Update renovate.json to enable vulnerability alerts

[coodos]

Description of change

configure renovate for security only

Issue Number

Type of change

• Chore (refactoring, build scripts or anything else that isn't user-facing)

How the change has been tested

Change checklist

• I have ensured that the CI Checks pass locally
• I have removed any unnecessary logic
• My code is well documented
• I have signed my commits
• My code follows the pattern of the application
• I have self reviewed my code

Summary by CodeRabbit

• New Features

  • Vulnerability alerts are now enabled for dependencies.

• Chores

  • Updated dependency management configuration.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 44065db and e94da30.

📒 Files selected for processing (1)

• renovate.json

---

📝 Walkthrough

Walkthrough

This pull request modifies the Renovate configuration file to rework package update rules by disabling npm updates entirely, introducing a broad "everything" group with wildcard package matching, and explicitly setting separateMajorMinor to false. Additionally, a new vulnerabilityAlerts section is added at the top level to enable vulnerability alerts.

Changes

Cohort / File(s)	Summary
Renovate Configuration renovate.json	Reworked packageRules to disable npm updates entirely with a new broad "everything" group and wildcard pattern matching; disabled separateMajorMinor flag; added top-level vulnerabilityAlerts section to enable vulnerability alerts.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Possibly related PRs

• fix: renovate config #480: Modifies renovate.json packageRules to disable major-version updates, similar configuration scope as this PR.
• Update renovate.json configuration for pnpm support #497: Also modifies renovate.json and adjusts packageRules behavior; related configuration strategy for dependency management.

Suggested reviewers

• sosweetham

Poem

🐰 Hop along, dear Renovate config so bright,
No more npm updates in the dead of night,
Vulnerabilities now alert with a cheer,
One wildcard group holds everything dear! 🎯

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch chore/configure-renovate-for-security

Tip

Issue Planner is now in beta. Read the docs and try it out! Share your feedback on Discord.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[sosweetham]

lgtm