From cd1852fe49b0b0158d675e09d5d6af55ce3ded76 Mon Sep 17 00:00:00 2001
From: Matthew Elwell <matthew.elwell@flagsmith.com>
Date: Fri, 29 May 2026 17:02:16 +0100
Subject: [PATCH 1/2] Dependabot -> Renovate

---
 .github/dependabot.yml | 58 ------------------------------------------
 renovate.json          | 32 +++++++++++++++++++++++
 2 files changed, 32 insertions(+), 58 deletions(-)
 delete mode 100644 .github/dependabot.yml
 create mode 100644 renovate.json

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 9b9e380dbc35..000000000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,58 +0,0 @@
-# $schema: https://json.schemastore.org/dependabot-2.0.json
-
-
-version: 2
-registries:
-  flagsmith-pypi-production:
-    type: python-index
-    url: https://flagsmith-production-084060095745.d.codeartifact.eu-west-2.amazonaws.com/pypi/flagsmith-pypi-production/simple/
-    aws-region: eu-west-2
-    account-id: '084060095745'
-    role-name: codeartifact-github-actions-production
-    domain: flagsmith-production
-    domain-owner: '084060095745'
-
-updates:
-  - package-ecosystem: "uv"
-    registries:
-      - flagsmith-pypi-production
-    # we only want security updates from dependabot, so we set the limit to 0
-    # for regular updates. See documentation for further information here:
-    # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#open-pull-requests-limit-
-    open-pull-requests-limit: 0
-    directory: "/api"
-    schedule:
-      interval: "daily"
-    reviewers:
-      - "flagsmith/flagsmith-back-end"
-    commit-message:
-      prefix: "deps"
-    labels:
-      - "api"
-      - "dependencies"
-
-  - package-ecosystem: "npm"
-    open-pull-requests-limit: 0  # only security updates
-    directory: "/frontend"
-    schedule:
-      interval: "daily"
-    reviewers:
-      - "flagsmith/flagsmith-front-end"
-    commit-message:
-      prefix: "deps"
-    labels:
-      - "front-end"
-      - "dependencies"
-
-  - package-ecosystem: "npm"
-    open-pull-requests-limit: 0  # only security updates
-    directory: "/docs"
-    schedule:
-      interval: "daily"
-    reviewers:
-      - "flagsmith/flagsmith-docs"
-    commit-message:
-      prefix: "deps"
-    labels:
-      - "docs"
-      - "dependencies"
diff --git a/renovate.json b/renovate.json
new file mode 100644
index 000000000000..c71119cfbab7
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,32 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["config:base"],
+  "enabled": false,
+  "dependencyDashboard": false,
+  "osvVulnerabilityAlerts": true,
+  "semanticCommits": "enabled",
+  "semanticCommitType": "deps",
+  "semanticCommitScope": null,
+  "vulnerabilityAlerts": {
+    "enabled": true
+  },
+  "packageRules": [
+    {
+      "matchManagers": ["uv"],
+      "reviewers": ["team:flagsmith-back-end"],
+      "addLabels": ["api", "dependencies"]
+    },
+    {
+      "matchManagers": ["npm"],
+      "matchFileNames": ["frontend/**"],
+      "reviewers": ["team:flagsmith-front-end"],
+      "addLabels": ["front-end", "dependencies"]
+    },
+    {
+      "matchManagers": ["npm"],
+      "matchFileNames": ["docs/**"],
+      "reviewers": ["team:flagsmith-docs"],
+      "addLabels": ["docs", "dependencies"]
+    }
+  ]
+}

From ad16b587e7d1e7e11ee30e54aaaed9713f0f7916 Mon Sep 17 00:00:00 2001
From: Matthew Elwell <matthew.elwell@flagsmith.com>
Date: Fri, 29 May 2026 17:08:32 +0100
Subject: [PATCH 2/2] ci: Remove redundant reviewers from renovate.json

CODEOWNERS already maps each directory to the correct team.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 renovate.json | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/renovate.json b/renovate.json
index c71119cfbab7..e091cc6cf651 100644
--- a/renovate.json
+++ b/renovate.json
@@ -13,19 +13,16 @@
   "packageRules": [
     {
       "matchManagers": ["uv"],
-      "reviewers": ["team:flagsmith-back-end"],
       "addLabels": ["api", "dependencies"]
     },
     {
       "matchManagers": ["npm"],
       "matchFileNames": ["frontend/**"],
-      "reviewers": ["team:flagsmith-front-end"],
       "addLabels": ["front-end", "dependencies"]
     },
     {
       "matchManagers": ["npm"],
       "matchFileNames": ["docs/**"],
-      "reviewers": ["team:flagsmith-docs"],
       "addLabels": ["docs", "dependencies"]
     }
   ]