From 4eee61983b7677c5750cad3fe1466cf4693de8c3 Mon Sep 17 00:00:00 2001
From: Alex Waygood <alex.waygood@gmail.com>
Date: Mon, 31 Aug 2026 22:12:03 +0100
Subject: [PATCH 1/3] Improve Renovate configuration

---
 .github/renovate.json5 | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 68e6272a0922..f372c65ba259 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -2,7 +2,14 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "dependencyDashboard": true,
   "suppressNotifications": ["prEditedNotification"],
-  "extends": ["config:recommended", "helpers:pinGitHubActionDigests"],
+  "extends": [
+    "config:recommended",
+    "schedule:monthly",
+    "helpers:pinGitHubActionDigestsToSemver",
+    "replacements:all",
+    "abandonments:recommended"
+  ],
+  "configMigration": true,
   "labels": ["bot: dependencies"],
   "rebaseLabel": ["bot: rebase"],
   "semanticCommits": "disabled",
@@ -15,7 +22,13 @@
   "pre-commit": {
     "enabled": true
   },
+  "minimumReleaseAge": "7 days",
   "packageRules": [
+    {
+      // Pin versions already in use without waiting for the upgrade cooldown.
+      "matchUpdateTypes": ["pinDigest"],
+      "minimumReleaseAge": null
+    },
     {
       groupName: "GitHub Actions",
       matchManagers: ["github-actions"],

From 331fbe98273fb27ff813965d6a6fcb7e538d4de1 Mon Sep 17 00:00:00 2001
From: Alex Waygood <alex.waygood@gmail.com>
Date: Mon, 31 Aug 2026 22:16:09 +0100
Subject: [PATCH 2/3] Validate Renovate and GitHub workflow configuration

---
 .github/renovate.json5  | 2 +-
 .pre-commit-config.yaml | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/renovate.json5 b/.github/renovate.json5
index f372c65ba259..e1ecb6bdea01 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -11,7 +11,7 @@
   ],
   "configMigration": true,
   "labels": ["bot: dependencies"],
-  "rebaseLabel": ["bot: rebase"],
+  "rebaseLabel": "bot: rebase",
   "semanticCommits": "disabled",
   "separateMajorMinor": false,
   "prHourlyLimit": 10,
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 1866005fe519..3733c84f6b76 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -10,6 +10,12 @@ repos:
       - id: mixed-line-ending
         args: [--fix=lf]
       - id: check-case-conflict
+  - repo: https://github.com/python-jsonschema/check-jsonschema
+    rev: 12e63946db2c5cfcc9030fac21c3883ba88c6ed8 # frozen: 0.38.0
+    hooks:
+      - id: check-github-workflows
+      - id: check-renovate
+        additional_dependencies: ["json5==0.15.0"]
   - repo: https://github.com/astral-sh/ruff-pre-commit
     # The Ruff version must match requirements-tests.txt.
     rev: c59bba8fb259db0fec2bbb77ad8ba51ea7341b56 # frozen: v0.15.20

From b3a6b19ac2f91e3310e1c25713f0ded785d714ec Mon Sep 17 00:00:00 2001
From: Alex Waygood <Alex.Waygood@Gmail.com>
Date: Mon, 31 Aug 2026 22:20:10 +0100
Subject: [PATCH 3/3] Update .github/renovate.json5

---
 .github/renovate.json5 | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/renovate.json5 b/.github/renovate.json5
index e1ecb6bdea01..585622123342 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -4,7 +4,6 @@
   "suppressNotifications": ["prEditedNotification"],
   "extends": [
     "config:recommended",
-    "schedule:monthly",
     "helpers:pinGitHubActionDigestsToSemver",
     "replacements:all",
     "abandonments:recommended"