refactor: add global sane rules

.renovaterc.json

@@ -1,10 +1,3 @@
 {
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "packageRules": [
-    {
-      "matchUpdateTypes": ["minor", "patch"],
-      "matchCurrentVersion": "!/^0/",
-      "automerge": true
-    }
-  ]
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
 }

config.js

@@ -1,8 +1,34 @@
 module.exports = {
-    "endpoint": "https://code.emmathe.dev/api/v1", // replace it with your actual endpoint
+    "endpoint": "https://code.emmathe.dev/api/v1",
     "gitAuthor": "Renovate Bot <renovate-bot@iam.emmathe.dev>",
     "platform": "gitea",
     "onboardingConfigFileName": ".renovaterc.json",
     "autodiscover": true,
     "optimizeForDisabled": true,
+    "extends": ["config:recommended"],
+    "schedule": ["before 4am on monday"],
+    "timezone": "Europe/London",
+    "labels": ["dependencies"],
+    "assignees": ["lyrathorpe"],
+    "reviewers": ["lyrathorpe"],
+    "prHourlyLimit": 10,
+    "prConcurrentLimit": 50,
+    "branchConcurrentLimit": 5,
+    "packageRules": [
+        {
+            "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
+            "automerge": true
+        },
+        {
+            "matchUpdateTypes": ["major"],
+            "automerge": false
+        }
+    ],
+    "lockFileMaintenance": {
+        "enabled": true,
+        "schedule": ["before 4am on monday"]
+    },
+    "vulnerabilityAlerts": {
+        "enabled": true
+    }
 };