From bbe8f395a27717369575cb210a4bc272abe17c0e Mon Sep 17 00:00:00 2001
From: Thomas Skovlund Hansen <thomas@skovlund.dev>
Date: Sun, 6 Sep 2026 18:30:17 +0000
Subject: [PATCH 1/2] chore(renovate): never auto-merge .python-version bumps

Renovate's pyenv manager resolves .python-version against docker tags and
the shared preset auto-merged 3.13 -> 3.14 alone, leaving pyproject, the
flake and CI on 3.13 in cambr and mcp-score. Hold those for a human so
the interpreter moves together with the rest of the repo.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017uEFUBmve2K2nsBW8wWgqn
---
 default.json | 46 ++++++++++++++++++++++++++++++++++++++--------
 1 file changed, 38 insertions(+), 8 deletions(-)

diff --git a/default.json b/default.json
index 53ffc53..658b09d 100644
--- a/default.json
+++ b/default.json
@@ -1,26 +1,56 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "description": "Shared Renovate policy for all tskovlund repositories — extend with \"github>tskovlund/.github\"",
-  "extends": ["config:recommended", "helpers:pinGitHubActionDigests"],
+  "extends": [
+    "config:recommended",
+    "helpers:pinGitHubActionDigests"
+  ],
   "timezone": "Europe/Copenhagen",
-  "schedule": ["before 7am on monday"],
-  "labels": ["dependencies"],
+  "schedule": [
+    "before 7am on monday"
+  ],
+  "labels": [
+    "dependencies"
+  ],
   "prConcurrentLimit": 10,
   "semanticCommits": "enabled",
   "configMigration": true,
-  "nix": { "enabled": true },
-  "lockFileMaintenance": { "enabled": true, "automerge": true },
+  "nix": {
+    "enabled": true
+  },
+  "lockFileMaintenance": {
+    "enabled": true,
+    "automerge": true
+  },
   "packageRules": [
     {
       "description": "Auto-merge non-major updates once checks pass; majors wait for a human",
-      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+      "matchUpdateTypes": [
+        "minor",
+        "patch",
+        "pin",
+        "digest"
+      ],
       "automerge": true
     },
     {
-      "matchManagers": ["github-actions"],
+      "matchManagers": [
+        "github-actions"
+      ],
       "groupName": "GitHub Actions",
       "semanticCommitType": "ci"
+    },
+    {
+      "description": "Interpreter bumps in .python-version must be paired with pyproject, flake and CI changes, so never auto-merge them",
+      "matchManagers": [
+        "pyenv"
+      ],
+      "automerge": false
     }
   ],
-  "vulnerabilityAlerts": { "labels": ["security"] }
+  "vulnerabilityAlerts": {
+    "labels": [
+      "security"
+    ]
+  }
 }

From 81ef57ef87770957ecb476944b5cd56e23353e99 Mon Sep 17 00:00:00 2001
From: Thomas Skovlund Hansen <thomas@skovlund.dev>
Date: Sun, 6 Sep 2026 18:30:34 +0000
Subject: [PATCH 2/2] style: prettier formatting for default.json

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017uEFUBmve2K2nsBW8wWgqn
---
 default.json | 32 +++++++-------------------------
 1 file changed, 7 insertions(+), 25 deletions(-)

diff --git a/default.json b/default.json
index 658b09d..2b23a8f 100644
--- a/default.json
+++ b/default.json
@@ -1,17 +1,10 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "description": "Shared Renovate policy for all tskovlund repositories — extend with \"github>tskovlund/.github\"",
-  "extends": [
-    "config:recommended",
-    "helpers:pinGitHubActionDigests"
-  ],
+  "extends": ["config:recommended", "helpers:pinGitHubActionDigests"],
   "timezone": "Europe/Copenhagen",
-  "schedule": [
-    "before 7am on monday"
-  ],
-  "labels": [
-    "dependencies"
-  ],
+  "schedule": ["before 7am on monday"],
+  "labels": ["dependencies"],
   "prConcurrentLimit": 10,
   "semanticCommits": "enabled",
   "configMigration": true,
@@ -25,32 +18,21 @@
   "packageRules": [
     {
       "description": "Auto-merge non-major updates once checks pass; majors wait for a human",
-      "matchUpdateTypes": [
-        "minor",
-        "patch",
-        "pin",
-        "digest"
-      ],
+      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
       "automerge": true
     },
     {
-      "matchManagers": [
-        "github-actions"
-      ],
+      "matchManagers": ["github-actions"],
       "groupName": "GitHub Actions",
       "semanticCommitType": "ci"
     },
     {
       "description": "Interpreter bumps in .python-version must be paired with pyproject, flake and CI changes, so never auto-merge them",
-      "matchManagers": [
-        "pyenv"
-      ],
+      "matchManagers": ["pyenv"],
       "automerge": false
     }
   ],
   "vulnerabilityAlerts": {
-    "labels": [
-      "security"
-    ]
+    "labels": ["security"]
   }
 }