Skip to content

Replace dependabot with renovate - #1185

Merged
Brutus5000 merged 1 commit into
developfrom
replace-dependabot-with-renovate
Nov 13, 2026
Merged

Brutus5000 merged 1 commit into
developfrom
replace-dependabot-with-renovate

Conversation

@Brutus5000

@Brutus5000 Brutus5000 commented Nov 13, 2026 •

Copy link
Copy Markdown
Member

Summary

  • Remove .github/dependabot.yml
  • Add renovate.json: extends config:recommended, keeps the software.amazon.awssdk:s3 ignore and the 10 concurrent PR limit
  • Automerge minor and patch updates (via GitHub native auto-merge) once CI passes; major updates still need a manual merge

Before merging / to take effect

  • The Renovate GitHub App must be installed on the repo
  • develop branch protection should require the test check, and "Allow auto-merge" must be enabled in repo settings. Otherwise native auto-merge may merge before CI finishes.

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Dependency update management now uses Renovate with recommended settings and a limit of 10 concurrent pull requests.
    • Minor and patch updates can be merged automatically.
    • Updates for software.amazon.awssdk:s3 remain excluded.
    • The previous daily Gradle update schedule has been removed.

Automerge minor and patch updates once CI passes.

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
@coderabbitai

coderabbitai Bot commented Nov 13, 2026 •

Copy link
Copy Markdown

Explain Change →

No actionable comments were generated in the recent review.

Walkthrough

The pull request replaces the Dependabot configuration with Renovate configuration. Renovate extends config:recommended, limits concurrent pull requests to 10, ignores software.amazon.awssdk:s3, and enables platform automerge for minor and patch updates.

Changes: Dependency Update Configuration

Layer / File(s) Summary
Configure dependency update automation
.github/dependabot.yml, renovate.json
The Dependabot configuration for daily Gradle updates is removed. Renovate is configured with a concurrent pull request limit of 10, an ignore rule for software.amazon.awssdk:s3, and platform automerge for minor and patch updates.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: Minimal · up to 86887

This swaps Dependabot for Renovate and enables auto-merge of minor and patch updates once CI passes. The diff has no code defects. Before merging, confirm the Renovate app is installed and that develop requires the test check, so auto-merge cannot land before CI finishes.

Pre-merge checks: Passed 4

Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title "Replace dependabot with renovate" matches the main change. The PR removes .github/dependabot.yml and adds renovate.json, and the objectives state the same replacement. The title is short, s…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title "Replace dependabot with renovate" matches the main change. The PR removes .github/dependabot.yml and adds renovate.json, and the objectives state the same replacement. The title is short, specific, and clear.

Finishing Touches

Generate unit tests (beta)

  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Recent review info

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b3eebb04-d928-4f08-a8d8-8e0c742f2fc7
Commits

Reviewing files that changed from the base of the PR and between 7071891 and 868874d.

Files selected for processing: 2

  • .github/dependabot.yml
  • renovate.json
Files with no reviewable changes: 1

  • .github/dependabot.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

@Brutus5000
Brutus5000 enabled auto-merge (rebase) November 13, 2026 21:30
@Brutus5000
Brutus5000 disabled auto-merge November 13, 2026 21:30
@Brutus5000
Brutus5000 merged commit b646d7a into develop Nov 13, 2026
4 checks passed
@Brutus5000
Brutus5000 deleted the replace-dependabot-with-renovate branch November 13, 2026 21:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant