chore(renovate): align dependency update policies (#3382)

Reuse SAP AI Provider policies with pnpm deduplication.

diff --git a/renovate.json b/renovate.json
index 4dd0f25572edd0d7073eded95441956eb2b7e9e9..c5d0036c0d54150e69aa6a314cfd36ad05f9d110 100644 (file)
--- a/renovate.json
+++ b/renovate.json
@@ -4,19 +4,21 @@
     "config:recommended",
     "abandonments:recommended",
     ":configMigration",
+    "helpers:pinGitHubActionDigests",
+    ":pinDevDependencies",
     "group:allNonMajor",
     "schedule:daily",
     ":maintainLockFilesWeekly",
     "security:minimumReleaseAgeNpm"
   ],
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "addLabels": ["security"]
+  },
   "packageRules": [
     {
       "matchFileNames": ["**/package.json"],
-      "matchDepTypes": [
-        "dependencies",
-        "devDependencies",
-        "optionalDependencies"
-      ],
+      "matchDepTypes": ["dependencies", "optionalDependencies"],
       "rangeStrategy": "bump"
     }
   ],
@@ -28,5 +30,6 @@
     "**/test/**",
     "**/tests/**",
     "**/__fixtures__/**"
-  ]
+  ],
+  "postUpdateOptions": ["pnpmDedupe"]
 }