kert 321bf93e5f fix(renovate): land updates on main without PRs, daily, with github.com lookups ...

The 10-27 fix made Renovate process the repo, and a manual run proved it:
it opened 2 PRs and a Dependency Dashboard (#1396). But most lookups
failed on the anonymous api.github.com limit, it was capped at 2 new
branches an hour, and its PRs could never merge, because main still
required Woodpecker checks that stopped reporting when CI moved to Gitea
Actions. (Fixed in the Gitea branch protection: the CI lint/test/
notebooks-smoke push checks are now the required ones.)

- automergeType=branch: once CI is green, minor/patch updates
  fast-forward onto main as plain commits, with no PRs, matching the
  main-only workflow. Majors still open PRs for review;
  automergeStrategy=fast-forward keeps any PR merge free of merge commits.
- prHourlyLimit 0; the workflow runs daily, because branch automerge
  lands on the run after CI goes green.
- GITHUB_COM_TOKEN passed to Renovate (secret still to be added).
- Leave marimo to marimo_latest.py, hold duckdb <2 like the
  pyproject cap, and skip the vendored traefik plugin source.
- marimo_latest.py fast-forwards the checkout when Renovate has moved
  the server's main, instead of aborting.

2026-10-29 17:00:39 -04:00

..

hooks

feat: sem.hooks — smart pre-commit with tracked hook architecture

2026-03-26 17:21:11 -04:00

pipelines

chore: drop deprecated Woodpecker references

2026-05-06 16:56:34 -04:00

scripts

fix(renovate): land updates on main without PRs, daily, with github.com lookups

2026-10-29 17:00:39 -04:00

seeds

chore(bcda): vendor CMSgov/bcda-app + bcda.cms.gov v3 artefacts sparsely, flatten the v3 data dictionary into crosswalk seeds, weekly drift workflow

2026-10-25 13:08:05 -04:00

vendor

feat(bcda): close the upstream-review gaps — partial exports, claim identity across systems, attribution checks, filter grammar, vendored behaviour

2026-10-25 17:10:24 -04:00