chore(config): reduce renovate commit frequency to weekly

Consolidates dependency updates to reduce noise:
- Schedule changed to weekly (Monday mornings only)
- All non-major updates grouped into single weekly PR
- Major updates still get individual PRs for review
- Security updates remain immediate (unchanged)

This reduces commit frequency from 10-15/week to ~1-2/week while
maintaining test requirements and security responsiveness.

.github/renovate.json

@@ -7,7 +7,7 @@
 		":automergeDigest",
 		":automergeMinor"
 	],
-	"schedule": ["after 10pm every weekday", "before 5am every weekday", "every weekend"],
+	"schedule": ["before 5am on monday"],
 	"timezone": "America/Chicago",
 	"prConcurrentLimit": 3,
 	"prCreation": "not-pending",
@@ -20,61 +20,23 @@
 	},
 	"packageRules": [
 		{
-			"description": "Automerge dev dependencies",
-			"matchDepTypes": ["devDependencies"],
+			"description": "Group all non-major dependency updates together",
+			"groupName": "all non-major dependencies",
+			"matchUpdateTypes": ["minor", "patch", "digest"],
 			"automerge": true,
 			"automergeType": "pr",
 			"minimumReleaseAge": "3 days"
 		},
 		{
-			"description": "Automerge TypeScript type packages",
-			"matchPackagePatterns": ["^@types/"],
-			"automerge": true,
-			"automergeType": "pr"
-		},
-		{
-			"description": "Group ESLint packages together",
-			"matchPackagePatterns": ["^eslint", "^@typescript-eslint/"],
-			"groupName": "eslint packages",
-			"automerge": true
-		},
-		{
-			"description": "Group testing packages together",
-			"matchPackagePatterns": ["^vitest", "^@vitest/", "^@testing-library/"],
-			"groupName": "testing packages",
-			"automerge": true
-		},
-		{
-			"description": "Group Next.js related packages",
-			"matchPackageNames": ["next", "eslint-config-next"],
-			"groupName": "Next.js packages",
-			"minimumReleaseAge": "7 days"
-		},
-		{
-			"description": "Group React packages",
-			"matchPackageNames": ["react", "react-dom", "@types/react", "@types/react-dom"],
-			"groupName": "React packages",
+			"description": "Major updates get individual PRs for review",
+			"matchUpdateTypes": ["major"],
+			"automerge": false,
 			"minimumReleaseAge": "7 days"
 		},
 		{
 			"description": "Pin Node.js major versions",
 			"matchPackageNames": ["node"],
 			"enabled": false
-		},
-		{
-			"description": "Group Tailwind CSS packages",
-			"matchPackagePatterns": [
-				"^tailwindcss",
-				"^@tailwindcss/",
-				"prettier-plugin-tailwindcss"
-			],
-			"groupName": "Tailwind CSS packages"
-		},
-		{
-			"description": "Group font packages",
-			"matchPackagePatterns": ["^@fontsource"],
-			"groupName": "font packages",
-			"automerge": true
 		}
 	],
 	"postUpdateOptions": ["pnpmDedupe"],

.github/workflows/ci.yml

@@ -12,7 +12,6 @@ permissions:
 
 env:
     NODE_VERSION: "20"
-    PNPM_VERSION: "9.0.0"
 
 jobs:
     # Code quality checks
@@ -22,15 +21,13 @@ jobs:
 
         steps:
             - name: Checkout code
-              uses: actions/checkout@v4
+              uses: actions/checkout@v5
 
             - name: Setup pnpm
               uses: pnpm/action-setup@v4
-              with:
-                  version: ${{ env.PNPM_VERSION }}
 
             - name: Setup Node.js
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@v6
               with:
                   node-version: ${{ env.NODE_VERSION }}
                   cache: "pnpm"
@@ -51,15 +48,13 @@ jobs:
 
         steps:
             - name: Checkout code
-              uses: actions/checkout@v4
+              uses: actions/checkout@v5
 
             - name: Setup pnpm
               uses: pnpm/action-setup@v4
-              with:
-                  version: ${{ env.PNPM_VERSION }}
 
             - name: Setup Node.js
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@v6
               with:
                   node-version: ${{ env.NODE_VERSION }}
                   cache: "pnpm"
@@ -96,15 +91,13 @@ jobs:
 
         steps:
             - name: Checkout code
-              uses: actions/checkout@v4
+              uses: actions/checkout@v5
 
             - name: Setup pnpm
               uses: pnpm/action-setup@v4
-              with:
-                  version: ${{ env.PNPM_VERSION }}
 
             - name: Setup Node.js
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@v6
               with:
                   node-version: ${{ env.NODE_VERSION }}
                   cache: "pnpm"
@@ -124,15 +117,13 @@ jobs:
 
         steps:
             - name: Checkout code
-              uses: actions/checkout@v4
+              uses: actions/checkout@v5
 
             - name: Setup pnpm
               uses: pnpm/action-setup@v4
-              with:
-                  version: ${{ env.PNPM_VERSION }}
 
             - name: Setup Node.js
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@v6
               with:
                   node-version: ${{ env.NODE_VERSION }}
                   cache: "pnpm"
@@ -155,7 +146,7 @@ jobs:
                   exit-code: 0
 
             - name: Upload Trivy results
-              uses: github/codeql-action/upload-sarif@v3
+              uses: github/codeql-action/upload-sarif@v4
               if: always()
               with:
                   sarif_file: "trivy-results.sarif"

package.json

@@ -42,8 +42,8 @@
 	},
 	"devDependencies": {
 		"@codecov/vite-plugin": "^1.9.1",
-		"@commitlint/cli": "^19.0.0",
-		"@commitlint/config-conventional": "^19.0.0",
+		"@commitlint/cli": "^20.0.0",
+		"@commitlint/config-conventional": "^20.0.0",
 		"@posthog/nextjs-config": "^1.3.6",
 		"@tailwindcss/postcss": "^4.1.15",
 		"@testing-library/jest-dom": "^6.9.1",
@@ -59,7 +59,7 @@
 		"eslint-config-next": "15.5.6",
 		"happy-dom": "^20.0.8",
 		"husky": "^9.0.0",
-		"lint-staged": "^15.0.0",
+		"lint-staged": "^16.0.0",
 		"postcss": "^8.4.14",
 		"prettier": "^3.6.2",
 		"prettier-plugin-tailwindcss": "^0.7.1",