renovate.json5

{
  dependencyDashboardLabels: ['effort | ongoing', 'scope | dependencies'],
  dependencyDashboardOSVVulnerabilitySummary: 'all',
  extends: [
    'config:recommended',
    'default:automergeDigest',
    'default:automergeMinor',
    'default:combinePatchMinorReleases',
    'default:dependencyDashboard',
    'default:docker',
    'default:enableVulnerabilityAlerts',
    'default:maintainLockFilesWeekly',
    'default:prHourlyLimit4',
  ],
  ignorePaths: ['/node_modules/'],
  // only rebase merge requests when they become conflicted
  // see: https://docs.renovatebot.com/configuration-options/#rebasewhen
  rebaseWhen: 'conflicted',
  // https://docs.renovatebot.com/configuration-options/#stopupdatinglabel
  stopUpdatingLabel: 'renovate | stop update',
  packageRules: [
    // @dnd-kit monorepo
    {
      matchPackagePatterns: '^@dnd-kit',
    },

    // @nextui monorepo
    {
      matchPackagePatterns: '^@nextui-org',
    },

    // framer-motion not patch releases (rate-limiting)
    {
      matchPackageNames: ['framer-motion'],
      excludeUpdateTypes: ['patch'],
    },
  ],
}