CHANGELOG.md

@microsoft/m365-renovate-config

2.8.3

Compare source - April 24, 2026 at 8:46 PM PDT

Patch Changes

• #281 7b26096 - Prevent accidental node updates lumped with github actions updates (Thanks @ecraig12345!)

2.8.2

Compare source - April 8, 2026 at 7:30 PM PDT

Patch Changes

• #277 ad5a08e - Add github/codeql-action to scheduleNoisy (Thanks @ecraig12345!)

2.8.1

Compare source - January 24, 2026 at 12:27 AM PST

Patch Changes

• #255 cd06d25 - Add groupActions to groupMore (Thanks @ecraig12345!)

2.8.0

Compare source - January 24, 2026 at 12:15 AM PST

Minor Changes

• #254 c8bbbd6 - Add groupActions to group official github actions (Thanks @ecraig12345!)

2.7.6

Compare source - September 22, 2025 at 12:30 PM PDT

Patch Changes

• #230 899bbeb - Wait 3 days to pick up new releases (note this doesn't apply to implicit dep updates in lock file) (Thanks @ecraig12345!)

2.7.5

Compare source - April 14, 2025 at 11:19 AM PDT

Patch Changes

• #206 125fafd - Fix method for only using beachball post-upgrade with npm (Thanks @ecraig12345!)

2.7.4

Compare source - April 4, 2025 at 12:03 PM PDT

Patch Changes

• #202 181aa5a - Only run beachball post-upgrade tasks on package.json changes (Thanks @ecraig12345!)

2.7.3

Compare source - March 27, 2025 at 12:30 PM PDT

Patch Changes

• #199 7e52af4 - Really fix the pin actions message (Thanks @ecraig12345!)

2.7.2

Compare source - March 27, 2025 at 11:34 AM PDT

Patch Changes

• #196 a53dcdb - Try again with pinActions message... (Thanks @ecraig12345!)

2.7.1

Compare source - March 27, 2025 at 11:29 AM PDT

Patch Changes

• #194 ded6ec4 - Fix pinActions (Thanks @ecraig12345!)

2.7.0

Compare source - March 27, 2025 at 11:05 AM PDT

Minor Changes

• #192 c202612 - Pin actions to specific commits by default (Thanks @ecraig12345!)

2.6.1

Compare source - November 19, 2024 at 5:37 PM PST

Patch Changes

• #180 acb126b - Lock file maintenance (Thanks @renovate!)

2.6.0

Compare source - August 22, 2024 at 9:55 PM PDT

Minor Changes

• #178 ee3ecd0 - Migrate configs for Renovate v38 (Thanks @renovate!)

2.5.0

Compare source - February 27, 2024 at 2:16 PM PST

Minor Changes

• 30d65c3 - Disable minorDependencyUpdates by default and set rangeStrategy to "replace" for all npm dependencies (Thanks @ecraig12345!)

2.4.0

Compare source - December 28, 2023 at 12:38 PM PST

Minor Changes

• cfc530c - groupEslint: don't group typescript-eslint with other eslint packages (Thanks @ecraig12345!)

2.3.1

Compare source - October 18, 2023 at 3:43 PM PDT

Patch Changes

• 157ab35 - disableEsmVersions: add strip-ansi (Thanks @ecraig12345!)

2.3.0

Compare source - September 11, 2023 at 4:46 PM PDT

Minor Changes

• #138 280a87d - keepFresh: Reduce noise from unnecessary lock file-only dep updates (Thanks @ecraig12345!)

• #138 280a87d - restrictNode: enable constraintsFiltering to prevent installing deps with incompatible engines.node (Thanks @ecraig12345!)

Patch Changes

• #138 280a87d - Restrict npm package-specific presets to only apply to npm deps (Thanks @ecraig12345!)

2.2.1

Compare source - May 2, 2023, 6:18 PM PDT

Patch Changes

• c61116a - groupJest: include more packages and disable related built-in presets (Thanks @ecraig12345!)

2.2.0

Compare source - May 2, 2023, 6:03 PM PDT

Minor Changes

• 10807ea - Remove rangeStrategy: "bump" for dependencies from default preset. This is more similar to the v1 behavior. (Thanks @ecraig12345!)

2.1.0

Compare source - May 2, 2023, 3:36 PM PDT

Minor Changes

• 3384bbe - Add groupLageBackfill preset (Thanks @ecraig12345!)

Patch Changes

• a54b42d - dependencyDashboardMajor: correctly specify 0.x versions (Thanks @ecraig12345!)

2.0.2

Compare source - May 1, 2023, 8:46 PM PDT

Patch Changes

• 5f11999 - default: Use "bump" instead of "replace" for dependencies (Thanks @ecraig12345!)

2.0.1

Compare source - May 1, 2023, 8:33 PM PDT

Patch Changes

• f6f77e3 - keepFresh: For lockFileMaintenance, rebase when behind the base branch (Thanks @ecraig12345!)

2.0.0

Compare source - May 1, 2023, 3:44 PM PDT

Major Changes

m365-renovate-config version 2 (9a9f133) makes the default preset a bit more opinionated based on testing, streamlines preset naming, and updates settings to better reflect recent improvements in Renovate.

These changes have been picked up automatically unless you specified a ref (e.g. #v1) as part of the preset names in your extends config.

Note: <m365> in preset names referenced below is a shorthand for github>microsoft/m365-renovate-config. This is just for readability of the readme and will not work in actual configs (you must use the full repo prefix).

Default preset changes

The default preset (github>microsoft/m365-renovate-config) is now a bit more "opinionated" and includes the settings that were previously defined in <m365>:libraryRecommended. These settings can be disabled either individually or using the excludePresets option.

