chore: set up Renovate for dependency updates [MEC-3447]#211
Open
contentful-renovate-rollout[bot] wants to merge 1 commit into
Open
chore: set up Renovate for dependency updates [MEC-3447]#211contentful-renovate-rollout[bot] wants to merge 1 commit into
contentful-renovate-rollout[bot] wants to merge 1 commit into
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Sets up Renovate as the dependency-update tool for this repository, part of an org-wide rollout.
Depending on this repo's starting state, this PR does some of the following:
renovate.jsonextending the Contentful shared presetpackageRuleswhere still needed, and removes Dependabot-only automation and secret policiesManual follow-up (not handled by this PR):
Migration Confidence: 🔴 Low
Summary
A renovate.json was added at the repo root extending the correct shared preset (local>contentful/renovate-config). However, the file also includes speculative packageRules for Terraform providers and Terraform patch updates. This is a Java/Maven SDK project (contentful-management.java) with no Terraform infrastructure files present, so these rules are entirely unjustified by the repo shape. Per migration assessment rules, adding speculative Renovate tuning that nothing justified is a low-confidence signal. No Dependabot config existed to remove, so this is a fresh Renovate install, but the extra rules should not be there.
Files requiring attention
The following files had edge cases or required judgment during migration and should be reviewed carefully:
renovate.json