From 3b616b7ec8114a420da3a5542c58904dd42b7194 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Sun, 11 Oct 2026 21:46:32 +0000
Subject: [PATCH] chore(renovate): automerge patch and digest updates for
 selected images

Covers cloudflared, authentik, gpt-load, valkey, twentycrm, mailflow
frontend/backend, tailscale, n8n and n8n runners. Minor and major
updates still open a PR for review.
---
 renovate.json | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/renovate.json b/renovate.json
index 5f9df9fb..fcf5cece 100644
--- a/renovate.json
+++ b/renovate.json
@@ -70,6 +70,24 @@
       "matchDatasources": ["docker"],
       "matchPackageNames": ["ghcr.io/tbphp/gpt-load"],
       "versioning": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-rc\\.(?<build>\\d+)$"
+    },
+    {
+      "description": "Automerge patch and digest updates for these images. A merge deploys straight to the hosts and CI does not start the new image, so think before adding data stores or services that migrate a schema on start. Never add headscale/headscale (see its rule above).",
+      "matchDatasources": ["docker"],
+      "matchPackageNames": [
+        "cloudflare/cloudflared",
+        "ghcr.io/thundersquared/authentik",
+        "ghcr.io/tbphp/gpt-load",
+        "valkey/valkey",
+        "ghcr.io/thundersquared/twentycrm",
+        "ghcr.io/maathimself/mailflow-frontend",
+        "ghcr.io/maathimself/mailflow-backend",
+        "ghcr.io/tailscale/tailscale",
+        "ghcr.io/thundersquared/n8n",
+        "n8nio/runners"
+      ],
+      "matchUpdateTypes": ["patch", "digest", "pinDigest"],
+      "automerge": true
     }
   ],
   "customManagers": [