renovate-config/default.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "packageRules": [
    {
      "matchDepTypes": ["devDependencies", "require-dev"],
      "matchUpdateTypes": ["patch", "minor", "digest"],
      "groupName": "devDependencies (non-major)"
    },
    {
      "matchDepTypes": ["dependencies"],
      "matchUpdateTypes": ["major", "patch", "minor", "digest"],
      "groupName": "dependencies (major and minor)"
    }
  ],
  "extends": [
    "config:recommended",
    ":preserveSemverRanges",
    ":dependencyDashboard",
    ":rebaseStalePrs",
    ":semanticCommits",
    ":enableVulnerabilityAlertsWithLabel('security')",
    "group:allNonMajor",
    ":updateNotScheduled",
    "mergeConfidence:all-badges"
  ],
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 4am"]
  }
}