From 45166bcb7876de0bd186f48310ecfdd12fafedb9 Mon Sep 17 00:00:00 2001
From: bakerboy448 <55419169+bakerboy448@users.noreply.github.com>
Date: Sun, 21 Jun 2026 14:38:36 -0500
Subject: [PATCH] chore: inline self-contained house Renovate config
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Replace bare config:recommended with full inlined house config built on
public presets only (config:best-practices + dependencyDashboard +
semanticCommits + vuln alerts). Self-contained — no cross-repo refs.
---
 renovate.json | 20 +++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/renovate.json b/renovate.json
index 5db72dd..8915e40 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,20 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended"
-  ]
+  "description": "Inlined house Renovate config — self-contained, public presets only.",
+  "extends": ["config:best-practices", ":dependencyDashboard", ":semanticCommits", ":enableVulnerabilityAlertsWithLabel(security)"],
+  "schedule": ["before 6am on sunday"],
+  "timezone": "America/Chicago",
+  "prHourlyLimit": 2, "prConcurrentLimit": 4,
+  "labels": ["dependencies", "renovate"],
+  "rangeStrategy": "bump", "separateMajorMinor": true, "separateMinorPatch": false,
+  "automerge": false, "platformAutomerge": false, "rebaseWhen": "behind-base-branch",
+  "branchPrefix": "renovate/", "ignoreDeps": [],
+  "vulnerabilityAlerts": {"labels": ["security"], "schedule": ["at any time"], "automerge": true},
+  "packageRules": [
+    {"description": "Group GHA minor/patch/digest — automerge when CI green", "matchManagers": ["github-actions"], "matchUpdateTypes": ["minor","patch","digest","pin","pinDigest"], "groupName": "github-actions", "groupSlug": "github-actions", "semanticCommitType": "chore", "automerge": true},
+    {"description": "GitHub Actions major — hold for review", "matchManagers": ["github-actions"], "matchUpdateTypes": ["major"], "automerge": false, "addLabels": ["review-required"]},
+    {"description": "Any major — hold for review", "matchUpdateTypes": ["major"], "automerge": false, "addLabels": ["major","review-required"]}
+  ],
+  "lockFileMaintenance": {"enabled": true, "schedule": ["before 6am on sunday"], "automerge": true, "automergeType": "branch"},
+  "recreateWhen": "auto"
 }