5 Commits

Include renames

Author	SHA1	Message	Date
Keli GrubbandMadison Grubb	6e7190e985	improve renovate: osv vulnerability alerts, abandonment reporting, pr limits (#8) ... ## Summary * turn on `osvVulnerabilityAlerts` + `vulnerabilityAlerts` so vulnerable deps get their own PRs labeled `security`, instead of just riding along in the grouped non-major PR * vuln PRs still respect the 3 day `minimumReleaseAge` cooldown on purpose. bypassing it would let a compromised release (shai-hulud style) land the moment it publishes, which is worse than sitting on a known cve for 3 days * add `abandonments:recommended` so unmaintained packages get flagged early * add `dependencies` label plus `prConcurrentLimit` / `prHourlyLimit` of 5 so a first run on a stale repo doesn't dump 30 prs * no workflow behavior changes. schedule stays hourly, install stays as-is. just fixed the readme, which said every 6 hours while the cron was hourly needs `dependencies` and `security` labels to exist on the repos (or org-wide), otherwise labeling just no-ops. --------- Co-authored-by: Madison Grubb <madison@elastiflow.com> Reviewed-on: #8	2026-08-13 14:33:55 +00:00
Keli Grubb	e819b2faba	Update README.md	2026-03-05 16:01:46 +00:00
Madison Grubb	d4ec6c6b71	replace woodpecker ci with gitea actions	2026-03-04 10:02:00 -05:00
Keli Grubb	f8e41272f3	fix renovate setup	2026-02-22 12:45:07 -05:00
Keli Grubb	d9e0ef5991	first commit	2026-02-21 21:23:43 -05:00