Skip to content

Migrate dependency greenkeeping from Renovate to kindling#1101

Merged
justinvdm merged 2 commits intomainfrom
rwsdk-greenkeep-with-kindling
Mar 26, 2026
Merged

Migrate dependency greenkeeping from Renovate to kindling#1101
justinvdm merged 2 commits intomainfrom
rwsdk-greenkeep-with-kindling

Conversation

@justinvdm
Copy link
Copy Markdown
Collaborator

Context

Replaces Renovate Bot with kindling cron-based dependency maintenance. A weekly kindling task handles dependency updates and advisory resolution with neutral PR framing.

Details

What changed

  • .kindling/: Project-level kindling config with a weekly cron schedule (0 6 * * 0), a GreenKeeper role override encoding SDK-specific patterns (three-tier dependency categorization, consumer impact audit, pnpm override patterns, manifest-first updates), and a task description file for the cron entry.

  • CONTRIBUTING.md: Rewrote the "Dependency Management and Greenkeeping" section. Removed Renovate-specific language, Dependency Dashboard references, and the React canary tracking note (no longer relevant -- we use plain semver for React). Added kindling-based automation description and manual trigger instructions.

  • renovate.json: Deleted. Renovate is decommissioned.

  • .gitignore: Added .notes/ to prevent kindling task artifacts (advisory drafts, worklogs) from being committed.

  • .github/dependabot.yml: Kept with open-pull-requests-limit: 0 for GitHub UI security alerts as a detection signal.

Remaining manual steps after merge

  1. Uninstall the Renovate GitHub App from the repository
  2. Close the "Dependency Dashboard" issue
  3. Close any open Renovate PRs

Replaces Renovate Bot with kindling cron-based dependency maintenance.
A weekly kindling task handles dependency updates and advisory resolution
with neutral PR framing (no security language in public artifacts).

Adds .kindling/ project config with cron schedule, GreenKeeper role
override encoding SDK-specific patterns (three-tier deps, consumer
impact audit, pnpm override patterns), and task description.

Removes renovate.json. Keeps Dependabot for GitHub UI security alerts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Mar 26, 2026

Deploying redwood-sdk-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: d9e98da
Status: ✅  Deploy successful!
Preview URL: https://a860050d.redwood-sdk-docs.pages.dev
Branch Preview URL: https://rwsdk-greenkeep-with-kindlin.redwood-sdk-docs.pages.dev

View logs

No longer needed -- dependency maintenance is handled by kindling.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@justinvdm justinvdm merged commit f059fae into main Mar 26, 2026
8 of 10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant