Repository navigation
chore(renovate): port the org config keys that this repo needs - #141
Merged
Merged
Conversation
|
OX Security reviewed this pull request — nothing to fix.
Branch |
olivermeyer
marked this pull request as ready for review
November 6, 2026 11:21
Codecov Report✅ All modified and coverable lines are covered by tests. |
arne-aignx
previously approved these changes
Nov 6, 2026
olivermeyer
changed the title
olivermeyer
changed the title
olivermeyer
force-pushed
the
chore/renovate-org-config
branch
from
November 6, 2026 12:59
879c2b2 to
9e7188c
Compare
Mend does not apply the org config to public repos. The Supply Chain Day tracker flags prCreation not-pending, which holds most Renovate branches without a PR. The checklist also forbids enabled: false. - Port the org keys that this repo needs: config:best-practices, timezone, minimumReleaseAge 5 days, automerge, the pre-commit manager, vulnerability fixes with the security label and without automerge, and the rule that lets digest, pinDigest and lock file maintenance updates pass without a release timestamp. - Port rebaseWhen conflicted. A rebase pushes to the PR branch, and the org ruleset then dismisses the approval, so automerge stalls again. - Delete prCreation and the other keys that repeat the Renovate defaults. The default prCreation immediate matches the org value. - Delete ignorePaths. Its only path does not exist. - Replace the requires-python enabled: false rule. requires-python now widens, so a new Python raises only the upper bound. A "Python" group puts requires-python and .python-version in one PR, without automerge. - Run mise-lock-sync when .python-version changes, so that mise.lock follows a Python upgrade. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
olivermeyer
force-pushed
the
chore/renovate-org-config
branch
from
November 6, 2026 13:06
9e7188c to
a1f003a
Compare
arne-aignx
approved these changes
Nov 6, 2026
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why?
Mend does not apply the org Renovate config to public repos, so no org rule reaches this repo. The Supply Chain Day tracker flags
prCreation: not-pending, which holds most Renovate branches without a PR. The checklist also forbidsenabled: false, which this repo uses to turn offrequires-pythonupdates.How?
renovate.jsonports only the org keys that this repo needs:config:best-practices, the 5-day release age, automerge,rebaseWhen: conflicted, the pre-commit manager, vulnerability fixes without automerge, and the rule that lets lock file maintenance and digest updates pass without a release timestamp.rebaseWhen: conflictedmatters here because a rebase push makes the org ruleset dismiss the approval. It deletesprCreation, because the Renovate defaultimmediatealready matches the org value.requires-pythonnow widens and moves with.python-versionin one "Python" group PR without automerge, andmise-lock-syncalso runs on.python-version.🤖 Generated with Claude Code