{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    "docker:pinDigests",
    "helpers:pinGitHubActionDigests"
  ],
  "schedule": ["before 6am on monday"],
  "timezone": "Europe/Berlin",
  "automergeStrategy": "squash",
  "ignorePaths": ["docker-compose.yml"],
  "packageRules": [
    {
      "description": "GitHub Actions - grouped automerge",
      "matchManagers": ["github-actions"],
      "groupName": "github-actions",
      "commitMessagePrefix": "ci",
      "automerge": true
    },
    {
      "description": "Docker Digests - automerge (security patches)",
      "matchManagers": ["dockerfile"],
      "matchUpdateTypes": ["digest"],
      "commitMessagePrefix": "docker",
      "automerge": true
    },
    {
      "description": "Docker Major/Minor - manual review",
      "matchManagers": ["dockerfile"],
      "matchUpdateTypes": ["major", "minor"],
      "groupName": "docker-base-images",
      "commitMessagePrefix": "docker",
      "automerge": false
    },
    {
      "description": "Python minor/patch - automerge",
      "matchManagers": ["pip_requirements"],
      "matchUpdateTypes": ["minor", "patch"],
      "commitMessagePrefix": "fix(deps)",
      "automerge": true
    },
    {
      "description": "Python major - no automerge, label",
      "matchManagers": ["pip_requirements"],
      "matchUpdateTypes": ["major"],
      "commitMessagePrefix": "chore(deps)",
      "automerge": false,
      "labels": ["major-update"]
    }
  ],
  "ignoreDeps": ["node", "express", "node-cron", "nodemailer", "actions/setup-node"]
}