From b25e1313bd949ef339515fb49b36aca6e0b87720 Mon Sep 17 00:00:00 2001
From: =?utf8?q?J=C3=A9r=C3=B4me=20Benoit?= <jerome.benoit@piment-noir.org>
Date: Thu, 29 Oct 2026 01:46:02 +0100
Subject: [PATCH] chore(renovate): align dependency update policies (#3382)

Reuse SAP AI Provider policies with pnpm deduplication.
---
 renovate.json | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/renovate.json b/renovate.json
index 4dd0f2557..c5d0036c0 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,19 +4,21 @@
     "config:recommended",
     "abandonments:recommended",
     ":configMigration",
+    "helpers:pinGitHubActionDigests",
+    ":pinDevDependencies",
     "group:allNonMajor",
     "schedule:daily",
     ":maintainLockFilesWeekly",
     "security:minimumReleaseAgeNpm"
   ],
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "addLabels": ["security"]
+  },
   "packageRules": [
     {
       "matchFileNames": ["**/package.json"],
-      "matchDepTypes": [
-        "dependencies",
-        "devDependencies",
-        "optionalDependencies"
-      ],
+      "matchDepTypes": ["dependencies", "optionalDependencies"],
       "rangeStrategy": "bump"
     }
   ],
@@ -28,5 +30,6 @@
     "**/test/**",
     "**/tests/**",
     "**/__fixtures__/**"
-  ]
+  ],
+  "postUpdateOptions": ["pnpmDedupe"]
 }
-- 
2.53.0