Update Dependency Management Strategy to Use Renovate Best Practices #190
Description
Description
Following the initial implementation of Renovate, we need to update the configuration to align with best practices for stability, security, and reproducibility. The current setup uses config:base and rangeStrategy: bump, which does not fully meet our goals of deterministic builds and automated safe updates.
This update will introduce a stronger configuration based:pinAllExceptPeerDependencies for full pinning. This update will introduce a stronger configuration based on config:best-practices and pinning strategies, ensuring all dependencies are explicitly pinned and CI validates updates before merging.
- Enable lockfile maintenance.
- Disable automerge for minor/patch updates until CI passes.
- Confirm GitHub Actions workflow runs Renovate daily.
- Validate CI integration on Renovate PRs.