chore: add Renovate config

[btravers]

Adds renovate.json so dependency updates arrive grouped, weekly.

Groups

• commitlint: @commitlint/*
• oxc: oxlint + oxfmt
• typedoc: typedoc + typedoc-plugin-markdown
• github-actions: every action bump in one PR

Left alone on purpose

• peerDependencies and engines: the published packages' ranges (oxlint >=1, @commitlint/cli >=21, …) are compatibility promises to consumers, not versions to bump.
• overrides in pnpm-workspace.yaml: per-advisory security floors, each with its own comment block.
• btravstack/tools reusable-workflow refs (@workflows-v1, @main): pinned to a tag/branch deliberately.

Other settings

• minimumReleaseAge: 7 days, mirroring minimumReleaseAge: 10080 in pnpm-workspace.yaml so Renovate never proposes a version pnpm's strict mode would reject.
• schedule:weekly, semantic commits (commitlint enforces conventional commits).
• Catalog entries (pnpm.catalog.default) and packageManager are covered by config:recommended.

Validated with renovate-config-validator --strict.

The Renovate GitHub App is not installed on btravstack (only CodeRabbit and Claude Design Import are). This config does nothing until it is: https://github.com/apps/renovate

https://claude.ai/code/session_01JqjTCSDPsbgreJKHcRABi9

[coderabbitai]

Warning

Review limit reached

Next included review available in 27 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 80e19f20-9c8e-4ccb-97a9-2140cb962aba

📥 Commits

Reviewing files that changed from the base of the PR and between da05777 and 03a4df8.

📒 Files selected for processing (1)

• renovate.json

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

🟡 Changes recommended

The rule intended to disable pnpm workspace overrides uses a depType that won’t match pnpm-workspace.yaml overrides, so Renovate may still propose those updates.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Adds a Renovate configuration to automate dependency update PRs on a weekly cadence, with grouping rules tailored to this repo’s tooling dependencies.

Changes:

• Introduces renovate.json using config:recommended plus schedule:weekly, semantic commits, and a 7-day minimumReleaseAge.
• Adds package grouping rules for commitlint, oxc, typedoc, and all GitHub Actions updates.
• Attempts to disable updates for peer ranges/engines, pnpm overrides, and this repo’s reusable workflow references.

File summaries

File	Description
renovate.json	Adds Renovate configuration for weekly, grouped dependency updates with selective update exclusions.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.