I had another question - would Renovate update the additional_dependencies in the pre-commit-config and pyproject.toml in the same PR, or would I need to explicitly list out each dependency like it was done in the config you linked?

• If you don’t use semantic commits, there will always be only one PR.
• If you do use semantic commits, two PRs will be created for minor or major updates, while only one PR will be created for patch updates.

The python-telegram-bot repository doesn’t use semantic commits, so you don’t need to worry about this — meaning you don’t need to manually group these dependencies together.

https://docs.renovatebot.com/faq/#tell-renovate-to-ask-for-approval-before-creating-a-pull-request though I don't know of any case where we would want to do this at the moment..

Since you don't know of any case where you would want to do this at the moment, I suggest not using the “Tell Renovate to ask for approval before creating a Pull Request” feature, as it often causes you to forget to update. There’s nothing wrong with letting Renovate always create updates automatically.

https://docs.renovatebot.com/noise-reduction/#automerging-and-scheduling. I think we should enable auto merges just so that lock file conflicts are reduced as they mention.

Regarding automatic updates, you can take a look at the Renovate settings in the FlexGet repository, which were mainly written by me:

https://github.com/Flexget/Flexget/blob/d0137d8dc87fa8dbb8fc394d67275e272fce052a/.github/renovate.json5#L5-L6
https://github.com/Flexget/Flexget/blob/d0137d8dc87fa8dbb8fc394d67275e272fce052a/.github/renovate.json5#L53-L54

If the python-telegram-bot repository hasn’t enabled “allow auto-merge” in its settings, automatic merging will only occur if all checks pass. Otherwise, you’ll need to set all checks to “Required.”

seems that I can't use that new pre-commit hook - running into renovatebot/pre-commit-hooks#2983. Reverting.

Renovate config validation can be done via GitHub Actions — you can check how it’s set up in the FlexGet repository. Restricting the trigger conditions won’t add any overhead.

https://github.com/Flexget/Flexget/blob/develop/.github/workflows/renovate-config-validation.yml