Using mergify and renovate in a merge queue

[dsm23]

Hello. I have a mergify config where I am trying to use mergify to approve my PRs after status checks success and I am attempting to have renovate raise PRs for each individual dependency. Mainly GitHub Action dependencies and npm dependencies. I was thinking of putting the PRs from renovate into a merge queue so that they can be merged one by one sequentially. Right now, the max number of PRs that renovate should be raising at one time should be about 3: the default 2 plus if I happen to trigger a major dependency update in the dashboard.

Ideally, I would like for each PR in the queue to wait until they are in position 0 of the queue and then trigger a rebase from renovate. This way, renovate doesn't leave and comment about someone interrupting the PR and is still prepared to update itself should something else crop up that can be grouped with the PR. For example, nodejs don't release on docker hub at the same time as they make a new release.

I was wondering whether there was anyway to tell mergify to not merge or rebase a commit from the base/main branch even when the PR is in position 0 of the queue and Renovate might take considerably longer to rebase a PR. Below is where I've got to with my mergify config:

shared:
  common: &common_checks
    - check-success = amd64
    - check-success = build
    - check-success = codeql (actions)
    - check-success = codeql (javascript)
    - check-success = codeql (typescript)
    - check-success = dependency-review
    - check-success = format
    - check-success = gitleaks
    - check-success = lint
    - check-success = playwright-tests
    - check-success = pr-title
    - check-success = renovate
    - check-success = smoke-test
    - check-success = types
    - check-success = unit-testing
    - check-success = zizmor
    - or:
        - check-success = renovate/stability-days
        - check-pending != renovate/stability-days

merge_queue:
  max_parallel_checks: 1

queue_rules:
  - name: dep-update
    autoqueue: true
    batch_max_wait_time: 30 min
    queue_conditions: &queue_conditions
      - author = renovate[bot]
      - and: *common_checks
    merge_conditions: *queue_conditions

pull_request_rules:
  - name: automatic approval
    conditions:
      - author != renovate[bot]
      - and: *common_checks
    actions:
      review:
        type: APPROVE
        message: "Automatically approving {{ author }}"

  - name: automatic approval for Renovate pull requests
    conditions:
      - author = renovate[bot]
      - and: *common_checks
    actions:
      review:
        type: APPROVE
        message: Automatically approving renovate

  - name: Automatically merge when GitHub Actions jobs succeed
    conditions:
      - author != renovate[bot]
      - and: *common_checks
    actions:
      merge:
        method: merge

  - name: Automatically queue Renovate PRs
    conditions:
      - author = renovate[bot]
    actions:
      queue:

  - name: Ask Renovate to rebase when out of date
    conditions:
      - author = renovate[bot]
      - queue-name = dep-update
      - queue-position = 0
      - or:
          - "#commits-behind > 0"
          - conflict
    actions:
      label:
        add:
          - rebase

  - name: automatic deletion of head branch after merge
    conditions:
      - merged
    actions:
      delete_head_branch: