[#2355] Hardened Renovate config with PR limits, GHA auto-merge and dashboard labels. (#2467)

Author: AlexSkrypnyk

.vortex/docs/content/tools/renovate.mdx

@@ -25,6 +25,16 @@ Assignees can be configured in the `assignees` field.
 | **Container images** | All images in `.docker/` and `docker-compose.yml` | Major, minor, patch | Daily before 3 AM UTC |
 | **GitHub Actions** | All actions (pinned to digests) | Major, minor, patch | Daily before 3 AM UTC |
 
+Updates in the **GitHub Actions** group are auto-merged after CI passes. This
+requires two repository settings:
+
+1. **"Allow auto-merge"** enabled under *Settings > General > Pull Requests*.
+2. **"Require status checks to pass before merging"** configured in the base
+   branch's branch protection rules, with at least one required status check
+   selected - otherwise GitHub may merge even if CI is red.
+
+All other groups open PRs for manual review.
+
 ### Disabled updates
 
 These are intentionally skipped by Renovate — update them manually:
@@ -38,6 +48,17 @@ These are intentionally skipped by Renovate — update them manually:
 | JS language versions | `node`, `yarn` in `package.json` | Major version upgrades may introduce breaking changes |
 | JS non-root packages | Any `package.json` not at the root | Theme dependencies are managed separately |
 
+### PR throughput and presentation
+
+- **Concurrent PR limit:** `prConcurrentLimit: 10` - at most 10 open PRs
+  across all groups at any time.
+- **Hourly PR limit:** `prHourlyLimit: 0` - no hourly cap; the per-group
+  schedules above provide throttling.
+- **Commit body table:** `commitBodyTable: true` - grouped update commits
+  include a version-comparison table in the commit message body.
+- **Dashboard labels:** the Renovate dependency dashboard issue is labeled
+  `Dependencies` (`dependencyDashboardLabels`).
+
 ## Self-hosted vs GitHub app
 
 Renovate can run as a hosted GitHub app or as a standalone self-hosted service

.vortex/installer/tests/Fixtures/handler_process/_baseline/renovate.json

@@ -1,15 +1,19 @@
 {
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
     "extends": [
         "config:recommended"
     ],
     "branchPrefix": "deps/",
     "labels": [
         "Dependencies"
     ],
-    "assignees": [],
-    "ignorePresets": [
-        ":prHourlyLimit2"
+    "dependencyDashboardLabels": [
+        "Dependencies"
     ],
+    "assignees": [],
+    "prConcurrentLimit": 10,
+    "prHourlyLimit": 0,
+    "commitBodyTable": true,
     "rangeStrategy": "bump",
     "timezone": "UTC",
     "configMigration": true,
@@ -186,7 +190,8 @@
             "matchManagers": [
                 "github-actions"
             ],
-            "pinDigests": true
+            "pinDigests": true,
+            "automerge": true
         }
     ],
     "customManagers": [

.vortex/installer/tests/Fixtures/handler_process/timezone_circleci/renovate.json

@@ -1,6 +1,6 @@
-@@ -11,7 +11,7 @@
-         ":prHourlyLimit2"
-     ],
+@@ -15,7 +15,7 @@
+     "prHourlyLimit": 0,
+     "commitBodyTable": true,
      "rangeStrategy": "bump",
 -    "timezone": "UTC",
 +    "timezone": "America/New_York",

.vortex/installer/tests/Fixtures/handler_process/timezone_gha/renovate.json

@@ -1,6 +1,6 @@
-@@ -11,7 +11,7 @@
-         ":prHourlyLimit2"
-     ],
+@@ -15,7 +15,7 @@
+     "prHourlyLimit": 0,
+     "commitBodyTable": true,
      "rangeStrategy": "bump",
 -    "timezone": "UTC",
 +    "timezone": "America/New_York",

renovate.json

@@ -1,15 +1,19 @@
 {
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
     "extends": [
         "config:recommended"
     ],
     "branchPrefix": "deps/",
     "labels": [
         "Dependencies"
     ],
-    "assignees": [],
-    "ignorePresets": [
-        ":prHourlyLimit2"
+    "dependencyDashboardLabels": [
+        "Dependencies"
     ],
+    "assignees": [],
+    "prConcurrentLimit": 10,
+    "prHourlyLimit": 0,
+    "commitBodyTable": true,
     "rangeStrategy": "bump",
     "timezone": "UTC",
     "configMigration": true,
@@ -189,7 +193,8 @@
             "matchManagers": [
                 "github-actions"
             ],
-            "pinDigests": true
+            "pinDigests": true,
+            "automerge": true
         }
     ],
     "customManagers": [