From b8977eeb472cb1243a88e1ff720e6075b667b00e Mon Sep 17 00:00:00 2001
From: silverwind <me@silverwind.io>
Date: Mon, 20 Jul 2026 17:01:32 +0200
Subject: [PATCH] chore(renovate): group all dependency updates into one weekly
 PR (#38547)

Group updates from all managers into a single `dependencies` group so
monday produces one combined PR instead of one per manager, matching
what is regularly done manually to reduce CI waiting time. The `gomod`
and `npm` rules remain for their `postUpgradeTasks`, which run once on
the combined branch.

Also replace the all-day monday schedule with the `schedule:weekly`
preset (monday 0-4 UTC) so updates whose `minimumReleaseAge` lapses
later in the day wait for the next weekly batch instead of raising a new
PR the same day, as happened in
https://github.com/go-gitea/gitea/pull/38546. `vulnerabilityAlerts` and
the go toolchain rule bypass the schedule as before.
---
 renovate.json5 | 32 +++++++-------------------------
 1 file changed, 7 insertions(+), 25 deletions(-)

diff --git a/renovate.json5 b/renovate.json5
index f7acc111350..3bf610db546 100644
--- a/renovate.json5
+++ b/renovate.json5
@@ -1,11 +1,15 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:recommended", "helpers:pinGitHubActionDigests", "customManagers:githubActionsVersions"],
+  "extends": [
+    "config:recommended",
+    "helpers:pinGitHubActionDigests",
+    "customManagers:githubActionsVersions",
+    "schedule:weekly", // dependency update PR on monday, vulnerabilityAlerts bypasses this
+  ],
   "configMigration": true,
   "enabledManagers": ["github-actions", "gomod", "npm", "pep621", "nix", "custom.regex", "dockerfile"],
   "labels": ["dependencies"],
   "branchPrefix": "renovate/",
-  "schedule": ["* * * * 1"], // dependency update PRs weekly, vulnerabilityAlerts bypasses this
   "separateMajorMinor": false, // include major updates in group PRs
   "minimumReleaseAge": "5 days",
   "semanticCommits": "enabled",
@@ -27,12 +31,9 @@
   "packageRules": [
     {
       "matchPackageNames": ["*"],
+      "groupName": "dependencies", // single weekly PR for all dependency updates
       "semanticCommitType": "chore", // dep updates are rarely fixes for gitea
     },
-    {
-      "groupName": "action dependencies",
-      "matchManagers": ["github-actions"],
-    },
     {
       "matchPackageNames": ["@mcaptcha/vanilla-glue"],
       "allowedVersions": "^0.1", // breaking changes in rc versions need to be handled
@@ -82,7 +83,6 @@
       "allowedVersions": "/^2019($|[.-])/", // pin to oldest in extended support
     },
     {
-      "groupName": "go dependencies",
       "matchManagers": ["gomod"],
       "postUpdateOptions": ["gomodUpdateImportPaths"],
       "postUpgradeTasks": {
@@ -95,11 +95,6 @@
         "executionMode": "branch",
       },
     },
-    {
-      "groupName": "tool dependencies",
-      "matchManagers": ["custom.regex"],
-      "matchFileNames": ["**/Makefile"],
-    },
     {
       "matchManagers": ["gomod"],
       "matchDepNames": ["go"],
@@ -109,7 +104,6 @@
       "minimumReleaseAge": "0",
     },
     {
-      "groupName": "npm dependencies",
       "matchManagers": ["npm"],
       "postUpdateOptions": ["pnpmDedupe"],
       "postUpgradeTasks": {
@@ -125,17 +119,5 @@
         "executionMode": "branch",
       },
     },
-    {
-      "groupName": "python dependencies",
-      "matchManagers": ["pep621"],
-    },
-    {
-      "groupName": "nix dependencies",
-      "matchManagers": ["nix"],
-    },
-    {
-      "groupName": "docker dependencies",
-      "matchManagers": ["dockerfile"],
-    },
   ],
 }