{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    ":semanticCommits",
    ":prHourlyLimit2",
    ":prConcurrentLimit10",
    ":rebaseStalePrs"
  ],
  "platform": "gitea",
  "timezone": "America/Los_Angeles",
  "schedule": ["before 6am on monday"],
  "labels": ["dependencies"],
  "rangeStrategy": "bump",
  "packageRules": [
    {
      "description": "Group minor + patch updates into a single weekly PR",
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "all non-major dependencies",
      "groupSlug": "all-minor-patch"
    },
    {
      "description": "Hold shadcn/Radix to manual bumps — UI regressions are common",
      "matchPackagePatterns": ["^@radix-ui/", "class-variance-authority", "tailwind-merge"],
      "enabled": false
    },
    {
      "description": "Auto-merge dev-dep patches",
      "matchDepTypes": ["devDependencies"],
      "matchUpdateTypes": ["patch"],
      "automerge": true,
      "automergeType": "pr",
      "platformAutomerge": true
    },
    {
      "description": "Prisma client + CLI must move together",
      "matchPackageNames": ["prisma", "@prisma/client"],
      "groupName": "prisma"
    }
  ],
  "vulnerabilityAlerts": {
    "labels": ["security"],
    "enabled": true
  },
  "lockFileMaintenance": {
    "enabled": true,
    "schedule": ["before 6am on the first day of the month"]
  }
}