From c7d75ad4d232b871a94e7bf43fcdb78afc5cc892 Mon Sep 17 00:00:00 2001
From: Romuald Lemesle <romuald.lemesle@filigran.io>
Date: Mon, 2 Nov 2026 14:00:01 +0100
Subject: [PATCH 1/2] chore(renovate): align the Renovate config with openaev
 (#174)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 renovate.json  | 15 -----------
 renovate.json5 | 68 ++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 68 insertions(+), 15 deletions(-)
 delete mode 100644 renovate.json
 create mode 100644 renovate.json5

diff --git a/renovate.json b/renovate.json
deleted file mode 100644
index 71b4617..0000000
--- a/renovate.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    ":semanticCommits",
-    "config:recommended"
-  ],
-  "packageRules": [
-    {
-      "matchDatasources": [
-        "docker"
-      ],
-      "commitMessagePrefix": "chore(docker):"
-    }
-  ]
-}
diff --git a/renovate.json5 b/renovate.json5
new file mode 100644
index 0000000..cbcac7c
--- /dev/null
+++ b/renovate.json5
@@ -0,0 +1,68 @@
+{
+    $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+    extends: [
+        'config:recommended',
+        'docker:enableMajor',
+        ':semanticCommits',
+    ],
+    labels: [
+        'dependencies',
+        'filigran team',
+    ],
+    minimumReleaseAge: '3 days',
+    prHourlyLimit: 100,
+    prConcurrentLimit: 60,
+    branchConcurrentLimit: 60,
+    timezone: 'Europe/Paris',
+    schedule: [
+        '* 0-4,22-23 * * 1-5',
+        '* * * * 0,6',
+    ],
+    updateNotScheduled: false,
+    rebaseWhen: 'conflicted',
+    vulnerabilityAlerts: {
+        // as we don't rely on Renovate to be informed of dependency security advisories,
+        // vulnerabilityAlerts is disabled since it can cause problems by skipping minimumReleaseAge, schedule and others constraints
+        enabled: false,
+    },
+    packageRules: [
+        {
+            matchDatasources: [
+                'docker',
+            ],
+            commitMessagePrefix: 'chore(docker):',
+        },
+        {
+            description: 'Majors are proposed on the Dependency Dashboard, not as a standing PR',
+            matchUpdateTypes: [
+                'major',
+            ],
+            dependencyDashboardApproval: true,
+        },
+        {
+            groupName: 'ci tooling (non-major)',
+            groupSlug: 'ci-tooling-non-major',
+            description: 'Batch non-major GitHub Actions updates once a week on Sunday',
+            schedule: [
+                '* * * * 0',
+            ],
+            matchManagers: [
+                'github-actions',
+            ],
+            matchUpdateTypes: [
+                'minor',
+                'patch',
+                'pin',
+                'digest',
+            ],
+            rebaseWhen: 'auto',
+        },
+    ],
+    lockFileMaintenance: {
+        schedule: [
+            '* * * * 0',
+        ],
+        rebaseWhen: 'auto',
+        enabled: true,
+    },
+}

From 276697aa2d0ef3bb90d1bc5471d9e59926fc2c24 Mon Sep 17 00:00:00 2001
From: Romuald Lemesle <romuald.lemesle@filigran.io>
Date: Tue, 3 Nov 2026 08:19:45 +0100
Subject: [PATCH 2/2] chore(renovate): let elastic images through and drop
 dependabot (#174)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Romuald Lemesle <romuald.lemesle@filigran.io>
---
 .github/dependabot.yml | 10 ----------
 renovate.json5         | 14 +++++++-------
 2 files changed, 7 insertions(+), 17 deletions(-)
 delete mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index f99b8a2..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,10 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-    open-pull-requests-limit: 0
-    commit-message:
-      prefix: "chore"
-      include: "scope"
diff --git a/renovate.json5 b/renovate.json5
index cbcac7c..3fb3cd7 100644
--- a/renovate.json5
+++ b/renovate.json5
@@ -57,12 +57,12 @@
             ],
             rebaseWhen: 'auto',
         },
+        {
+            description: 'docker.elastic.co publishes no release timestamp, so minimumReleaseAge would hold every update as pending',
+            matchPackageNames: [
+                'docker.elastic.co/**',
+            ],
+            minimumReleaseAge: null,
+        },
     ],
-    lockFileMaintenance: {
-        schedule: [
-            '* * * * 0',
-        ],
-        rebaseWhen: 'auto',
-        enabled: true,
-    },
 }