From cbcf45a547b6069ba9e96358bb451e353e6e130f Mon Sep 17 00:00:00 2001
From: Timo Behrendt <t.behrendt@t00n.de>
Date: Sat, 20 Jun 2026 21:23:58 +0200
Subject: [PATCH 1/2] fix: ignore minAge for internal deps, replace previous
 rule with negative rule

---
 common.json | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/common.json b/common.json
index 5debaca..cef0222 100644
--- a/common.json
+++ b/common.json
@@ -5,17 +5,11 @@
   "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
   "packageRules": [
     {
-      "description": "Don't update dependencies unless they are at least 7 days old",
-      "matchPackageNames": ["*"],
+      "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
+      "matchPackageNames": ["!https://gitea.t000-n.de/t.behrendt/**"],
       "minimumReleaseAge": "7 days",
       "minimumReleaseAgeBehaviour": "timestamp-required",
       "internalChecksFilter": "strict"
-    },
-    {
-      "description": "Exempt local dependencies from the minimum release age (last rule wins over earlier packageRules for the same options)",
-      "matchPackageNames": ["/^(https:\\/\\/)?gitea\\.t000-n\\.de/"],
-      "minimumReleaseAge": "0 days",
-      "internalChecksFilter": "none"
     }
   ],
   "osvVulnerabilityAlerts": true,
-- 
2.52.0


From 6077c007116f9c38077c0d515d295126837dcd76 Mon Sep 17 00:00:00 2001
From: Timo Behrendt <t.behrendt@t00n.de>
Date: Sat, 20 Jun 2026 21:27:15 +0200
Subject: [PATCH 2/2] remove preset "security:minimumReleaseAgeNpm" by
 switching from "config:best-practices" to adding all manually

---
 common.json | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)

diff --git a/common.json b/common.json
index cef0222..aba3d94 100644
--- a/common.json
+++ b/common.json
@@ -2,11 +2,22 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "dependencyDashboard": true,
   "semanticCommits": "enabled",
-  "extends": ["config:best-practices", ":semanticCommitTypeAll(chore)"],
+  "extends": [
+    "config:recommended",
+    "docker:pinDigests",
+    "helpers:pinGitHubActionDigests",
+    ":configMigration",
+    ":pinDevDependencies",
+    "abandonments:recommended",
+    ":maintainLockFilesWeekly",
+    ":semanticCommitTypeAll(chore)"
+  ],
   "packageRules": [
     {
       "description": "Don't update dependencies unless they are at least 7 days old (except for internal deps).",
-      "matchPackageNames": ["!https://gitea.t000-n.de/t.behrendt/**"],
+      "matchPackageNames": [
+        "!https://gitea.t000-n.de/t.behrendt/**"
+      ],
       "minimumReleaseAge": "7 days",
       "minimumReleaseAgeBehaviour": "timestamp-required",
       "internalChecksFilter": "strict"
@@ -18,7 +29,10 @@
     "automerge": true,
     "platformAutomerge": true,
     "automergeType": "pr",
-    "addLabels": ["automerge", "security"],
+    "addLabels": [
+      "automerge",
+      "security"
+    ],
     "vulnerabilityFixStrategy": "lowest"
   }
-}
+}
\ No newline at end of file
-- 
2.52.0