From c3fb8e5dfdbe45221b30f54222301bcb668cd1d8 Mon Sep 17 00:00:00 2001
From: "renovate-ramp[bot]"
 <287649106+renovate-ramp[bot]@users.noreply.github.com>
Date: Wed, 10 Jun 2026 08:37:42 +0000
Subject: [PATCH 1/2] Add renovate.json

---
 renovate.json | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..5db72dd
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ]
+}

From 096ca84ef1bb54243d7610678afeaf197bb4c5cc Mon Sep 17 00:00:00 2001
From: Lukasz Jaskowski <lukasz.jaskowski@ramp.network>
Date: Thu, 11 Jun 2026 13:30:25 +0200
Subject: [PATCH 2/2] chore: adjust initial renovate config

---
 renovate.json | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 51 insertions(+), 1 deletion(-)

diff --git a/renovate.json b/renovate.json
index 5db72dd..5968490 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,6 +1,56 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
+    "config:recommended",
+    "helpers:pinGitHubActionDigests"
+  ],
+  "labels": ["renovate"],
+  "commitMessageLowerCase": "never",
+  "minimumReleaseAge": "7 days",
+  "osvVulnerabilityAlerts": false,
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "branchTopic": "{{{replace '/' '-' packageName}}}-vulnerability",
+    "commitMessageSuffix": " #PLTM-1362",
+    "addLabels": ["security", "renovate"],
+    "semanticCommitType": "fix",
+    "semanticCommitScope": "deps",
+    "packageRules": [
+      {
+        "description": "Skip vulnerability with LOW severity",
+        "matchJsonata": ["vulnerabilitySeverity = 'LOW'"],
+        "enabled": false
+      }
+    ]
+  },
+  "prConcurrentLimit": 10,
+  "prHourlyLimit": 5,
+  "packageRules": [
+    {
+      "description": "All npm updates (#PLTM-1362)",
+      "matchManagers": ["npm"],
+      "addLabels": ["npm"],
+      "commitMessageSuffix": " #PLTM-1362",
+      "semanticCommitType": "chore",
+      "semanticCommitScope": "deps"
+    },
+    {
+      "description": "All GitHub Actions updates (#PLTM-1361)",
+      "matchManagers": ["github-actions"],
+      "addLabels": ["cicd"],
+      "commitMessageSuffix": " #PLTM-1361",
+      "semanticCommitType": "chore",
+      "semanticCommitScope": "cicd"
+    },
+    {
+      "description": "Group patch/minor/digest updates per package",
+      "matchUpdateTypes": ["patch", "minor", "digest"],
+      "groupName": "{{{depName}}}"
+    },
+    {
+      "description": "Require dashboard approval for major updates (not grouped)",
+      "matchUpdateTypes": ["major"],
+      "dependencyDashboardApproval": true
+    }
   ]
 }