improve renovate: osv vulnerability alerts, abandonment reporting, pr limits #8

Merged

Keli Grubb merged 3 commits from improve-renovate-security-and-pinning into main

2026-08-13 14:33:55 +00:00

Author	SHA1	Message	Date
Madison Grubb	bec9fe6f4a	keep the hourly schedule Reverts the cron change and fixes the README, which claimed every 6 hours while the workflow ran hourly.	2026-08-13 10:31:13 -04:00
Madison Grubb	1b88019fb9	drop renovate version pin and keep release-age cooldown for vulns Unpinning the CLI keeps the previous install behavior, and leaving minimumReleaseAge in place for vulnerabilityAlerts means a malicious release can't be pulled in immediately.	2026-08-13 10:29:48 -04:00
Madison Grubb	d771c4c97f	improve renovate: osv alerts, pin cli, slower cron Prioritize vulnerability fix PRs, pin Renovate via package-lock for reproducible runs, and drop the hourly schedule to every 6 hours.	2026-08-13 10:27:09 -04:00

Author

SHA1

Message

Date

Madison Grubb

bec9fe6f4a

keep the hourly schedule

Reverts the cron change and fixes the README, which claimed every 6
hours while the workflow ran hourly.

2026-08-13 10:31:13 -04:00

Madison Grubb

1b88019fb9

drop renovate version pin and keep release-age cooldown for vulns

Unpinning the CLI keeps the previous install behavior, and leaving
minimumReleaseAge in place for vulnerabilityAlerts means a malicious
release can't be pulled in immediately.

2026-08-13 10:29:48 -04:00

Madison Grubb

d771c4c97f

improve renovate: osv alerts, pin cli, slower cron

Prioritize vulnerability fix PRs, pin Renovate via package-lock for
reproducible runs, and drop the hourly schedule to every 6 hours.

2026-08-13 10:27:09 -04:00