renovatelisted

# Evaluate held Renovate PRs Renovate auto-merges the safe updates on its own — patch, digest, pin and lock-file maintenance flow unattended once CI is green (`.github/renovate.json5` sets `automerge: true` by default, and the 7-day age gate plus the CI install-age gate stop a fresh release from ever going green). What it deliberately does **not** auto-merge are **minor and major** bumps: those can carry behaviour changes, so the config holds them as ordinary open PRs labelled `renovate/needs-review`. This skill is the human-grade evaluation layer for that held queue. There is no automatic hand-off — Renovate opens the PR and leaves it. This skill is the pull side: invoke it to evaluate one held PR, and it merges the bump or reports why it can't. ## The contract **One PR per invocation, lowest-risk first, then exit.** Run the skill again to take the next one. Processing a single PR end-to-end keeps each evaluation focused and each merge independently reviewable; draining the whole queue in one pass blurs which bump caused which result. ## 1. Discover the queue ```bash gh pr list --repo CodeForBreakfast/commy --state open \ --author "app/renovate" --label "renovate/needs-review" \ --json number,title,labels,mergeable,statusCheckRollup ``` Renovate runs as the `app/renovate` GitHub App. If the queue is empty, say so and stop — there is nothing to evaluate. ## 2. Pick one, by risk Order the queue and take the **first**: 1. **minor** before **major** — minor is lowe