[squarepots]

Part of #110.

What changed

• .github/renovate.jsonc: dependencyDashboardApproval is now false at the top level. Minor and patch updates open their pull request once they pass the three-day minimumReleaseAge from Apply the three-day release age to every Renovate update #238.
• Major updates (the existing major package rule) and lock file maintenance keep dependencyDashboardApproval: true. Lock file maintenance refreshes transitive versions that the age rule cannot check.
• Unchanged: no automerge, prConcurrentLimit: 2, security remediation opens immediately.
• docs/testing.md describes the new flow.

Why

With approval on every update, a routine patch only moves after someone revisits the dashboard on the right day. The approval checkbox does not appear until the release is old enough. For example, the 2026-10-28 Tauri plugin releases sit under "Pending Status Checks" with no approve box until about 2026-10-31 00:04 UTC. Opening minor and patch proposals automatically turns the pull request itself into the signal. Renovate pull requests stay proposals and are recreated as maintainer commits, as docs/testing.md already requires.

Validation

• The file still parses as JSON. dependencyDashboardApproval is a standard option at the top level, in lockFileMaintenance and in package rules. Renovate reports a config error on the dashboard if it rejects one.
• No workflow or source change.