From 7d0e254ddece2009fe5bf01939a00265d696bade Mon Sep 17 00:00:00 2001 From: Sebastian Mendel Date: Sun, 15 Mar 2026 10:23:07 +0100 Subject: [PATCH] fix: GH-06 accept Renovate as alternative to Dependabot The file_exists check only looked for .github/dependabot.yml, producing false positives on repos using Renovate for dependency updates. Switch to a command check that accepts dependabot.yml, renovate.json, .github/renovate.json, .renovaterc.json, or .renovaterc. Signed-off-by: Sebastian Mendel --- skills/github-project/checkpoints.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/skills/github-project/checkpoints.yaml b/skills/github-project/checkpoints.yaml index 6e6fa86..bb153f7 100644 --- a/skills/github-project/checkpoints.yaml +++ b/skills/github-project/checkpoints.yaml @@ -37,10 +37,10 @@ mechanical: desc: "CODEOWNERS should exist for review assignments" - id: GH-06 - type: file_exists - target: .github/dependabot.yml + type: command + target: "test -f .github/dependabot.yml || test -f renovate.json || test -f .github/renovate.json || test -f .renovaterc.json || test -f .renovaterc" severity: warning - desc: "Dependabot config should exist" + desc: "Dependency update automation should be configured (Dependabot or Renovate)" - id: GH-07 type: file_exists