renovate.json

{
    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
    "extends": [
        ":dependencyDashboard",
        ":ignoreModulesAndTests",
        ":automergeStableNonMajor",
        ":automergePr",
        ":rebaseStalePrs",
        ":separateMajorReleases",
        ":enableVulnerabilityAlerts",
        ":timezone(UTC)",
        ":label(renovate)"
    ],
    "commitBodyTable": true,
    "platformAutomerge": true,
    "rangeStrategy": "bump",
    "rollbackPrs": true,
    "major": {
        "dependencyDashboardApproval": true
    },
    "packageRules": [
        {
            "matchManagers": ["composer"],
            "matchUpdateTypes": [
                "minor",
                "patch"
            ],
            "groupName": "all composer non-major dependencies",
            "groupSlug": "composer-all-minor-patch"
        },
        {
            "matchManagers": ["composer"],
            "matchPackageNames": ["php"],
            "matchUpdateTypes": [
                "minor",
                "patch"
            ],
            "groupName": "PHP"
        }
    ],
    "vulnerabilityAlerts": {
        "extends": [
            ":automergeDisabled",
            ":automergePr",
            ":labels(security)"
        ],
        "rangeStrategy": "bump"
    }
}