renovate.json5

// configuration options: https://docs.renovatebot.com/configuration-options/
// list of all presets: https://docs.renovatebot.com/presets-default/
{
  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
  extends: [
    'config:recommended',
    ':automergeRequireAllStatusChecks',
    // keep GitHub Actions pinned to commit SHAs (supply-chain hardening)
    'helpers:pinGitHubActionDigests',
  ],
  dependencyDashboard: true,
  // let it fly for now, we've got a lot to catch up on
  //  schedule: [
  //    "0 * * * *"
  //  ],
  timezone: 'UTC',
  // Give compromised releases time to be pulled from the registry before we
  // pick them up.
  minimumReleaseAge: '3 days',
  // Always squash PRs when automerging
  automergeType: 'pr',
  automergeStrategy: 'squash',
  packageRules: [
    {
      description: 'Our own package — we trust it and want new releases immediately',
      matchPackageNames: ['e2b'],
      minimumReleaseAge: null,
    },
    {
      description: 'Group and automerge patch updates after CI passes',
      matchUpdateTypes: ['patch'],
      automerge: true,
      groupName: 'patch-updates',
    },
    {
      description: 'Create PRs for minor updates without automerge',
      matchUpdateTypes: ['minor'],
      automerge: false,
    },
    {
      description: 'Require dashboard approval for major updates',
      matchUpdateTypes: ['major'],
      dependencyDashboardApproval: true,
      automerge: false,
    },
  ],
  prConcurrentLimit: 3,
  rebaseWhen: 'auto',
}