Skip to content

ci(renovate): fix lock file maintenance author, schedule and scope #8516

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
matthewelwell merged 3 commits into from
Sep 15, 2026
+8 −6
Merged

ci(renovate): fix lock file maintenance author, schedule and scope #8516

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
e0937b6
ci(renovate): fix gitAuthor and widen lock file maintenance window
matthewelwell Sep 14, 2026
f6354ff
ci(renovate): stop lock file maintenance PRs picking an arbitrary scope
matthewelwell Sep 14, 2026
cd723a5
Desloppification
matthewelwell Sep 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 8 additions & 6 deletions renovate.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,16 +4,12 @@
"security:only-security-updates",
":semanticCommitTypeAll(deps)"
],
"gitIgnoredAuthors": ["flagsmith-engineering[bot]@users.noreply.github.com"],
"lockFileMaintenance": {
"enabled": true,
"schedule": ["before 4am on monday"]
"schedule": ["before 9am on monday"]
},
"packageRules": [
{
"description": "Re-enable lock file maintenance, which security:only-security-updates disables via its blanket matchPackageNames ['*'] rule. Renovate raises security PRs from manifest entries, so a CVE in a package that appears only in a lock file is never actioned; refreshing the lock file within existing ranges is the only mechanism that reaches transitive pins.",
"matchUpdateTypes": ["lockFileMaintenance"],
"enabled": true
},
{
"matchManagers": ["pep621"],
"matchFileNames": ["api/**"],
Expand Down Expand Up @@ -49,6 +45,12 @@
"matchPackageNames": ["flagsmith-common", "flagsmith-private"],
"enabled": true,
"rangeStrategy": "bump"
},
{
"description": "Re-enable lock file maintenance, which security:only-security-updates disables. Keep last with an empty scope to ensure commit scope is applied correctly.",
"matchUpdateTypes": ["lockFileMaintenance"],
"enabled": true,
"semanticCommitScope": ""
Comment thread
coderabbitai[bot] marked this conversation as resolved.
}
],
"semanticCommitScope": ""
Expand Down
Loading