From a26cf06434fb0ecee65f7792b6a3486a51dfceaa Mon Sep 17 00:00:00 2001
From: Sebastian Bergmann <sb@sebastian-bergmann.de>
Date: Sat, 16 May 2026 06:25:47 +0200
Subject: [PATCH] Configure Renovate

---
 renovate.json | 44 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 renovate.json

diff --git a/renovate.json b/renovate.json
new file mode 100644
index 0000000..cbda4dc
--- /dev/null
+++ b/renovate.json
@@ -0,0 +1,44 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+        "config:recommended",
+        "helpers:pinGitHubActionDigests"
+    ],
+    "baseBranchPatterns": [
+        "main",
+        "/^\\d+\\.\\d+$/"
+    ],
+    "rebaseWhen": "conflicted",
+    "prHourlyLimit": 2,
+    "prConcurrentLimit": 10,
+    "dependencyDashboard": true,
+    "labels": ["type/dependencies"],
+    "vulnerabilityAlerts": {
+        "enabled": true,
+        "labels": ["type/security", "type/dependencies"]
+    },
+    "packageRules": [
+        {
+            "description": "Group GitHub Actions updates per branch into one PR",
+            "matchManagers": ["github-actions"],
+            "groupName": "github-actions"
+        },
+        {
+            "description": "Do not update the PHP platform requirement in composer.json",
+            "matchManagers": ["composer"],
+            "matchDepNames": ["php"],
+            "enabled": false
+        },
+        {
+            "description": "Do not suggest major updates for Composer dependencies",
+            "matchManagers": ["composer"],
+            "matchUpdateTypes": ["major"],
+            "enabled": false
+        },
+        {
+            "description": "Bump composer.json ranges when updating dependencies",
+            "matchManagers": ["composer"],
+            "rangeStrategy": "bump"
+        }
+    ]
+}