From 495fddd4271adb8a711042c5c6a7fdd35b325f87 Mon Sep 17 00:00:00 2001 From: Cail Daley Date: Wed, 15 Jul 2026 18:04:16 +0200 Subject: [PATCH] chore(renovate): explicitly zero minimumReleaseAge to override Mend's org layer MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Our config has no age gate, yet #816 fails artifacts on 'Minimum Release Age threshold' — the gate is injected by Mend's hosted org config, and an absent key does not override an inherited one. Set '0 days' explicitly so the repo value wins the config merge. If artifact errors persist after this, the gate is portal-global and must be cleared at developer.mend.io. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01VZvom4Uzdoz5KbJeG8yhde --- renovate.json | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/renovate.json b/renovate.json index 87098708..9148c8ac 100644 --- a/renovate.json +++ b/renovate.json @@ -3,9 +3,11 @@ "description": [ "Low-noise dependency updates; uv owns version resolution. pyproject keeps floor ranges and Renovate uses the org default rangeStrategy=update-lockfile, so `uv lock` picks versions jointly — cross-package conflicts (e.g. numba capping numpy) resolve silently instead of failing the batch, and un-stick themselves when upstream catches up. No minimumReleaseAge: it is unenforceable with uv resolution (renovatebot/renovate#41624 forced exact pins, which forced manual conflict caps); CI running the full suite in the container is the automerge gate.", "Noise: all non-major updates grouped into one weekly PR that automerges when CI is green; majors surface individually; lockFileMaintenance refreshes transitive deps weekly.", - "python is guarded: Renovate classes base-image bumps like 3.12 -> 3.14 as 'minor', so it gets its own PR and never automerges — a Python upgrade gets human eyes without holding the weekly batch hostage." + "python is guarded: Renovate classes base-image bumps like 3.12 -> 3.14 as 'minor', so it gets its own PR and never automerges — a Python upgrade gets human eyes without holding the weekly batch hostage.", + "minimumReleaseAge is EXPLICITLY zeroed, not merely absent: Mend's hosted org layer injects an age gate invisibly, and merely deleting the key here does not override inherited config — artifact updates then fail on every uv-resolved transitive that is younger than the invisible gate (see #816). An explicit '0 days' should win the merge over the inherited value; if artifact errors persist, the gate lives in Mend portal-global settings and must be removed at developer.mend.io." ], "extends": ["config:recommended", "group:allNonMajor", "schedule:weekly"], + "minimumReleaseAge": "0 days", "lockFileMaintenance": { "enabled": true }, "packageRules": [ { "matchUpdateTypes": ["minor", "patch", "pin", "digest"], "automerge": true },