renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended"
  ],
  "minimumReleaseAge": "7 days",
  "platformAutomerge": true,
  "automergeStrategy": "squash",
  "packageRules": [
    {
      "description": "Tools container digest updates have no release timestamp; exempt from minimumReleaseAge.",
      "matchDepNames": ["ghcr.io/tankdonut/tools"],
      "minimumReleaseAge": null
    },
    {
      "description": "Automerge non-major updates after passing CI and approval.",
      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
      "automerge": true
    },
    {
      "description": "Automerge development dependencies.",
      "matchDepTypes": ["devDependencies"],
      "automerge": true
    },
    {
      "description": "Major updates require manual review.",
      "matchUpdateTypes": ["major"],
      "automerge": false
    }
  ]
}