Overview
While Dependabot handles security updates, Renovate provides more powerful grouping, automerge, and scheduling options for routine dependency maintenance. Currently, developers must manually check for and apply dependency updates, leading to large version gaps that make individual updates risky. Renovate with automerge for patch updates and grouped PRs for minor updates would maintain a fresher dependency state with less manual effort.
Specifications
Features:
renovate.json configuration in repository root
- Patch updates automerged if CI passes
- Minor updates grouped into weekly PR per package category (Expo, React Native, testing, etc.)
- Major updates require manual review with migration notes
- Lock file maintenance PR weekly
Tasks:
- Create
renovate.json with extends: ['config:base']
- Configure
packageRules for automerge on patch updates (devDependencies)
- Configure groups:
expo-*, react-native-*, @testing-library/*
- Set schedule: weekly on Mondays for minor updates
- Enable lock file maintenance on Sundays
- Document Renovate workflow in
CONTRIBUTING.md
Impacted Files:
renovate.json (create)
CONTRIBUTING.md
Acceptance Criteria
- Patch update PRs opened automatically and automerged if CI passes
- Minor update PRs grouped by category (max 1 PR per group per week)
- Major update PRs require manual review and merge
- Lock file maintenance PR created every Sunday
Overview
While Dependabot handles security updates, Renovate provides more powerful grouping, automerge, and scheduling options for routine dependency maintenance. Currently, developers must manually check for and apply dependency updates, leading to large version gaps that make individual updates risky. Renovate with automerge for patch updates and grouped PRs for minor updates would maintain a fresher dependency state with less manual effort.
Specifications
Features:
renovate.jsonconfiguration in repository rootTasks:
renovate.jsonwithextends: ['config:base']packageRulesfor automerge on patch updates (devDependencies)expo-*,react-native-*,@testing-library/*CONTRIBUTING.mdImpacted Files:
renovate.json(create)CONTRIBUTING.mdAcceptance Criteria