The dependency version update strategy (rangeStrategy) has also changed as described below.

Major preset changes and deprecations

Deprecated presets still exist for now to avoid immediate breaks in consuming repos, but will be removed in version 3.

• <m365>:libraryRecommended is deprecated in favor of this repo's default preset.
• <m365>:beachballLibraryRecommended is renamed to <m365>:beachball.

Dependency version update strategy

Previously, Renovate's config:base would pin devDependencies and possibly also dependencies to exact versions. Pinning dependencies is not desirable for libraries, so v1 of m365-renovate-config omitted any pinning behavior in its default preset, and enabled pinning only devDependencies in its <m365>:libraryRecommended preset.

A recent Renovate update included greatly expanded support for doing in-range updates (e.g. updating the installed version for "foo": "^1.0.0" from 1.1.0 to 1.2.0) by changing only the lockfile. Therefore, Renovate's default rangeStrategy: "auto" was changed to do lockfile-only updates when possible (instead of pinning or replacing versions), and config:base no longer includes any pinning of versions.

Since the lockfile-only updates are likely a good strategy for devDependencies in most repos, m365-renovate-config's default preset (which supersedes <m365>:libraryRecommended) has been updated as follows:

• Use rangeStrategy: "replace" for dependencies (production) to reduce the chance of breaks for library consumers.
• Remove overrides (use rangeStrategy: "auto") for other dependency types.

To restore the previous behavior of <m365>:libraryRecommended, extend the Renovate preset :pinOnlyDevDependencies.

1.8.13

Compare source - April 28, 2023, 4:07 PM PDT

Patch Changes

• 077edb3 - Testing new release setup (Thanks @ecraig12345!)

1.8.12

Compare source - April 27, 2023 at 9:17 PM GMT-7

Patch Changes

• 0a8f68e - More release updates (Thanks @ecraig12345!)

1.8.11

Compare source - April 27, 2023 at 8:53 PM GMT-7

Patch Changes

• 433d88d - More changelog fixes (Thanks @ecraig12345!)

1.8.10

Compare source - April 27, 2023 at 8:42 PM GMT-7

Patch Changes

• 674a4ca - Changeset fixes (Thanks @ecraig12345!)

1.8.9

Compare source - April 27, 2023 at 8:38 PM GMT-7

Patch Changes

• c33c229 - Release using changesets (Thanks @ecraig12345!)

1.8.8

Compare source (2023-04-19)

Bug Fixes

• include more dep types in groupFixtures (ec07661)

1.8.7 (2023-04-13)

Bug Fixes

• remove renovate from scheduleNoisy (198e004)

1.8.6 (2023-03-10)

Bug Fixes

• Reduce scheduled update frequency (a99d3d9)
• use valid schedules (2bd4e18)

1.8.5 (2023-02-21)

Bug Fixes

• schedule eslint-related updates (#51) (410f3d5)

1.8.4 (2022-09-21)

Bug Fixes

• add @microsoft/api-extractor to noisy packages rule (99ac22c)

1.8.3 (2022-09-16)

Bug Fixes

• disableEsmVersions: add ansi-regex (9e8c1f4)

1.8.2 (2022-09-13)

Bug Fixes

• default: run schedules relative to pacific time (89616d0)

1.8.1 (2022-09-13)

Bug Fixes

• groupTypes: only run in early morning (3e59a57)

1.8.0 (2022-09-12)

Features

• add groupD3 (bf79e31)

1.7.3 (2022-09-12)

Bug Fixes

• disableEsmVersions: add pretty-bytes (ccbc878)

1.7.2 (2022-09-10)

Bug Fixes

• groupNodeMajor: remove broken engines rule (5875670)

1.7.1 (2022-09-10)

Bug Fixes

• disableEsmVersions: add supports-color (39cfa94)
• groupNodeMajor: bump node version in engines (f22bee7)

1.7.0 (2022-09-09)

Bug Fixes

• restrictNode: add more ways of specifying node version (5f138e8)

Features

• add groupNodeMajor (92a8bdc)

1.6.0 (2022-09-09)

Features

• add disableEsmVersions (bfbe09f)

1.5.0 (2022-09-09)

Bug Fixes

• add groupYargs file (8ff7423)

Features

• add groupYargs (9eb24ec)

1.4.2 (2022-09-09)

Bug Fixes

• clarify groupTypes group name (5384f40)
• exclude other grouped packages from groupTypes (41efe17)

1.4.1 (2022-09-09)

Bug Fixes

• exclude 0.x from groupTypes (f0f3a1b)

1.4.0 (2022-09-09)

Features

• add restrictNode (538ba0c)

1.3.0 (2022-09-09)

Features

• add groupTypes (f1eba61)

1.2.0 (2022-09-06)

Features

• add beachballLibraryVerbose (12fa211)

1.1.0 (2022-09-01)

Bug Fixes

• keepFresh: remove unnecessary updateNotScheduled setting (480d161)

Features

• add scheduleNoisy preset (f880ddb)

1.0.4 (2022-09-01)

Bug Fixes

• keepFresh: allow wider schedule for lock file updates (22c4317)

1.0.3 (2022-09-01)

Bug Fixes

• use correct option name yarnDedupeFewer in keepFresh (03fdab8)

1.0.2 (2022-09-01)

Bug Fixes

• update keepFresh to use yarnDedupeFewest (a166eef)

1.0.1 (2022-08-25)

Bug Fixes

• update react monorepo config to extend default group (139741f)

1.0.0 (2022-08-18)

Features

• Add config and build files (3c698d3)