From 4468bcac87336c660038836c2560a522509c985b Mon Sep 17 00:00:00 2001 From: Salah-Eddine Saakoun Date: Sat, 26 Sep 2026 12:40:45 +0200 Subject: [PATCH 1/2] feat: open pull requests for security advisories --- renovate.json | 1 + 1 file changed, 1 insertion(+) diff --git a/renovate.json b/renovate.json index eabb43a6a82..ea0e0f72a3c 100644 --- a/renovate.json +++ b/renovate.json @@ -4,6 +4,7 @@ "dependencyDashboard": true, "dependencyDashboardApproval": true, "minimumReleaseAge": "3 days", + "osvVulnerabilityAlerts": true, "postUpdateOptions": ["yarnDedupeHighest"], "rangeStrategy": "bump", "skipInstalls": false, From 9a08eb37e7e2f57e4ae8bb2554136bd63e5791e7 Mon Sep 17 00:00:00 2001 From: Salah-Eddine Saakoun Date: Mon, 28 Sep 2026 11:45:53 +0200 Subject: [PATCH 2/2] feat: read advisories from the token instead of osv --- .github/workflows/renovate.yml | 1 + renovate.json | 1 - 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 788a7642421..4e985e68d35 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -33,6 +33,7 @@ jobs: pull_requests: write issues: write workflows: write + vulnerability_alerts: read - name: Run Renovate uses: renovatebot/github-action@dcfba84a42d1b5d5e49bf131b1bf53511851a123 # v46.3.1 diff --git a/renovate.json b/renovate.json index ea0e0f72a3c..eabb43a6a82 100644 --- a/renovate.json +++ b/renovate.json @@ -4,7 +4,6 @@ "dependencyDashboard": true, "dependencyDashboardApproval": true, "minimumReleaseAge": "3 days", - "osvVulnerabilityAlerts": true, "postUpdateOptions": ["yarnDedupeHighest"], "rangeStrategy": "bump", "skipInstalls": false,