{
    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
    "extends": [
        "config:recommended",
        "helpers:pinGitHubActionDigestsToSemver",
        ":configMigration",
        ":maintainLockFilesWeekly"
    ],
    "timezone": "Europe/Berlin",
    "baseBranchPatterns": [
        "main",
        "/^\\d+\\.\\d+$/"
    ],
    "rebaseWhen": "conflicted",
    "prHourlyLimit": 2,
    "prConcurrentLimit": 10,
    "dependencyDashboard": true,
    "labels": ["type/dependencies"],
    "platformAutomerge": true,
    "osvVulnerabilityAlerts": true,
    "dependencyDashboardOSVVulnerabilitySummary": "all",
    "vulnerabilityAlerts": {
        "enabled": true,
        "labels": ["type/security", "type/dependencies"]
    },
    "lockFileMaintenance": {
        "enabled": true,
        "automerge": true,
        "schedule": ["before 6am on monday"]
    },
    "packageRules": [
        {
            "description": "Group GitHub Actions updates per branch into one PR, automerge",
            "matchManagers": ["github-actions"],
            "groupName": "github-actions",
            "automerge": true
        },
        {
            "description": "Automerge minor and patch updates after they have settled",
            "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
            "automerge": true
        },
        {
            "description": "Do not update the PHP platform requirement in composer.json",
            "matchManagers": ["composer"],
            "matchDepNames": ["php"],
            "enabled": false
        },
        {
            "description": "Do not suggest major updates for Composer dependencies",
            "matchManagers": ["composer"],
            "matchUpdateTypes": ["major"],
            "enabled": false
        },
        {
            "description": "Bump composer.json ranges when updating dependencies",
            "matchManagers": ["composer"],
            "rangeStrategy": "bump"
        }
    ]
}