Renovate & Dependency Management¶

All ReactiveUI repositories use Renovate to keep dependencies up to date automatically. The configuration is centralised so every repo behaves the same way.

How it works¶

Renovate scans each repo on a schedule, detects outdated NuGet packages, GitHub Actions, and other dependencies, and opens PRs to update them. These PRs use the chore(deps): commit prefix so they are categorised as dependency updates in release notes.

Shared configuration¶

The shared Renovate preset lives in the reactiveui/.github repo at renovate.json. Individual repos opt in with a single-line config:

{
    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
    "extends": ["local>reactiveui/.github:renovate"]
}

This file goes in .github/renovate.json in each repo. That is all that is needed — the shared preset handles everything else.

Default settings¶

The shared preset extends Renovate's recommended config and adds the following:

Update strategy¶

Setting	Value	Why
Separate major releases	Major version bumps get their own PR	Breaking changes need individual review
Combine patch + minor	Patch and minor updates are grouped into a single PR	Reduces PR noise
Minimum release age	3 days	Avoids updating to a version that gets yanked immediately
Vulnerability alerts	Enabled, labelled `security`	Security fixes are flagged for fast review

Rate limits¶

Setting	Value
PRs per hour	10
Concurrent open PRs	10

Labels¶

All Renovate PRs are labelled Dependency Management.

PR behaviour¶

recreateWhen: never — if you close a Renovate PR, it will not reopen until a newer version is available. This avoids PRs coming back after deliberate decisions to skip a version.

Package grouping¶

Related packages are grouped into single PRs to reduce noise:

Group	Packages
.NET monorepo	`Microsoft.NETCore.*`, runtime packages
NuGet monorepo	NuGet client packages
Xamarin & AndroidX	`Xamarin.`, `Xamarin.AndroidX.`, `Xamarin.Android.Support.*`
Windows SDK & App SDK	`Microsoft.WindowsAppSDK`, `Microsoft.Windows.SDK.BuildTools`
Rx.NET	`System.Reactive.`, `Microsoft.Reactive.`, `System.Interactive.`, `System.Linq.Async.`
.NET test stack	`xunit.`, `NUnit`, `Verify.`, `Microsoft.NET.Test.Sdk`, `coverlet.`
Refit	`Refit.*`
ReactiveUI	`ReactiveUI.*`
Avalonia	`Avalonia.*`
Uno Platform	`Uno.*`
Splat	`Splat.*`

For maintainers¶

Merging Renovate PRs — if CI is green, these are generally safe to merge. Check the Renovate PR body for release notes and breaking change warnings.
Skipping a version — close the PR. Renovate will not recreate it until the next version is published.
Adding a repo — create .github/renovate.json with the extends line above. Renovate will pick it up on its next run.
Changing defaults — edit renovate.json in the reactiveui/.github repo. Changes apply to all repos that extend the shared preset.