From 17897192eb454339aa441b333b2be2737545984a Mon Sep 17 00:00:00 2001
From: Florian Vogt <florian.vogt@sap.com>
Date: Wed, 7 Oct 2026 15:57:36 +0200
Subject: [PATCH 1/3] ci: Migrate from dependabot to renovate

---
 .github/dependabot.yml | 20 ----------------
 renovate.json          | 53 ++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 53 insertions(+), 20 deletions(-)
 delete mode 100644 .github/dependabot.yml
 create mode 100644 renovate.json

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 191adbea..00000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,20 +0,0 @@
-version: 2
-updates:
-- package-ecosystem: "github-actions"
-  directory: "/"
-  schedule:
-    interval: "weekly"
-  cooldown:
-    default-days: 2
-  commit-message:
-    prefix: "ci(github-actions)"
-- package-ecosystem: npm
-  directory: "/"
-  schedule:
-    interval: "weekly"
-  versioning-strategy: increase
-  cooldown:
-    default-days: 2
-  commit-message:
-    prefix: "deps"
-    prefix-development: "build(deps-dev)"
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 00000000..2c061d89
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,53 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+        "config:recommended"
+    ],
+    "rangeStrategy": "replace",
+    "lockFileMaintenance": {
+        "enabled": true,
+        "automerge": true,
+        "commitMessagePrefix": "build:",
+        "commitMessageAction": "In-range update of npm dependencies",
+        "schedule": [
+            "* 0-8 * * 1"
+        ]
+    },
+    "packageRules": [
+        {
+            "matchDatasources": [
+                "npm"
+            ],
+            "minimumReleaseAge": "3 days"
+        },
+        {
+            "matchDepNames": [
+                "*"
+            ],
+            "automerge": true,
+            "commitMessagePrefix": "build(deps-dev):",
+            "commitMessageAction": "Bump",
+            "schedule": [
+                "* 8-16 * * 1"
+            ]
+        },
+        {
+            "matchManagers": [
+                "github-actions"
+            ],
+            "automerge": true,
+            "commitMessagePrefix": "ci(github-actions):",
+            "commitMessageAction": "Bump",
+            "schedule": [
+                "* 8-16 * * 1"
+            ]
+        },
+        {
+            "matchPackageNames": [
+                "node",
+                "npm"
+            ],
+            "enabled": false
+        }
+    ]
+}

From 16fb4b0d172dce53e55a91ff9fde3d4625c23759 Mon Sep 17 00:00:00 2001
From: Florian Vogt <florian.vogt@sap.com>
Date: Wed, 7 Oct 2026 15:59:56 +0200
Subject: [PATCH 2/3] fix: Pin version of @ui5/mcp-server

Adds a custom manager to the renovate configuration for updating the version of @ui5/mcp-server in the plugins/ui5/.mcp.json file.
---
 plugins/ui5/.mcp.json |  2 +-
 renovate.json         | 20 ++++++++++++++++++++
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/plugins/ui5/.mcp.json b/plugins/ui5/.mcp.json
index d75c8ad3..37209503 100644
--- a/plugins/ui5/.mcp.json
+++ b/plugins/ui5/.mcp.json
@@ -2,7 +2,7 @@
     "mcpServers": {
         "ui5-mcp-server": {
             "command": "npx",
-            "args": ["-y", "@ui5/mcp-server@latest"]
+            "args": ["-y", "@ui5/mcp-server@0.3.2"]
         }
     }
 }
diff --git a/renovate.json b/renovate.json
index 2c061d89..1dea594a 100644
--- a/renovate.json
+++ b/renovate.json
@@ -20,6 +20,13 @@
             ],
             "minimumReleaseAge": "3 days"
         },
+        {
+            "matchPackageNames": [
+                "@ui5/mcp-server"
+            ],
+            "minimumReleaseAge": null,
+            "commitMessagePrefix": "deps:"
+        },
         {
             "matchDepNames": [
                 "*"
@@ -49,5 +56,18 @@
             ],
             "enabled": false
         }
+    ],
+    "customManagers": [
+        {
+            "customType": "regex",
+            "fileMatch": [
+                "plugins/ui5/\\.mcp\\.json"
+            ],
+            "matchStrings": [
+                "@ui5/mcp-server@(?<currentValue>[^\"]+)"
+            ],
+            "depNameTemplate": "@ui5/mcp-server",
+            "datasourceTemplate": "npm"
+        }
     ]
 }

From 52bc5d99222cbf69aec30e2b7647ef04d130e161 Mon Sep 17 00:00:00 2001
From: Florian Vogt <florian.vogt@sap.com>
Date: Thu, 8 Oct 2026 08:51:47 +0200
Subject: [PATCH 3/3] ci(github-actions): Remove dependabot-auto-merge.yml

---
 .github/workflows/dependabot-auto-merge.yml | 26 ---------------------
 1 file changed, 26 deletions(-)
 delete mode 100644 .github/workflows/dependabot-auto-merge.yml

diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
deleted file mode 100644
index 6c18fd04..00000000
--- a/.github/workflows/dependabot-auto-merge.yml
+++ /dev/null
@@ -1,26 +0,0 @@
-name: Dependabot auto-merge
-on:
-  pull_request:
-    branches:
-      - main
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  dependabot:
-    runs-on: ubuntu-latest
-    if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
-    steps:
-      - name: Dependabot metadata
-        id: metadata
-        uses: dependabot/fetch-metadata@v3
-        with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
-      - name: Enable auto-merge for Dependabot PRs
-        if: ${{contains(fromJSON('["version-update:semver-minor", "version-update:semver-patch"]'), steps.metadata.outputs.update-type)}}
-        run: gh pr review --approve "$PR_URL" && gh pr merge --auto --rebase "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}