ci: update renovate.json by lachlancollins · Pull Request #11114 · TanStack/query

lachlancollins · 2026-07-24T11:51:46Z

🎯 Changes

Add security:minimumReleaseAgeNpm to comply with pnpm defaults
Add helpers:pinGitHubActionDigests to keep actions pinned
Remove :automergeMinor to ensure dependency updates are manually reviewed

✅ Checklist

I have followed the steps in the Contributing guide.
I have tested this code locally with pnpm run test:pr.

🚀 Release Impact

This change affects published code, and I have generated a changeset.
This change is docs/CI/dev-only (no release).

Summary by CodeRabbit

Chores
- Improved automated dependency update controls.
- GitHub Actions references are now pinned to specific commit digests.
- Newly released npm packages must meet a minimum age before updates are proposed.
- Major dependency updates now require approval before adoption.
- Minor updates are no longer automatically merged.

coderabbitai · 2026-07-24T11:52:15Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 5357bfaa-9290-40a7-b5db-8fafdada428d

📥 Commits

Reviewing files that changed from the base of the PR and between a3b0612 and 708b601.

📒 Files selected for processing (1)

.github/renovate.json

📝 Walkthrough

Walkthrough

Renovate configuration adds GitHub Action digest pinning and minimum npm release-age enforcement, enables major-update approval, and removes the minor automerge preset.

Changes

Renovate configuration

Layer / File(s)	Summary
Renovate preset policy `.github/renovate.json`	Adds GitHub Action digest pinning and npm release-age presets, enables major-update approval, and removes minor automerging.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	Title is concise and correctly points to the renovate.json CI update.
Description check	✅ Passed	Description matches the required template and includes the key sections and checklist items.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch update-renovate

_{Comment @coderabbitai help to get the list of available commands.}

nx-cloud · 2026-07-24T11:52:15Z

View your CI Pipeline Execution ↗ for commit 708b601

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	✅ Succeeded	2m 13s	View ↗
`nx run-many --target=build --exclude=examples/*...`	✅ Succeeded	<1s	View ↗

☁️ Nx Cloud last updated this comment at 2026-07-24 11:55:19 UTC

github-actions · 2026-07-24T11:53:09Z

🚀 Changeset Version Preview

No changeset entries found. Merging this PR will not cause a version bump for any packages.

pkg-pr-new · 2026-07-24T11:55:01Z

More templates

@tanstack/angular-query-experimental

npm i https://pkg.pr.new/@tanstack/angular-query-experimental@11114

@tanstack/eslint-plugin-query

npm i https://pkg.pr.new/@tanstack/eslint-plugin-query@11114

@tanstack/lit-query

npm i https://pkg.pr.new/@tanstack/lit-query@11114

@tanstack/preact-query

npm i https://pkg.pr.new/@tanstack/preact-query@11114

@tanstack/preact-query-devtools

npm i https://pkg.pr.new/@tanstack/preact-query-devtools@11114

@tanstack/preact-query-persist-client

npm i https://pkg.pr.new/@tanstack/preact-query-persist-client@11114

@tanstack/query-async-storage-persister

npm i https://pkg.pr.new/@tanstack/query-async-storage-persister@11114

@tanstack/query-broadcast-client-experimental

npm i https://pkg.pr.new/@tanstack/query-broadcast-client-experimental@11114

@tanstack/query-core

npm i https://pkg.pr.new/@tanstack/query-core@11114

@tanstack/query-devtools

npm i https://pkg.pr.new/@tanstack/query-devtools@11114

@tanstack/query-persist-client-core

npm i https://pkg.pr.new/@tanstack/query-persist-client-core@11114

@tanstack/query-sync-storage-persister

npm i https://pkg.pr.new/@tanstack/query-sync-storage-persister@11114

@tanstack/react-query

npm i https://pkg.pr.new/@tanstack/react-query@11114

@tanstack/react-query-devtools

npm i https://pkg.pr.new/@tanstack/react-query-devtools@11114

@tanstack/react-query-next-experimental

npm i https://pkg.pr.new/@tanstack/react-query-next-experimental@11114

@tanstack/react-query-persist-client

npm i https://pkg.pr.new/@tanstack/react-query-persist-client@11114

@tanstack/solid-query

npm i https://pkg.pr.new/@tanstack/solid-query@11114

@tanstack/solid-query-devtools

npm i https://pkg.pr.new/@tanstack/solid-query-devtools@11114

@tanstack/solid-query-persist-client

npm i https://pkg.pr.new/@tanstack/solid-query-persist-client@11114

@tanstack/svelte-query

npm i https://pkg.pr.new/@tanstack/svelte-query@11114

@tanstack/svelte-query-devtools

npm i https://pkg.pr.new/@tanstack/svelte-query-devtools@11114

@tanstack/svelte-query-persist-client

npm i https://pkg.pr.new/@tanstack/svelte-query-persist-client@11114

@tanstack/vue-query

npm i https://pkg.pr.new/@tanstack/vue-query@11114

@tanstack/vue-query-devtools

npm i https://pkg.pr.new/@tanstack/vue-query-devtools@11114

commit: 708b601

github-actions · 2026-07-24T11:55:14Z

size-limit report 📦

Path	Size
react full	12.15 KB (0%)
react minimal	9.1 KB (0%)

ci: update renovate.json
708b601

lachlancollins requested a review from a team as a code owner July 24, 2026 11:51

AlemTuzlak approved these changes Jul 24, 2026
View reviewed changes

lachlancollins merged commit fd50fa1 into mainJul 24, 2026
9 checks passed

lachlancollins deleted the update-renovate branch July 24, 2026 12:22

Navigation Menu

Uh oh!

Uh oh!

ci: update renovate.json - #11114

ci: update renovate.json#11114
lachlancollins merged 1 commit into
mainfrom
update-renovate

lachlancollins commented Jul 24, 2026•
edited by coderabbitai Bot
Loading

Uh oh!

coderabbitaiBot commented Jul 24, 2026•
edited
Loading

Walkthrough

Changes

Uh oh!

nx-cloudBot commented Jul 24, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Jul 24, 2026

Uh oh!

pkg-pr-newBot commented Jul 24, 2026

Uh oh!

github-actionsBot commented Jul 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

lachlancollins commented Jul 24, 2026• edited by coderabbitai BotLoading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎯 Changes

✅ Checklist

🚀 Release Impact

Summary by CodeRabbit

Uh oh!

coderabbitaiBot commented Jul 24, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

nx-cloudBot commented Jul 24, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Jul 24, 2026

🚀 Changeset Version Preview

Uh oh!

pkg-pr-newBot commented Jul 24, 2026

Uh oh!

github-actionsBot commented Jul 24, 2026

size-limit report 📦

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

lachlancollins commented Jul 24, 2026•
edited by coderabbitai Bot
Loading

coderabbitaiBot commented Jul 24, 2026•
edited
Loading

nx-cloudBot commented Jul 24, 2026•
edited
Loading