From 5cd25c3aba44057db73aac222e5250e2555e81fc Mon Sep 17 00:00:00 2001
From: Frankie Yan <frankie@doist.com>
Date: Wed, 15 Jul 2026 12:36:02 -0700
Subject: [PATCH] ci: replace Dependabot with Renovate for dependency updates

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .github/dependabot.yml | 11 -----------
 .github/renovate.json  | 28 ++++++++++++++++++++++++++++
 2 files changed, 28 insertions(+), 11 deletions(-)
 delete mode 100644 .github/dependabot.yml
 create mode 100644 .github/renovate.json

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 6c6ef4787..000000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,11 +0,0 @@
-version: 2
-
-updates:
-    - package-ecosystem: npm
-      directory: /
-      schedule:
-          interval: daily
-      cooldown:
-          default-days: 5
-      commit-message:
-          prefix: 'build(deps):'
diff --git a/.github/renovate.json b/.github/renovate.json
new file mode 100644
index 000000000..8f13528af
--- /dev/null
+++ b/.github/renovate.json
@@ -0,0 +1,28 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+        "github>doist/renovate-config:frontend-base",
+        "github>doist/renovate-config-internal:npm-registry-token"
+    ],
+    "packageRules": [
+        {
+            "description": "Reactist releases should mirror @doist/product-libraries-tokens releases. Simple token value changes are categorized as patches.",
+            "matchPackageNames": ["@doist/product-libraries-tokens"],
+            "matchUpdateTypes": ["patch"],
+            "semanticCommitType": "fix"
+        },
+        {
+            "description": "Reactist releases should mirror @doist/product-libraries-tokens releases. When new tokens are added, we categorize it as a minor release.",
+            "matchPackageNames": ["@doist/product-libraries-tokens"],
+            "matchUpdateTypes": ["minor"],
+            "semanticCommitType": "feat"
+        },
+        {
+            "description": "Reactist releases should mirror @doist/product-libraries-tokens releases. Token removals are categorized as breaking changes and should be reviewed.",
+            "matchPackageNames": ["@doist/product-libraries-tokens"],
+            "matchUpdateTypes": ["major"],
+            "commitMessagePrefix": "feat(deps)!:",
+            "automerge": false
+        }
+    ]
+}