Skip to content

Enable Renovate for @vercel/geistdocs updates#561

Open
christopherkindl wants to merge 2 commits into
mainfrom
chore/enable-renovate-geistdocs
Open

Enable Renovate for @vercel/geistdocs updates#561
christopherkindl wants to merge 2 commits into
mainfrom
chore/enable-renovate-geistdocs

Conversation

@christopherkindl

@christopherkindl christopherkindl commented Jul 21, 2026

Copy link
Copy Markdown
Member

Enables automated @vercel/geistdocs updates via self-hosted Renovate, mirroring vercel/agents (the Renovate SaaS app isn't approved for org use).

What this adds

  • .github/workflows/renovate.yml — scheduled job running renovatebot/github-action, authenticated with a scoped token from vercel/gh-sts-action + RENOVATE_NPM_TOKEN.
  • .github/renovate.js — self-hosted config scoped to this repo. Manages only @vercel/geistdocs: patch auto-merges once required CI is green, minor and major open a review PR. Every other dependency is left alone.

The policy is inlined (rather than extending vercel/geistdocs//renovate/consumer) because geistdocs is private and this repo's scoped CI token can't read a cross-repo preset. The canonical policy lives in vercel/geistdocs renovate/ — keep them in sync.

Prerequisites to activate

  1. This repo must be authorized to use vercel/gh-sts-action.
  2. An NPM_TOKEN secret must be available to the repo.
  3. Branch protection with required status checks — the gate patch auto-merge relies on (without it, a patch bump merges with no CI gate).

Testing

Once merged, trigger the workflow manually (Actions → Renovate → Run workflow). Expect a Dependency Dashboard issue plus a review PR bumping @vercel/geistdocs 1.11.0 → 1.12.0 (minor → not auto-merged, by design).

@vercel

vercel Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
streamdown Ready Ready Preview, Comment, Open in v0 Jul 21, 2026 3:59pm

The Renovate SaaS app isn't approved for org use; run Renovate
self-hosted via renovatebot/github-action, mirroring vercel/agents.
geistdocs is private, so the shared preset can't be fetched with this
repo's scoped token — the policy is inlined in .github/renovate.js
(keep in sync with vercel/geistdocs//renovate/consumer).

Replaces the earlier extends-based renovate.json.
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedgithub/​renovatebot/​github-action@​22e0a16091fc706b04affe6ae53d5e3358ac40239910010010070

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants