From 1d27ccf7b288659bf37db6b05196149993402110 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 11 Nov 2026 07:52:21 -0700
Subject: [PATCH 1/2] chore(renovate): weekly grouped updates, rebase when
 behind, hold Node and TypeScript majors

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DryVDhujpvQxem3Ztk5WY6
---
 renovate.json | 34 +++++++++++++++++++++++-----------
 1 file changed, 23 insertions(+), 11 deletions(-)

diff --git a/renovate.json b/renovate.json
index 40024b43..9591199f 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,20 +1,32 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:recommended"
+    "config:recommended",
+    "schedule:weekly",
+    ":maintainLockFilesMonthly",
+    "group:allNonMajor"
   ],
+  "minimumReleaseAge": "3 days",
+  "rebaseWhen": "behind-base-branch",
+  "lockFileMaintenance": {
+    "automerge": true
+  },
   "packageRules": [
     {
-      "matchUpdateTypes": [
-        "minor",
-        "patch"
-      ],
-      "matchCurrentVersion": "!/^0/",
+      "description": "Automerge minor, patch and digest updates when required checks pass",
+      "matchUpdateTypes": ["minor", "patch", "digest"],
       "automerge": true
+    },
+    {
+      "description": "Changing the Node.js version in .nvmrc breaks the Cloudflare Pages build. Hold these updates for manual approval.",
+      "matchManagers": ["nvm"],
+      "dependencyDashboardApproval": true
+    },
+    {
+      "description": "Hold TypeScript majors until astro check supports them",
+      "matchPackageNames": ["typescript"],
+      "matchUpdateTypes": ["major"],
+      "dependencyDashboardApproval": true
     }
-  ],
-  "lockFileMaintenance": {
-    "enabled": true,
-    "automerge": true
-  }
+  ]
 }

From cb2af59a0135d857daae560c2fdf60eeddf038e6 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 11 Nov 2026 08:15:41 -0700
Subject: [PATCH 2/2] ci: pin visual snapshot tests to ubuntu-24.04

ubuntu-latest now resolves to Ubuntu 26.04, where `playwright install
--with-deps` fails on apt mirror DNS. Pinning also keeps screenshot
baselines stable, since fonts and rendering change between Ubuntu releases.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DryVDhujpvQxem3Ztk5WY6
---
 .github/workflows/visual.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/visual.yml b/.github/workflows/visual.yml
index 9875a1e1..ee918dac 100644
--- a/.github/workflows/visual.yml
+++ b/.github/workflows/visual.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   visual:
     name: Visual snapshot tests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4