From 93f6d89cbbc1619c1f6c34766d9fbfd4136f1fd9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Be=C3=B1at=20Espi=C3=B1a?= <benatespina@gmail.com>
Date: Fri, 16 Oct 2026 21:24:01 +0200
Subject: [PATCH] chore: keep dependencies current through Renovate

Every Monday the minors, patches and pins land in one pull request that
Renovate merges once CI is green, and the lock file refresh in another.
Majors, and minors below 1.0 (three, @astrojs/check), wait for approval
in the Dependency Dashboard. The schedule covers the whole Monday because
the Mend-hosted app visits a repository at no fixed hour.
---
 renovate.json | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..9643d4c
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,37 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:best-practices"],
+  "semanticCommits": "enabled",
+  "schedule": ["on monday"],
+  "timezone": "Europe/Madrid",
+  "rangeStrategy": "pin",
+  "automergeStrategy": "squash",
+  "lockFileMaintenance": {
+    "enabled": true,
+    "automerge": true,
+    "schedule": ["on monday"]
+  },
+  "packageRules": [
+    {
+      "description": "Everything that is not a major lands in one weekly pull request, merged once CI is green.",
+      "matchUpdateTypes": ["minor", "patch", "pin", "pinDigest", "digest"],
+      "groupName": "non-major dependencies",
+      "groupSlug": "non-major",
+      "automerge": true
+    },
+    {
+      "description": "A major opens no pull request until it is ticked in the Dependency Dashboard.",
+      "matchUpdateTypes": ["major"],
+      "dependencyDashboardApproval": true
+    },
+    {
+      "description": "Below 1.0 a minor may break, so it waits for approval like a major.",
+      "matchUpdateTypes": ["minor"],
+      "matchCurrentVersion": "<1.0.0",
+      "groupName": "pre-1.0 minors",
+      "groupSlug": "pre-1-minors",
+      "automerge": false,
+      "dependencyDashboardApproval": true
+    }
+  ]
+}