Merge pull request 'chore(deps): update actions/checkout action to v7' (#53 ) from renovate/actions-checkout-7.x into main

Reviewed-on: #53
chore(deps): update actions/checkout action to v7
2026-06-22 16:27:51 +01:00 · 2026-06-21 23:02:53 +00:00 · 2026-06-16 14:52:18 +01:00 · 2026-06-16 14:44:52 +01:00
2 changed files with 6 additions and 5 deletions
@@ -18,7 +18,7 @@ jobs:
    runs-on: ubuntu-latest
    container: ghcr.io/renovatebot/renovate:43.226.1@sha256:0b678d3b80ec23a7bf8c967b7796d9df09c50eac7fa16c7b4fd5761a9f4a7be0
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
      - run: renovate
        env:
          RENOVATE_CONFIG_FILE: "/workspace/lyrathorpe/renovate-config/config.js"
@@ -8,12 +8,12 @@ module.exports = {
    "extends": ["config:best-practices"],
    "schedule": ["* * * * 1-5"],
    "timezone": "Europe/London",
+    "minimumReleaseAge": "3 days",
    "labels": ["dependencies"],
-    "assignees": ["lyrathorpe"],
    "reviewers": ["lyrathorpe"],
    "prHourlyLimit": 10,
-    "prConcurrentLimit": 50,
-    "branchConcurrentLimit": 5,
+    "prConcurrentLimit": 10,
+    "branchConcurrentLimit": 10,
    "packageRules": [
        {
            "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
@@ -29,6 +29,7 @@ module.exports = {
        "schedule": ["before 4am on monday"]
    },
    "vulnerabilityAlerts": {
-        "enabled": true
+        "enabled": true,
+        "schedule": ["at any time"]
    }
 };
Author	SHA1	Message	Date
lyrathorpe	1b4c1a26f8	Merge pull request 'chore(deps): update actions/checkout action to v7' (#53 ) from renovate/actions-checkout-7.x into main renovate / renovate (push) Successful in 1m58s Details Reviewed-on: #53	2026-06-22 16:27:51 +01:00
Renovate Bot	1be07d8ed1	chore(deps): update actions/checkout action to v7 renovate/stability-days Updates have met minimum release age requirement Details	2026-06-21 23:02:53 +00:00
lyrathorpe	3f2d51015b	Merge pull request 'config: tune concurrency, security scheduling, stability, noise' (#52 ) from config/tuning into main renovate / renovate (push) Successful in 1m7s Details Reviewed-on: #52	2026-06-16 14:52:18 +01:00
Emma Thorpe	653934dc98	config: tune concurrency, security scheduling, stability, noise - Reconcile concurrency limits: prConcurrentLimit 50 -> 10 and branchConcurrentLimit 5 -> 10 (every PR needs a branch, so the old 5 capped effective PRs and made 50 meaningless). - Let vulnerability updates bypass the weekday schedule (vulnerabilityAlerts.schedule = at any time) so weekend CVE fixes are not held until Monday. - Add minimumReleaseAge = 3 days so a release ages before it is opened or automerged (guards against broken/yanked releases). - Drop redundant assignees (same single user as reviewers) -- noise on every PR, including auto-merged ones. Closes #46 Closes #47 Closes #48 Closes #49	2026-06-16 14:44:52 +01:00