From 59eac409ce63a3fb4ba7cecb9c6be84d45367299 Mon Sep 17 00:00:00 2001
From: Sebastian Bergmann <sb@sebastian-bergmann.de>
Date: Tue, 19 May 2026 07:03:06 +0200
Subject: [PATCH] More work on Renovate configuration

---
 renovate.json | 23 ++++++++++++++++++++---
 1 file changed, 20 insertions(+), 3 deletions(-)

diff --git a/renovate.json b/renovate.json
index cbda4dc..5b18f3a 100644
--- a/renovate.json
+++ b/renovate.json
@@ -2,8 +2,11 @@
     "$schema": "https://docs.renovatebot.com/renovate-schema.json",
     "extends": [
         "config:recommended",
-        "helpers:pinGitHubActionDigests"
+        "helpers:pinGitHubActionDigestsToSemver",
+        ":configMigration",
+        ":maintainLockFilesWeekly"
     ],
+    "timezone": "Europe/Berlin",
     "baseBranchPatterns": [
         "main",
         "/^\\d+\\.\\d+$/"
@@ -13,15 +16,29 @@
     "prConcurrentLimit": 10,
     "dependencyDashboard": true,
     "labels": ["type/dependencies"],
+    "platformAutomerge": true,
+    "osvVulnerabilityAlerts": true,
+    "dependencyDashboardOSVVulnerabilitySummary": "all",
     "vulnerabilityAlerts": {
         "enabled": true,
         "labels": ["type/security", "type/dependencies"]
     },
+    "lockFileMaintenance": {
+        "enabled": true,
+        "automerge": true,
+        "schedule": ["before 6am on monday"]
+    },
     "packageRules": [
         {
-            "description": "Group GitHub Actions updates per branch into one PR",
+            "description": "Group GitHub Actions updates per branch into one PR, automerge",
             "matchManagers": ["github-actions"],
-            "groupName": "github-actions"
+            "groupName": "github-actions",
+            "automerge": true
+        },
+        {
+            "description": "Automerge patch updates after they have settled",
+            "matchUpdateTypes": ["patch", "pin", "digest"],
+            "automerge": true
         },
         {
             "description": "Do not update the PHP platform requirement in composer.json",