Skip to content

[Enhancement] Add Renovate configuration for automated dependency updates with grouping #667

Description

@RUKAYAT-CODER

Overview

While Dependabot handles security updates, Renovate provides more powerful grouping, automerge, and scheduling options for routine dependency maintenance. Currently, developers must manually check for and apply dependency updates, leading to large version gaps that make individual updates risky. Renovate with automerge for patch updates and grouped PRs for minor updates would maintain a fresher dependency state with less manual effort.

Specifications

Features:

  • renovate.json configuration in repository root
  • Patch updates automerged if CI passes
  • Minor updates grouped into weekly PR per package category (Expo, React Native, testing, etc.)
  • Major updates require manual review with migration notes
  • Lock file maintenance PR weekly

Tasks:

  • Create renovate.json with extends: ['config:base']
  • Configure packageRules for automerge on patch updates (devDependencies)
  • Configure groups: expo-*, react-native-*, @testing-library/*
  • Set schedule: weekly on Mondays for minor updates
  • Enable lock file maintenance on Sundays
  • Document Renovate workflow in CONTRIBUTING.md

Impacted Files:

  • renovate.json (create)
  • CONTRIBUTING.md

Acceptance Criteria

  • Patch update PRs opened automatically and automerged if CI passes
  • Minor update PRs grouped by category (max 1 PR per group per week)
  • Major update PRs require manual review and merge
  • Lock file maintenance PR created every Sunday

Metadata

Metadata

Assignees

No one assigned

    Labels

    Stellar WaveIssues in the Stellar wave programenhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions