ci: update renovate.json by lachlancollins · Pull Request #11114 · TanStack/query

lachlancollins · 2026-07-24T11:51:46Z

🎯 Changes

Add security:minimumReleaseAgeNpm to comply with pnpm defaults
Add helpers:pinGitHubActionDigests to keep actions pinned
Remove :automergeMinor to ensure dependency updates are manually reviewed

✅ Checklist

I have followed the steps in the Contributing guide.
I have tested this code locally with pnpm run test:pr.

🚀 Release Impact

This change affects published code, and I have generated a changeset.
This change is docs/CI/dev-only (no release).

Summary by CodeRabbit

Chores
- Improved automated dependency update controls.
- GitHub Actions references are now pinned to specific commit digests.
- Newly released npm packages must meet a minimum age before updates are proposed.
- Major dependency updates now require approval before adoption.
- Minor updates are no longer automatically merged.

coderabbitai · 2026-07-24T11:52:15Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 5357bfaa-9290-40a7-b5db-8fafdada428d

📥 Commits

Reviewing files that changed from the base of the PR and between a3b0612 and 708b601.

📒 Files selected for processing (1)

.github/renovate.json

📝 Walkthrough

Walkthrough

Renovate configuration adds GitHub Action digest pinning and minimum npm release-age enforcement, enables major-update approval, and removes the minor automerge preset.

Changes

Renovate configuration

Layer / File(s)	Summary
Renovate preset policy `.github/renovate.json`	Adds GitHub Action digest pinning and npm release-age presets, enables major-update approval, and removes minor automerging.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	Title is concise and correctly points to the renovate.json CI update.
Description check	✅ Passed	Description matches the required template and includes the key sections and checklist items.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch update-renovate

_{Comment @coderabbitai help to get the list of available commands.}

nx-cloud · 2026-07-24T11:52:15Z

View your CI Pipeline Execution ↗ for commit 708b601

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	✅ Succeeded	2m 13s	View ↗
`nx run-many --target=build --exclude=examples/*...`	✅ Succeeded	<1s	View ↗

☁️ Nx Cloud last updated this comment at 2026-07-24 11:55:19 UTC

github-actions · 2026-07-24T11:53:09Z

🚀 Changeset Version Preview

No changeset entries found. Merging this PR will not cause a version bump for any packages.

pkg-pr-new · 2026-07-24T11:55:01Z

More templates

@tanstack/angular-query-experimental

npm i https://pkg.pr.new/@tanstack/angular-query-experimental@11114

@tanstack/eslint-plugin-query

npm i https://pkg.pr.new/@tanstack/eslint-plugin-query@11114

@tanstack/lit-query

npm i https://pkg.pr.new/@tanstack/lit-query@11114

@tanstack/preact-query

npm i https://pkg.pr.new/@tanstack/preact-query@11114

@tanstack/preact-query-devtools

npm i https://pkg.pr.new/@tanstack/preact-query-devtools@11114

@tanstack/preact-query-persist-client

npm i https://pkg.pr.new/@tanstack/preact-query-persist-client@11114

@tanstack/query-async-storage-persister

npm i https://pkg.pr.new/@tanstack/query-async-storage-persister@11114

@tanstack/query-broadcast-client-experimental

npm i https://pkg.pr.new/@tanstack/query-broadcast-client-experimental@11114

@tanstack/query-core

npm i https://pkg.pr.new/@tanstack/query-core@11114

@tanstack/query-devtools

npm i https://pkg.pr.new/@tanstack/query-devtools@11114

@tanstack/query-persist-client-core

npm i https://pkg.pr.new/@tanstack/query-persist-client-core@11114

@tanstack/query-sync-storage-persister

npm i https://pkg.pr.new/@tanstack/query-sync-storage-persister@11114

@tanstack/react-query

npm i https://pkg.pr.new/@tanstack/react-query@11114

@tanstack/react-query-devtools

npm i https://pkg.pr.new/@tanstack/react-query-devtools@11114

@tanstack/react-query-next-experimental

npm i https://pkg.pr.new/@tanstack/react-query-next-experimental@11114

@tanstack/react-query-persist-client

npm i https://pkg.pr.new/@tanstack/react-query-persist-client@11114

@tanstack/solid-query

npm i https://pkg.pr.new/@tanstack/solid-query@11114

@tanstack/solid-query-devtools

npm i https://pkg.pr.new/@tanstack/solid-query-devtools@11114

@tanstack/solid-query-persist-client

npm i https://pkg.pr.new/@tanstack/solid-query-persist-client@11114

@tanstack/svelte-query

npm i https://pkg.pr.new/@tanstack/svelte-query@11114

@tanstack/svelte-query-devtools

npm i https://pkg.pr.new/@tanstack/svelte-query-devtools@11114

@tanstack/svelte-query-persist-client

npm i https://pkg.pr.new/@tanstack/svelte-query-persist-client@11114

@tanstack/vue-query

npm i https://pkg.pr.new/@tanstack/vue-query@11114

@tanstack/vue-query-devtools

npm i https://pkg.pr.new/@tanstack/vue-query-devtools@11114

commit: 708b601

github-actions · 2026-07-24T11:55:14Z

size-limit report 📦

Path	Size
react full	12.15 KB (0%)
react minimal	9.1 KB (0%)

ci: update renovate.json

708b601

lachlancollins requested a review from a team as a code owner July 24, 2026 11:51

AlemTuzlak approved these changes Jul 24, 2026

View reviewed changes

lachlancollins merged commit fd50fa1 into main Jul 24, 2026
9 checks passed

lachlancollins deleted the update-renovate branch July 24, 2026 12:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

ci: update renovate.json - #11114

ci: update renovate.json#11114
lachlancollins merged 1 commit into
mainfrom
update-renovate

lachlancollins commented Jul 24, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Jul 24, 2026 •

edited

Loading

Walkthrough

Changes

Uh oh!

nx-cloud Bot commented Jul 24, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

pkg-pr-new Bot commented Jul 24, 2026

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

lachlancollins commented Jul 24, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎯 Changes

✅ Checklist

🚀 Release Impact

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

nx-cloud Bot commented Jul 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 24, 2026

🚀 Changeset Version Preview

Uh oh!

pkg-pr-new Bot commented Jul 24, 2026

Uh oh!

github-actions Bot commented Jul 24, 2026

size-limit report 📦

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

lachlancollins commented Jul 24, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jul 24, 2026 •

edited

Loading

nx-cloud Bot commented Jul 24, 2026 •

edited

Loading