.github

Org-level community health files and shared configuration for the nRFCloud GitHub organization.

Renovate preset

This repo hosts the canonical Renovate preset used by the nRFCloud and memfault production repos. To opt a repo in, drop a one-line renovate.json in the repo root:

{ "extends": ["github>nRFCloud/.github"] }

The preset (default.json) enforces:

• config:best-practices + :preserveSemverRanges + helpers:pinGitHubActionDigestsToSemver (semver-aware GH Action SHA pinning)
• minimumReleaseAge: "3 days" cooldown on routine updates
• vulnerabilityAlerts enabled with a security label
• packageRules nulling minimumReleaseAge for internal @nrfcloud/* and @memfault/* packages

For repo-specific overrides (extra hostRules, ignorePaths, additional packageRules, etc.), layer them on top of the preset:

{
  "extends": ["github>nRFCloud/.github"],
  "hostRules": [{ "matchHost": "npm.pkg.github.com", "hostType": "npm" }]
}

See the internal Confluence doc for full context: https://nordicsemi.atlassian.net/wiki/spaces/MFLT/pages/1947271581/Renovate+bot