chore(renovate): speed up safe automerge#10
Conversation
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 438df7f741
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| ":rebaseStalePrs" | ||
| ], | ||
| "minimumReleaseAge": "3 days", | ||
| "minimumReleaseAge": "12 hours", |
There was a problem hiding this comment.
Keep npm updates behind the 72-hour window
When this shared preset is used by npm/pnpm repos, this global age also applies to the non-major package rules that inherit automerge. I checked Renovate's minimumReleaseAge docs, which note that npm packages less than 72 hours old can still be unpublished and recommend 3 days; with 12 hours, Renovate can squash-merge a lockfile to a release that disappears before the npm unpublish window closes, breaking later installs or deploys. Please keep a 3-day package rule for npm/pnpm if other ecosystems need the shorter delay.
Useful? React with 👍 / 👎.
Shortens the shared Renovate stability delay for safe non-major dependency updates from 3 days to 12 hours, while keeping major and vulnerability/security updates manual. Also narrows the GitHub Actions grouping rule to non-major update types so major action updates remain manual.