From 5a1d434eea627c09bba83124adc8a7246d8183e8 Mon Sep 17 00:00:00 2001 From: Bryan Beverly Date: Tue, 9 Jun 2026 16:27:13 -0700 Subject: [PATCH] Replace Renovate config with shared preset (high-risk tier) (#4992) * Replace Renovate config with shared preset (high-risk tier) Adopts the org-wide shared Renovate preset pinned to v1.0.1. High-risk repos do not automerge regular dependency updates -- only security/CVE fixes and lockfile maintenance automerge (via the shared preset). All other updates require human review. Part of the org-wide Dependency Strategy Unification (Step 3b). Co-authored-by: Cursor * Bump shared Renovate config reference to v1.0.2 v1.0.2 adds GOPRIVATE=github.com/trufflesecurity/* so Renovate can resolve private Go modules without hitting the public module proxy. Co-authored-by: Cursor --------- Co-authored-by: Cursor --- .github/renovate.json | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/.github/renovate.json b/.github/renovate.json index 319817ef7..0997c8f62 100644 --- a/.github/renovate.json +++ b/.github/renovate.json @@ -1,8 +1,4 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", - "extends": [ - "config:base" - ], - "prConcurrentLimit": 3, - "prHourlyLimit": 2 + "extends": ["github>trufflesecurity/.github:renovate-config#v1.0.2"] }