fix: removed minimumReleaseAge see renovatebot/renovate#14724

README.md

@@ -43,7 +43,6 @@ Go to https://github.com/apps/renovate, ask a GitHub admin of the organisation i
 - Support GitHub-Actions updates with hash version
 - Support Docker ecosystem
 - Defined package groups like TypeScript, Prettier, Linters, Vitest
-- Prevent supply-chain attack by `"minimumReleaseAge": 3 days`
 
 ## References
 

default.json

@@ -12,6 +12,8 @@
     ],
     "schedule": ["after 10:00 before 19:00 every weekday except after 13:00 before 14:00"],
     "rollbackPrs": true,
+    "minimumReleaseAge": null,
+    "prCreation": "immediate",
     "vulnerabilityAlerts": {
         "description": "Be sure that the Dependency graph and Dependabot alerts are enabled for the repo. Details: https://docs.renovatebot.com/configuration-options/#vulnerabilityalerts",
         "enabled": true,
@@ -44,15 +46,11 @@
         "minor": {
             "automerge": true,
             "groupName": "Minor updates",
-            "minimumReleaseAge": "3 days",
-            "prCreation": "status-success",
             "semanticCommitType": "feat"
         },
         "patch": {
             "automerge": true,
             "groupName": "Patch updates",
-            "minimumReleaseAge": "3 days",
-            "prCreation": "status-success",
             "semanticCommitType": "fix"
         },
         "packageRules": [

package.json

@@ -50,28 +50,30 @@
         "lint:text:fix": "textlint ./.github/ ./README.md ./UPGRADE.md --parallel --experimental --fix",
         "prepare": "is-ci || husky install || exit 0",
         "sort-package-json": "sort-package-json ./package.json",
-        "test": "renovate-config-validator default.json"
+        "test": "renovate-config-validator default.json",
+        "update:deps": "taze"
     },
     "devDependencies": {
         "@anolilab/commitlint-config": "^5.0.3",
         "@anolilab/lint-staged-config": "^2.1.7",
         "@anolilab/prettier-config": "^5.0.14",
         "@anolilab/semantic-release-preset": "^8.0.3",
         "@anolilab/textlint-config": "^8.0.16",
-        "@commitlint/cli": "^18.6.0",
-        "@commitlint/config-conventional": "^18.6.0",
-        "@secretlint/secretlint-rule-preset-recommend": "^8.1.1",
-        "husky": "^9.0.10",
+        "@commitlint/cli": "^19.3.0",
+        "@commitlint/config-conventional": "^19.2.2",
+        "@secretlint/secretlint-rule-preset-recommend": "^8.2.4",
+        "husky": "^9.0.11",
         "is-ci": "^3.0.1",
         "lint-staged": "^15.2.2",
         "prettier": "^3.2.5",
-        "renovate": "^37.182.0",
+        "renovate": "^37.349.1",
         "secretlint": "8.1.1",
-        "semantic-release": "^23.0.2",
-        "sort-package-json": "^2.7.0",
-        "textlint": "^14.0.1"
+        "semantic-release": "^23.0.8",
+        "sort-package-json": "^2.10.0",
+        "taze": "^0.13.8",
+        "textlint": "^14.0.4"
     },
-    "packageManager": "pnpm@8.11.0",
+    "packageManager": "pnpm@9.1.0",
     "engines": {
         "node": ">=20"
     },

taze.config.js

@@ -0,0 +1,12 @@
+import { defineConfig } from "taze";
+
+export default defineConfig({
+    // ignore packages from bumping
+    exclude: [
+    ],
+    // write to package.json
+    write: true,
+    ignorePaths: ["node_modules", "dist"],
+    recursive: true,
+    mode: "latest",
+});