npm.json5

{
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "extends": [
    "config:recommended",
    "schedule:weekly",
    "group:allNonMajor",
    "helpers:disableTypesNodeMajor",
    ":widenPeerDependencies",
    ":semanticCommitTypeAll(chore)"

    // For my own library projects, I'm very selective on dependencies,
    // so the unpublishSafe rule is not needed.
    // But in an application project with lots of external dependencies,
    // it's safer to enable it.
    // "npm:unpublishSafe"
  ],

  // Should update internal deps in a monorepo
  "updateInternalDeps": true,

  // The default value 2 only makes sense when onboarding with a config that could create too many PRs.
  // For this preset, 5 is a more reasonable expectation (considering there're only so many groups).
  "prHourlyLimit": 5,

  // Most of the time I'm writing libraries so `bump` makes more sense to me than `auto`
  "rangeStrategy": "bump",
  "labels": ["dependencies"],

  // TODO:
  // Fix node & @types/node strategy
  // Should be scheduled on May 1th on every year,
  // because the previous LTS version reaches EOL on April 30th
  "ignoreDeps": ["node"],

  "packageRules": [
    // It's easier to deal with all the Vite plugins at once when Vite ships a new major version
    {
      "extends": ["packages:vite"],
      "groupName": "vite packages"
    },

    // TypeScript doesn't follow semver, so we need to separate minor and patch updates
    // <https://www.semver-ts.org/1-background.html>
    {
      "matchDepNames": ["typescript"],
      "groupName": "typescript",
      "rangeStrategy": "tilde",
      "separateMinorPatch": true,
      "separateMultipleMinor": true
    },

    // eslint-plugin-vue suggests to use `~` range starting from v10
    {
      "matchDepNames": ["eslint-plugin-vue"],
      "matchNewValue": "10.*",
      "groupName": "eslint-plugin-vue",
      "rangeStrategy": "tilde"
    },

    // Prettier, when used as a devDependency to format code, should be pinned.
    // SemVer only applies to its API, not its formatting behavior.
    {
      "matchDepNames": ["prettier"],
      "matchDepTypes": ["devDependencies"],
      "groupName": "prettier",
      "rangeStrategy": "pin"
    },

    // Minor releases for v0.x packages may contain breaking changes
    {
      "matchCurrentVersion": "/^0./",
      "groupName": "v0.x",
      "separateMinorPatch": true
    },

    // Update Oxlint packages together
    {
      "matchDepNames": ["oxlint", "eslint-plugin-oxlint"],
      "groupName": "oxlint",
      "rangeStrategy": "tilde"
    }
  ]
}