feat(ci): Renovate dependency automation #27

Merged
cesnimda merged 1 commits from feat/renovate into develop 2026-07-02 16:28:03 +02:00
Owner

Recommendation #2. Weekly grouped updates + immediate security PRs, gated by existing CI. Manual step: add RENOVATE_TOKEN secret (instructions in the workflow).

🤖 Generated with Claude Code

Recommendation #2. Weekly grouped updates + immediate security PRs, gated by existing CI. Manual step: add RENOVATE_TOKEN secret (instructions in the workflow). 🤖 Generated with Claude Code
cesnimda added 1 commit 2026-07-02 16:20:54 +02:00
feat(ci): Renovate automated dependency updates (RECOMMENDATIONS #2)
CI / backend (pull_request) Successful in 54s
CI / frontend (pull_request) Successful in 16s
CI / format (pull_request) Successful in 56s
CI / db-tests (pull_request) Successful in 52s
Security / secrets (pull_request) Successful in 4s
Security / dependencies (pull_request) Successful in 58s
b31758e23d
Weekly Renovate run against this Gitea instance: grouped minor/patch PRs per
ecosystem, individually-reviewed majors (dashboard approval), immediate
security-alert PRs. All update PRs ride the existing required CI gates
(build/tests/gitleaks/vuln/live-db/format), so merging one is as safe as any
other PR.

ONE MANUAL STEP remains: create a Gitea PAT (repo rw, user r, issue rw, org r)
and add it as the RENOVATE_TOKEN Actions secret — the workflow fails fast with
instructions until then.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
cesnimda merged commit 86ecf03963 into develop 2026-07-02 16:28:03 +02:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: cesnimda/Inboxintel#27