renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:base"
  ],
  "dependencyDashboard": false,
  "packageRules": [
    {
      "groupName": "vendored dependencies",
      "matchManagers": ["npm"],
      "matchDepTypes": ["dependencies"],
      "matchUpdateTypes": ["minor", "patch"]
    },
    {
      "groupName": "dev dependencies",
      "matchManagers": ["npm"],
      "matchDepTypes": ["devDependencies"],
      "matchUpdateTypes": ["minor", "patch"]
    },
    {
      "groupName": "automation dependencies",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["minor", "patch"]
    }
  ],
  "postUpdateOptions": [
    "npmDedupe"
  ],
  "rangeStrategy": "bump",
  "schedule": [
    "before 6am on the first day of the month"
  ],
  "vulnerabilityAlerts": {
    "enabled": false
  }
}