From 8192c3f6a8fcd5daeaf083291ca548719dccda2f Mon Sep 17 00:00:00 2001
From: basmith7 <basmith7@gmail.com>
Date: Sat, 31 Oct 2026 23:04:35 -0700
Subject: [PATCH] Drop the Renovate preset: dependency upkeep moves to a
 monthly agent pass (agent-config upkeep skill)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 README.md     | 23 ----------------------
 default.json  | 53 ---------------------------------------------------
 renovate.json |  3 ---
 3 files changed, 79 deletions(-)
 delete mode 100644 default.json
 delete mode 100644 renovate.json

diff --git a/README.md b/README.md
index c7cc851..b13a385 100644
--- a/README.md
+++ b/README.md
@@ -66,26 +66,3 @@ see the diff). A Node major bump lands here first (the `FROM` lines, and `node-c
   app at once when the Node fix lands.
 
 `tests/check-drift.test.sh` tests the checker against fixture apps made from the live template.
-
-## Renovate: `default.json`
-
-The one dependency-update policy. A repo opts in with a `renovate.json` of
-`{"extends": ["github>basmith7/workflows"]}` once CI gates its pull requests (Renovate merges only
-after CI passes, and a repo with no checks has nothing to wait for). Minor and patch
-updates arrive as one grouped PR each Monday morning and merge themselves (`platformAutomerge` is
-off because free private repos have no required checks, so GitHub's own auto-merge would not
-wait for CI); majors open as PRs for a person. Base-image (`FROM`) updates come as their own PR
-and wait for a person, because PR CI never builds the image; a Node major opens only when ticked on
-the Dependency Dashboard, since it moves `templates/next-prisma` and node-ci's default first.
-`basmith7/workflows@main` refs are never touched.
-
-Renovate regenerates lockfiles with npm 11 (`constraints`). Its default npm 12 refuses the registry
-tarball URLs in Tailwind's lockfile entries (`EALLOWREMOTE`, npm/cli#9800), and npm 10 fails on
-`@vitejs/plugin-react`'s optional Babel 8 peer chain (`ERESOLVE`). CI's npm 10 installs npm 11
-lockfiles; drop the pin once npm 12 fixes #9800.
-
-`@basmith7/*` packages on GitHub Packages are read with the `GH_PACKAGES_TOKEN` credential (a
-classic token with `read:packages`), stored in the Mend developer portal
-(developer.mend.io → basmith7 → Settings → Credentials). The hosted app no longer reads
-encrypted secrets from config files. Validate changes with
-`npx --yes --package renovate@latest renovate-config-validator --strict default.json`.
diff --git a/default.json b/default.json
deleted file mode 100644
index ef8e099..0000000
--- a/default.json
+++ /dev/null
@@ -1,53 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "description": "basmith7's shared Renovate preset. Repos opt in with renovate.json = {\"extends\": [\"github>basmith7/workflows\"]}.",
-  "extends": ["config:recommended"],
-  "timezone": "America/Phoenix",
-  "schedule": ["before 6am on monday"],
-  "enabledManagers": ["npm", "dockerfile", "github-actions", "pep621"],
-  "automerge": true,
-  "platformAutomerge": false,
-  "automergeType": "pr",
-  "automergeStrategy": "merge-commit",
-  "semanticCommits": "disabled",
-  "constraints": { "npm": "^11" },
-  "hostRules": [
-    {
-      "hostType": "npm",
-      "matchHost": "npm.pkg.github.com",
-      "token": "{{ secrets.GH_PACKAGES_TOKEN }}"
-    }
-  ],
-  "packageRules": [
-    {
-      "description": "One weekly PR for every minor and patch update.",
-      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
-      "groupName": "minor and patch updates",
-      "groupSlug": "minor-patch"
-    },
-    {
-      "description": "Majors get their own PR and wait for a person.",
-      "matchUpdateTypes": ["major"],
-      "automerge": false
-    },
-    {
-      "description": "Base images are never built by PR CI, so their updates wait for a person.",
-      "matchManagers": ["dockerfile"],
-      "groupName": "base images",
-      "groupSlug": "base-images",
-      "automerge": false
-    },
-    {
-      "description": "A Node major moves templates/next-prisma and node-ci first; it opens only when ticked on the dashboard.",
-      "matchDepNames": ["node"],
-      "matchUpdateTypes": ["major"],
-      "dependencyDashboardApproval": true
-    },
-    {
-      "description": "Callers track basmith7/workflows at @main on purpose; never pin or bump it.",
-      "matchManagers": ["github-actions"],
-      "matchDepNames": ["basmith7/workflows"],
-      "enabled": false
-    }
-  ]
-}
diff --git a/renovate.json b/renovate.json
deleted file mode 100644
index d81ef6b..0000000
--- a/renovate.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-  "extends": ["github>basmith7/workflows"]
-}