Skip to content

Set up automated dependency updates via Renovate#20

Merged
dfalling merged 1 commit into
mainfrom
setup_dependency_updates
Jun 3, 2026
Merged

Set up automated dependency updates via Renovate#20
dfalling merged 1 commit into
mainfrom
setup_dependency_updates

Conversation

@dfalling
Copy link
Copy Markdown
Owner

@dfalling dfalling commented Jun 3, 2026

Summary

  • Add self-hosted Renovate GitHub Actions workflow (.github/workflows/renovate.yml) — runs weekdays at 6am UTC plus manual workflow_dispatch, authenticating via a RENOVATE_TOKEN secret. Mirrors the setup used in the pudu repo.
  • Add renovate.json (config:recommended) tailored to this stack:
    • Groups version-locked package families so they bump atomically: react-native core (react-native + @react-native/* + @react-native-community/*), react (react + react-test-renderer + @types/react), graphql-codegen, and react-navigation.
    • Auto-merges patch updates for GitHub Actions.
  • Renovate's bun manager covers package.json + bun.lock; its Gradle manager covers android/ build files and the Gradle wrapper.

Required setup

  • Add a RENOVATE_TOKEN repo secret (classic PAT with repo + workflow scopes) for the account Renovate should open PRs as.
  • Once set, the workflow can be triggered manually from the Actions tab to test without waiting for the schedule.

Run Renovate on a weekday schedule (plus manual dispatch) to open
dependency-update PRs, keeping the JS/bun and Android/Gradle stacks
current without manual tracking. Grouping rules keep version-locked
package families (react-native core, react, graphql-codegen,
react-navigation) updating atomically so PRs stay buildable.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@dfalling dfalling merged commit a48dca6 into main Jun 3, 2026
2 checks passed
@dfalling dfalling deleted the setup_dependency_updates branch June 3, 2026 19:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant