[brandyscarney]

What This Does

Lets Renovate automatically merge minor and patch updates and a weekly lockfile refresh once CI passes.

New Behavior

• Minor and patch updates merge on their own after CI passes. They still follow the existing schedule and the 3-day wait after a release.
• Once a week, Renovate refreshes package-lock.json so indirect dependencies stay current within their existing ranges, and merges it once CI passes.
• These updates still need a review:
  • Major updates
  • Packages still on 0.x, where a minor can break things
  • Capacitor, since CI only tests the web build

Changes

• renovate.json:
  • Turns off platformAutomerge, so Renovate merges the PR itself once every check passes instead of using GitHub's auto-merge.
  • Turns on lockfile maintenance with automerge.
  • Adds two package rules: one turns on automerge for stable minor and patch updates, and one turns it off for @capacitor/** and pins Capacitor to exact versions so lockfile maintenance can't update it either.

Notes

• Renovate is allowed to bypass required pull request reviews on main. Required status checks still apply.
  
• Lockfile maintenance runs before 4am ET on Mondays. It can update indirect dependencies within their current ranges without a review.
• After this merges, Renovate will open a one-time PR pinning Capacitor to exact versions. It needs a review like any Capacitor update.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
tutorial-photo-gallery-react	Ready	Preview	Oct 27, 2026 9:29pm UTC

[ShaneK]

Looks good to me