Renovate Dependency Updates

Status: ✅ Active | Version: 01.00.00 | Last Updated: 2026-05-07

Overview

Automated dependency update management using Renovate. Runs centrally from moko-platform and creates PRs for outdated dependencies across all governed repos.

Architecture

Central runner: renovate.yml workflow in moko-platform scans all repos
Per-repo config: renovate.json in each repo controls update behavior
Supported managers: Composer (PHP), npm (JavaScript)

Schedule

Trigger	When
Scheduled	Weekly Wednesday 04:00 UTC
Manual	Dispatch with optional repo filter and dry-run

Update Behavior

Update Type	Action
Patch (x.x.Y)	Auto-merge if CI passes
Minor (x.Y.0)	PR created, manual review required
Major (Y.0.0)	PR created, manual review required

Per-Repo Configuration

Each repo has a renovate.json that extends the recommended config:

{
  "extends": ["config:recommended", "schedule:weekly"],
  "automerge": false,
  "packageRules": [
    { "matchUpdateTypes": ["patch"], "automerge": true }
  ]
}

Override in any repo by editing its renovate.json.

Inputs (Manual Dispatch)

Input	Default	Description
`repos`	all	Comma-separated repo names
`dry_run`	false	Log only, no PRs created

Excluded Repos

Same exclusion list as other centralized workflows (platform/standards/template repos).

Changelog

Version	Date	Changes
01.00.00	2026-05-07	Initial release — centralized Renovate runner

Repo: moko-platform · moko-platform wiki

Field	Value
Minimum Version	04.07.00
Platform	all
Applies To	All repositories

Revision	Date	Author	Description
1.0	2026-05-08	Moko Consulting	Initial version