Merge pull request #699 from api3dao/renovate-config

Update renovate configuration for improved package management

Author: hiletmis

.changeset/spotty-ads-grow.md

@@ -0,0 +1,2 @@
+---
+---

.github/workflows/validate-verify.yml

@@ -17,8 +17,6 @@ jobs:
 
       - name: Set up pnpm
         uses: pnpm/action-setup@v3
-        with:
-          version: 9
 
       - name: Set up Node
         uses: actions/setup-node@v4

package.json

@@ -110,5 +110,5 @@
     "yargs": "^17.7.2",
     "zod": "^4.0.15"
   },
-  "packageManager": "pnpm@10.14.0"
+  "packageManager": "pnpm@10.28.0"
 }

pnpm-workspace.yaml

@@ -0,0 +1,6 @@
+# See: https://pnpm.io/supply-chain-security
+blockExoticSubdeps: true
+minimumReleaseAge: 20160 # 14 days
+
+minimumReleaseAgeExclude:
+  - '@api3/*'

renovate.json

@@ -1,51 +1,26 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:recommended"],
+  "extends": ["local>api3dao/renovate-config"],
   "packageRules": [
     {
       "matchPackagePatterns": ["chai", "solhint", "eslint"],
       "matchUpdateTypes": ["major"],
       "enabled": false
     },
     {
-      "matchPackagePatterns": ["node", "actions/node-versions", "@types/node", "pnpm"],
-      "matchUpdateTypes": ["major", "minor"],
-      "enabled": false
-    },
-    {
-      "matchUpdateTypes": ["patch", "minor"],
-      "schedule": ["before 10am on the first day of the month"],
-      "groupName": "other minor updates"
-    },
-    {
-      "matchUpdateTypes": ["major"],
-      "schedule": ["before 10am on the first day of the month"],
-      "groupName": "other major updates"
-    },
-    {
-      "matchDepTypes": ["dependencies"],
-      "matchUpdateTypes": ["patch", "minor"],
-      "schedule": ["before 1am on the first day of the month"],
-      "groupName": "dependencies (non-major)"
-    },
-    {
-      "matchPackagePatterns": ["@api3/.*"],
+      "matchPackageNames": ["@api3/*"],
       "matchUpdateTypes": ["major"],
       "schedule": ["before 6pm"],
-      "groupName": "api3 major updates"
+      "groupName": "api3 major updates",
+      "minimumReleaseAge": null
     },
     {
-      "matchPackagePatterns": ["@api3/.*"],
+      "matchPackageNames": ["@api3/*"],
       "matchUpdateTypes": ["patch", "minor"],
       "schedule": ["before 6pm"],
-      "groupName": "api3"
+      "groupName": "api3",
+      "minimumReleaseAge": null
     }
   ],
-  "rangeStrategy": "bump",
-  "lockFileMaintenance": {
-    "enabled": false
-  },
-  "baseBranches": ["main"],
-  "reviewers": ["bbenligiray", "hiletmis"],
-  "dependencyDashboard": false
+  "reviewers": ["bbenligiray", "hiletmis"]
 }