renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "baseBranches": ["main"],
  "extends": [
    "config:recommended",
    "docker:pinDigests",
    "helpers:pinGitHubActionDigests",
    ":pinDevDependencies"
  ],
  "pre-commit": {
    "enabled": true
  },
  "regexManagers": [
    {
      "description": "Update semantic-release version used by npx",
      "fileMatch": ["^\\.github/workflows/[^/]+\\.ya?ml$"],
      "matchStrings": ["\\srun: npx semantic-release@(?<currentValue>.*?)\\s"],
      "datasourceTemplate": "npm",
      "depNameTemplate": "semantic-release"
    }
  ],
  "packageRules": [
    {
      "matchManagers": ["gomod"],
      "groupName": "go dependencies",
      "automerge": true
    },
    {
      "matchManagers": ["github-actions"],
      "groupName": "github actions",
      "automerge": true
    },
    {
      "matchManagers": ["dockerfile"],
      "groupName": "dockerfile dependencies",
      "automerge": true
    },
    {
      "matchManagers": ["regex"],
      "groupName": "semantic-release",
      "automerge": true,
      "automergeStrategy": "rebase"
    }
  ]
}