chore: adopt shared e2b-dev/renovate preset

[djeebus]

What

Replaces the inlined Renovate config with the shared preset from e2b-dev/renovate (extends: ['local>e2b-dev/renovate']), keeping only the repo-specific overrides. This mirrors how e2b-dev/code-interpreter already consumes the preset.

Why

The previous renovate.json5 duplicated almost the entire shared preset inline. Centralizing means these settings are maintained in one place across e2b-dev repos.

Config now inherited from the preset (removed from this repo)

• config:recommended + :automergeRequireAllStatusChecks
• dependencyDashboard: true, timezone: UTC
• automergeType: pr, automergeStrategy: squash
• prConcurrentLimit: 3, rebaseWhen: auto
• Package rules: patch → grouped patch-updates + automerge; minor → PR, no automerge; major → dashboard approval
• (New via preset) pre-commit enabled and gitIgnoredAuthors ignoring github-actions[bot]

Repo-specific config kept

• minimumReleaseAge: '3 days' — overrides the preset's 7 days to match minimumReleaseAge: 4320 in pnpm-workspace.yaml, so Renovate never proposes a version pnpm would refuse to install.
• e2b package rule (minimumReleaseAge: null) — our own SDK, matching minimumReleaseAgeExclude in pnpm-workspace.yaml.

Behavior change to note

The old config extended helpers:pinGitHubActionDigests (plain SHA pin); the preset uses helpers:pinGitHubActionDigestsToSemver, so the trailing comment on pinned GitHub Actions uses: becomes a clean SemVer (e.g. v1.2.3) instead of the resolved tag. This aligns desktop with the shared standard.

---

Generated by Claude Code

[cursor]

PR Summary

Low Risk
Tooling-only Renovate config; the notable behavior shift is how GitHub Actions pins are commented, not runtime app code.

Overview
The inlined Renovate settings are removed in favor of extends: ['local>e2b-dev/renovate']. This repo still sets minimumReleaseAge: '3 days' and the e2b package rule so Renovate stays aligned with pnpm-workspace.yaml. Automerge, dashboard, concurrency, and patch/minor/major package rules now come from the preset. GitHub Actions pinning follows the preset’s semver-comment style (pinGitHubActionDigestsToSemver) instead of the previous digest-only pin preset.

^{Reviewed by Cursor Bugbot for commit 6661005. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit 6661005. Configure here.}

[cursor]

Broken shared Renovate preset

High Severity

extends: ['local>e2b-dev/renovate'] points at a preset that is not publicly available, and this public repo cannot load a private org preset. Renovate will fail config lookup and stop applying the removed inline rules.

 

^{Reviewed by Cursor Bugbot for commit 6661005. Configure here.}