Merge main into v2 [skip ci]

CHANGELOG.md

@@ -1,5 +1,13 @@
 # @microsoft/m365-renovate-config
 
+## 2.0.2
+
+[Compare source](https://github.com/microsoft/m365-renovate-config/compare/v2.0.1...v2.0.2) - May 1, 2023, 8:46 PM PDT
+
+### Patch Changes
+
+- [`5f11999`](https://github.com/microsoft/m365-renovate-config/commit/5f11999564f3f372d20beca930d1c40415b99548) - **default**: Use "bump" instead of "replace" for `dependencies` (Thanks [@ecraig12345](https://github.com/ecraig12345)!)
+
 ## 2.0.1
 
 [Compare source](https://github.com/microsoft/m365-renovate-config/compare/v2.0.0...v2.0.1) - May 1, 2023, 8:33 PM PDT

README.md

@@ -65,7 +65,7 @@ A [recent Renovate update](https://docs.renovatebot.com/release-notes-for-major-
 
 Since the lockfile-only updates are likely a good strategy for `devDependencies` in most repos, `m365-renovate-config`'s default preset (which supersedes `<m365>:libraryRecommended`) has been updated as follows:
 
-- Use `rangeStrategy: "replace"` for `dependencies` (production) to reduce the chance of breaks for library consumers.
+- Use `rangeStrategy: "bump"` for `dependencies` (production) to reduce the chance of breaks for library consumers.
 - Remove overrides (use `rangeStrategy: "auto"`) for other dependency types.
 
 Notes on pinning behavior:
@@ -146,7 +146,7 @@ Recommended config which is intended to be appropriate for most projects.
     },
     {
       "matchDepTypes": ["dependencies"],
-      "rangeStrategy": "replace"
+      "rangeStrategy": "bump"
     }
   ]
 }
@@ -174,7 +174,7 @@ Extended presets from this repo:
 Overrides for dependency types:
 
 - For `devDependencies`: Use "devDependencies" in commit messages (instead of the default "dependencies") to be clearer about what is being modified
-- For `dependencies`: set [`rangeStrategy: "replace"`](https://docs.renovatebot.com/configuration-options/#rangestrategy) to replace the semver range even if the new version is in range (instead of just updating the lockfile), e.g. `"foo": "^1.1.0"` is changed to `"foo": "^1.2.0"`. This is because minor dependency versions may introduce new APIs, and if a library starts using those APIs without updating the dep's semver range, it could break consumers.
+- For `dependencies`: set [`rangeStrategy: "bump"`](https://docs.renovatebot.com/configuration-options/#rangestrategy) to replace the semver range even if the new version is in range (instead of just updating the lockfile), e.g. `"foo": "^1.1.0"` is changed to `"foo": "^1.2.0"`. This is because minor dependency versions may introduce new APIs, and if a library starts using those APIs without updating the dep's semver range, it could break consumers.
 
 Other settings:
 

default.json

@@ -28,7 +28,7 @@
     },
     {
       "matchDepTypes": ["dependencies"],
-      "rangeStrategy": "replace"
+      "rangeStrategy": "bump"
     }
   ]
 }

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/m365-renovate-config",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "private": true,
   "type": "module",
   "repository": {