Skip to content

Conversation

Copy link

Copilot AI commented Dec 10, 2025

Plan: Temporarily Disable Renovate During Shai-Hulud Wave

  • Locate and review existing Renovate configuration file
  • Add "enabled": false flag to the top-level configuration with clear documentation
  • Verify the change is minimal and doesn't alter other configuration options
  • Commit changes with clear message about Shai-Hulud freeze
  • Fix pre-commit hook issue by excluding renovate.json from check-json
  • Document re-enable procedure in PR description

Summary

This PR temporarily disables Renovate in this repository due to the Shai-Hulud supply-chain wave by adding "enabled": false to the top-level configuration in .github/renovate.json.

Changes Made

  • Modified .github/renovate.json to add "enabled": false at the top level
  • Added clear comments explaining the freeze and how to re-enable
  • Updated .pre-commit-config.yaml to exclude renovate.json from check-json hook (Renovate supports JSONC format)
  • No other configuration options were altered

Re-enable Procedure

When the Shai-Hulud danger has passed, you can re-enable Renovate by doing one of the following:

  1. Change the flag to true:

    "enabled": true,
  2. Or remove the enabled property entirely:
    Simply delete lines 3-6 (the comments and the "enabled": false, line) from .github/renovate.json

Then open a PR with a title like: chore: re-enable Renovate after Shai-Hulud

Original prompt

This section details on the original issue you should resolve

<issue_title>Temporarily disable Renovate during Shai-Hulud wave</issue_title>
<issue_description>Title: Temporarily disable Renovate during Shai-Hulud wave

Summary

Because of the current Shai-Hulud supply-chain wave, we want to temporarily disable Renovate in this repository so that no new automated dependency updates are opened until it’s safe to resume. The change must be:

  • Repo-local (doesn’t affect other repos)
  • Easily reversible (flip a flag or delete a small config file)

This issue is intended to be implemented by GitHub Copilot via a small configuration change and PR.

Task for Copilot

Goal: Update this repo’s Renovate configuration so that Renovate is disabled via the enabled flag, and clearly document how to turn it back on.

1. Locate the Renovate configuration for this repo

Search for a Renovate config file in this repository. Check, in roughly this order:

  • renovate.json
  • renovate.json5
  • .github/renovate.json
  • .github/renovate.json5
  • .renovaterc
  • .renovaterc.json
  • .renovaterc.json5
  • package.json (inside a "renovate" section)

Use the first one you find; do not modify multiple configs.

2. If a Renovate config file already exists

Case A: Config is in a dedicated Renovate file
(e.g. renovate.json, .github/renovate.json, .renovaterc*, or renovate.json5)

  1. Ensure there is a top-level enabled flag set to false.
    Example (JSONC is allowed in Renovate config files, so comments are OK):
  {
    // SHAI-HULUD FREEZE:
    // Flip this to true or remove this flag when it is safe
    // to re-enable Renovate.
    "enabled": false,

    // ...existing Renovate config...
  }
  1. Do not alter any other configuration options.

3. Create a PR

Copilot should:

  1. Commit the minimal change described above on a new branch.

  2. Open a PR with a title similar to:

chore: temporarily disable Renovate (Shai-Hulud freeze)

  1. In the PR description, briefly explain:

    • That Renovate is being disabled due to the Shai-Hulud wave.

    • That re-enabling is as simple as:

      • Setting "enabled": true, or
      • Removing the enabled flag, or
      • Deleting .github/renovate.json if that file was created for this purpose.

Re-enable procedure (for future humans or Copilot)

When the Shai-Hulud danger has passed:

  • If we edited an existing config file:

    • Change "enabled": false to "enabled": true, or
    • Remove the enabled property entirely if we want to go back to previous behavior.
  • If we created .github/renovate.json with only "enabled": false:

    • Delete .github/renovate.json, or
    • Change "enabled": false to "enabled": true.

Open a small PR with a title like:

chore: re-enable Renovate after Shai-Hulud

Acceptance criteria

  • Renovate is disabled in this repository via the enabled: false flag.
  • No new Renovate PRs or branches are created once the change is on the default branch.
  • The configuration clearly documents how to re-enable Renovate with a single, obvious edit (flip a boolean or delete one file).

</issue_description>

Comments on the Issue (you are @copilot in this section)


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: tomwillis608 <15950648+tomwillis608@users.noreply.github.com>
Copilot AI changed the title [WIP] Temporarily disable Renovate due to Shai-Hulud wave chore: temporarily disable Renovate (Shai-Hulud freeze) Dec 10, 2025
Copilot AI requested a review from tomwillis608 December 10, 2025 20:11
@tomwillis608
Copy link
Collaborator

@copilot fix this problem that pre-commit hooks found

check json...............................................................Failed
- hook id: check-json
- exit code: 1

.github/renovate.json: Failed to json decode (Expecting property name enclosed in double quotes: line 3 column 3 (char 70))

Renovate config supports JSONC (JSON with comments), but the check-json
hook expects strict JSON. Excluded .github/renovate.json from the hook
to allow comments for documentation purposes.

Co-authored-by: tomwillis608 <15950648+tomwillis608@users.noreply.github.com>
Copy link
Author

Copilot AI commented Dec 10, 2025

@copilot fix this problem that pre-commit hooks found

...

Fixed in commit b3f17f4. Excluded .github/renovate.json from the check-json pre-commit hook since Renovate officially supports JSONC format (JSON with comments). The comments are necessary to document the Shai-Hulud freeze and re-enable procedure.

Copilot AI requested a review from tomwillis608 December 10, 2025 20:28
@tomwillis608 tomwillis608 marked this pull request as ready for review December 10, 2025 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Temporarily disable Renovate during Shai-Hulud wave

2 participants