renovate.json

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:base", ":gitSignOff"],
  "schedule": ["before 4am on the first day of the month"],
  "vulnerabilityAlerts": {
    "schedule": "before 4am"
  },
  "postUpdateOptions": ["gomodTidy", "gomodUpdateImportPaths"],
  "packageRules": [
    {
      "matchManagers": ["github-actions"],
      "groupName": "github-actions"
    },
    {
      "matchManagers": ["gomod"],
      "excludePackageNames": ["go"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "go"
    },
    {
      "matchManagers": ["npm"],
      "matchDepTypes": ["dependencies"],
      "matchUpdateTypes": ["minor", "patch"],
      "groupName": "npm"
    },
    {
      "matchManagers": ["npm"],
      "matchDepTypes": ["devDependencies"],
      "groupName": "npm dev"
    }
  ]
}