From b3598500531c799cba00c728195d0832af6bb677 Mon Sep 17 00:00:00 2001
From: "p2p-renovate[bot]"
 <220013375+p2p-renovate[bot]@users.noreply.github.com>
Date: Mon, 13 Jul 2026 16:10:27 +0000
Subject: [PATCH 1/2] Add renovate.json

---
 renovate.json | 3 +++
 1 file changed, 3 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000000..7190a60b64
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}

From 9d9a72f8f1afba853f206a1b0932eb337d23e49b Mon Sep 17 00:00:00 2001
From: "asoc-p2p[bot]" <306867564+asoc-p2p[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 18:29:30 +0000
Subject: [PATCH 2/2] chore(renovate): harden config and pin actions to commit
 SHA

---
 renovate.json | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/renovate.json b/renovate.json
index 7190a60b64..d29f6441e3 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,3 +1,16 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:recommended"],
+  "prHourlyLimit": 6,
+  "minimumReleaseAge": "3 days",
+  "labels": ["renovate"],
+  "packageRules": [
+    {
+      "description": "Pin GitHub Actions to full commit SHA",
+      "matchDepTypes": ["action"],
+      "pinDigests": true
+    }
+  ],
+  "dependencyDashboard": true,
+  "semanticCommits": "enabled"
 }