From 8aab6d0a0305fabe6951f81fdc1ce080eb8f9477 Mon Sep 17 00:00:00 2001
From: ReenigneArcher <42013603+ReenigneArcher@users.noreply.github.com>
Date: Sat, 30 May 2026 22:11:28 -0400
Subject: [PATCH] fix(renovate): Disable standalone cdnjs SRI digest updates

Add a Renovate rule to disable standalone cdnjs digest (SRI) updates so Renovate won't open PRs just for SRI hash changes. Version bumps will still refresh the paired SRI hash. Changes made in renovate-config.json5 to reduce noise from SRI-only updates.
---
 renovate-config.json5 | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/renovate-config.json5 b/renovate-config.json5
index 7923a2e9..c1b2ebf7 100644
--- a/renovate-config.json5
+++ b/renovate-config.json5
@@ -40,6 +40,12 @@
       "matchJsonata": ["groupName = null or $not($exists(groupName))"],
       "separateMultipleMajor": true,
     },
+    // Do not open standalone cdnjs SRI digest updates. Version updates still refresh the paired SRI hash.
+    {
+      "matchDatasources": ["cdnjs"],
+      "matchUpdateTypes": ["digest"],
+      "enabled": false,
+    },
     // Keep Debian Docker tags on plain codenames or major versions, not dated rebuild tags.
     {
       "matchDatasources": ["docker"],