renovate.json5

{
  // Validate on local machine.
  // docker run --rm --entrypoint "bash" -v $PWD:/work docker.io/renovate/renovate:latest -c 'cd /work && renovate-config-validator'
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:base",
    ":label(renovate)", // https://docs.renovatebot.com/presets-default/#labelarg0
    ":timezone(Asia/Tokyo)",
    ":enableVulnerabilityAlertsWithLabel(security)", // Raise PR when vulnerability alerts are detected with label security.
    ":semanticCommitTypeAll(chore)", // If semantic commits detected, use semantic commit type chore for all
    "schedule:weekly"
  ],

  "dependencyDashboard": true,
  "dependencyDashboardLabels": ["renovate"],

  "separateMajorMinor": false,
  "packageRules": [
    {
      "matchManagers": ["gomod"],
      "groupName": "go",
      "automerge": true,
      "postUpdateOptions": [
        "gomodTidy"
      ]
    },
    {
      "matchManagers": ["github-actions"],
      "groupName": "github-actions",
      "automerge": true,
    },
    {
      "matchManagers": ["npm"],
      "groupName": "npm",
      "automerge": true,
    }
  ]
}