From 1f5e5fc6448542aa1a5e85cb8a5437d24593e05f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 26 Mar 2026 12:39:39 +0000
Subject: [PATCH 1/2] Add renovate.json

---
 renovate.json | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..5db72dd
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ]
+}

From 2fd22234f6ab53588d1f579911444a29e474d444 Mon Sep 17 00:00:00 2001
From: Eric Johnson <eric.johnson@pumasecurity.io>
Date: Thu, 26 Mar 2026 08:09:58 -0500
Subject: [PATCH 2/2] Configure Renovate best practices

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 renovate.json | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/renovate.json b/renovate.json
index 5db72dd..fa00d56 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,21 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
+    "config:recommended",
+    "helpers:pinGitHubActionDigests"
+  ],
+  "minimumReleaseAge": "7 days",
+  "schedule": ["before 9am on friday"],
+  "labels": ["dependencies"],
+  "packageRules": [
+    {
+      "matchUpdateTypes": ["minor", "patch"],
+      "groupName": "minor and patch dependencies",
+      "automerge": true
+    },
+    {
+      "matchUpdateTypes": ["major"],
+      "dependencyDashboardApproval": true
+    }
   ]
 }