{
    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
    "extends": [
        "config:best-practices",
        "default:automergeDigest",
        "mergeConfidence:all-badges",
        ":rebaseStalePrs",
        ":enableVulnerabilityAlertsWithLabel('security')"
    ],
    "enabled": true,
    "enabledManagers": [
        "npm",
        "docker-compose",
        "dockerfile"
    ],
    "automergeSchedule": [
        "* * * * *"
    ],
    "packageRules": [
        {
            "description": "Automerge container image patch, minor, and digest updates; hold major for review",
            "matchDatasources": [
                "docker"
            ],
            "matchUpdateTypes": [
                "minor",
                "patch",
                "digest",
                "pin"
            ],
            "automerge": true
        }
    ]
}