{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": ["config:recommended"],
  "pinDigests": true,
  "platformAutomerge": true,
  "packageRules": [
    {
      "description": "Python dev-dep patch-Updates: sicher, automatisch mergen",
      "matchManagers": ["pep621"],
      "matchDepTypes": ["dev"],
      "matchUpdateTypes": ["patch"],
      "automerge": true
    },
    {
      "description": "Python prod-dep patch-Updates: manueller Review",
      "matchManagers": ["pep621"],
      "matchDepTypes": ["dependencies"],
      "matchUpdateTypes": ["patch"],
      "automerge": false,
      "labels": ["dependencies"]
    },
    {
      "description": "Python minor-Updates: manueller Review — kann Breaking Changes enthalten",
      "matchManagers": ["pep621"],
      "matchUpdateTypes": ["minor"],
      "automerge": false,
      "labels": ["dependencies", "review-needed"]
    },
    {
      "description": "Python major-Updates: manueller Review",
      "matchManagers": ["pep621"],
      "matchUpdateTypes": ["major"],
      "automerge": false,
      "labels": ["dependencies", "review-needed"]
    },
    {
      "description": "GitHub Actions patch-Updates: sicher, automatisch mergen",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["patch"],
      "automerge": true
    },
    {
      "description": "GitHub Actions minor/major-Updates: manueller Review (Actions können Code ausführen)",
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["minor", "major"],
      "automerge": false,
      "labels": ["dependencies", "review-needed"]
    },
    {
      "description": "Docker Digest-Updates (gleiche Version, neuer Digest): sicher, automatisch mergen",
      "matchManagers": ["docker-compose", "dockerfile"],
      "matchUpdateTypes": ["digest"],
      "automerge": true
    },
    {
      "description": "Docker minor/major-Updates: manueller Review (TimescaleDB-Upgrades benötigen pg_upgrade)",
      "matchManagers": ["docker-compose"],
      "matchUpdateTypes": ["minor", "major"],
      "automerge": false,
      "labels": ["dependencies", "review-needed"]
    },
    {
      "description": "npm devDep patch-Updates: sicher, automatisch mergen",
      "matchManagers": ["npm"],
      "matchDepTypes": ["devDependencies"],
      "matchUpdateTypes": ["patch"],
      "automerge": true
    },
    {
      "description": "npm minor/major-Updates: manueller Review",
      "matchManagers": ["npm"],
      "matchUpdateTypes": ["minor", "major"],
      "automerge": false,
      "labels": ["dependencies", "review-needed"]
    },
    {
      "description": "Monitoring-Stack manuell verwaltet — kein Auto-Update (Loki, Promtail, Uptime Kuma)",
      "matchPackageNames": ["grafana/loki", "grafana/promtail", "louislam/uptime-kuma"],
      "enabled": false
    }
  ]
}