renovate.json5

{
  extends: [
    'config:best-practices',
    ':semanticCommitTypeAll(chore)',
    // Update lock files: https://docs.renovatebot.com/presets-default/#maintainlockfilesmonthly
    ':maintainLockFilesMonthly',
    // Automerge all updates once they pass tests: https://docs.renovatebot.com/presets-default/#automergeall
    ':automergeAll',
    // Always widen peer dependency constraints: https://docs.renovatebot.com/presets-default/#widenpeerdependencies
    ':widenPeerDependencies',
    // Disable dashboard: https://docs.renovatebot.com/key-concepts/dashboard/
    ':disableDependencyDashboard',
    // Pin Github Actions versions: https://docs.renovatebot.com/presets-helpers/#helperspingithubactiondigeststosemver
    'helpers:pinGitHubActionDigestsToSemver',
  ],
  schedule: [
    // Monthly, but give a 3-day window (due to throttling not all PRs may be created on the same day): https://docs.renovatebot.com/configuration-options/#schedule
    'on the 2nd through 5th day of the month',
  ],
  // Always squash PRs: https://docs.renovatebot.com/configuration-options/#automergestrategy
  automergeStrategy: 'squash',
  // Pin all dependencies: https://docs.renovatebot.com/dependency-pinning/
  rangeStrategy: 'pin',

  // Specific rules to override global settings
  packageRules: [
    {
      // Prevent the bot from updating/pinning the "engines.node" field.
      // Changes to supported Node versions should be a manual decision (breaking change).
      matchPackageNames: ['node'],
      matchDepTypes: ['engines'],
      enabled: false,
    },
  ],
}