renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:best-practices",
    ":preserveSemverRanges",
    ":rebaseStalePrs",
    ":enableVulnerabilityAlertsWithLabel('security')"
  ],
  "reviewers": ["stephen-cox"],
  "branchPrefix": "renovate/",
  "enabledManagers": [
    "composer",
    "github-actions"
  ],
  "ignorePaths": ["web/**"],
  "major": {
    "dependencyDashboardApproval": true
  },
  "constraints": {
    "php": "8.1.29"
  },
  "rangeStrategy": "update-lockfile",
  "packageRules": [
    {
      "groupName": "Drupal contrib",
      "groupSlug": "contrib",
      "rangeStrategy": "update-lockfile",
      "matchManagers": ["composer"],
      "matchDatasources": ["packagist"],
      "matchPackageNames": [
        "agile-collective/**",
        "drupal/**",
        "drush/**",
        "localgovdrupal/**",
        "!drupal/core-**"
      ]
    },
    {
      "groupName": "Drupal core",
      "groupSlug": "drupal-core",
      "rangeStrategy": "update-lockfile",
      "matchManagers": ["composer"],
      "matchDatasources": ["packagist"],
      "matchPackageNames": ["drupal/core-**"]
    },
    {
      "matchManagers": ["github-actions"],
      "automerge": true
    }
  ]
}