docs: record owner decisions in README

Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_011AgnQS6MHAGGoLNQDvv52d
chore: add Renovate config
2026-10-17 02:38:28 +02:00 · 2026-10-17 01:26:18 +02:00
2 changed files with 19 additions and 0 deletions
@@ -32,3 +32,10 @@ Branch protection: take the exact status-check name from the first PR run. Renam
 ## Versioning

 Only major tags (`v1`, `v2`, …). Fixes and new optional inputs move the existing tag. Changing or removing inputs, or changing behavior, needs a new major tag.
+
+## Entscheidungen
+
+Decisions by the owner of the `templates` org:
+
+- 2026-10-15: Only major tags (`v1`, `v2`, …), no `vX.Y.Z` tags (see Versioning).
+- 2026-10-17: All repos in the `templates` org are public, so consumers' runners can fetch them without credentials. They never contain secrets or internal addresses: secrets come in as `secrets:`, hosts as inputs.
@@ -0,0 +1,12 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "timezone": "Europe/Berlin",
+  "enabledManagers": ["github-actions"],
+  "packageRules": [
+    {
+      "description": "No automerge: these repos have no build that could gate an update, and a change on main only reaches consumers when the templates session moves a vN tag after a live test in a consumer repo.",
+      "matchPackageNames": ["*"],
+      "automerge": false
+    }
+  ]
+}