From 2af0cd3635c93f2fabbe607932cebd62c784ad1d Mon Sep 17 00:00:00 2001
From: Stefan Koelle <stefan.koelle@gmail.com>
Date: Sat, 1 Aug 2026 22:15:43 +0200
Subject: [PATCH] chore: add Renovate configuration

Set up Renovate (Mend) GitHub App integration with:
- Recommended base config plus Docker/Action digest pinning
- Dependency Dashboard enabled
- Minor/patch updates grouped per dependency
- Major updates in separate PRs
- Semantic commit prefixes (fix for deps)
- Automerge strategy: squash
- npm supply-chain protection (3-day release age)
---
 renovate.json | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..0d920f9
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,25 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    "docker:pinDigests",
+    "helpers:pinGitHubActionDigests",
+    ":configMigration",
+    ":pinDevDependencies",
+    "abandonments:recommended",
+    "security:minimumReleaseAgeNpm",
+    ":dependencyDashboard"
+  ],
+  "automergeStrategy": "squash",
+  "packageRules": [
+    {
+      "matchUpdateTypes": ["minor", "patch"],
+      "groupName": "{{depName}}",
+      "commitMessagePrefix": "fix(deps)"
+    },
+    {
+      "matchUpdateTypes": ["major"],
+      "groupName": "major-{{depName}}"
+    }
+  ]
+}