feat(renovate): gate Expo SDK updates behind the dependency dashboard

expo, react, react-native and Expo-managed modules (expo-*, @expo/*) are
pinned by the Expo SDK and must be upgraded together via `expo install
--fix`. Individual Renovate update PRs for them risk broken builds, so
group them as "Expo SDK" and require manual dashboard approval.
This commit is contained in:
Gauvain
2026-06-10 01:22:55 +02:00
parent 960563f66a
commit 4f8a4a0ab9

14
.github/renovate.json vendored
View File

@@ -51,6 +51,20 @@
"commitMessageSuffix": " [SECURITY]"
},
"packageRules": [
{
"description": "Expo SDK coherence: expo, react, react-native and Expo-managed modules are pinned by the Expo SDK and must move together (via `expo install --fix`), so do not raise individual update PRs — group them and require manual approval from the Dependency Dashboard",
"matchPackageNames": [
"expo",
"react",
"react-dom",
"react-native",
"react-native-web",
"expo-*",
"@expo/*"
],
"groupName": "Expo SDK",
"dependencyDashboardApproval": true
},
{
"description": "Group minor and patch GitHub Action updates into a single PR",
"matchManagers": ["github-actions"],