From da96e63d1e7d9bdc01013a49d769c8b4db1eed67 Mon Sep 17 00:00:00 2001
From: Derek Croote <dcroote@users.noreply.github.com>
Date: Sun, 11 Jan 2026 12:30:38 -0800
Subject: [PATCH 1/2] Bump pnpm to v10 and standardize Renovate config

---
 package.json        |  5 ++++-
 pnpm-workspace.yaml |  3 +++
 renovate.json       | 39 ++-------------------------------------
 3 files changed, 9 insertions(+), 38 deletions(-)
 create mode 100644 pnpm-workspace.yaml

diff --git a/package.json b/package.json
index e1148edc..f4138ee6 100644
--- a/package.json
+++ b/package.json
@@ -3,7 +3,10 @@
   "version": "1.0.0",
   "main": "index.js",
   "license": "MIT",
-  "packageManager": "pnpm@9.15.9",
+  "packageManager": "pnpm@10.26.2",
+  "engines": {
+    "pnpm": "^10.26.2"
+  },
   "resolutions": {},
   "scripts": {
     "docs:dev": "pnpm generate-llms-files && pnpm vitepress dev docs",
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
new file mode 100644
index 00000000..4a72b7ce
--- /dev/null
+++ b/pnpm-workspace.yaml
@@ -0,0 +1,3 @@
+# See: https://pnpm.io/supply-chain-security
+blockExoticSubdeps: true
+minimumReleaseAge: 20160 # 14 days (keep in sync with Renovate config)
diff --git a/renovate.json b/renovate.json
index 94896f76..add488ca 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,35 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:base"],
+  "extends": ["local>api3dao/renovate-config"],
   "packageRules": [
-    {
-      "matchPackageNames": ["node", "actions/node-versions", "@types/node"],
-      "enabled": false
-    },
-    {
-      "matchDepTypes": ["packageManager"],
-      "matchPackageNames": ["pnpm"],
-      "extends": ["schedule:quarterly"]
-    },
-    {
-      "matchPackageNames": ["vitepress"],
-      "groupName": "vitepress",
-      "schedule": ["before 4am on Monday"]
-    },
-    {
-      "matchDepTypes": ["devDependencies"],
-      "excludePackageNames": ["vitepress"],
-      "matchUpdateTypes": ["patch", "minor"],
-      "schedule": ["before 4am on Monday"],
-      "groupName": "non-major-dev-dependencies"
-    },
-    {
-      "matchDepTypes": ["dependencies"],
-      "excludePackageNames": ["vitepress"],
-      "matchUpdateTypes": ["patch", "minor"],
-      "schedule": ["before 4am on Monday"],
-      "groupName": "non-major-dependencies"
-    },
     {
       "matchPackageNames": ["@api3/*"],
       "schedule": ["before 6pm"],
@@ -37,12 +9,5 @@
       "groupName": "api3"
     }
   ],
-  "rangeStrategy": "bump",
-  "lockFileMaintenance": {
-    "enabled": false
-  },
-  "reviewers": ["Siegrift"],
-  "internalChecksFilter": "strict",
-  "dependencyDashboard": false,
-  "minimumReleaseAge": "3 days"
+  "reviewers": ["Siegrift"]
 }

From 698d84ef0581e815968dfc4cc3fe329ccc4934a7 Mon Sep 17 00:00:00 2001
From: Derek Croote <dcroote@users.noreply.github.com>
Date: Mon, 12 Jan 2026 07:54:49 -0800
Subject: [PATCH 2/2] Add api3 to minimumReleaseAgeExclude in pnpm-workspace

---
 pnpm-workspace.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 4a72b7ce..74a07969 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,3 +1,5 @@
 # See: https://pnpm.io/supply-chain-security
 blockExoticSubdeps: true
 minimumReleaseAge: 20160 # 14 days (keep in sync with Renovate config)
+minimumReleaseAgeExclude:
+  - '@api3/*'