From bcdc8f2b9c80a50a36112dd1b18d04f9ee937cd6 Mon Sep 17 00:00:00 2001
From: Cecilia Stevens <63068179+ceciliastevens@users.noreply.github.com>
Date: Mon, 29 Jun 2026 10:23:28 -0400
Subject: [PATCH] INTEG-3242 - add renovate

---
 .github/workflows/renovate.yml | 25 ++++++++++++++++++
 renovate.json                  | 47 ++++++++++++++++++++++++++++++++++
 2 files changed, 72 insertions(+)
 create mode 100644 .github/workflows/renovate.yml
 create mode 100644 renovate.json

diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
new file mode 100644
index 0000000..62d7ccd
--- /dev/null
+++ b/.github/workflows/renovate.yml
@@ -0,0 +1,25 @@
+name: Renovate
+
+on:
+  schedule:
+    # Weekly on Sunday at 06:00 UTC
+    - cron: '0 6 * * 0'
+  workflow_dispatch:
+
+concurrency:
+  group: renovate
+  cancel-in-progress: false
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Run Renovate
+        uses: renovatebot/github-action@v46.1.17
+        with:
+          token: ${{ secrets.RENOVATE_TOKEN }}
+        env:
+          LOG_LEVEL: info
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..c59fbbe
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,47 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "prHourlyLimit": 0,
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "enabled": true
+  },
+  "packageRules": [
+    {
+      "enabled": false,
+      "matchPackageNames": [
+        "*"
+      ],
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "description": "Block major version updates globally"
+    },
+    {
+      "description": "PR priority: major updates",
+      "matchUpdateTypes": [
+        "major"
+      ],
+      "prPriority": 10
+    },
+    {
+      "description": "PR priority: minor updates",
+      "matchUpdateTypes": [
+        "minor"
+      ],
+      "prPriority": 5
+    },
+    {
+      "description": "Group patch and minor updates into \"non-major dependencies\"",
+      "matchUpdateTypes": [
+        "patch",
+        "minor"
+      ],
+      "groupName": "non-major dependencies",
+      "groupSlug": "non-major",
+      "prPriority": 0
+    }
+  ],
+  "branchPrefix": "renovate/",
+  "onboarding": false,
+  "requireConfig": "required"
+}