chore(renovate): restore CRS v4 cooldown exemption

[fzipi]

what

Adds minimumReleaseAge: "0 days" back to the coreruleset-v4 package rule in renovate.json.

why

This is a regression, not a new policy decision.

#525 added the exemption to both coreruleset-v3 and coreruleset-v4, so that first-party CRS
releases are not held back by the 7-day supply-chain cooldown that coreruleset/renovate-config
applies to everything:

"minimumReleaseAge": "7 days",
"minimumReleaseAgeBehaviour": "timestamp-required",
"internalChecksFilter": "strict",
"prCreation": "not-pending"

#526 branched before #525 landed, and its merge commit b6daec8 kept the v3 exemption while dropping
the v4 one. Current main therefore exempts coreruleset-v3 and coreruleset-v4-lts but not
coreruleset-v4 — so the version the site advertises as the current release is the only one that
waits a week and has to be ticked by hand on the dependency dashboard.

That is what is happening in #53 right now: coreruleset-v4 → v4.29.0 sat under Pending Status
Checks because 4.29.0 was published today, while the v3 and LTS entries were free to flow through.

references

• Restores the coreruleset-v4 rule as merged in chore(renovate): exempt CRS releases from cooldown; rename version keys #525
• Regression introduced by the merge in Add Renovate tracking for CRS v4 LTS (4.25.x) with zero release age #526 (b6daec8)
• Symptom visible on the dependency dashboard, Dependency Dashboard #53

Validated with renovate-config-validator. Formatting left as-is: renovate.json does not currently
satisfy the repo's Prettier version, and Prettier is not run in CI, so reformatting would have
enlarged the diff for no gain.

Summary by CodeRabbit

• Chores
  • Updates to coreruleset-v4 can now be adopted immediately without a release-age delay.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ce062c0c-9ff7-48a1-94fb-f65f766a7318

📥 Commits

Reviewing files that changed from the base of the PR and between 24a6d14 and 8a3af25.

📒 Files selected for processing (1)

• renovate.json

Included review availability: Your plan includes up to 1 review per rolling hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The Renovate configuration now sets minimumReleaseAge to 0 days for the coreruleset-v4 update group.

Changes

CRS v4 Renovate updates

Layer / File(s)	Summary
Remove CRS v4 release delay renovate.json	The coreruleset-v4 update group now allows updates without a release-age delay.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 8a3af

This localized configuration change restores the intended cooldown exemption for the current CRS release; no actionable merge-blocking risk remains after normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the Renovate change that restores the CRS v4 cooldown exemption.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}