GitHub
07/10/2026, 9:01 AM.github/dependabot.yml configuration.
• Added a new renovate.json configuration file at the repository root.
• Configured extends: ["config:recommended"] to cleanly handle additional_dependencies and tool.uv.sources.
• Enabled lockFileMaintenance with automerge to keep transitive dependencies up-to-date.
• Added packageRules to automatically merge minor, patch, pin, and digest updates if all CI checks pass.
Checklist
• I have read the contribution guide
Was generative AI tooling used to co-author this PR?
• Yes (please specify the tool below): Claude 5 Sonnet
Related Issues
Resolves #9730
Summary by Sourcery
Switch the repository's automated dependency update system from Dependabot to Renovate and configure Renovate for lockfile maintenance and selective automerging of safe updates.
Enhancements:
• Replace Dependabot-based dependency automation with Renovate configuration for managing updates.
Build:
• Remove .github/dependabot.yml and add root-level renovate.json to configure automated dependency updates, lockfile maintenance, and automerge rules.
CI:
• Update dependency update workflow to rely on Renovate instead of Dependabot for automatic PRs and merges.
meltano/meltanoGitHub
07/31/2026, 4:22 PM