gha-workflows/renovate.json

{
  "extends": [
    "config:recommended"
  ],
  "platformCommit": true,
  "dependencyDashboardAutoclose": true,
  "assignAutomerge": true,
  "assigneesFromCodeOwners": true,
  "rebaseWhen": "behind-base-branch",
  "rollbackPrs": true,
  "labels": [
    "dependencies"
  ],
  "vulnerabilityAlerts": {
    "enabled": true,
    "labels": [
      "security"
    ],
    "commitMessagePrefix": "[SECURITY] ",
    "prCreation": "immediate"
  }
}