renovate-config/default.json

 {
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "packageRules": [
    {
      "depTypeList": [ "devDependencies", "require-dev" ],
      "updateTypes": [ "patch", "minor", "digest"],
      "groupName": "devDependencies (non-major)"
    }
  ],
  "extends": [
    "config:base",
    ":preserveSemverRanges",
    ":dependencyDashboard",
    ":rebaseStalePrs",
    ":enableVulnerabilityAlertsWithLabel('security')",
    "group:recommended",
    "github>whitesource/merge-confidence:beta"
  ],
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 4am"]
  },
  "prTitle": "[RENOVATE] {{{prTitle}}}"
}