renovate.json

{
  "labels": ["automerge"],
  "extends": ["config:base"],
  "rebaseStalePrs": true,
  "postUpdateOptions": ["gomodUpdateImportPaths", "gomodTidy", "npmDedupe"],
  "prConcurrentLimit": 0,
  "lockFileMaintenance": {
    "enabled": true,
    "automerge": true
  },
  "packageRules": [
    {
      "matchUpdateTypes": [
        "minor",
        "patch",
        "lockFileMaintenance",
        "bump",
        "devDependencies"
      ],
      "automerge": true
    },
    {
      "matchUpdateTypes": ["minor"],
      "extends": ["schedule:monthly"]
    },
    {
      "matchUpdateTypes": ["patch"],
      "extends": ["schedule:quarterly"]
    }
  ],
  "pip_requirements": {
    "fileMatch": [
      "requirements.txt",
      "requirements-test.txt",
      "constraints.txt",
      "constraints-test.txt"
    ]
  },
  "vulnerabilityAlerts": {
    "schedule": ["at any time"]
  }
}