovate-config.json b/renovate-config.json index 35a184d..e549d3f 100644 --- a/renovate-config.json +++ b/renovate-config.json @@ -140,8 +140,6 @@ "matchManagers": ["npm"], "automerge": false, "dependencyDashboardApproval": false, - "minimumReleaseAge": "0 days", - "schedule": ["after 1am"], "matchPackageNames": ["/^@openai//", "/^@anthropic-ai//", "/groq-sdk/"] }, {