helma/renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",

  "extends": [
    "config:recommended",
    "mergeConfidence:all-badges",
    "npm:unpublishSafe",
    ":disableRateLimiting",
    ":pinVersions",
    ":semanticCommitsDisabled"
  ],

  "osvVulnerabilityAlerts": true,

  "vulnerabilityAlerts": {
    "labels": ["security", "urgent"],
    "automerge": true
  },

  "labels": ["dependency"],

  "packageRules": [
    {
      "description": "Label Helma core packages",
      "matchFiles": ["build.gradle"],
      "labels": ["core"]
    },
    {
      "description": "Label major version bumps",
      "matchUpdateTypes": ["major"],
      "addLabels": ["major"]
    },
    {
      "description": "Label packages required at runtime",
      "matchDepTypes": ["dependencies"],
      "addLabels": ["runtime"]
    }
  ]
}