renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":dependencyDashboard",
    ":semanticCommits",
    "schedule:weekly"
  ],
  "automerge": true,
  "automergeType": "pr",
  "automergeStrategy": "squash",
  "minimumReleaseAge": "3 days",
  "internalChecksFilter": "strict",
  "prCreation": "immediate",
  "prConcurrentLimit": 3,
  "commitMessagePrefix": "chore(deps): ",
  "packageRules": [
    {
      "description": "Enable and label Rust updates",
      "matchManagers": ["cargo"],
      "enabled": true,
      "labels": ["dependencies", "rust"]
    },
    {
      "description": "Automatically merge minor and patch updates for Rust dependencies",
      "matchManagers": ["cargo"],
      "matchUpdateTypes": ["minor", "patch"],
      "automerge": true,
      "automergeType": "pr",
      "automergeStrategy": "squash"
    },
    {
      "description": "Manage pre-commit hook updates",
      "matchManagers": ["pre-commit"],
      "labels": ["dependencies", "pre-commit"],
      "automerge": false
    },
    {
      "description": "Require manual approval for major version updates",
      "matchUpdateTypes": ["major"],
      "automerge": false
    },
    {
      "description": "Group all non-major updates together",
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "non-major dependencies",
      "groupSlug": "non-major-deps"
    },
    {
      "description": "Disable updates for dev dependencies from being auto-merged",
      "matchDepTypes": ["dev-dependencies"],
      "automerge": false,
      "labels": ["type: dependencies", "kind: dev-dependencies"]
    },
    {
      "description": "Fast-track patch updates with tight constraints",
      "matchUpdateTypes": ["patch"],
      "groupName": "patch updates",
      "schedule": ["after 10pm and before 5am every weekday", "every weekend"]
    }
  ],
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": ["security"],
    "automerge": false
  }
}