From: Jérôme Benoit <jerome.benoit@piment-noir.org>
Date: Thu, 29 Oct 2026 00:46:02 +0000 (+0100)
Subject: chore(renovate): align dependency update policies (#3382)
X-Git-Url: https://git.piment-noir.org/?a=commitdiff_plain;h=b25e1313bd949ef339515fb49b36aca6e0b87720;p=poolifier.git

chore(renovate): align dependency update policies (#3382)

Reuse SAP AI Provider policies with pnpm deduplication.
---

diff --git a/renovate.json b/renovate.json
index 4dd0f2557..c5d0036c0 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,19 +4,21 @@
     "config:recommended",
     "abandonments:recommended",
     ":configMigration",
+    "helpers:pinGitHubActionDigests",
+    ":pinDevDependencies",
     "group:allNonMajor",
     "schedule:daily",
     ":maintainLockFilesWeekly",
     "security:minimumReleaseAgeNpm"
   ],
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "addLabels": ["security"]
+  },
   "packageRules": [
     {
       "matchFileNames": ["**/package.json"],
-      "matchDepTypes": [
-        "dependencies",
-        "devDependencies",
-        "optionalDependencies"
-      ],
+      "matchDepTypes": ["dependencies", "optionalDependencies"],
       "rangeStrategy": "bump"
     }
   ],
@@ -28,5 +30,6 @@
     "**/test/**",
     "**/tests/**",
     "**/__fixtures__/**"
-  ]
+  ],
+  "postUpdateOptions": ["pnpmDedupe"]
 }