From 8a3af25b56d89ebb8b0ba0d6cedda9784afa3404 Mon Sep 17 00:00:00 2001 From: Felipe Zipitria Date: Mon, 17 Aug 2026 17:39:13 -0300 Subject: [PATCH] chore(renovate): restore CRS v4 cooldown exemption PR #525 added `minimumReleaseAge: "0 days"` to the `coreruleset-v3` and `coreruleset-v4` package rules, so that first-party CRS releases are not held back by the 7-day supply-chain cooldown in coreruleset/renovate-config. PR #526 branched before #525 landed, and its merge (b6daec80) kept the v3 exemption while dropping the v4 one. The regression went unnoticed because v3 and v4-lts still flow through immediately; only the flagship v4 version the site advertises as current has been waiting a week and needing a manual tick on the dependency dashboard. This restores the rule to what #525 merged. Co-Authored-By: Claude Opus 5 (1M context) --- renovate.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/renovate.json b/renovate.json index c3f715b..3b77f98 100644 --- a/renovate.json +++ b/renovate.json @@ -16,7 +16,8 @@ { "matchDepNames": ["coreruleset-v4"], "allowedVersions": ">=4.0.0", - "groupName": "CRS v4 updates" + "groupName": "CRS v4 updates", + "minimumReleaseAge": "0 days" }, { "matchDepNames": ["coreruleset-v4-lts"],