Repository navigation
MCP-744 Use shared Gitar Renovate safety rule - #733
Conversation
hashicorp-vault-sonar-prod
Bot
changed the title
Code Review ✅ Approved 🟡 Medium riskRemoving the local Renovate safety rule relies on shared inheritance; if it is not applied, major/minor upgrades may lack intended safeguards. Removes the local Renovate safety rule override and the label-only Verification Rules 2/2 met PRs 1 inspectedFunctional validation No results Rules 2 passed 2 not applicable
Broader impact PRs 1 inspectedCross-PR 1 PR inspected 0 open impacts
Auto-approval Not enabledFor more verification details, comment OptionsAuto-apply is off → Gitar will not commit updates to this branch. Comment with these commands to change the behavior for this request:
Was this helpful? React with 👍 / 👎 | Gitar |
|
Use the shared Renovate safety automation from gitar-config#6 by removing the local
.gitar/rules/renovate-safety.mdoverride and the label-onlyrenovate-major-minorpackage rule. The shared rule identifies eligible major/minor upgrades without labels.Retains Gradle lockfile regeneration and the existing squad review focus.
Validation:
git diff --check..github/renovate.jsonwith no issues.Application builds are unnecessary for this configuration-only change. Static checks do not prove live shared-rule inheritance; an eligible Renovate PR is needed to verify the automation end to end.