renovate cleanup (#297)

Author: clavery

.github/workflows/ci-vs-extension.yml

@@ -37,8 +37,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.17.1
 
       - name: Get pnpm store directory
         shell: bash

.github/workflows/ci.yml

@@ -38,8 +38,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.17.1
 
       - name: Get pnpm store directory
         shell: bash

.github/workflows/deploy-docs.yml

@@ -25,8 +25,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.17.1
 
       - name: Setup Node.js
         uses: actions/setup-node@v4

.github/workflows/docs.yml

@@ -29,8 +29,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.17.1
 
       - name: Get pnpm store directory
         shell: bash

.github/workflows/e2e-shell-tests.yml

@@ -48,8 +48,6 @@ jobs:
       - name: Setup pnpm
         if: steps.check-secrets.outputs.has-secrets == 'true'
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.17.1
 
       - name: Get pnpm store directory
         if: steps.check-secrets.outputs.has-secrets == 'true'

.github/workflows/e2e-tests.yml

@@ -75,8 +75,6 @@ jobs:
           fi
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.17.1
 
       - name: Get pnpm store directory
         shell: bash
@@ -90,7 +88,7 @@ jobs:
           key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
           restore-keys: |
             ${{ runner.os }}-pnpm-store-
-            
+
       - name: Install dependencies
         if: steps.check-secrets.outputs.has-secrets == 'true'
         run: pnpm install --frozen-lockfile
@@ -178,8 +176,6 @@ jobs:
           node-version: '22.x'
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.17.1
       - name: Get pnpm store directory
         id: pnpm-store
         shell: bash

.github/workflows/preview-release.yml

@@ -26,8 +26,6 @@ jobs:
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.17.1
 
       - name: Get pnpm store directory
         shell: bash

.github/workflows/renovate.yml

@@ -1,9 +1,9 @@
 name: Renovate
 
 on:
-  # Run every hour
+  # Run daily at 5am UTC (matches renovate.json Monday schedule window)
   schedule:
-    - cron: '0 * * * *'
+    - cron: '0 5 * * *'
   # Allow manual trigger
   workflow_dispatch:
     inputs:
@@ -29,7 +29,7 @@ jobs:
         uses: renovatebot/github-action@v41.0.21
         with:
           configurationFile: renovate.json
-          token: ${{ secrets.RENOVATE_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
         env:
           LOG_LEVEL: info
           RENOVATE_REPOSITORIES: ${{ github.repository }}

renovate.json

@@ -2,14 +2,14 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended",
-    ":dependencyDashboard",
     ":semanticCommits",
     "group:allNonMajor"
   ],
   "vulnerabilityAlerts": {
-    "enabled": false
+    "enabled": true,
+    "labels": ["security"],
+    "schedule": ["at any time"]
   },
-  "gitAuthor": "Charles Lavery <clavery@salesforce.com>",
   "labels": ["dependencies"],
   "rangeStrategy": "bump",
   "major": {
@@ -23,17 +23,17 @@
     },
     {
       "description": "Group TypeScript ecosystem",
-      "matchPackagePatterns": ["^typescript", "^@types/"],
+      "matchPackageNames": ["/^typescript/", "/^@types\\//"],
       "groupName": "typescript"
     },
     {
       "description": "Group ESLint ecosystem",
-      "matchPackagePatterns": ["eslint"],
+      "matchPackageNames": ["/eslint/"],
       "groupName": "eslint"
     },
     {
       "description": "Group testing tools",
-      "matchPackagePatterns": ["mocha", "chai", "sinon", "c8", "msw"],
+      "matchPackageNames": ["/mocha/", "/chai/", "/sinon/", "/c8/", "/msw/"],
       "groupName": "testing"
     },
     {