Public Access

Files

T

Jonathan Miller 38c2536c7b feat: add PHPStan, Gitleaks, and Renovate — templates, workflows, and docs [skip ci]

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-05-07 14:56:02 -05:00

2.3 KiB

Raw Blame History

Renovate Dependency Updates

Status: ✅ Active | Version: 01.00.00 | Last Updated: 2026-05-07

Overview

Automated dependency update management using Renovate. Runs centrally from MokoStandards-API and creates PRs for outdated dependencies across all governed repos.

Architecture

Central runner: renovate.yml workflow in MokoStandards-API scans all repos
Per-repo config: renovate.json in each repo controls update behavior
Supported managers: Composer (PHP), npm (JavaScript)

Schedule

Trigger	When
Scheduled	Weekly Wednesday 04:00 UTC
Manual	Dispatch with optional repo filter and dry-run

Update Behavior

Update Type	Action
Patch (x.x.Y)	Auto-merge if CI passes
Minor (x.Y.0)	PR created, manual review required
Major (Y.0.0)	PR created, manual review required

Per-Repo Configuration

Each repo has a renovate.json that extends the recommended config:

{
  "extends": ["config:recommended", "schedule:weekly"],
  "automerge": false,
  "packageRules": [
    { "matchUpdateTypes": ["patch"], "automerge": true }
  ]
}

Override in any repo by editing its renovate.json.

Inputs (Manual Dispatch)

Input	Default	Description
`repos`	all	Comma-separated repo names
`dry_run`	false	Log only, no PRs created

Excluded Repos

Same exclusion list as other centralized workflows (platform/standards/template repos).

Changelog

Version	Date	Changes
01.00.00	2026-05-07	Initial release — centralized Renovate runner

2.3 KiB Raw Blame History